Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
File: 97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft (raw, json)
Hash identifier: olQvNnYeqnVa14zLfZApfv6kWWeHXA4M7LrA+29MNvM=
Subject key identifier: 04:9B:A5:3B:11:06:88:6F:3F:B4:91:10:C9:1E:C1:59:40:04:18:03
Authority key identifier: F7:B0:69:D3:3D:F1:22:5A:8B:36:43:A0:13:64:F2:79:DF:40:D8:77
Certificate issuer: /CN=f7b069d33df1225a8b3643a01364f279df40d877
Certificate serial: 0199FAD856BCC4F6E12C4021C5E26CD8B0C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
Manifest number: 03D7
Signing time: Sun 19 Oct 2025 05:01:45 +0000
Manifest this update: Sun 19 Oct 2025 05:01:45 +0000
Manifest next update: Mon 20 Oct 2025 05:01:45 +0000
Files and hashes: 1: 97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl (hash: BkeLCjZWps7+JzV6WZvmOSEtts7rux2c42c+OyXXNQo=)
2: G8WBqm_n-G2Dq7rJrsvaHEWmDxE.roa (hash: IA50muj3Iqkw7YnSvxI1jyledliIC9BsrNcG2Szt4iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:56:bc:c4:f6:e1:2c:40:21:c5:e2:6c:d8:b0:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b069d33df1225a8b3643a01364f279df40d877
Validity
Not Before: Oct 19 05:01:45 2025 GMT
Not After : Oct 20 05:01:45 2025 GMT
Subject: CN=049ba53b1106886f3fb49110c91ec15940041803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7f:2f:55:ca:1f:db:f5:61:10:cf:b3:e2:d5:
6b:0d:52:47:98:f6:ed:71:c8:c7:07:bb:36:a3:c4:
91:b1:78:68:cf:f3:a2:c0:5a:78:0b:ef:1d:6a:48:
71:15:45:6d:38:ee:54:69:92:c8:5e:05:2d:29:5a:
e3:18:f1:a6:f0:57:ff:0b:27:91:08:ad:60:ab:8b:
4a:1a:45:e8:17:a1:dc:d3:aa:27:53:a9:cc:06:07:
24:ce:b2:f1:eb:0f:37:b1:95:22:fc:78:2c:ee:1b:
99:60:24:56:71:ff:2c:59:dc:57:3d:b6:91:6b:1e:
f3:a3:74:18:ac:e8:da:bd:7b:cf:b0:8e:f3:82:cf:
59:72:bb:ef:13:9f:b9:54:48:60:26:7a:c2:26:61:
de:7b:92:96:d7:63:10:ee:4b:73:d6:02:40:f3:ae:
99:8f:a8:23:7d:7c:8c:c3:27:25:de:cf:a6:7e:49:
17:2b:f2:eb:cf:6b:4a:3c:f5:5b:5a:e9:cb:95:95:
4e:02:f5:a0:82:36:ce:80:8d:c5:5e:91:04:08:6c:
4b:b0:4c:cf:c1:dc:f0:e9:db:cd:cc:9f:70:80:cb:
25:cf:0d:b8:21:13:49:ce:bb:37:51:87:11:8b:60:
b8:06:7d:90:e1:23:17:3f:2d:a2:50:2f:d5:3c:5a:
9d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9B:A5:3B:11:06:88:6F:3F:B4:91:10:C9:1E:C1:59:40:04:18:03
X509v3 Authority Key Identifier:
keyid:F7:B0:69:D3:3D:F1:22:5A:8B:36:43:A0:13:64:F2:79:DF:40:D8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f7:17:ec:0b:4d:2b:74:9a:39:69:ee:d8:ad:ca:29:ea:ab:
43:d0:a6:ec:ba:cb:1e:a4:6b:da:91:f7:a5:2d:29:3b:47:3d:
99:13:02:c0:c4:60:76:83:f6:97:13:f0:7c:6f:97:23:38:f1:
75:d5:ce:14:b9:0f:14:d9:19:b9:cd:17:9f:4c:5f:af:0f:b0:
31:32:66:a0:73:27:34:f1:a5:17:11:20:c4:47:3a:07:cd:d6:
c8:22:53:27:29:e9:95:be:96:bc:be:5b:5b:f0:4c:61:e8:2e:
26:a8:ab:09:db:c5:91:da:66:a8:7f:db:0c:ad:14:8e:be:2a:
f1:00:95:11:5c:f9:5b:34:cd:a5:f4:9f:71:12:0e:72:26:bd:
a6:d5:97:b5:08:38:d6:2d:b1:8b:9e:88:86:46:31:d1:d9:1d:
97:d5:12:27:e7:73:54:e7:05:a8:24:3a:0a:23:45:32:6a:9b:
89:a0:14:13:31:22:03:b4:e2:fb:d4:11:a9:60:36:be:95:a9:
66:90:da:4a:38:bd:a8:ca:60:90:75:0a:bb:29:01:88:e8:8c:
f9:ca:1b:aa:b2:0c:9e:f2:b2:3d:dc:3c:c3:25:32:08:b9:5b:
3e:0f:35:f3:77:21:ce:67:a8:3c:dc:15:42:48:ae:f3:1c:95:
88:9a:3c:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn62Fa8xPbhLEAhxeJs2LDDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YjA2OWQzM2RmMTIyNWE4YjM2NDNhMDEzNjRmMjc5ZGY0
MGQ4NzcwHhcNMjUxMDE5MDUwMTQ1WhcNMjUxMDIwMDUwMTQ1WjAzMTEwLwYDVQQD
EygwNDliYTUzYjExMDY4ODZmM2ZiNDkxMTBjOTFlYzE1OTQwMDQxODAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA438vVcof2/VhEM+z4tVrDVJHmPbt
ccjHB7s2o8SRsXhoz/OiwFp4C+8dakhxFUVtOO5UaZLIXgUtKVrjGPGm8Ff/CyeR
CK1gq4tKGkXoF6Hc06onU6nMBgckzrLx6w83sZUi/Hgs7huZYCRWcf8sWdxXPbaR
ax7zo3QYrOjavXvPsI7zgs9ZcrvvE5+5VEhgJnrCJmHee5KW12MQ7ktz1gJA866Z
j6gjfXyMwycl3s+mfkkXK/Lrz2tKPPVbWunLlZVOAvWggjbOgI3FXpEECGxLsEzP
wdzw6dvNzJ9wgMslzw24IRNJzrs3UYcRi2C4Bn2Q4SMXPy2iUC/VPFqd2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASbpTsRBohvP7SREMkewVlABBgDMB8GA1UdIwQY
MBaAFPewadM98SJaizZDoBNk8nnfQNh3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTdCcDB6M3hJbHFMTmtPZ0UyVHllZDlBMkhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82ZjQ5ZTEtZTcwNC00YWI0LWI5NGMt
NWZkY2I3ODNhNmVjLzEvOTdCcDB6M3hJbHFMTmtPZ0UyVHllZDlBMkhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi82ZjQ5ZTEtZTcwNC00YWI0LWI5NGMtNWZkY2I3ODNhNmVj
LzEvOTdCcDB6M3hJbHFMTmtPZ0UyVHllZDlBMkhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKPcX7AtN
K3SaOWnu2K3KKeqrQ9Cm7LrLHqRr2pH3pS0pO0c9mRMCwMRgdoP2lxPwfG+XIzjx
ddXOFLkPFNkZuc0Xn0xfrw+wMTJmoHMnNPGlFxEgxEc6B83WyCJTJynplb6WvL5b
W/BMYeguJqirCdvFkdpmqH/bDK0Ujr4q8QCVEVz5WzTNpfSfcRIOcia9ptWXtQg4
1i2xi56IhkYx0dkdl9USJ+dzVOcFqCQ6CiNFMmqbiaAUEzEiA7Ti+9QRqWA2vpWp
ZpDaSji9qMpgkHUKuykBiOiM+cobqrIMnvKyPdw8wyUyCLlbPg8183chzmeoPNwV
Qkiu8xyViJo8zg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:33 2025 by rpki-client