Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
File: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft (raw, json)
Hash identifier: YnPwIfNZ3udCsjlUWCCvya0AaM/R4Pstz2iFQHJw6N8=
Subject key identifier: B6:20:47:B5:52:39:1F:F8:B8:78:73:F7:6B:26:37:A3:FC:1C:12:78
Authority key identifier: EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1
Certificate issuer: /CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
Certificate serial: 0199FC8F337EE20E96F8AE0903902FCAC2E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
Manifest number: 0466
Signing time: Sun 19 Oct 2025 13:01:07 +0000
Manifest this update: Sun 19 Oct 2025 13:01:07 +0000
Manifest next update: Mon 20 Oct 2025 13:01:07 +0000
Files and hashes: 1: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl (hash: x42rEG3V4kmCizTwf47pKVoKJfedZ+n9vIBskSYNMSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:33:7e:e2:0e:96:f8:ae:09:03:90:2f:ca:c2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
Validity
Not Before: Oct 19 13:01:07 2025 GMT
Not After : Oct 20 13:01:07 2025 GMT
Subject: CN=b62047b552391ff8b87873f76b2637a3fc1c1278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:53:45:b0:9c:84:cd:60:8f:5d:48:f3:17:0a:
8d:99:9d:fb:f1:c1:d5:a5:fc:70:d6:89:52:bc:21:
e8:3b:e6:d9:1c:87:a6:ad:67:7d:9d:e4:90:4a:0d:
1b:57:1b:27:e8:1f:4f:7d:d4:b8:f7:eb:6b:ea:31:
6c:ad:30:32:9b:0f:af:bb:3f:ed:99:4f:e0:a3:c2:
f4:aa:ef:f7:80:f8:56:79:e2:b0:0f:e4:5f:12:35:
ac:f8:2c:eb:0e:55:46:e7:9d:cf:5c:84:6a:21:30:
4f:0d:d6:64:9a:87:e8:e1:f1:06:a7:20:f5:e6:15:
2a:b4:a2:98:f6:10:96:b2:47:fd:ab:7c:03:f3:82:
99:e4:ab:76:6b:e9:e3:11:08:15:19:92:aa:01:f1:
f4:27:45:91:9a:37:41:fa:9e:bb:f9:56:24:7e:13:
cb:58:3d:00:08:c5:b1:6d:5c:9d:57:10:ea:46:b7:
37:0e:ad:0a:b4:13:aa:6f:c0:a4:38:8c:b5:03:3b:
53:6a:04:b9:39:8e:24:7d:d6:2d:ca:94:8f:35:d3:
e3:6c:83:44:43:ba:27:b5:d1:15:7b:6d:53:46:08:
74:4f:6e:04:0b:b0:ff:8e:c8:4f:22:b7:dd:b6:62:
bf:e5:a6:16:69:22:fe:ad:58:6c:65:e0:9b:88:6e:
91:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:20:47:B5:52:39:1F:F8:B8:78:73:F7:6B:26:37:A3:FC:1C:12:78
X509v3 Authority Key Identifier:
keyid:EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:45:c4:59:0d:7f:37:20:cb:7b:a8:2f:65:5f:86:d6:0d:0d:
fc:70:e2:57:e7:6a:b0:97:05:cf:e2:ee:75:57:b1:51:b4:c4:
32:bd:74:04:b9:c1:00:62:6e:e2:97:96:c0:2d:1e:f1:8f:67:
95:b8:90:c9:fb:70:6a:b4:d3:78:fc:19:0f:19:1a:c9:99:f5:
0e:19:7a:5d:3e:26:6f:e2:49:0b:3c:16:f6:ac:d5:b2:63:45:
5a:98:fe:4e:c6:bb:60:4e:29:65:0e:cb:6c:3a:c9:f9:53:e6:
9e:1f:b0:d6:6f:9c:29:0e:5e:5d:31:f4:24:a9:75:8d:30:df:
99:f4:7b:36:45:2c:53:18:b7:14:b8:13:8c:e4:c0:ac:37:e7:
f3:2e:7f:af:d3:de:ee:0a:11:3d:29:d5:3e:90:3a:fb:8f:c8:
29:59:d6:35:4c:09:ab:c9:e1:f1:a2:ee:8b:25:d7:1f:10:83:
f9:05:ac:e2:af:ad:8c:f2:e3:90:8a:97:8b:14:8f:69:a5:79:
2a:93:65:e1:5c:fc:34:e3:3f:be:72:42:18:5a:25:09:f1:a4:
c2:41:4f:c4:18:29:5f:61:57:a2:dc:31:f2:3f:93:6a:f1:23:
23:25:90:c5:49:15:cf:1d:b4:de:12:7e:50:31:19:34:4f:2e:
bf:0e:a2:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8jzN+4g6W+K4JA5AvysLjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNjQzYjRmYTNmMGUxM2NjYTgwNTU4MzNhYzcwYzY5ZGQx
Y2E4ZTEwHhcNMjUxMDE5MTMwMTA3WhcNMjUxMDIwMTMwMTA3WjAzMTEwLwYDVQQD
EyhiNjIwNDdiNTUyMzkxZmY4Yjg3ODczZjc2YjI2MzdhM2ZjMWMxMjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1NFsJyEzWCPXUjzFwqNmZ378cHV
pfxw1olSvCHoO+bZHIemrWd9neSQSg0bVxsn6B9PfdS49+tr6jFsrTAymw+vuz/t
mU/go8L0qu/3gPhWeeKwD+RfEjWs+CzrDlVG553PXIRqITBPDdZkmofo4fEGpyD1
5hUqtKKY9hCWskf9q3wD84KZ5Kt2a+njEQgVGZKqAfH0J0WRmjdB+p67+VYkfhPL
WD0ACMWxbVydVxDqRrc3Dq0KtBOqb8CkOIy1AztTagS5OY4kfdYtypSPNdPjbINE
Q7ontdEVe21TRgh0T24EC7D/jshPIrfdtmK/5aYWaSL+rVhsZeCbiG6RxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLYgR7VSOR/4uHhz92smN6P8HBJ4MB8GA1UdIwQY
MBaAFOxkO0+j8OE8yoBVgzrHDGndHKjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0dRN1Q2UHc0VHpLZ0ZXRE9zY01hZDBjcU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83NGQ0OTAtYjg1YS00OTM5LTkwZGMt
NzllNzQ2MzgzZjhkLzEvN0dRN1Q2UHc0VHpLZ0ZXRE9zY01hZDBjcU9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS83NGQ0OTAtYjg1YS00OTM5LTkwZGMtNzllNzQ2MzgzZjhk
LzEvN0dRN1Q2UHc0VHpLZ0ZXRE9zY01hZDBjcU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKUXEWQ1/
NyDLe6gvZV+G1g0N/HDiV+dqsJcFz+LudVexUbTEMr10BLnBAGJu4peWwC0e8Y9n
lbiQyftwarTTePwZDxkayZn1Dhl6XT4mb+JJCzwW9qzVsmNFWpj+Tsa7YE4pZQ7L
bDrJ+VPmnh+w1m+cKQ5eXTH0JKl1jTDfmfR7NkUsUxi3FLgTjOTArDfn8y5/r9Pe
7goRPSnVPpA6+4/IKVnWNUwJq8nh8aLuiyXXHxCD+QWs4q+tjPLjkIqXixSPaaV5
KpNl4Vz8NOM/vnJCGFolCfGkwkFPxBgpX2FXotwx8j+TavEjIyWQxUkVzx203hJ+
UDEZNE8uvw6iNg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:44:51 2025 by rpki-client