Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
File: 9yR1sGTeionxUD6u_H1yrczzihY.mft (raw, json)
Hash identifier: BSRUukOcSIuxoU3m/woxcMVRQSLerUmCf1p1o4U+z08=
Subject key identifier: 3F:06:9E:29:B2:EA:DE:8A:24:C1:CA:E3:60:8C:45:25:CE:E1:22:FB
Authority key identifier: F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16
Certificate issuer: /CN=f72475b064de8a89f1503eaefc7d72adccf38a16
Certificate serial: 0199FD348CE56B7C41A20D018312F615CD6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 16:01:43 +0000
Manifest this update: Sun 19 Oct 2025 16:01:43 +0000
Manifest next update: Mon 20 Oct 2025 16:01:43 +0000
Files and hashes: 1: 9yR1sGTeionxUD6u_H1yrczzihY.crl (hash: UFs5Q6ZGzSe84TfhOS952yKWYqNu9Im5t8P3lVg0XZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:8c:e5:6b:7c:41:a2:0d:01:83:12:f6:15:cd:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f72475b064de8a89f1503eaefc7d72adccf38a16
Validity
Not Before: Oct 19 16:01:43 2025 GMT
Not After : Oct 20 16:01:43 2025 GMT
Subject: CN=3f069e29b2eade8a24c1cae3608c4525cee122fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ca:85:22:c8:93:24:f7:fd:a0:37:40:7d:ca:
88:8c:dd:20:5b:e5:6e:a7:7f:fe:bf:c5:6e:af:04:
e5:16:d8:2d:a9:02:d3:d6:8b:9c:4e:bf:c4:86:95:
4c:f7:c3:f4:8f:da:64:2d:58:cc:3c:34:02:98:46:
0c:d2:db:45:e3:20:f0:b9:2c:7c:ae:01:28:fa:e2:
b4:77:19:02:41:81:7a:9b:11:be:9d:5d:f9:37:eb:
8d:96:6b:83:0e:48:4b:c7:95:90:7f:d6:d4:78:9f:
97:79:54:0c:4c:81:93:60:de:71:67:c4:e4:9d:66:
2d:15:1c:f0:b6:16:c1:b8:21:02:19:df:e8:c3:7f:
e7:43:58:ca:f6:3b:84:ee:bb:f6:38:8f:99:0c:65:
3f:ec:56:24:26:fd:a8:17:b4:ac:8d:37:65:2a:b1:
6d:4a:41:2c:9a:ea:58:74:6e:23:6b:8c:f5:23:c7:
a7:75:81:54:11:b4:9c:1a:15:04:94:0d:9e:2b:e0:
79:de:d8:03:f6:47:90:a2:ca:81:9f:f3:2d:e4:d6:
e5:78:b7:dc:a3:ba:06:78:fd:c2:ab:d7:a8:2f:bb:
aa:42:ae:a8:c7:ba:3f:55:93:51:14:65:96:fc:8c:
56:8a:05:dd:80:81:20:7d:4d:87:9b:93:57:5b:c6:
41:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:06:9E:29:B2:EA:DE:8A:24:C1:CA:E3:60:8C:45:25:CE:E1:22:FB
X509v3 Authority Key Identifier:
keyid:F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:33:7f:1c:e9:ba:7f:34:91:a4:86:0f:15:e9:6c:8f:bc:b1:
0c:4e:5f:7b:5d:7d:ac:25:91:f3:dc:42:48:8c:ea:10:d1:88:
d6:f1:3a:04:f0:0f:d3:b1:1e:63:e1:ee:9e:cf:45:e7:28:a8:
ce:06:8b:ed:37:ac:eb:23:dc:e7:b6:a8:41:bc:fa:d6:1c:04:
cb:ae:df:5e:0d:d2:fa:64:62:e2:bd:a1:06:de:73:e8:07:6b:
1e:e5:84:bd:bc:34:27:79:15:9e:00:d3:88:45:a9:c0:44:8d:
10:20:2c:23:eb:ef:63:36:5d:fd:38:75:2a:58:d9:0f:13:d3:
77:36:8e:aa:52:23:2e:b4:11:33:85:50:26:f9:a6:60:ec:b0:
04:8e:3b:90:83:53:79:94:ff:dc:ba:5d:ba:ba:5a:64:34:1f:
71:99:5b:73:94:79:2f:fc:d0:07:ab:97:07:cd:da:e4:e3:d9:
9e:15:46:c1:17:37:a5:c9:1a:37:c9:93:f4:55:33:77:4d:b8:
64:51:95:2f:38:c1:6e:62:51:68:92:09:a6:aa:55:04:57:56:
54:ff:80:2a:42:99:df:b2:39:1f:ac:06:5d:74:8e:88:7a:07:
78:e4:1a:da:a8:5f:46:6c:fd:03:d4:ea:bf:c6:84:78:2c:1b:
ad:92:f3:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NIzla3xBog0BgxL2Fc1rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MjQ3NWIwNjRkZThhODlmMTUwM2VhZWZjN2Q3MmFkY2Nm
MzhhMTYwHhcNMjUxMDE5MTYwMTQzWhcNMjUxMDIwMTYwMTQzWjAzMTEwLwYDVQQD
EygzZjA2OWUyOWIyZWFkZThhMjRjMWNhZTM2MDhjNDUyNWNlZTEyMmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8qFIsiTJPf9oDdAfcqIjN0gW+Vu
p3/+v8VurwTlFtgtqQLT1oucTr/EhpVM98P0j9pkLVjMPDQCmEYM0ttF4yDwuSx8
rgEo+uK0dxkCQYF6mxG+nV35N+uNlmuDDkhLx5WQf9bUeJ+XeVQMTIGTYN5xZ8Tk
nWYtFRzwthbBuCECGd/ow3/nQ1jK9juE7rv2OI+ZDGU/7FYkJv2oF7SsjTdlKrFt
SkEsmupYdG4ja4z1I8endYFUEbScGhUElA2eK+B53tgD9keQosqBn/Mt5NbleLfc
o7oGeP3Cq9eoL7uqQq6ox7o/VZNRFGWW/IxWigXdgIEgfU2Hm5NXW8ZBIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8Gnimy6t6KJMHK42CMRSXO4SL7MB8GA1UdIwQY
MBaAFPckdbBk3oqJ8VA+rvx9cq3M84oWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXlSMXNHVGVpb254VUQ2dV9IMXlyY3p6aWhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy85MGYzNmUtZDM4Zi00ZWU5LWFjZWIt
MjgzMjBhNWMwNzdiLzEvOXlSMXNHVGVpb254VUQ2dV9IMXlyY3p6aWhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy85MGYzNmUtZDM4Zi00ZWU5LWFjZWItMjgzMjBhNWMwNzdi
LzEvOXlSMXNHVGVpb254VUQ2dV9IMXlyY3p6aWhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMDN/HOm6
fzSRpIYPFelsj7yxDE5fe119rCWR89xCSIzqENGI1vE6BPAP07EeY+Huns9F5yio
zgaL7Tes6yPc57aoQbz61hwEy67fXg3S+mRi4r2hBt5z6AdrHuWEvbw0J3kVngDT
iEWpwESNECAsI+vvYzZd/Th1KljZDxPTdzaOqlIjLrQRM4VQJvmmYOywBI47kINT
eZT/3LpdurpaZDQfcZlbc5R5L/zQB6uXB83a5OPZnhVGwRc3pckaN8mT9FUzd024
ZFGVLzjBbmJRaJIJpqpVBFdWVP+AKkKZ37I5H6wGXXSOiHoHeOQa2qhfRmz9A9Tq
v8aEeCwbrZLz3g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:56 2025 by rpki-client