Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
File: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft (raw, json)
Hash identifier: Ki4UaIAHqlgE2qfxB/cNyIB7yyAU71D0jIeG3LDrDi8=
Subject key identifier: 44:67:D3:EA:75:D1:AC:D7:AD:E8:06:42:65:36:39:8C:85:2C:17:2D
Authority key identifier: EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
Certificate issuer: /CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Certificate serial: 0199FDD8C701816237DAF429FE75120CDDF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
Manifest number: 142D
Signing time: Sun 19 Oct 2025 19:01:06 +0000
Manifest this update: Sun 19 Oct 2025 19:01:06 +0000
Manifest next update: Mon 20 Oct 2025 19:01:06 +0000
Files and hashes: 1: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl (hash: IXTDuazMkEHx95L6s4bwvA8Dd06UYvutAmDZVeHeMGk=)
2: RFaAPpt9TXRuZiSBVJ4x95FnZpg.roa (hash: r/BjBoSYQEd6zQy913IAV7pMwCR1j9bdd+qgN4vkxf4=)
3: mw-NfFERPD2qaYVgEjUcNQ0zcPs.roa (hash: AZitnGA9oKjnHTuxpFFMdyJwJocQCVTArIP5ASVi2R0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:c7:01:81:62:37:da:f4:29:fe:75:12:0c:dd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Validity
Not Before: Oct 19 19:01:06 2025 GMT
Not After : Oct 20 19:01:06 2025 GMT
Subject: CN=4467d3ea75d1acd7ade806426536398c852c172d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:22:4d:86:12:56:c1:35:13:0e:3e:a6:f5:32:
86:27:b8:de:df:0a:61:5b:06:2f:40:80:43:f9:c2:
01:c8:b4:e3:15:25:86:85:77:cd:74:67:be:02:58:
d7:36:1b:7f:23:7d:97:ca:c8:ed:0b:af:df:9d:6a:
52:ae:fb:04:1f:f9:76:03:48:74:a7:dc:41:80:a0:
20:52:d5:96:af:32:68:25:8d:2f:a6:05:2b:95:2b:
35:3a:95:2f:58:c9:c1:ae:ee:39:1d:fa:dd:bd:21:
15:89:49:09:97:19:f3:20:f9:37:5c:f5:d6:07:9e:
1a:4a:fe:56:16:f8:da:1d:aa:13:52:da:05:d0:73:
1b:6a:40:d1:96:05:36:1e:6b:e9:25:81:df:1a:1e:
cc:51:b5:d3:cd:75:b3:49:73:cc:85:f5:12:fb:3a:
86:b0:a2:5d:af:4d:11:8c:9a:7d:58:20:46:9f:9c:
9a:63:54:31:00:1a:ae:24:77:ac:af:c3:ac:5e:cc:
42:60:6a:0c:42:b0:d4:0c:7f:c7:bc:d5:6f:21:7f:
cc:3d:94:6e:54:4b:7c:ab:b3:0f:d6:81:62:e3:62:
94:b3:71:e0:e4:8e:3d:66:66:23:88:65:81:01:05:
8e:ca:25:7f:11:22:57:1f:f9:9d:3e:e8:f3:73:7d:
f0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:67:D3:EA:75:D1:AC:D7:AD:E8:06:42:65:36:39:8C:85:2C:17:2D
X509v3 Authority Key Identifier:
keyid:EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:36:7c:3e:c4:af:c5:69:a7:3a:0b:d2:f1:32:92:02:87:bf:
ac:8a:62:16:56:21:ab:81:8e:30:c2:d3:cb:4a:0a:79:f4:6a:
fe:da:1d:10:07:e2:37:43:bc:95:51:b1:a2:f2:71:e8:4c:22:
44:f3:c9:9c:dd:c3:24:b4:38:48:d8:96:ea:00:18:99:ff:e4:
f5:56:ba:5f:c4:ce:df:b6:66:d9:bd:c1:4b:05:2f:22:4e:01:
be:14:b0:01:44:4c:e5:a2:aa:26:6a:22:28:e8:ff:d2:76:00:
8e:a8:c5:85:6c:f9:66:b6:e6:21:fe:d1:2b:5c:4c:db:1c:a5:
9b:03:1a:60:af:a2:f3:43:f5:28:a2:2e:ce:af:be:96:fd:cb:
f0:78:7a:d1:5a:5b:05:54:24:cc:0e:8a:35:c7:77:27:ee:b7:
b6:1e:65:a4:99:01:b8:f6:d3:2e:25:67:b6:83:dc:98:76:81:
d5:99:56:95:7c:51:b5:3a:a4:85:46:67:69:09:f9:b2:93:81:
23:e2:9c:ce:5b:33:95:8a:04:aa:43:86:27:ba:cf:a0:99:f9:
d0:5c:90:73:14:75:7c:0d:eb:25:3b:6d:bc:68:7e:21:af:9b:
c6:d9:f5:09:11:24:45:bf:19:1a:af:57:3c:a7:b3:7b:9f:c7:
8c:6a:4f:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92McBgWI32vQp/nUSDN3xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNzU3NjAzYjE3MWFmMzRlMWM2MjMxZTVlODJlNzdmMmQ1
ODlkYjkwHhcNMjUxMDE5MTkwMTA2WhcNMjUxMDIwMTkwMTA2WjAzMTEwLwYDVQQD
Eyg0NDY3ZDNlYTc1ZDFhY2Q3YWRlODA2NDI2NTM2Mzk4Yzg1MmMxNzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CJNhhJWwTUTDj6m9TKGJ7je3wph
WwYvQIBD+cIByLTjFSWGhXfNdGe+AljXNht/I32XysjtC6/fnWpSrvsEH/l2A0h0
p9xBgKAgUtWWrzJoJY0vpgUrlSs1OpUvWMnBru45HfrdvSEViUkJlxnzIPk3XPXW
B54aSv5WFvjaHaoTUtoF0HMbakDRlgU2HmvpJYHfGh7MUbXTzXWzSXPMhfUS+zqG
sKJdr00RjJp9WCBGn5yaY1QxABquJHesr8OsXsxCYGoMQrDUDH/HvNVvIX/MPZRu
VEt8q7MP1oFi42KUs3Hg5I49ZmYjiGWBAQWOyiV/ESJXH/mdPujzc33wsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERn0+p10azXregGQmU2OYyFLBctMB8GA1UdIwQY
MBaAFOx1dgOxca804cYjHl6C538tWJ25MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0hWMkE3RnhyelRoeGlNZVhvTG5meTFZbmJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84YzM3ZjAtYWYzYS00MDI0LTgwNDMt
ZDMwY2VmOTExNGI3LzEvN0hWMkE3RnhyelRoeGlNZVhvTG5meTFZbmJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy84YzM3ZjAtYWYzYS00MDI0LTgwNDMtZDMwY2VmOTExNGI3
LzEvN0hWMkE3RnhyelRoeGlNZVhvTG5meTFZbmJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATZ8PsSv
xWmnOgvS8TKSAoe/rIpiFlYhq4GOMMLTy0oKefRq/todEAfiN0O8lVGxovJx6Ewi
RPPJnN3DJLQ4SNiW6gAYmf/k9Va6X8TO37Zm2b3BSwUvIk4BvhSwAURM5aKqJmoi
KOj/0nYAjqjFhWz5ZrbmIf7RK1xM2xylmwMaYK+i80P1KKIuzq++lv3L8Hh60Vpb
BVQkzA6KNcd3J+63th5lpJkBuPbTLiVntoPcmHaB1ZlWlXxRtTqkhUZnaQn5spOB
I+KczlszlYoEqkOGJ7rPoJn50FyQcxR1fA3rJTttvGh+Ia+bxtn1CREkRb8ZGq9X
PKeze5/HjGpPgg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:20:03 2025 by rpki-client