Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
File: 9WQDvByHTu8JuKE0QVWrw_BXWxU.mft (raw, json)
Hash identifier: XqT6BMFbefzQg4/8hDjqBEbWR7tBWrAL0b0s3iGYJE0=
Subject key identifier: A8:72:82:6F:C8:96:EB:0E:9A:3A:35:21:E9:B8:47:0F:63:BE:F6:86
Authority key identifier: F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15
Certificate issuer: /CN=f56403bc1c874eef09b8a1344155abc3f0575b15
Certificate serial: 0199FF225653B9435682FF8AB82CB38B150C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
Manifest number: 1058
Signing time: Mon 20 Oct 2025 01:01:04 +0000
Manifest this update: Mon 20 Oct 2025 01:01:04 +0000
Manifest next update: Tue 21 Oct 2025 01:01:04 +0000
Files and hashes: 1: 9WQDvByHTu8JuKE0QVWrw_BXWxU.crl (hash: TrZQ4XJVQOI+VJrW0fDPTibJbw0NTDWKp6NEqwzMn04=)
2: UpxBSWugieKNTh9apeAkjKNDuVI.roa (hash: bk8A6HGGurxjqbD4+xEVgCvr+MLGdlWXb+9IzJcqkAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:56:53:b9:43:56:82:ff:8a:b8:2c:b3:8b:15:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56403bc1c874eef09b8a1344155abc3f0575b15
Validity
Not Before: Oct 20 01:01:04 2025 GMT
Not After : Oct 21 01:01:04 2025 GMT
Subject: CN=a872826fc896eb0e9a3a3521e9b8470f63bef686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a2:98:d0:ce:c5:36:74:7c:56:f2:a5:e5:23:
ba:48:1c:f8:ff:70:e1:6a:45:1a:7e:2f:09:90:f0:
f1:0d:9f:c4:e8:51:2c:d8:eb:da:9f:f4:53:ba:f7:
71:4c:96:ae:69:57:5a:26:61:1a:41:d3:5e:89:26:
3f:ba:83:c8:e3:e1:e6:31:9d:12:b2:6e:ad:b2:63:
54:ab:ef:a9:f6:cf:0b:6a:cd:2e:52:3e:46:03:c3:
68:ab:7e:63:ab:15:24:9d:af:5d:66:c6:92:2f:77:
73:b4:6b:ee:b8:d0:19:76:ab:36:cd:9c:5e:0e:be:
3f:49:21:f8:44:85:90:ea:95:a3:0f:b8:57:c2:5d:
a7:c7:bc:f3:0c:91:b7:0a:d6:c1:af:9f:0c:7d:ae:
cb:14:46:9d:d5:54:8d:c3:54:ae:7d:e5:16:0c:82:
27:58:76:01:61:5a:aa:22:d1:fa:ff:ef:24:6a:bd:
c2:9f:84:e6:9c:12:8e:d8:7a:81:f8:4b:24:63:5e:
4d:cf:a6:e0:df:64:a2:a8:e3:d6:45:6a:a0:94:48:
77:26:05:75:e0:64:cf:c4:85:e0:20:b6:ea:0c:17:
3b:89:76:63:d2:22:e9:41:c6:aa:eb:88:b3:86:82:
aa:bd:1f:cd:c4:d4:66:1c:70:66:a9:8c:b4:f3:f4:
e3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:72:82:6F:C8:96:EB:0E:9A:3A:35:21:E9:B8:47:0F:63:BE:F6:86
X509v3 Authority Key Identifier:
keyid:F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a4:23:17:2f:49:2d:ce:58:1c:e6:32:e3:46:f6:48:a9:2e:
4e:e2:ba:a5:bf:af:bb:67:fa:c5:4f:19:66:dd:fe:f4:ec:15:
fd:6a:f8:0d:69:93:68:97:23:75:eb:5d:09:57:ff:52:55:84:
d6:8b:69:77:b3:3b:59:a6:53:b0:93:52:ac:73:f4:25:22:09:
59:4a:44:d5:01:b8:62:d3:0e:19:f9:7a:82:f1:1b:46:8e:f4:
26:a6:f0:7d:9a:cc:34:6f:a6:87:e2:44:c1:82:50:35:25:56:
af:ea:ce:56:8e:37:dc:76:7e:1e:d5:46:6f:a7:ae:9b:ce:93:
ab:f8:5d:e4:00:9c:a9:7e:dd:bc:dc:ca:55:86:9a:85:b1:55:
be:0e:d4:e8:08:cd:43:50:be:ae:c7:e2:04:82:b6:a0:38:03:
01:e8:f1:da:18:d7:5b:fb:19:fb:89:1d:83:3e:ca:72:28:c9:
c9:a2:b7:ef:b6:67:f3:bf:57:ae:49:8a:d2:65:bf:e9:fa:df:
73:a1:8a:60:ac:69:24:15:1d:e8:56:7d:63:3b:8f:a6:33:8a:
a3:f7:d8:b4:0d:13:79:0d:33:d7:c2:ee:6d:f6:98:7c:47:1e:
47:72:ad:77:b0:3a:23:56:31:6c:e9:90:48:73:87:6e:9a:3d:
a9:d1:cb:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/IlZTuUNWgv+KuCyzixUMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NjQwM2JjMWM4NzRlZWYwOWI4YTEzNDQxNTVhYmMzZjA1
NzViMTUwHhcNMjUxMDIwMDEwMTA0WhcNMjUxMDIxMDEwMTA0WjAzMTEwLwYDVQQD
EyhhODcyODI2ZmM4OTZlYjBlOWEzYTM1MjFlOWI4NDcwZjYzYmVmNjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6KY0M7FNnR8VvKl5SO6SBz4/3Dh
akUafi8JkPDxDZ/E6FEs2Ovan/RTuvdxTJauaVdaJmEaQdNeiSY/uoPI4+HmMZ0S
sm6tsmNUq++p9s8Las0uUj5GA8Noq35jqxUkna9dZsaSL3dztGvuuNAZdqs2zZxe
Dr4/SSH4RIWQ6pWjD7hXwl2nx7zzDJG3CtbBr58Mfa7LFEad1VSNw1SufeUWDIIn
WHYBYVqqItH6/+8kar3Cn4TmnBKO2HqB+EskY15Nz6bg32SiqOPWRWqglEh3JgV1
4GTPxIXgILbqDBc7iXZj0iLpQcaq64izhoKqvR/NxNRmHHBmqYy08/TjswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhygm/IlusOmjo1Iem4Rw9jvvaGMB8GA1UdIwQY
MBaAFPVkA7wch07vCbihNEFVq8PwV1sVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVdRRHZCeUhUdThKdUtFMFFWV3J3X0JYV3hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xNzQ4NjAtMGM1YS00NGYwLTk3ZTct
ZmFiODVlZTU3MDJhLzEvOVdRRHZCeUhUdThKdUtFMFFWV3J3X0JYV3hVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8xNzQ4NjAtMGM1YS00NGYwLTk3ZTctZmFiODVlZTU3MDJh
LzEvOVdRRHZCeUhUdThKdUtFMFFWV3J3X0JYV3hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVqQjFy9J
Lc5YHOYy40b2SKkuTuK6pb+vu2f6xU8ZZt3+9OwV/Wr4DWmTaJcjdetdCVf/UlWE
1otpd7M7WaZTsJNSrHP0JSIJWUpE1QG4YtMOGfl6gvEbRo70JqbwfZrMNG+mh+JE
wYJQNSVWr+rOVo433HZ+HtVGb6eum86Tq/hd5ACcqX7dvNzKVYaahbFVvg7U6AjN
Q1C+rsfiBIK2oDgDAejx2hjXW/sZ+4kdgz7KcijJyaK377Zn879XrkmK0mW/6frf
c6GKYKxpJBUd6FZ9YzuPpjOKo/fYtA0TeQ0z18LubfaYfEceR3Ktd7A6I1YxbOmQ
SHOHbpo9qdHLvA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:55:27 2025 by rpki-client