Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
File: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft (raw, json)
Hash identifier: SmYvkpIaTDI7jDb55aLmKIXwDhbHTaM1Z6PWL2aKl9w=
Subject key identifier: DE:1D:68:74:55:59:44:87:BA:F7:4F:28:5B:B3:B8:DB:A6:08:E8:18
Authority key identifier: F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
Certificate issuer: /CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Certificate serial: 0198D6CD70D8778072DD5F46445D3A5DFC6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
Manifest number: 089D
Signing time: Sat 23 Aug 2025 12:00:44 +0000
Manifest this update: Sat 23 Aug 2025 12:00:44 +0000
Manifest next update: Sun 24 Aug 2025 12:00:44 +0000
Files and hashes: 1: 9-Ze941yMvb9PBtIsJ7Ycnpenh0.roa (hash: mLUd+UrxmldwwslKwjDeIf5bagEinj/YnRBNdn1A2Vk=)
2: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl (hash: ozkK2uL3MDiQ6U8MS0zRhwMmILsBqozSbqvKNJPHhkc=)
3: dBTi9V6Lj09iolupOZhzala-GHE.roa (hash: XgE5C6MotJsfB/9tY52qQR/CvntbYT/9aocAmt0KwNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:70:d8:77:80:72:dd:5f:46:44:5d:3a:5d:fc:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Validity
Not Before: Aug 23 12:00:44 2025 GMT
Not After : Aug 24 12:00:44 2025 GMT
Subject: CN=de1d687455594487baf74f285bb3b8dba608e818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7f:8c:fb:b0:06:e2:0e:6f:fa:92:d1:93:2b:
3e:2e:ae:94:cf:eb:39:ad:c6:8e:bd:92:5d:14:a5:
12:e5:f9:fc:f5:72:90:70:26:bb:3e:53:09:8c:3b:
ef:dc:fe:80:2c:53:b1:bf:99:ed:1f:7e:67:fb:d2:
b9:c9:fa:71:9a:08:d0:b2:8f:83:f1:67:0c:29:cb:
df:56:e0:03:82:bd:22:cb:6c:d2:ad:94:5c:6f:2a:
ec:cf:02:bb:9f:81:73:5a:33:b9:9c:c2:0f:a9:d8:
72:f9:88:b9:63:25:5d:f5:8b:fd:d3:1d:da:d8:02:
90:85:b6:11:1d:d0:c4:7d:fb:97:fc:29:52:2b:32:
b8:b6:46:a3:27:be:cb:47:65:15:23:a0:1b:df:5a:
f9:23:4e:1c:a5:f4:2c:fc:19:4a:63:62:eb:9b:cc:
0e:a8:10:38:c6:bb:bf:cb:01:7c:e3:51:35:bb:e9:
80:bd:c1:8a:ad:db:e2:81:3f:61:de:dc:0b:39:cc:
ed:5d:9e:67:5c:a4:8f:9a:4d:92:27:57:da:83:a5:
0b:be:60:62:38:10:66:f1:d3:3e:3e:d7:74:27:98:
48:f2:2d:c5:e8:17:b6:e3:10:88:af:87:34:44:0f:
5f:cd:0e:e2:6c:f6:1e:f4:41:ac:e6:98:8c:5a:05:
6a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1D:68:74:55:59:44:87:BA:F7:4F:28:5B:B3:B8:DB:A6:08:E8:18
X509v3 Authority Key Identifier:
keyid:F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:84:f9:44:0b:29:eb:a4:e6:32:d6:75:de:0b:90:da:d7:9e:
37:48:74:90:d4:ee:70:e3:19:47:cb:6d:c0:ed:9a:c9:12:51:
a8:a8:be:ae:93:ec:65:a6:c0:73:48:9c:de:01:e5:4a:c6:ab:
3a:be:25:18:a4:63:6e:cd:07:3b:67:2a:a6:f0:82:37:6b:2d:
1c:91:14:08:1d:87:a9:fb:4d:31:96:d9:56:bd:2e:6b:6c:6d:
12:b3:88:ce:d5:fc:d2:62:d0:68:7e:96:e3:2b:b7:3b:31:3f:
1e:dd:7a:45:2b:3c:11:ca:23:c2:13:17:ea:cc:0e:32:ef:fa:
45:5e:bd:17:cc:73:33:b6:c0:b3:30:82:84:58:c8:d5:b2:29:
00:1d:07:94:10:17:30:62:26:9e:af:5c:69:ec:4f:95:22:5b:
98:30:30:c2:57:0a:b0:2f:68:1d:bd:85:6c:7a:73:a2:9f:47:
3b:5e:40:9e:4b:cf:b5:a5:a3:ce:1b:0b:25:33:aa:ee:1e:43:
12:67:3d:19:88:01:3f:92:4a:09:d8:67:05:3c:32:e9:a5:4a:
59:06:04:15:da:63:40:7d:25:83:36:40:82:c9:01:7d:7d:76:
59:94:78:45:54:97:18:17:85:61:a0:63:77:ee:bd:48:0b:59:
ee:1e:f3:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzXDYd4By3V9GRF06XfxsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZTE1NTU0OGVjOWFiZTExZWYzYmU3MDYwNmE0Yjk4N2Vh
ZTM4MjUwHhcNMjUwODIzMTIwMDQ0WhcNMjUwODI0MTIwMDQ0WjAzMTEwLwYDVQQD
EyhkZTFkNjg3NDU1NTk0NDg3YmFmNzRmMjg1YmIzYjhkYmE2MDhlODE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3+M+7AG4g5v+pLRkys+Lq6Uz+s5
rcaOvZJdFKUS5fn89XKQcCa7PlMJjDvv3P6ALFOxv5ntH35n+9K5yfpxmgjQso+D
8WcMKcvfVuADgr0iy2zSrZRcbyrszwK7n4FzWjO5nMIPqdhy+Yi5YyVd9Yv90x3a
2AKQhbYRHdDEffuX/ClSKzK4tkajJ77LR2UVI6Ab31r5I04cpfQs/BlKY2Lrm8wO
qBA4xru/ywF841E1u+mAvcGKrdvigT9h3twLOcztXZ5nXKSPmk2SJ1fag6ULvmBi
OBBm8dM+Ptd0J5hI8i3F6Be24xCIr4c0RA9fzQ7ibPYe9EGs5piMWgVqVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4daHRVWUSHuvdPKFuzuNumCOgYMB8GA1UdIwQY
MBaAFPThVVSOyavhHvO+cGBqS5h+rjglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU9GVlZJN0pxLUVlODc1d1lHcExtSDZ1T0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80ZWRlOWQtY2RmOC00YzI4LTg4YjMt
YzlmMTZlODBiM2M0LzEvOU9GVlZJN0pxLUVlODc1d1lHcExtSDZ1T0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy80ZWRlOWQtY2RmOC00YzI4LTg4YjMtYzlmMTZlODBiM2M0
LzEvOU9GVlZJN0pxLUVlODc1d1lHcExtSDZ1T0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlIT5RAsp
66TmMtZ13guQ2teeN0h0kNTucOMZR8ttwO2ayRJRqKi+rpPsZabAc0ic3gHlSsar
Or4lGKRjbs0HO2cqpvCCN2stHJEUCB2HqftNMZbZVr0ua2xtErOIztX80mLQaH6W
4yu3OzE/Ht16RSs8EcojwhMX6swOMu/6RV69F8xzM7bAszCChFjI1bIpAB0HlBAX
MGImnq9caexPlSJbmDAwwlcKsC9oHb2FbHpzop9HO15AnkvPtaWjzhsLJTOq7h5D
Emc9GYgBP5JKCdhnBTwy6aVKWQYEFdpjQH0lgzZAgskBfX12WZR4RVSXGBeFYaBj
d+69SAtZ7h7z4Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:09:50 2025 by rpki-client