Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
File: 9ssMjyCEMwIDT2NlbqKevW0RY6o.mft (raw, json)
Hash identifier: jndKKm7bgHdumqmk+U3Em+SeD4/dTI8GaUr9rZDcL6k=
Subject key identifier: 5F:87:F6:7E:46:81:A4:4C:D5:83:A7:FA:92:B6:F7:2E:CE:13:31:30
Authority key identifier: F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
Certificate issuer: /CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Certificate serial: 0199FD34964BFB64851801156E2A483E81B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
Manifest number: 0FCA
Signing time: Sun 19 Oct 2025 16:01:45 +0000
Manifest this update: Sun 19 Oct 2025 16:01:45 +0000
Manifest next update: Mon 20 Oct 2025 16:01:45 +0000
Files and hashes: 1: 9ssMjyCEMwIDT2NlbqKevW0RY6o.crl (hash: WN+chnDaBHLkldvSV4csVgJ1wkx1RIOaDIBBBVRqLEM=)
2: OpJ_uz4hg9WS1uTnKXn75qGvb3w.roa (hash: zJt7hWD6hoBRKS4g5AHeuYKclEqIASb0N8YkICHekl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:96:4b:fb:64:85:18:01:15:6e:2a:48:3e:81:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Validity
Not Before: Oct 19 16:01:45 2025 GMT
Not After : Oct 20 16:01:45 2025 GMT
Subject: CN=5f87f67e4681a44cd583a7fa92b6f72ece133130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:63:0a:55:6f:18:20:ac:30:6d:6d:06:4d:d0:
ba:a5:55:8c:fc:14:f3:0c:59:fe:aa:61:dc:b7:a3:
8a:d1:1a:e1:8c:6b:8e:56:6c:71:4a:a7:7e:61:28:
12:f3:2b:46:5a:61:56:b5:af:4b:de:de:82:ed:46:
9e:1e:ea:92:e9:39:a0:ae:0a:e1:b7:a5:40:07:5a:
f8:9d:25:bc:93:01:d6:0b:16:31:23:1d:39:e4:4a:
6f:21:85:c8:94:c8:60:f2:2d:d2:f2:9b:df:0d:64:
ee:75:32:c3:c5:94:81:76:cb:4d:cd:0a:fd:18:e2:
4f:c3:c1:27:a5:34:9c:b6:2f:4c:67:1b:2d:09:34:
4a:da:37:56:0e:74:d8:98:5d:f3:d3:31:02:09:69:
fb:41:33:3f:41:31:aa:50:45:c8:e7:45:ce:2d:0b:
7c:09:38:3e:e3:c1:2f:ec:6e:e1:42:32:02:16:ea:
e7:f4:0f:40:28:23:0d:a1:ca:94:4e:8a:47:86:aa:
d4:15:dd:13:2b:03:ef:fd:b8:83:e0:bc:00:16:58:
31:87:b0:41:43:23:4a:da:e7:58:7d:b4:19:98:65:
23:ad:7b:59:8e:5a:64:ee:8c:5b:a0:64:0a:a3:d6:
59:59:28:cf:5b:4e:73:b2:b2:61:4e:9b:e6:84:46:
70:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:87:F6:7E:46:81:A4:4C:D5:83:A7:FA:92:B6:F7:2E:CE:13:31:30
X509v3 Authority Key Identifier:
keyid:F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f0:04:3b:3f:9d:17:e0:fb:66:7b:22:a3:c2:16:4d:d8:5f:
6e:a6:67:76:8d:2c:5a:18:5d:77:9b:54:dc:92:77:5d:d9:81:
ca:18:0a:00:91:ea:45:09:b2:91:1a:37:7d:17:ef:a7:25:d0:
12:25:11:1f:d7:83:39:2f:17:ee:3d:76:07:34:5b:d7:83:d0:
ac:3b:10:d9:6d:b4:50:5e:df:04:6e:e8:fa:af:9f:76:92:60:
2a:62:2f:fa:fc:c0:ec:ef:e0:ff:ea:bf:c9:af:3f:fd:6d:07:
d8:d6:21:aa:be:64:5b:6d:4b:c4:c5:e8:db:ac:01:ca:dd:3a:
46:10:0c:cf:00:04:ce:4d:b6:a0:c9:21:33:0e:ac:ac:91:e0:
c8:7d:bd:61:3f:7e:b2:3f:28:63:b7:70:14:bf:58:aa:df:03:
b9:1f:ce:0b:4c:55:1d:d7:60:22:4f:55:1c:94:b7:62:c2:7f:
f3:d0:db:80:b4:62:5c:12:34:39:f2:72:4e:10:cb:79:9c:d5:
5f:ff:01:77:e3:cf:40:a3:4b:3b:80:78:92:5c:04:79:75:43:
55:bc:23:3d:b2:45:c5:a0:b6:cf:d0:fb:83:27:fb:fc:50:dc:
48:38:b2:1f:6c:93:bb:28:1a:8f:54:99:dd:71:91:86:fa:ea:
b3:2f:80:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NJZL+2SFGAEVbipIPoGxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2Y2IwYzhmMjA4NDMzMDIwMzRmNjM2NTZlYTI5ZWJkNmQx
MTYzYWEwHhcNMjUxMDE5MTYwMTQ1WhcNMjUxMDIwMTYwMTQ1WjAzMTEwLwYDVQQD
Eyg1Zjg3ZjY3ZTQ2ODFhNDRjZDU4M2E3ZmE5MmI2ZjcyZWNlMTMzMTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WMKVW8YIKwwbW0GTdC6pVWM/BTz
DFn+qmHct6OK0RrhjGuOVmxxSqd+YSgS8ytGWmFWta9L3t6C7UaeHuqS6Tmgrgrh
t6VAB1r4nSW8kwHWCxYxIx055EpvIYXIlMhg8i3S8pvfDWTudTLDxZSBdstNzQr9
GOJPw8EnpTScti9MZxstCTRK2jdWDnTYmF3z0zECCWn7QTM/QTGqUEXI50XOLQt8
CTg+48Ev7G7hQjICFurn9A9AKCMNocqUTopHhqrUFd0TKwPv/biD4LwAFlgxh7BB
QyNK2udYfbQZmGUjrXtZjlpk7oxboGQKo9ZZWSjPW05zsrJhTpvmhEZw0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+H9n5GgaRM1YOn+pK29y7OEzEwMB8GA1UdIwQY
MBaAFPbLDI8ghDMCA09jZW6inr1tEWOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXNzTWp5Q0VNd0lEVDJObGJxS2V2VzBSWTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS85ODQ4NDQtM2ViNC00MjMyLTkzODUt
MmFmM2Q2MmJlN2YyLzEvOXNzTWp5Q0VNd0lEVDJObGJxS2V2VzBSWTZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS85ODQ4NDQtM2ViNC00MjMyLTkzODUtMmFmM2Q2MmJlN2Yy
LzEvOXNzTWp5Q0VNd0lEVDJObGJxS2V2VzBSWTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB/AEOz+d
F+D7Znsio8IWTdhfbqZndo0sWhhdd5tU3JJ3XdmByhgKAJHqRQmykRo3fRfvpyXQ
EiURH9eDOS8X7j12BzRb14PQrDsQ2W20UF7fBG7o+q+fdpJgKmIv+vzA7O/g/+q/
ya8//W0H2NYhqr5kW21LxMXo26wByt06RhAMzwAEzk22oMkhMw6srJHgyH29YT9+
sj8oY7dwFL9Yqt8DuR/OC0xVHddgIk9VHJS3YsJ/89DbgLRiXBI0OfJyThDLeZzV
X/8Bd+PPQKNLO4B4klwEeXVDVbwjPbJFxaC2z9D7gyf7/FDcSDiyH2yTuygaj1SZ
3XGRhvrqsy+AIw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:15:02 2025 by rpki-client