Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
File: 9URgWW1tUyQB3jE9-JA2blN21gI.mft (raw, json)
Hash identifier: lYOCR+HdneEsKcg1fYUixUZc10Kk3u0XeAwZB6uY4ac=
Subject key identifier: 20:6F:28:C7:C8:BF:53:F7:7A:47:59:CB:19:6A:93:CF:14:0C:4E:DF
Authority key identifier: F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02
Certificate issuer: /CN=f54460596d6d532401de313df890366e5376d602
Certificate serial: 0199FC58A2CFB1470E9A222718C501A3479F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
Manifest number: 06B4
Signing time: Sun 19 Oct 2025 12:01:31 +0000
Manifest this update: Sun 19 Oct 2025 12:01:31 +0000
Manifest next update: Mon 20 Oct 2025 12:01:31 +0000
Files and hashes: 1: 9URgWW1tUyQB3jE9-JA2blN21gI.crl (hash: yRj2wx8i80Rc+mqRufwJ/dXauIxfoAAlKi8tfEygDGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:a2:cf:b1:47:0e:9a:22:27:18:c5:01:a3:47:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f54460596d6d532401de313df890366e5376d602
Validity
Not Before: Oct 19 12:01:31 2025 GMT
Not After : Oct 20 12:01:31 2025 GMT
Subject: CN=206f28c7c8bf53f77a4759cb196a93cf140c4edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dd:66:b3:d2:6e:97:50:f2:7d:02:ef:00:0c:
2e:9d:4f:2a:98:d5:43:3a:cd:c0:77:77:ed:04:08:
fe:d9:c1:96:e3:c2:12:73:e5:14:55:a4:2f:55:2e:
b8:cd:c6:df:95:b5:ea:26:8c:c2:8b:b6:90:9e:0b:
71:73:3e:cf:9e:e3:c9:f7:e6:38:12:a3:9e:4c:d9:
28:d6:06:5f:e1:f0:55:51:30:e8:83:10:ac:2c:07:
6a:5f:c4:7a:a8:2b:71:7f:18:6c:dc:05:d6:ca:9d:
45:a6:8b:2f:97:34:ff:44:aa:16:c8:06:b2:2c:e8:
c6:6e:b7:01:fb:7a:c0:28:47:e9:97:b3:f9:3d:91:
17:f4:00:68:e8:fa:c9:50:0f:1e:df:4f:5a:09:3a:
e5:af:82:29:fc:04:3f:02:4a:13:6c:da:53:5a:10:
28:7a:ac:bc:64:7c:cb:59:f1:be:40:ef:65:02:06:
26:6a:67:82:20:70:84:e4:ab:f5:fe:08:89:00:ef:
04:41:4b:81:be:bf:b3:4c:9e:7e:11:cd:f9:04:71:
61:a2:b4:bc:52:a2:07:ec:42:5b:db:50:e2:95:b4:
b3:b6:ac:0d:52:be:03:a7:77:81:38:04:ca:11:c7:
dc:6a:05:a3:e6:2f:7e:d3:1d:eb:ef:0c:75:f0:13:
ea:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6F:28:C7:C8:BF:53:F7:7A:47:59:CB:19:6A:93:CF:14:0C:4E:DF
X509v3 Authority Key Identifier:
keyid:F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:bd:1d:97:eb:e0:73:cc:34:b0:04:3e:d3:52:27:79:96:16:
3f:dd:04:08:60:f2:45:c1:9b:74:1d:69:5d:70:03:52:15:25:
b1:da:d5:e1:fd:22:d8:be:00:43:2e:88:91:cd:36:dc:5b:76:
96:aa:bb:91:70:34:b2:1c:97:76:f9:df:ed:d3:2f:5e:92:71:
ac:bd:64:94:56:f0:f8:43:8b:69:c0:3e:9d:83:b3:2f:74:a8:
b5:2c:72:c1:fb:67:a1:c3:f3:65:a4:a2:8d:71:3e:84:26:85:
9c:4f:00:99:2f:9a:4a:5f:5f:12:cd:66:f3:5f:d5:20:09:70:
2a:52:af:53:53:e0:da:53:dd:e0:79:48:d0:a2:f0:9a:05:d5:
61:b1:17:a1:3b:17:9b:3d:f9:42:29:20:84:ae:56:6e:fd:d8:
5a:24:a8:46:7a:35:4e:fe:d9:4f:50:a0:21:6c:9b:c5:a0:6d:
55:01:d1:f1:88:7e:19:f2:86:ad:c7:bc:4b:c2:d9:d6:43:d1:
68:1d:cc:cb:ec:b0:ca:a4:a1:1b:86:75:9e:1a:72:a4:f2:fc:
8b:69:82:7f:53:fd:90:25:3a:13:e1:4f:50:07:1c:6e:2a:5b:
39:7b:e9:4e:05:28:91:29:0b:2f:f9:cc:80:77:cc:f6:b4:ef:
70:d8:b4:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WKLPsUcOmiInGMUBo0efMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NDQ2MDU5NmQ2ZDUzMjQwMWRlMzEzZGY4OTAzNjZlNTM3
NmQ2MDIwHhcNMjUxMDE5MTIwMTMxWhcNMjUxMDIwMTIwMTMxWjAzMTEwLwYDVQQD
EygyMDZmMjhjN2M4YmY1M2Y3N2E0NzU5Y2IxOTZhOTNjZjE0MGM0ZWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN1ms9Jul1DyfQLvAAwunU8qmNVD
Os3Ad3ftBAj+2cGW48ISc+UUVaQvVS64zcbflbXqJozCi7aQngtxcz7PnuPJ9+Y4
EqOeTNko1gZf4fBVUTDogxCsLAdqX8R6qCtxfxhs3AXWyp1FposvlzT/RKoWyAay
LOjGbrcB+3rAKEfpl7P5PZEX9ABo6PrJUA8e309aCTrlr4Ip/AQ/AkoTbNpTWhAo
eqy8ZHzLWfG+QO9lAgYmameCIHCE5Kv1/giJAO8EQUuBvr+zTJ5+Ec35BHFhorS8
UqIH7EJb21DilbSztqwNUr4Dp3eBOATKEcfcagWj5i9+0x3r7wx18BPqyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBvKMfIv1P3ekdZyxlqk88UDE7fMB8GA1UdIwQY
MBaAFPVEYFltbVMkAd4xPfiQNm5TdtYCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVVSZ1dXMXRVeVFCM2pFOS1KQTJibE4yMWdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9hOWVkZTItMjhjMi00YmVmLTliZWYt
YzgwOWMwYTQwODg4LzEvOVVSZ1dXMXRVeVFCM2pFOS1KQTJibE4yMWdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9hOWVkZTItMjhjMi00YmVmLTliZWYtYzgwOWMwYTQwODg4
LzEvOVVSZ1dXMXRVeVFCM2pFOS1KQTJibE4yMWdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAer0dl+vg
c8w0sAQ+01IneZYWP90ECGDyRcGbdB1pXXADUhUlsdrV4f0i2L4AQy6Ikc023Ft2
lqq7kXA0shyXdvnf7dMvXpJxrL1klFbw+EOLacA+nYOzL3SotSxywftnocPzZaSi
jXE+hCaFnE8AmS+aSl9fEs1m81/VIAlwKlKvU1Pg2lPd4HlI0KLwmgXVYbEXoTsX
mz35QikghK5Wbv3YWiSoRno1Tv7ZT1CgIWybxaBtVQHR8Yh+GfKGrce8S8LZ1kPR
aB3My+ywyqShG4Z1nhpypPL8i2mCf1P9kCU6E+FPUAccbipbOXvpTgUokSkLL/nM
gHfM9rTvcNi0aQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:16 2025 by rpki-client