Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
File: fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft (raw, json)
Hash identifier: OOT6oNYpkI0XgA2P6I+N8cyLWvWsgI4NXjeUhVAi3Vg=
Subject key identifier: A9:F4:9F:E6:B1:46:05:32:67:9B:44:59:E3:75:5C:2C:92:C0:C0:70
Authority key identifier: 7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69
Certificate issuer: /CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169
Certificate serial: 0199FBEBD7FE8CA58E6A3420E558C04D6871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
Manifest number: 11D7
Signing time: Sun 19 Oct 2025 10:02:41 +0000
Manifest this update: Sun 19 Oct 2025 10:02:41 +0000
Manifest next update: Mon 20 Oct 2025 10:02:41 +0000
Files and hashes: 1: fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl (hash: WWEtqNXBnF9o3khKDsQTt5LLKIDWbYQwKRuccyVDbK4=)
2: j5qbmBs0_BfbwDwd52YtHtTdhQg.roa (hash: LA1lDjQr1OL9kDtbpIDDn8ilyEOxmrMJjPxRdvdaCKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:d7:fe:8c:a5:8e:6a:34:20:e5:58:c0:4d:68:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169
Validity
Not Before: Oct 19 10:02:41 2025 GMT
Not After : Oct 20 10:02:41 2025 GMT
Subject: CN=a9f49fe6b1460532679b4459e3755c2c92c0c070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:68:63:af:63:fc:31:53:30:df:37:eb:35:60:
56:33:f4:74:4a:8f:00:ba:d1:9b:4b:4c:60:66:9e:
f0:7e:29:88:b4:ef:59:f0:35:b5:96:a7:22:26:ff:
6a:5a:35:ea:17:8d:52:92:16:0a:d3:b7:82:44:bc:
a7:2a:2b:28:2e:41:08:5b:f4:5c:dc:cb:ea:b8:24:
03:42:49:55:b8:19:61:19:ee:e5:13:82:ca:c1:3e:
41:c3:f0:9c:ce:c7:34:d9:d1:a8:64:53:1b:51:28:
c2:dd:a5:5b:aa:62:c4:e9:1c:e8:a8:a6:75:d4:bd:
80:6d:2c:a8:25:03:83:2d:3f:07:ba:80:1c:00:e5:
90:4c:4a:e6:70:d5:fd:9f:c3:8e:23:79:06:f3:1a:
f4:7f:80:cd:4b:96:98:8d:93:94:d8:04:b1:65:cf:
77:54:bc:60:22:ee:37:ed:52:4b:ef:83:f2:a9:a1:
6a:d0:28:bb:ad:74:ea:f4:d0:e1:dc:7f:99:27:31:
e5:73:19:b6:25:16:cb:b1:50:99:e9:30:4f:43:7b:
75:e5:a0:1d:6c:d1:70:e9:84:e4:a5:ec:51:6b:e7:
2c:07:be:80:cc:25:f8:1f:ef:1a:da:e4:ab:68:e8:
64:00:f4:4e:9b:9e:80:b2:9a:01:75:4f:5b:17:09:
33:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F4:9F:E6:B1:46:05:32:67:9B:44:59:E3:75:5C:2C:92:C0:C0:70
X509v3 Authority Key Identifier:
keyid:7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:73:fa:ac:60:d0:e0:5b:94:59:54:99:28:cb:6e:72:06:72:
c2:58:e5:f7:7b:af:dd:79:c3:47:88:3f:5c:0a:e6:13:07:65:
84:f4:1a:9e:4a:ba:81:0d:d0:7e:5a:ed:1e:a5:3d:a7:46:42:
08:0a:d6:79:6c:ab:0a:a5:22:bf:68:85:c8:53:c5:54:16:76:
b3:ff:86:94:c2:e6:10:28:8d:7c:16:97:03:85:c3:a6:51:6a:
bf:b6:88:96:2a:49:ea:0e:6d:f2:5b:68:47:d3:96:d2:57:08:
d1:cb:dc:06:50:61:a8:aa:a6:85:55:d6:30:ee:c9:86:42:a8:
52:b7:99:bb:61:f8:57:22:ce:b3:e9:c6:a1:c5:c8:30:61:b7:
5d:48:d6:d4:df:82:c7:cb:61:55:11:c7:bf:d2:ff:41:5f:72:
33:8f:e7:ff:ba:5b:10:2c:f4:f1:cc:6f:e4:5b:fc:cb:c5:78:
5a:b2:d5:69:89:51:4a:88:fd:5f:29:46:40:2c:8b:34:89:d9:
47:ae:01:ed:96:53:40:50:2c:3c:3a:3a:eb:17:2f:93:ab:15:
7a:92:bc:3c:82:14:3a:fb:09:de:61:11:08:2e:37:c6:ee:6e:
09:95:ea:14:b4:a3:e8:72:ba:59:2a:f1:06:0d:40:ba:a3:50:
47:e7:a9:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn769f+jKWOajQg5VjATWhxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjOGVlNGFmMmZjMWM0ZWMxYjE3NjdlM2QzZjI2MDczMmVk
ZjkxNjkwHhcNMjUxMDE5MTAwMjQxWhcNMjUxMDIwMTAwMjQxWjAzMTEwLwYDVQQD
EyhhOWY0OWZlNmIxNDYwNTMyNjc5YjQ0NTllMzc1NWMyYzkyYzBjMDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWhjr2P8MVMw3zfrNWBWM/R0So8A
utGbS0xgZp7wfimItO9Z8DW1lqciJv9qWjXqF41SkhYK07eCRLynKisoLkEIW/Rc
3MvquCQDQklVuBlhGe7lE4LKwT5Bw/Cczsc02dGoZFMbUSjC3aVbqmLE6RzoqKZ1
1L2AbSyoJQODLT8HuoAcAOWQTErmcNX9n8OOI3kG8xr0f4DNS5aYjZOU2ASxZc93
VLxgIu437VJL74PyqaFq0Ci7rXTq9NDh3H+ZJzHlcxm2JRbLsVCZ6TBPQ3t15aAd
bNFw6YTkpexRa+csB76AzCX4H+8a2uSraOhkAPROm56AspoBdU9bFwkzVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKn0n+axRgUyZ5tEWeN1XCySwMBwMB8GA1UdIwQY
MBaAFHyO5K8vwcTsGxdn49PyYHMu35FpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkk3a3J5X0J4T3diRjJmajBfSmdjeTdma1drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hOWUwYmQtYWM4NS00ZTJlLThmMjIt
ODNjMjE1N2JkYWMwLzEvZkk3a3J5X0J4T3diRjJmajBfSmdjeTdma1drLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9hOWUwYmQtYWM4NS00ZTJlLThmMjItODNjMjE1N2JkYWMw
LzEvZkk3a3J5X0J4T3diRjJmajBfSmdjeTdma1drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn3P6rGDQ
4FuUWVSZKMtucgZywljl93uv3XnDR4g/XArmEwdlhPQankq6gQ3QflrtHqU9p0ZC
CArWeWyrCqUiv2iFyFPFVBZ2s/+GlMLmECiNfBaXA4XDplFqv7aIlipJ6g5t8lto
R9OW0lcI0cvcBlBhqKqmhVXWMO7JhkKoUreZu2H4VyLOs+nGocXIMGG3XUjW1N+C
x8thVRHHv9L/QV9yM4/n/7pbECz08cxv5Fv8y8V4WrLVaYlRSoj9XylGQCyLNInZ
R64B7ZZTQFAsPDo66xcvk6sVepK8PIIUOvsJ3mERCC43xu5uCZXqFLSj6HK6WSrx
Bg1AuqNQR+epUg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:50 2025 by rpki-client