Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
File: m9upUpCphaaXdj0wq0L5w3hAeLI.mft (raw, json)
Hash identifier: gI801BJE0gjPtfMI5vJVnQ84YGbGdeyx4CFzTv0rjok=
Subject key identifier: 90:15:79:43:14:13:68:84:F1:44:57:63:3C:4E:6F:A7:91:CC:35:6A
Authority key identifier: 9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2
Certificate issuer: /CN=9bdba95290a985a697763d30ab42f9c3784078b2
Certificate serial: 0199FC219D9ACB6462B4B8EAB46C67676F15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
Manifest number: 0D5D
Signing time: Sun 19 Oct 2025 11:01:25 +0000
Manifest this update: Sun 19 Oct 2025 11:01:25 +0000
Manifest next update: Mon 20 Oct 2025 11:01:25 +0000
Files and hashes: 1: CYD_Z2qF6mHZ92tY0ftxYfveSAQ.roa (hash: IVgjWp28wTnlbtVuEQ1FT4HkeEGAz5yGW6fM8IpM3RI=)
2: m9upUpCphaaXdj0wq0L5w3hAeLI.crl (hash: aeDCuGN64Iq/oaweVJsofsNAcfHLxqMTZ/HcJzFV2qo=)
3: tLilW5BDEJTEzIEDh8KmIyaiPZU.roa (hash: vFC4JGd2bQPNjS7TqFQa5G/kgv43UH1kGodWdHda2yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:9d:9a:cb:64:62:b4:b8:ea:b4:6c:67:67:6f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bdba95290a985a697763d30ab42f9c3784078b2
Validity
Not Before: Oct 19 11:01:25 2025 GMT
Not After : Oct 20 11:01:25 2025 GMT
Subject: CN=9015794314136884f14457633c4e6fa791cc356a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:95:38:85:7c:fc:7f:80:e9:bc:b7:a4:a5:05:
9c:c3:f0:7f:d7:32:9d:30:ef:36:a3:c1:42:4f:d5:
84:49:7d:9c:e0:fc:36:c9:28:49:9e:e8:d6:d2:cb:
c7:38:8f:61:3f:cf:2f:af:ab:15:8e:b0:1a:e1:e0:
2d:99:b5:09:ad:24:6f:92:ec:f9:00:91:5f:20:bf:
1f:28:51:0b:63:06:2b:5c:1b:94:b3:a7:32:d2:18:
80:89:55:9c:18:db:5c:42:51:79:07:5c:8e:b1:2b:
b4:30:69:a6:63:32:41:52:db:1b:3a:29:f3:f4:83:
63:e3:ea:72:a2:39:9a:cf:a0:2b:3d:8e:73:48:39:
98:5c:07:87:22:24:e1:6f:23:58:0e:6d:2a:72:1c:
e6:3e:5f:a7:c6:21:b8:61:f7:44:d6:18:ae:2d:8b:
76:6b:88:26:2c:31:ea:f9:db:f2:02:78:d0:4f:07:
91:cc:5a:ba:23:fd:79:94:5e:92:f6:62:b1:53:ec:
71:7a:97:47:64:ae:b2:61:c2:39:a5:34:02:13:e2:
73:80:fc:02:a2:c5:51:e5:60:7c:df:4a:43:cb:af:
0d:27:30:18:94:3c:72:62:34:fd:60:62:ee:73:ca:
a3:7f:94:b1:3a:9d:4d:23:f1:85:5d:cd:fa:d5:08:
5b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:15:79:43:14:13:68:84:F1:44:57:63:3C:4E:6F:A7:91:CC:35:6A
X509v3 Authority Key Identifier:
keyid:9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a4:d1:d3:6f:d3:15:ab:64:75:cc:00:d5:52:95:52:79:87:
28:59:52:29:8a:49:32:0d:dc:89:3b:85:f8:d5:86:8f:92:5d:
66:b0:e3:8a:ff:b2:6b:b2:47:f3:d0:b1:ba:b9:c6:5f:02:3d:
c3:dc:11:47:1a:c0:fe:37:62:e6:52:24:4f:11:c5:13:c8:75:
49:90:ef:9f:d5:5e:e6:52:d4:48:f5:d3:ec:f1:24:68:b9:3c:
62:0a:e5:5f:1d:bd:f4:ae:b7:4b:6c:3a:b1:76:b8:9d:a7:2d:
07:6a:66:22:eb:db:96:af:51:a5:6d:86:d8:07:90:13:00:7f:
ee:4c:b9:0d:fc:82:60:f6:5d:48:e8:ae:c0:aa:44:d9:34:43:
0e:e7:bb:fb:40:66:b5:dc:48:5e:4d:94:86:d2:82:82:27:2d:
b9:93:40:51:e1:24:ef:c3:97:76:76:3d:26:10:09:55:a1:d0:
50:f2:bb:31:6b:41:a2:86:57:e6:d4:ee:76:c0:fc:4e:3d:72:
fa:c3:21:ff:e2:2b:4d:b1:cd:06:ad:c7:55:d3:c3:cf:39:23:
5b:51:35:69:a6:ac:e1:65:19:96:8d:b0:0a:f4:fe:12:35:2a:
4d:f2:f3:8c:e3:37:86:b3:1c:30:2c:32:dd:69:de:71:01:79:
ab:a3:57:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IZ2ay2RitLjqtGxnZ28VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZGJhOTUyOTBhOTg1YTY5Nzc2M2QzMGFiNDJmOWMzNzg0
MDc4YjIwHhcNMjUxMDE5MTEwMTI1WhcNMjUxMDIwMTEwMTI1WjAzMTEwLwYDVQQD
Eyg5MDE1Nzk0MzE0MTM2ODg0ZjE0NDU3NjMzYzRlNmZhNzkxY2MzNTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pU4hXz8f4DpvLekpQWcw/B/1zKd
MO82o8FCT9WESX2c4Pw2yShJnujW0svHOI9hP88vr6sVjrAa4eAtmbUJrSRvkuz5
AJFfIL8fKFELYwYrXBuUs6cy0hiAiVWcGNtcQlF5B1yOsSu0MGmmYzJBUtsbOinz
9INj4+pyojmaz6ArPY5zSDmYXAeHIiThbyNYDm0qchzmPl+nxiG4YfdE1hiuLYt2
a4gmLDHq+dvyAnjQTweRzFq6I/15lF6S9mKxU+xxepdHZK6yYcI5pTQCE+JzgPwC
osVR5WB830pDy68NJzAYlDxyYjT9YGLuc8qjf5SxOp1NI/GFXc361QhbFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAVeUMUE2iE8URXYzxOb6eRzDVqMB8GA1UdIwQY
MBaAFJvbqVKQqYWml3Y9MKtC+cN4QHiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTl1cFVwQ3BoYWFYZGowd3EwTDV3M2hBZUxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy80YWUxYmQtNTg2NC00M2YwLWI0ZmQt
ODBhNjZjMGZjODg0LzEvbTl1cFVwQ3BoYWFYZGowd3EwTDV3M2hBZUxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy80YWUxYmQtNTg2NC00M2YwLWI0ZmQtODBhNjZjMGZjODg0
LzEvbTl1cFVwQ3BoYWFYZGowd3EwTDV3M2hBZUxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKTR02/T
FatkdcwA1VKVUnmHKFlSKYpJMg3ciTuF+NWGj5JdZrDjiv+ya7JH89CxurnGXwI9
w9wRRxrA/jdi5lIkTxHFE8h1SZDvn9Ve5lLUSPXT7PEkaLk8YgrlXx299K63S2w6
sXa4nactB2pmIuvblq9RpW2G2AeQEwB/7ky5DfyCYPZdSOiuwKpE2TRDDue7+0Bm
tdxIXk2UhtKCgictuZNAUeEk78OXdnY9JhAJVaHQUPK7MWtBooZX5tTudsD8Tj1y
+sMh/+IrTbHNBq3HVdPDzzkjW1E1aaas4WUZlo2wCvT+EjUqTfLzjOM3hrMcMCwy
3WnecQF5q6NXRg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:35 2025 by rpki-client