Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
File: s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft (raw, json)
Hash identifier: DwUx9lAsKPQ38bOT7CK319+02csXgpep54EAcmU478E=
Subject key identifier: BA:E2:FB:F4:DD:D7:46:33:0A:B9:6F:D2:5D:29:4D:94:00:88:0A:6F
Authority key identifier: B3:B5:D2:B4:3A:CC:0D:9F:07:AA:00:AA:90:F0:25:C9:6D:5C:EC:25
Certificate issuer: /CN=b3b5d2b43acc0d9f07aa00aa90f025c96d5cec25
Certificate serial: 0199FF22FE1F4F8794D4792997175A13983B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
Manifest number: 0C3C
Signing time: Mon 20 Oct 2025 01:01:47 +0000
Manifest this update: Mon 20 Oct 2025 01:01:47 +0000
Manifest next update: Tue 21 Oct 2025 01:01:47 +0000
Files and hashes: 1: 5APXg_wiW_V1QU4DTTNO_V06dfg.roa (hash: TZwqI4bOTkCy7vwcX2/rFQxdaiYIWAZfVHV4G7nb07k=)
2: s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl (hash: OuCbz5hGZU1PoP3Gy726D0bWUBPsQGNP0CH5A74140g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:fe:1f:4f:87:94:d4:79:29:97:17:5a:13:98:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b5d2b43acc0d9f07aa00aa90f025c96d5cec25
Validity
Not Before: Oct 20 01:01:47 2025 GMT
Not After : Oct 21 01:01:47 2025 GMT
Subject: CN=bae2fbf4ddd746330ab96fd25d294d9400880a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0a:e0:ff:db:37:f1:35:3d:c5:d1:8f:58:69:
56:02:5d:14:ee:cd:3c:e4:19:af:8c:c8:fd:0b:5e:
fb:66:20:2c:4b:47:fc:ec:0f:fd:48:f9:9b:d4:c6:
da:36:5e:a9:b7:70:d5:8a:84:d0:45:79:a1:65:72:
3c:5f:48:c7:55:86:b6:85:68:15:73:e3:d3:db:cb:
5c:bd:cf:67:18:ef:ed:24:1a:b3:1a:2e:a0:c3:a0:
db:40:18:dd:4f:30:54:17:cc:9a:37:fb:d7:00:03:
da:63:3a:d6:ce:d2:40:f9:a9:2c:90:46:60:d2:30:
f6:e6:67:a7:e3:64:34:ad:b9:b2:d0:b0:e6:ef:04:
a1:90:2b:96:ee:37:63:93:30:84:77:37:23:95:c5:
3d:d2:3e:b2:db:3e:64:f4:c7:d0:a5:66:26:bd:26:
9d:7c:59:01:15:4d:00:2a:71:7f:2e:f0:7e:7b:4e:
b4:1f:9a:46:24:77:e9:b9:d3:d1:8e:75:ec:5c:2e:
6a:ab:ee:2a:40:86:44:0b:4c:48:a1:4e:a2:08:1a:
c5:fb:4a:79:b9:ad:a3:f2:f5:c3:c8:17:d0:4c:7f:
9a:9e:ba:a6:12:6f:90:97:dd:f2:c3:8f:52:a5:2e:
6b:47:bc:d6:15:d0:9e:d4:b0:1e:88:ed:29:2c:6a:
d1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E2:FB:F4:DD:D7:46:33:0A:B9:6F:D2:5D:29:4D:94:00:88:0A:6F
X509v3 Authority Key Identifier:
keyid:B3:B5:D2:B4:3A:CC:0D:9F:07:AA:00:AA:90:F0:25:C9:6D:5C:EC:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:80:9e:5f:9c:ea:85:e6:66:32:df:1c:32:ec:08:5a:c3:c3:
88:c0:a3:4f:0c:cf:dd:e7:c2:68:3c:7c:dc:51:b9:53:3d:1d:
ca:d3:ec:4c:2f:64:e7:ab:b5:34:5a:aa:9b:9d:9d:ea:d3:34:
0a:1c:83:18:ed:56:cb:b5:44:ee:54:d9:83:77:89:e6:30:3f:
d6:1e:b3:65:23:36:9f:61:8e:1d:e4:9e:af:a8:f1:0f:77:c0:
21:5c:ac:82:d7:67:b8:35:61:07:bf:23:c3:77:85:f0:e1:5b:
54:80:38:67:3b:95:bd:56:63:bd:40:03:1e:07:be:b5:3f:cd:
8d:e3:a6:0f:67:ec:ac:a3:a2:8a:6a:72:09:45:39:23:18:90:
24:e0:ca:1c:d3:cc:5e:2c:bd:3c:db:18:6d:3a:a7:27:75:35:
63:33:2c:81:80:7a:76:55:c0:00:25:64:9a:f7:b4:a7:aa:14:
ee:78:03:32:2c:3e:06:81:59:46:b9:db:bf:56:00:3b:fb:b3:
bc:8f:73:c4:a3:7c:a8:1a:c8:e4:44:fe:b5:f8:be:fc:ba:67:
36:48:53:a6:83:83:18:28:97:99:88:8a:87:5f:f7:dd:a8:3d:
a8:80:2f:13:2f:1d:99:5c:74:37:ba:67:27:89:ec:f8:7d:a0:
af:19:69:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/Iv4fT4eU1HkplxdaE5g7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYjVkMmI0M2FjYzBkOWYwN2FhMDBhYTkwZjAyNWM5NmQ1
Y2VjMjUwHhcNMjUxMDIwMDEwMTQ3WhcNMjUxMDIxMDEwMTQ3WjAzMTEwLwYDVQQD
EyhiYWUyZmJmNGRkZDc0NjMzMGFiOTZmZDI1ZDI5NGQ5NDAwODgwYTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugrg/9s38TU9xdGPWGlWAl0U7s08
5BmvjMj9C177ZiAsS0f87A/9SPmb1MbaNl6pt3DVioTQRXmhZXI8X0jHVYa2hWgV
c+PT28tcvc9nGO/tJBqzGi6gw6DbQBjdTzBUF8yaN/vXAAPaYzrWztJA+akskEZg
0jD25men42Q0rbmy0LDm7wShkCuW7jdjkzCEdzcjlcU90j6y2z5k9MfQpWYmvSad
fFkBFU0AKnF/LvB+e060H5pGJHfpudPRjnXsXC5qq+4qQIZEC0xIoU6iCBrF+0p5
ua2j8vXDyBfQTH+anrqmEm+Ql93yw49SpS5rR7zWFdCe1LAeiO0pLGrRCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLri+/Td10YzCrlv0l0pTZQAiApvMB8GA1UdIwQY
MBaAFLO10rQ6zA2fB6oAqpDwJcltXOwlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczdYU3REck1EWjhIcWdDcWtQQWx5VzFjN0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8wYTkyZGYtYzUwOS00ZTkyLThlMmIt
MjRiOGMwMmZhODJhLzEvczdYU3REck1EWjhIcWdDcWtQQWx5VzFjN0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8wYTkyZGYtYzUwOS00ZTkyLThlMmItMjRiOGMwMmZhODJh
LzEvczdYU3REck1EWjhIcWdDcWtQQWx5VzFjN0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT4CeX5zq
heZmMt8cMuwIWsPDiMCjTwzP3efCaDx83FG5Uz0dytPsTC9k56u1NFqqm52d6tM0
ChyDGO1Wy7VE7lTZg3eJ5jA/1h6zZSM2n2GOHeSer6jxD3fAIVysgtdnuDVhB78j
w3eF8OFbVIA4ZzuVvVZjvUADHge+tT/NjeOmD2fsrKOiimpyCUU5IxiQJODKHNPM
Xiy9PNsYbTqnJ3U1YzMsgYB6dlXAACVkmve0p6oU7ngDMiw+BoFZRrnbv1YAO/uz
vI9zxKN8qBrI5ET+tfi+/LpnNkhTpoODGCiXmYiKh1/33ag9qIAvEy8dmVx0N7pn
J4ns+H2grxlpVg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:42:32 2025 by rpki-client