Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
File: S9REyGTp6F01N24PaCgXmfYoHxQ.mft (raw, json)
Hash identifier: Ct9wvJDJrnXZFzKbzxMFqO6l/3oL8UBHBzIYOhfa/m0=
Subject key identifier: 14:BC:4B:79:D2:27:60:C4:F2:E3:F2:E7:45:AE:BE:D6:F2:BA:B1:1B
Authority key identifier: 4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
Certificate issuer: /CN=4bd444c864e9e85d35376e0f68281799f6281f14
Certificate serial: 0199FBEC4222E1D5867DAF5395733E921F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
Manifest number: 0ED7
Signing time: Sun 19 Oct 2025 10:03:08 +0000
Manifest this update: Sun 19 Oct 2025 10:03:08 +0000
Manifest next update: Mon 20 Oct 2025 10:03:08 +0000
Files and hashes: 1: S9REyGTp6F01N24PaCgXmfYoHxQ.crl (hash: SYJF8x+qFwhSCuLYSGYuua1cUdJRSjAWn0ZhruzBrSc=)
2: _0wH1BRcgc6tfF99TwNnC3iQ1pU.roa (hash: O+Zelc4oaCgFlSMOLR6IXR0OWFyZm1W0ImLAmE3cggg=)
3: igkLmqGvdo3ZptL2OBtAT5tgBr8.roa (hash: JNS1dghL0HEbj9Q46she80UtZ72vLWiMcXMi6xfr/RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:42:22:e1:d5:86:7d:af:53:95:73:3e:92:1f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd444c864e9e85d35376e0f68281799f6281f14
Validity
Not Before: Oct 19 10:03:08 2025 GMT
Not After : Oct 20 10:03:08 2025 GMT
Subject: CN=14bc4b79d22760c4f2e3f2e745aebed6f2bab11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:48:89:08:e7:30:28:05:5c:27:26:f6:a6:6d:
ce:fd:7f:68:1d:69:60:9e:79:8b:08:78:87:49:28:
99:d5:0d:70:e8:4c:c5:19:f8:0c:e6:71:e0:20:f1:
0f:d2:41:15:fa:b3:5f:e2:b1:5a:1a:9d:9a:63:d3:
2b:09:3a:c2:e4:2a:1e:15:26:27:ab:80:d7:f5:26:
28:55:95:05:61:62:0f:2b:7e:5d:38:9c:d6:ad:36:
3e:c4:10:a7:28:30:ae:45:06:91:24:1c:0e:9a:de:
1c:c6:60:96:fb:ff:cd:66:1e:44:8f:8b:14:93:df:
52:9d:96:1d:f1:c0:b8:07:63:2d:37:8d:3c:46:99:
2b:b3:84:46:82:27:82:64:b9:68:67:c0:9b:1b:02:
d1:33:01:96:17:9e:a3:34:b6:a6:f3:79:fa:eb:5b:
63:58:95:6b:7f:35:2c:f3:5a:8a:fa:57:7c:fa:ed:
80:c0:a4:86:eb:a4:43:e6:d2:bf:68:0e:a2:59:62:
86:27:3e:8b:7e:0a:2d:82:9b:c3:93:05:0d:d4:82:
a3:94:aa:5b:7c:96:e2:41:3b:99:66:cc:1b:23:7e:
eb:ad:23:95:55:f3:13:63:df:93:6c:9f:d2:5d:74:
f7:7c:0b:6f:2f:cb:a4:2a:6b:e6:f1:46:29:0d:f2:
79:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BC:4B:79:D2:27:60:C4:F2:E3:F2:E7:45:AE:BE:D6:F2:BA:B1:1B
X509v3 Authority Key Identifier:
keyid:4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:aa:1a:a0:39:be:f9:8e:e2:b4:8b:67:e6:22:77:a3:b9:91:
1f:29:7c:c0:36:75:f7:46:ea:63:68:c2:fc:5b:71:a5:24:38:
ab:f2:99:ca:0b:fc:f5:ca:3c:1a:2f:89:86:6b:de:ff:55:03:
9f:02:8c:8f:5e:c4:57:24:8c:89:c6:32:43:1a:b1:e9:0f:26:
7a:b1:20:42:a3:83:8a:ca:15:dc:20:59:e2:45:87:0e:c6:b4:
8b:29:33:11:25:26:13:6c:a1:66:d0:e1:79:5e:02:3d:22:46:
88:c3:b2:f2:89:e2:be:15:b2:3a:68:25:ef:ac:b4:df:94:22:
ee:f5:f4:8e:f8:f8:c2:98:f0:bf:77:8a:9f:9b:2f:3e:c8:9e:
aa:63:7a:e4:66:ba:bd:9d:e9:85:9a:1a:95:49:f7:d9:a2:2a:
0e:38:b2:fb:31:12:4a:49:dc:b8:70:64:2b:5f:8b:45:3e:a6:
62:20:98:a1:2f:08:6a:1e:de:60:79:a7:47:3f:6b:eb:31:40:
7d:8f:cf:db:2c:d8:35:08:60:e7:a7:aa:d8:d7:06:91:41:bf:
5a:04:df:2c:3f:ee:9e:83:74:9e:fc:78:83:4b:b1:a1:b7:53:
9d:c8:0f:e6:8f:95:57:1d:0d:8a:a9:49:76:b2:5c:d6:e4:d3:
e8:4f:bc:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77EIi4dWGfa9TlXM+kh9CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZDQ0NGM4NjRlOWU4NWQzNTM3NmUwZjY4MjgxNzk5ZjYy
ODFmMTQwHhcNMjUxMDE5MTAwMzA4WhcNMjUxMDIwMTAwMzA4WjAzMTEwLwYDVQQD
EygxNGJjNGI3OWQyMjc2MGM0ZjJlM2YyZTc0NWFlYmVkNmYyYmFiMTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0iJCOcwKAVcJyb2pm3O/X9oHWlg
nnmLCHiHSSiZ1Q1w6EzFGfgM5nHgIPEP0kEV+rNf4rFaGp2aY9MrCTrC5CoeFSYn
q4DX9SYoVZUFYWIPK35dOJzWrTY+xBCnKDCuRQaRJBwOmt4cxmCW+//NZh5Ej4sU
k99SnZYd8cC4B2MtN408Rpkrs4RGgieCZLloZ8CbGwLRMwGWF56jNLam83n661tj
WJVrfzUs81qK+ld8+u2AwKSG66RD5tK/aA6iWWKGJz6LfgotgpvDkwUN1IKjlKpb
fJbiQTuZZswbI37rrSOVVfMTY9+TbJ/SXXT3fAtvL8ukKmvm8UYpDfJ5WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBS8S3nSJ2DE8uPy50WuvtbyurEbMB8GA1UdIwQY
MBaAFEvURMhk6ehdNTduD2goF5n2KB8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzlSRXlHVHA2RjAxTjI0UGFDZ1htZllvSHhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS80YTBjZGMtZTdmZS00NTBlLTk3ZWMt
MjkwOTVhZDFjY2VkLzEvUzlSRXlHVHA2RjAxTjI0UGFDZ1htZllvSHhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS80YTBjZGMtZTdmZS00NTBlLTk3ZWMtMjkwOTVhZDFjY2Vk
LzEvUzlSRXlHVHA2RjAxTjI0UGFDZ1htZllvSHhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF6oaoDm+
+Y7itItn5iJ3o7mRHyl8wDZ190bqY2jC/FtxpSQ4q/KZygv89co8Gi+Jhmve/1UD
nwKMj17EVySMicYyQxqx6Q8merEgQqODisoV3CBZ4kWHDsa0iykzESUmE2yhZtDh
eV4CPSJGiMOy8onivhWyOmgl76y035Qi7vX0jvj4wpjwv3eKn5svPsieqmN65Ga6
vZ3phZoalUn32aIqDjiy+zESSkncuHBkK1+LRT6mYiCYoS8Iah7eYHmnRz9r6zFA
fY/P2yzYNQhg56eq2NcGkUG/WgTfLD/unoN0nvx4g0uxobdTncgP5o+VVx0NiqlJ
drJc1uTT6E+8LQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:56 2025 by rpki-client