Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
File: _7up17hmEtT4fPFhcf-CsrRBNk0.mft (raw, json)
Hash identifier: DfZFSv4D1voku6Y6/qWyWAIifQrZiMly0zVI47Hf0m8=
Subject key identifier: D5:72:B3:F0:17:80:16:56:88:76:AA:47:83:9C:26:F0:EE:18:2D:9F
Authority key identifier: FF:BB:A9:D7:B8:66:12:D4:F8:7C:F1:61:71:FF:82:B2:B4:41:36:4D
Certificate issuer: /CN=ffbba9d7b86612d4f87cf16171ff82b2b441364d
Certificate serial: 019A00359FB93A128F0107AFBC0CCCE3AEBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 06:01:45 +0000
Manifest this update: Mon 20 Oct 2025 06:01:45 +0000
Manifest next update: Tue 21 Oct 2025 06:01:45 +0000
Files and hashes: 1: LYzc6OtaS8KV6QcG5hHmYjRMk0Y.roa (hash: fgjAjawvKdndlxTdQAycErp9wGnUNzrHaq3cdzUckXg=)
2: _7up17hmEtT4fPFhcf-CsrRBNk0.crl (hash: DJOLLngPxqtUlpyncHhAE8gQZAjlzAE9f17hn9sM9LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:9f:b9:3a:12:8f:01:07:af:bc:0c:cc:e3:ae:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbba9d7b86612d4f87cf16171ff82b2b441364d
Validity
Not Before: Oct 20 06:01:45 2025 GMT
Not After : Oct 21 06:01:45 2025 GMT
Subject: CN=d572b3f0178016568876aa47839c26f0ee182d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b0:0d:5f:2d:10:a9:1f:be:4c:d1:d0:c0:a3:
a5:6a:ee:aa:7a:16:b9:cb:47:0a:ee:16:47:55:10:
22:8a:a3:cf:db:9c:95:58:87:52:93:4d:35:6f:55:
0f:f5:b6:50:af:32:fa:e9:8f:c0:75:94:47:4d:41:
47:9e:6b:00:3f:13:87:f5:8f:00:2f:a0:ce:fd:cd:
3b:6b:27:db:e6:2d:66:ae:65:d2:db:17:62:95:e8:
ac:96:a9:64:d6:b6:83:a0:5b:60:65:5c:8f:10:50:
4e:f4:18:9e:7f:7c:83:24:8e:93:2b:48:0a:73:ab:
29:c2:50:fe:31:e6:ad:16:57:6e:1b:6d:6d:ee:b3:
27:4a:be:ed:cf:71:65:9a:cf:c0:3c:aa:ae:86:49:
2e:8b:3d:2f:78:c3:db:c3:ec:35:ea:23:9b:30:b6:
b2:fb:96:fc:e6:e1:a5:a3:b6:54:e6:3f:f7:52:1c:
a8:48:62:05:8d:22:e1:8e:75:0c:74:7e:34:29:88:
86:8b:11:80:af:6c:6f:28:69:70:2a:2e:3a:29:6c:
73:cf:b7:85:d1:0e:bc:9e:55:d6:64:cc:f7:77:17:
e8:e1:a9:e1:ee:14:42:e9:3a:28:c8:d4:60:b3:e2:
0a:33:c2:86:1f:99:9e:49:6c:74:82:da:cf:26:2a:
be:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:72:B3:F0:17:80:16:56:88:76:AA:47:83:9C:26:F0:EE:18:2D:9F
X509v3 Authority Key Identifier:
keyid:FF:BB:A9:D7:B8:66:12:D4:F8:7C:F1:61:71:FF:82:B2:B4:41:36:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:6f:5b:49:d7:32:e2:f8:ec:0f:9c:c9:3c:55:68:92:6f:42:
32:12:ee:fd:09:1f:d1:c0:83:fe:d5:09:42:f2:68:39:4e:a6:
a5:44:05:ac:a8:40:96:bf:ab:50:4d:05:81:d7:95:17:bd:fc:
50:40:c2:d2:51:2c:b0:e9:11:1f:93:47:67:f9:fe:24:b8:9b:
40:19:f4:b4:6b:5f:42:31:57:d4:3e:6d:3b:db:90:aa:95:73:
87:30:64:ae:cd:98:37:44:fc:39:44:3e:1b:56:e0:c6:84:3c:
79:36:f6:66:e4:d6:a1:52:6b:d4:59:a4:a1:f0:2b:2d:fe:9c:
bc:e1:2b:d6:19:b9:0a:32:94:c3:db:cd:84:30:8e:e9:42:d6:
ab:7e:e0:bb:a4:1d:2f:48:ca:0e:58:26:7a:cd:54:09:4c:ee:
23:0a:09:78:fd:4f:f2:cc:91:3a:ae:07:5c:13:cd:59:31:f0:
78:52:f9:36:9b:9c:45:a5:6e:ea:be:b0:7f:ac:9f:0d:2d:7c:
72:11:62:eb:dd:5e:11:b8:55:b1:66:ac:87:49:b4:90:0c:be:
01:9a:cd:ad:f7:5f:45:93:94:29:31:28:f1:4c:a0:dc:11:92:
d7:64:26:57:ca:40:63:80:dc:4b:41:91:be:42:f5:66:c4:79:
d7:69:ab:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoANZ+5OhKPAQevvAzM466+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYmJhOWQ3Yjg2NjEyZDRmODdjZjE2MTcxZmY4MmIyYjQ0
MTM2NGQwHhcNMjUxMDIwMDYwMTQ1WhcNMjUxMDIxMDYwMTQ1WjAzMTEwLwYDVQQD
EyhkNTcyYjNmMDE3ODAxNjU2ODg3NmFhNDc4MzljMjZmMGVlMTgyZDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrANXy0QqR++TNHQwKOlau6qeha5
y0cK7hZHVRAiiqPP25yVWIdSk001b1UP9bZQrzL66Y/AdZRHTUFHnmsAPxOH9Y8A
L6DO/c07ayfb5i1mrmXS2xdileislqlk1raDoFtgZVyPEFBO9Bief3yDJI6TK0gK
c6spwlD+MeatFlduG21t7rMnSr7tz3Flms/APKquhkkuiz0veMPbw+w16iObMLay
+5b85uGlo7ZU5j/3UhyoSGIFjSLhjnUMdH40KYiGixGAr2xvKGlwKi46KWxzz7eF
0Q68nlXWZMz3dxfo4anh7hRC6TooyNRgs+IKM8KGH5meSWx0gtrPJiq+FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVys/AXgBZWiHaqR4OcJvDuGC2fMB8GA1UdIwQY
MBaAFP+7qde4ZhLU+HzxYXH/grK0QTZNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzd1cDE3aG1FdFQ0ZlBGaGNmLUNzclJCTmswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80NDgyZjUtOTlkMy00ZDY1LWE2ZTUt
NjhlODEzNDIwYWU2LzEvXzd1cDE3aG1FdFQ0ZlBGaGNmLUNzclJCTmswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy80NDgyZjUtOTlkMy00ZDY1LWE2ZTUtNjhlODEzNDIwYWU2
LzEvXzd1cDE3aG1FdFQ0ZlBGaGNmLUNzclJCTmswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAim9bSdcy
4vjsD5zJPFVokm9CMhLu/Qkf0cCD/tUJQvJoOU6mpUQFrKhAlr+rUE0FgdeVF738
UEDC0lEssOkRH5NHZ/n+JLibQBn0tGtfQjFX1D5tO9uQqpVzhzBkrs2YN0T8OUQ+
G1bgxoQ8eTb2ZuTWoVJr1FmkofArLf6cvOEr1hm5CjKUw9vNhDCO6ULWq37gu6Qd
L0jKDlgmes1UCUzuIwoJeP1P8syROq4HXBPNWTHweFL5NpucRaVu6r6wf6yfDS18
chFi691eEbhVsWash0m0kAy+AZrNrfdfRZOUKTEo8Uyg3BGS12QmV8pAY4DcS0GR
vkL1ZsR512mrpQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:32:59 2025 by rpki-client