Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
File: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft (raw, json)
Hash identifier: Lh3JXxAIpBQ7MPsO6LkQxsGJ0udOHz9d37pXypEoOAU=
Subject key identifier: 60:4A:78:7A:28:C1:DE:F1:46:C6:2F:02:1A:A8:21:09:19:25:F3:05
Authority key identifier: F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
Certificate issuer: /CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Certificate serial: 0199FAD7B664D53FEB95763035C6B93C1285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
Manifest number: 1045
Signing time: Sun 19 Oct 2025 05:01:04 +0000
Manifest this update: Sun 19 Oct 2025 05:01:04 +0000
Manifest next update: Mon 20 Oct 2025 05:01:04 +0000
Files and hashes: 1: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl (hash: M2PXbjHyEPZ7nsVsc8RdUT7VIxI5g4G3KLuqggrqld0=)
2: JKDoGMCZzjSndX7Ct7p3CxyKJR4.roa (hash: bo2ZyeRjzsKv0IsXJYurWXlAoWDOMikTk02MIFIPMnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:b6:64:d5:3f:eb:95:76:30:35:c6:b9:3c:12:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Validity
Not Before: Oct 19 05:01:04 2025 GMT
Not After : Oct 20 05:01:04 2025 GMT
Subject: CN=604a787a28c1def146c62f021aa821091925f305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:06:6a:db:16:9a:2f:ac:8b:cf:4d:ae:fc:e2:
43:b7:aa:e8:74:43:19:35:6d:69:ee:fb:2a:c2:4c:
69:d1:6d:a5:1b:c1:5d:8c:2f:6d:b8:27:41:df:8f:
d0:d2:fd:41:a7:b8:52:67:b2:8a:24:e7:a9:16:14:
d7:96:d3:39:3d:c3:00:f9:04:69:0d:12:c2:43:28:
ee:89:a1:79:bc:05:b5:22:17:03:1b:e0:fd:9a:70:
5e:67:48:d8:83:c3:0e:81:02:cc:12:cf:95:15:f6:
54:60:a0:04:ca:2c:b1:8c:c8:cf:01:73:25:b8:0e:
b8:33:1f:81:75:4c:82:9d:33:57:ff:a2:fc:3d:48:
3e:83:ce:7a:02:00:51:31:1c:11:4c:10:ff:04:42:
d8:b2:bc:9b:7a:fd:ec:18:91:8a:66:10:42:bf:73:
57:13:56:26:15:94:0a:41:19:01:db:2d:20:09:43:
89:41:8a:40:bd:91:58:be:79:df:05:5a:be:15:ae:
58:65:ca:37:b8:d0:fc:0c:56:fc:6a:e8:f4:7a:a4:
39:5f:0e:83:1b:23:73:ac:ea:ef:e4:b7:0f:a6:76:
aa:d7:81:40:e2:3b:7a:15:31:63:b1:9b:12:36:da:
d5:d6:8c:be:58:6a:25:4d:4e:2c:c5:d0:cf:84:35:
c5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4A:78:7A:28:C1:DE:F1:46:C6:2F:02:1A:A8:21:09:19:25:F3:05
X509v3 Authority Key Identifier:
keyid:F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:48:b2:ef:97:2e:e1:46:f1:96:09:99:34:09:73:df:2d:cc:
d6:71:76:39:a6:9c:7f:c5:b1:dd:a3:1f:c8:53:7e:51:bf:3f:
22:98:a2:c0:69:b3:b5:01:39:ad:21:e9:fb:41:21:a0:4b:30:
06:ac:5e:8f:16:16:cd:6b:5d:8e:bd:ac:75:1d:25:3c:b1:2f:
32:3e:36:34:46:d5:c0:8f:f7:a1:88:8c:5e:49:ba:21:6d:64:
48:97:29:4d:9c:87:0f:f5:2f:7c:17:55:b2:1f:32:2f:25:69:
52:db:bd:08:b1:49:2e:54:83:0e:05:0e:0d:5c:74:5f:e4:92:
12:e7:13:ad:06:de:62:d4:fc:28:c8:69:13:8e:90:4f:5d:53:
40:68:9c:69:65:1e:b3:2a:1d:8a:8e:a0:54:97:05:a8:67:85:
a2:39:2e:80:19:f7:b5:c0:b6:ae:38:44:80:c0:18:c9:6c:b3:
a1:67:a0:ba:94:4e:6e:ea:52:09:00:f3:75:d6:7f:fa:c4:33:
41:ce:9c:e0:3a:80:f7:0a:a8:8e:88:9b:c1:62:d9:97:4c:ff:
6f:5d:83:a6:60:6c:5b:05:36:e5:55:e9:46:34:c8:2f:4d:11:
b9:b0:12:70:8c:3a:42:76:d4:15:ef:e9:37:e8:94:13:78:3d:
c5:7b:1d:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn617Zk1T/rlXYwNca5PBKFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZGI4M2FkYzc2YmFmZjYwNTcwMGNjYTQ4Y2M0ZjZmOGM1
MjlmNjYwHhcNMjUxMDE5MDUwMTA0WhcNMjUxMDIwMDUwMTA0WjAzMTEwLwYDVQQD
Eyg2MDRhNzg3YTI4YzFkZWYxNDZjNjJmMDIxYWE4MjEwOTE5MjVmMzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQZq2xaaL6yLz02u/OJDt6rodEMZ
NW1p7vsqwkxp0W2lG8FdjC9tuCdB34/Q0v1Bp7hSZ7KKJOepFhTXltM5PcMA+QRp
DRLCQyjuiaF5vAW1IhcDG+D9mnBeZ0jYg8MOgQLMEs+VFfZUYKAEyiyxjMjPAXMl
uA64Mx+BdUyCnTNX/6L8PUg+g856AgBRMRwRTBD/BELYsrybev3sGJGKZhBCv3NX
E1YmFZQKQRkB2y0gCUOJQYpAvZFYvnnfBVq+Fa5YZco3uND8DFb8auj0eqQ5Xw6D
GyNzrOrv5LcPpnaq14FA4jt6FTFjsZsSNtrV1oy+WGolTU4sxdDPhDXFDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBKeHoowd7xRsYvAhqoIQkZJfMFMB8GA1UdIwQY
MBaAFPTbg63Ha6/2BXAMykjMT2+MUp9mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU51RHJjZHJyX1lGY0F6S1NNeFBiNHhTbjJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81MDFlYTgtMTgzOS00N2ZlLWFhNDQt
MWI0MTdkNWUxZmJkLzEvOU51RHJjZHJyX1lGY0F6S1NNeFBiNHhTbjJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi81MDFlYTgtMTgzOS00N2ZlLWFhNDQtMWI0MTdkNWUxZmJk
LzEvOU51RHJjZHJyX1lGY0F6S1NNeFBiNHhTbjJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmUiy75cu
4UbxlgmZNAlz3y3M1nF2Oaacf8Wx3aMfyFN+Ub8/IpiiwGmztQE5rSHp+0EhoEsw
BqxejxYWzWtdjr2sdR0lPLEvMj42NEbVwI/3oYiMXkm6IW1kSJcpTZyHD/UvfBdV
sh8yLyVpUtu9CLFJLlSDDgUODVx0X+SSEucTrQbeYtT8KMhpE46QT11TQGicaWUe
syodio6gVJcFqGeFojkugBn3tcC2rjhEgMAYyWyzoWegupRObupSCQDzddZ/+sQz
Qc6c4DqA9wqojoibwWLZl0z/b12DpmBsWwU25VXpRjTIL00RubAScIw6QnbUFe/p
N+iUE3g9xXsd6Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:20:24 2025 by rpki-client