Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
File: 0u9GpBNBlOckI9VyobZtSp0uTBM.mft (raw, json)
Hash identifier: rS5WnK/mR+7WNn5xICJlIS4PKAYEj+iN2HFffvWUf3U=
Subject key identifier: 6A:51:B5:4B:B6:D0:A9:0F:AF:B7:13:B9:06:20:D8:90:E6:8B:F7:A1
Authority key identifier: D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13
Certificate issuer: /CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
Certificate serial: 0199FC8F8DB2323171FE5A11C10FF44BBF54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
Manifest number: 1424
Signing time: Sun 19 Oct 2025 13:01:30 +0000
Manifest this update: Sun 19 Oct 2025 13:01:30 +0000
Manifest next update: Mon 20 Oct 2025 13:01:30 +0000
Files and hashes: 1: 0u9GpBNBlOckI9VyobZtSp0uTBM.crl (hash: XvKAqqUVWU/kp5zXluu1L5jMQea9o3EyWQ+9STAm9mE=)
2: dW_FLnsv0zWikILQzBidDijXgG4.roa (hash: ma0ra8OYlImfY3CwT3NNDf0BfbTV59KzDn/miuP7r78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:8d:b2:32:31:71:fe:5a:11:c1:0f:f4:4b:bf:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
Validity
Not Before: Oct 19 13:01:30 2025 GMT
Not After : Oct 20 13:01:30 2025 GMT
Subject: CN=6a51b54bb6d0a90fafb713b90620d890e68bf7a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1a:e5:76:18:9c:8e:2d:9c:45:d8:2e:52:3d:
b5:b8:46:db:1d:e5:54:42:15:87:bc:a5:8a:72:45:
12:7d:ac:b9:ac:e0:1d:49:3b:9d:8c:e8:cb:f4:90:
f6:5c:98:2c:77:7b:f5:37:f5:02:3a:75:c2:71:4d:
cf:0b:62:23:b6:cb:40:e4:63:07:79:eb:56:43:be:
50:55:19:4c:87:84:26:e7:7b:81:83:05:9a:2a:7c:
fd:47:6b:95:7f:09:9b:34:9a:2b:6f:ac:49:d9:02:
8d:05:65:2b:09:c3:5d:ee:c1:f0:7c:43:3e:41:64:
8d:1c:da:c7:07:2c:6d:16:b7:22:28:fc:41:45:92:
0b:f1:1e:68:b5:b1:b7:79:2d:eb:5b:30:d5:7b:3a:
37:06:33:9c:4d:42:76:4c:ed:f0:28:7d:89:ea:ff:
c6:f0:bc:0f:8b:72:dd:86:62:33:fa:bf:8d:9b:3f:
44:8b:02:82:0d:2e:a9:9c:04:89:e7:4b:f2:59:98:
1b:7e:ad:9c:4f:d7:1b:fa:e8:8b:ed:1d:f2:98:d0:
d1:a4:17:f8:c6:bd:e5:a8:c2:a8:a0:29:f5:15:de:
a7:c6:bc:a8:54:dd:cb:5d:7c:a2:34:78:d1:d8:75:
ea:3e:9c:f7:97:31:7c:03:e4:6a:1b:5d:04:48:35:
46:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:51:B5:4B:B6:D0:A9:0F:AF:B7:13:B9:06:20:D8:90:E6:8B:F7:A1
X509v3 Authority Key Identifier:
keyid:D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:64:d5:78:a7:fa:90:01:35:a1:9d:41:4d:da:9b:aa:d3:69:
70:4a:c2:05:10:38:0a:ed:38:8f:35:dd:f0:00:91:82:36:56:
05:52:0f:f4:0e:d6:5f:f9:e4:09:fc:87:e8:34:8f:20:22:5a:
de:b1:88:60:75:eb:51:6a:49:44:1e:c8:c0:af:81:16:d0:31:
e7:ff:3b:70:09:88:5a:d4:59:02:2e:01:b5:35:07:38:fc:06:
e1:09:93:b8:82:74:a5:b7:33:91:06:53:14:b3:f7:10:73:2c:
12:af:9d:9d:6e:b5:e4:2e:ed:12:d8:14:d9:3e:e5:bf:7a:38:
55:62:17:32:51:5f:55:a9:a4:6b:36:57:32:06:12:cb:c2:8b:
2b:54:ee:fc:47:01:ff:1b:98:2b:b2:98:6b:89:e9:e1:3b:8f:
57:24:d4:4d:a3:28:b8:43:ce:a1:ea:29:97:64:81:71:e9:2c:
ec:63:7d:d6:d8:69:c7:11:13:20:fe:75:8a:db:b2:df:c7:97:
63:66:8d:2e:ae:db:e5:7b:a2:69:bd:d6:55:94:bc:97:f1:40:
35:5b:34:f3:a2:10:96:52:5e:30:3a:35:63:18:2a:2b:1d:c5:
5f:f8:8e:bb:17:df:ac:ef:fa:62:3e:8b:8b:30:b0:c3:1a:5a:
0c:d8:f2:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j42yMjFx/loRwQ/0S79UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZWY0NmE0MTM0MTk0ZTcyNDIzZDU3MmExYjY2ZDRhOWQy
ZTRjMTMwHhcNMjUxMDE5MTMwMTMwWhcNMjUxMDIwMTMwMTMwWjAzMTEwLwYDVQQD
Eyg2YTUxYjU0YmI2ZDBhOTBmYWZiNzEzYjkwNjIwZDg5MGU2OGJmN2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohrldhicji2cRdguUj21uEbbHeVU
QhWHvKWKckUSfay5rOAdSTudjOjL9JD2XJgsd3v1N/UCOnXCcU3PC2IjtstA5GMH
eetWQ75QVRlMh4Qm53uBgwWaKnz9R2uVfwmbNJorb6xJ2QKNBWUrCcNd7sHwfEM+
QWSNHNrHByxtFrciKPxBRZIL8R5otbG3eS3rWzDVezo3BjOcTUJ2TO3wKH2J6v/G
8LwPi3LdhmIz+r+Nmz9EiwKCDS6pnASJ50vyWZgbfq2cT9cb+uiL7R3ymNDRpBf4
xr3lqMKooCn1Fd6nxryoVN3LXXyiNHjR2HXqPpz3lzF8A+RqG10ESDVG1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpRtUu20KkPr7cTuQYg2JDmi/ehMB8GA1UdIwQY
MBaAFNLvRqQTQZTnJCPVcqG2bUqdLkwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHU5R3BCTkJsT2NrSTlWeW9iWnRTcDB1VEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS82NDUzYzQtNjY4Ny00ZWY5LTlmZGMt
YTg4YmI3ODA1YjA5LzEvMHU5R3BCTkJsT2NrSTlWeW9iWnRTcDB1VEJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS82NDUzYzQtNjY4Ny00ZWY5LTlmZGMtYTg4YmI3ODA1YjA5
LzEvMHU5R3BCTkJsT2NrSTlWeW9iWnRTcDB1VEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV2TVeKf6
kAE1oZ1BTdqbqtNpcErCBRA4Cu04jzXd8ACRgjZWBVIP9A7WX/nkCfyH6DSPICJa
3rGIYHXrUWpJRB7IwK+BFtAx5/87cAmIWtRZAi4BtTUHOPwG4QmTuIJ0pbczkQZT
FLP3EHMsEq+dnW615C7tEtgU2T7lv3o4VWIXMlFfVamkazZXMgYSy8KLK1Tu/EcB
/xuYK7KYa4np4TuPVyTUTaMouEPOoeopl2SBceks7GN91thpxxETIP51ituy38eX
Y2aNLq7b5Xuiab3WVZS8l/FANVs086IQllJeMDo1YxgqKx3FX/iOuxffrO/6Yj6L
izCwwxpaDNjygQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:33 2025 by rpki-client