Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
File: a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft (raw, json)
Hash identifier: 4v9d2Nb1IyNKQxqHpwneRcAlsNa/SDhILKAOdYooYOw=
Subject key identifier: 92:D9:38:02:52:33:85:26:46:2A:AA:E9:52:E7:26:42:D6:ED:03:99
Authority key identifier: 6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7
Certificate issuer: /CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7
Certificate serial: 0199FBEAA3985AB2E0292314F36BE91A75F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
Manifest number: 0818
Signing time: Sun 19 Oct 2025 10:01:22 +0000
Manifest this update: Sun 19 Oct 2025 10:01:22 +0000
Manifest next update: Mon 20 Oct 2025 10:01:22 +0000
Files and hashes: 1: NaKshVhSKaYmb3Sdi3LLJdyjmds.roa (hash: d86txPLHJOy87A3pf1/eOV7404HvHGLlpkkFt/51J1U=)
2: a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl (hash: LKGXSN6B48u14/XS/Ojgh+qRpueR39xBluoNV75XjaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a3:98:5a:b2:e0:29:23:14:f3:6b:e9:1a:75:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7
Validity
Not Before: Oct 19 10:01:22 2025 GMT
Not After : Oct 20 10:01:22 2025 GMT
Subject: CN=92d9380252338526462aaae952e72642d6ed0399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:29:e5:e6:b6:ac:db:43:67:09:42:f8:a9:e8:
a7:2d:84:1c:fb:63:d5:3f:01:7c:ad:e0:e6:10:78:
b5:72:00:d0:d1:c7:73:91:1c:3d:2c:ca:b2:7b:95:
bd:a0:32:c0:f2:87:62:35:59:80:54:c8:9e:6f:ce:
de:34:52:de:64:54:c7:a1:64:36:29:62:82:f9:0c:
e4:73:fc:85:a0:ef:54:f2:0c:c1:af:ed:cc:ab:35:
f0:82:36:c6:7c:cb:c8:ef:43:bc:9f:92:34:bf:7a:
c9:cd:ea:40:03:f7:e1:ae:69:79:75:6c:83:03:43:
53:56:0b:a6:08:4d:6b:a1:ec:d1:a7:39:7c:e7:69:
73:3a:fb:27:73:03:7d:17:f5:6b:b9:5c:49:a5:66:
bc:3c:cb:2f:04:f5:ad:47:85:44:b5:0e:9e:83:38:
1b:29:99:eb:ee:37:8c:bf:ca:f4:63:3a:1b:c5:d0:
92:4c:01:b1:53:d3:c8:db:96:0d:40:a7:50:0f:86:
12:f3:fa:29:1c:36:94:1b:dc:3a:49:5d:20:49:ac:
f1:c5:c7:c0:e9:0a:66:b5:1b:80:79:82:2c:40:b0:
81:8c:94:5e:2b:a6:9c:09:ea:d4:d4:ec:4d:dd:87:
23:8f:c4:01:81:3f:62:23:aa:2f:35:7d:e6:ea:dc:
68:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D9:38:02:52:33:85:26:46:2A:AA:E9:52:E7:26:42:D6:ED:03:99
X509v3 Authority Key Identifier:
keyid:6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ba:6b:6c:6d:1d:d2:59:f3:cf:aa:8d:c7:4e:85:96:c5:ec:
ce:a0:e7:66:73:b4:82:cc:79:7a:e2:c5:f5:09:ac:7a:26:41:
a1:64:81:aa:5c:97:11:7a:18:11:d2:ae:0e:37:11:4a:ce:ac:
98:d6:2f:96:c7:7a:43:54:4e:10:bb:d6:c5:10:92:54:45:f6:
64:67:43:7c:3e:2a:59:83:83:9c:b7:af:c2:13:09:e4:4c:ef:
3b:d7:d1:99:56:5a:31:60:f4:1a:0e:ac:3c:e4:81:7b:f5:e0:
cf:13:bb:8a:ff:75:83:30:72:06:eb:6f:77:19:d9:a6:c6:f1:
02:b6:0e:cd:99:84:50:84:9d:69:a4:a5:0c:98:f2:cd:bd:13:
5d:4e:3e:32:20:db:d4:c3:66:3c:58:43:7a:fa:b4:29:57:79:
29:78:33:c8:96:44:d7:30:55:bd:e6:55:05:61:b1:a1:fa:f3:
8c:4b:a4:16:e4:4e:9b:a4:b8:2d:d7:d6:b6:47:ad:0d:ba:c7:
52:f6:a5:51:23:5a:c0:8d:fc:3f:5c:67:8c:35:f8:74:be:2d:
1e:53:4e:0a:dc:f5:e6:ce:76:1c:09:6d:8c:96:a7:ed:b8:a6:
83:aa:a3:5c:04:e5:d9:6c:19:2b:03:1b:6c:27:b0:52:ad:f6:
48:de:52:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76qOYWrLgKSMU82vpGnX1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZDE5ZDY5NzAxZjEzYTU5NzdjZDIyOTZmYTg3YTI1MmZi
ZjA1ZjcwHhcNMjUxMDE5MTAwMTIyWhcNMjUxMDIwMTAwMTIyWjAzMTEwLwYDVQQD
Eyg5MmQ5MzgwMjUyMzM4NTI2NDYyYWFhZTk1MmU3MjY0MmQ2ZWQwMzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSnl5ras20NnCUL4qeinLYQc+2PV
PwF8reDmEHi1cgDQ0cdzkRw9LMqye5W9oDLA8odiNVmAVMieb87eNFLeZFTHoWQ2
KWKC+Qzkc/yFoO9U8gzBr+3MqzXwgjbGfMvI70O8n5I0v3rJzepAA/fhrml5dWyD
A0NTVgumCE1roezRpzl852lzOvsncwN9F/VruVxJpWa8PMsvBPWtR4VEtQ6egzgb
KZnr7jeMv8r0YzobxdCSTAGxU9PI25YNQKdQD4YS8/opHDaUG9w6SV0gSazxxcfA
6QpmtRuAeYIsQLCBjJReK6acCerU1OxN3Ycjj8QBgT9iI6ovNX3m6txovwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLZOAJSM4UmRiqq6VLnJkLW7QOZMB8GA1UdIwQY
MBaAFGvRnWlwHxOll3zSKW+oeiUvvwX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTlHZGFYQWZFNldYZk5JcGI2aDZKUy1fQmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny80ZGFlYmEtMzZiNC00OTQ5LTgzODUt
OGYwZDRlZWY2YWI1LzEvYTlHZGFYQWZFNldYZk5JcGI2aDZKUy1fQmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny80ZGFlYmEtMzZiNC00OTQ5LTgzODUtOGYwZDRlZWY2YWI1
LzEvYTlHZGFYQWZFNldYZk5JcGI2aDZKUy1fQmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlbprbG0d
0lnzz6qNx06FlsXszqDnZnO0gsx5euLF9QmseiZBoWSBqlyXEXoYEdKuDjcRSs6s
mNYvlsd6Q1ROELvWxRCSVEX2ZGdDfD4qWYODnLevwhMJ5EzvO9fRmVZaMWD0Gg6s
POSBe/XgzxO7iv91gzByButvdxnZpsbxArYOzZmEUISdaaSlDJjyzb0TXU4+MiDb
1MNmPFhDevq0KVd5KXgzyJZE1zBVveZVBWGxofrzjEukFuROm6S4LdfWtketDbrH
UvalUSNawI38P1xnjDX4dL4tHlNOCtz15s52HAltjJan7bimg6qjXATl2WwZKwMb
bCewUq32SN5Sqg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:29:59 2025 by rpki-client