
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
File: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft (raw, json)
Hash identifier: 8b9AfgNM2+UJ1o9ya+MbvlckeBa0cinwxmP2XZs9Pj8=
Subject key identifier: CB:7B:26:12:F1:31:61:F2:DC:7D:1F:B5:07:3E:FD:9D:6A:99:6C:93
Authority key identifier: AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
Certificate issuer: /CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Certificate serial: 0199FB7C8F50071C18AF8FFC410DDB143924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 08:01:08 +0000
Manifest this update: Sun 19 Oct 2025 08:01:08 +0000
Manifest next update: Mon 20 Oct 2025 08:01:08 +0000
Files and hashes: 1: 5jA5Josk9BqU9IUqGDRntTJ49ME.roa (hash: 32eH1PvNSkInyLcgYxDyHSfueWB890pDkTVZp7L2USg=)
2: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl (hash: cTGb0HWp55WpAwd2WqxxDzelOBQX1X75Gixn+ULDo7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:8f:50:07:1c:18:af:8f:fc:41:0d:db:14:39:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Validity
Not Before: Oct 19 08:01:08 2025 GMT
Not After : Oct 20 08:01:08 2025 GMT
Subject: CN=cb7b2612f13161f2dc7d1fb5073efd9d6a996c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8f:4d:b3:7f:44:7b:19:3b:f6:b1:ab:60:73:
dd:e3:9a:56:7c:79:3f:0a:d1:f0:29:9b:cf:41:06:
27:d4:08:f1:61:39:40:57:d7:b4:16:a4:a6:41:18:
fd:28:cb:10:c3:63:a6:67:64:fe:a9:09:50:c6:06:
d4:42:19:c5:99:27:48:1b:be:5e:77:22:66:1d:2f:
6c:ab:da:0e:02:84:66:f0:25:e5:d0:73:27:4d:14:
4d:09:71:0d:40:13:bc:52:c6:ec:9b:60:57:47:b9:
c2:a9:85:a2:c8:7d:c8:1c:30:db:09:37:e2:45:aa:
ed:29:31:db:c7:a6:20:18:8b:9f:be:91:5a:4a:38:
05:b8:a9:ec:1f:4c:20:34:7b:06:33:a3:41:a7:e7:
fd:92:3e:9d:3b:55:c8:1e:9e:b7:d7:28:c7:7f:9b:
67:cd:7a:bb:cd:4a:cc:4d:77:4a:6c:5a:d7:87:99:
7c:22:61:f0:d3:ee:2b:dd:59:77:d1:af:96:ca:34:
9b:c3:4a:7b:78:db:24:66:62:09:39:ee:52:87:1c:
fa:76:98:7b:8c:8e:77:7a:aa:2b:ce:d9:ce:8c:04:
68:ec:7b:46:48:73:15:1f:cc:58:7c:1c:fd:0c:14:
37:bb:81:93:8e:7f:6b:92:93:c0:cd:42:35:ae:da:
23:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7B:26:12:F1:31:61:F2:DC:7D:1F:B5:07:3E:FD:9D:6A:99:6C:93
X509v3 Authority Key Identifier:
keyid:AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:cd:ed:dc:67:2a:b0:3d:0e:0b:93:c4:e9:59:79:93:09:f4:
ea:2f:d3:57:fe:07:ee:1a:fc:f1:8e:c9:9b:b6:69:ff:93:5d:
93:79:6f:08:1e:1c:7b:8e:85:1c:54:4c:f1:0b:a7:b7:21:08:
20:09:31:65:e2:29:c7:c5:ae:71:5a:0d:31:b3:c9:67:9e:d1:
0a:13:97:bf:8b:83:ea:47:fe:2e:88:4a:c1:6c:08:53:41:fd:
99:3c:77:aa:ce:1f:23:18:33:f2:ad:ec:69:bb:3d:4b:2a:22:
f2:7c:f5:bf:33:2e:df:bf:e6:22:74:12:47:0e:fc:c3:ba:62:
9c:e1:6a:50:3f:9c:8d:25:ae:cf:82:9b:19:79:e6:3f:fd:c1:
9b:50:5f:14:87:bd:0f:49:c1:50:b8:64:cb:62:6f:ea:7b:65:
18:3b:00:e6:c2:9f:d3:4a:54:93:a4:bf:e9:c4:b1:e4:f1:eb:
74:df:fc:30:09:eb:5b:6a:92:ac:e6:e6:af:ab:ff:1a:73:2b:
9a:88:a9:46:8f:cf:a1:d9:d4:5b:86:47:ce:51:a9:71:81:a1:
e9:4d:26:81:a1:70:bd:46:52:40:38:a0:92:62:fa:6a:a8:5f:
6b:ad:ae:a7:b0:04:a5:3e:f9:f8:2a:bc:52:ce:3f:4b:e6:2b:
aa:05:50:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fI9QBxwYr4/8QQ3bFDkkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmYjA0YjEzNTVlNWQ2ZWQyMjIzMjQ5NjMwYWM4YjlmNzQz
OWFlZTEwHhcNMjUxMDE5MDgwMTA4WhcNMjUxMDIwMDgwMTA4WjAzMTEwLwYDVQQD
EyhjYjdiMjYxMmYxMzE2MWYyZGM3ZDFmYjUwNzNlZmQ5ZDZhOTk2YzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwI9Ns39Eexk79rGrYHPd45pWfHk/
CtHwKZvPQQYn1AjxYTlAV9e0FqSmQRj9KMsQw2OmZ2T+qQlQxgbUQhnFmSdIG75e
dyJmHS9sq9oOAoRm8CXl0HMnTRRNCXENQBO8Usbsm2BXR7nCqYWiyH3IHDDbCTfi
RartKTHbx6YgGIufvpFaSjgFuKnsH0wgNHsGM6NBp+f9kj6dO1XIHp631yjHf5tn
zXq7zUrMTXdKbFrXh5l8ImHw0+4r3Vl30a+WyjSbw0p7eNskZmIJOe5Shxz6dph7
jI53eqorztnOjARo7HtGSHMVH8xYfBz9DBQ3u4GTjn9rkpPAzUI1rtojcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMt7JhLxMWHy3H0ftQc+/Z1qmWyTMB8GA1UdIwQY
MBaAFK+wSxNV5dbtIiMkljCsi590Oa7hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjdCTEUxWGwxdTBpSXlTV01LeUxuM1E1cnVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9lMmI0OTQtYzBiMi00M2Y0LWJjNGQt
YTZmNGYwZjRmNzJkLzEvcjdCTEUxWGwxdTBpSXlTV01LeUxuM1E1cnVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9lMmI0OTQtYzBiMi00M2Y0LWJjNGQtYTZmNGYwZjRmNzJk
LzEvcjdCTEUxWGwxdTBpSXlTV01LeUxuM1E1cnVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtc3t3Gcq
sD0OC5PE6Vl5kwn06i/TV/4H7hr88Y7Jm7Zp/5Ndk3lvCB4ce46FHFRM8QuntyEI
IAkxZeIpx8WucVoNMbPJZ57RChOXv4uD6kf+LohKwWwIU0H9mTx3qs4fIxgz8q3s
abs9Syoi8nz1vzMu37/mInQSRw78w7pinOFqUD+cjSWuz4KbGXnmP/3Bm1BfFIe9
D0nBULhky2Jv6ntlGDsA5sKf00pUk6S/6cSx5PHrdN/8MAnrW2qSrObmr6v/GnMr
moipRo/PodnUW4ZHzlGpcYGh6U0mgaFwvUZSQDigkmL6aqhfa62up7AEpT75+Cq8
Us4/S+YrqgVQZg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:44 2025 by rpki-client