Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
File: M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft (raw, json)
Hash identifier: fZzcEkEBt7jtzBAz8y23jz7OIrCWj7c8wipsay62NVo=
Subject key identifier: C3:D2:09:9A:29:2F:5E:7B:CF:26:AC:16:DF:3E:D2:53:82:E5:8B:C0
Authority key identifier: 33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
Certificate issuer: /CN=33d2d885477d0280264e458eb071f45d91691520
Certificate serial: 0199FE10310C83CD4ACE73E3DAA05E54F8FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
Manifest number: 1649
Signing time: Sun 19 Oct 2025 20:01:37 +0000
Manifest this update: Sun 19 Oct 2025 20:01:37 +0000
Manifest next update: Mon 20 Oct 2025 20:01:37 +0000
Files and hashes: 1: M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl (hash: 28sViLaCmLESIEcv/UDZmphLQZuBM4jk4BgWvXq6ksE=)
2: sK3XQwXTL-mqzvI7V9STOh1mdbY.roa (hash: VWu2Ff9vBiTjacxsepFTzMs84GfrYTJ/rH9rluBzGtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:31:0c:83:cd:4a:ce:73:e3:da:a0:5e:54:f8:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33d2d885477d0280264e458eb071f45d91691520
Validity
Not Before: Oct 19 20:01:37 2025 GMT
Not After : Oct 20 20:01:37 2025 GMT
Subject: CN=c3d2099a292f5e7bcf26ac16df3ed25382e58bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f6:fd:99:f0:d7:82:8e:fc:6a:b1:07:1b:c3:
61:bd:bb:ba:6d:6e:39:c2:10:11:32:f6:7f:5d:9d:
9f:00:3b:49:e8:64:f4:ab:b7:8a:1a:5e:8b:0c:15:
04:fd:1d:76:88:e8:11:78:39:9a:c8:f2:81:32:29:
88:53:be:5a:32:e2:88:a1:55:ca:75:16:67:22:de:
1a:25:60:46:ee:e7:bd:b6:80:80:00:dd:9b:04:7f:
15:29:67:29:34:82:0f:52:65:65:bd:8e:ec:27:6f:
15:23:ae:8e:c5:1d:4b:2e:ec:82:ae:68:f0:91:33:
a4:de:1f:7d:6a:80:dc:b2:f1:12:d5:84:c3:70:86:
d8:08:cb:fe:2f:f9:73:62:e1:98:ce:d3:14:71:3f:
f2:4f:20:d4:70:98:5c:b2:29:1b:19:b3:f1:5d:2a:
94:95:60:12:7e:ff:67:93:b3:2e:03:21:e3:16:5a:
6c:03:59:45:70:92:9b:a4:d5:43:df:59:28:fc:25:
81:8a:30:f2:93:7b:af:45:07:29:e1:1d:62:0c:94:
eb:d3:d6:74:c8:c3:4c:01:29:63:1b:cc:39:76:14:
0f:74:84:37:a8:bf:fa:27:c2:eb:33:c5:e3:fe:14:
15:bf:c0:be:e5:e8:c5:3e:1d:28:b4:84:79:93:10:
77:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D2:09:9A:29:2F:5E:7B:CF:26:AC:16:DF:3E:D2:53:82:E5:8B:C0
X509v3 Authority Key Identifier:
keyid:33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:6b:5c:af:98:16:21:6a:7c:b9:cb:d7:fd:f1:c3:07:ef:7d:
94:81:71:95:cd:6e:d7:e7:7a:9c:e2:80:43:af:e6:83:ef:a0:
14:b2:d1:1c:36:32:9d:f1:46:5e:4d:07:54:5a:ad:7f:33:2c:
57:07:b2:47:58:66:3f:ba:e8:45:2a:0e:41:9a:6d:eb:dc:f3:
13:06:15:c1:34:ff:9f:ed:a1:20:a6:69:9a:7d:bb:d8:dc:92:
80:e8:b2:c8:67:ee:52:b6:5a:b9:bb:98:b8:c5:72:39:84:01:
21:90:32:6e:56:c8:e3:00:2b:fc:f3:90:a1:89:1c:6c:95:ec:
d4:a3:fc:cd:4d:62:71:17:3c:9d:13:31:4c:c7:e0:f6:85:cb:
1a:09:0d:a1:5d:f1:fa:2c:70:08:a6:c5:43:cf:c1:30:fe:fb:
c3:dd:f2:93:58:23:3f:65:15:5f:d5:31:cf:a8:03:d5:a1:e7:
0c:27:80:b2:2f:58:8a:4f:78:b5:71:23:97:81:60:8e:fa:86:
24:34:b4:1c:d0:e8:24:a4:23:dd:43:5d:84:98:f5:d3:3a:20:
5f:50:6b:55:20:56:f6:d8:62:45:64:25:98:d2:29:b0:d4:c9:
68:f3:b9:5a:7d:40:34:b8:2b:14:57:3a:08:00:39:c2:5c:e0:
4c:5c:ec:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+EDEMg81KznPj2qBeVPj7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZDJkODg1NDc3ZDAyODAyNjRlNDU4ZWIwNzFmNDVkOTE2
OTE1MjAwHhcNMjUxMDE5MjAwMTM3WhcNMjUxMDIwMjAwMTM3WjAzMTEwLwYDVQQD
EyhjM2QyMDk5YTI5MmY1ZTdiY2YyNmFjMTZkZjNlZDI1MzgyZTU4YmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfb9mfDXgo78arEHG8Nhvbu6bW45
whARMvZ/XZ2fADtJ6GT0q7eKGl6LDBUE/R12iOgReDmayPKBMimIU75aMuKIoVXK
dRZnIt4aJWBG7ue9toCAAN2bBH8VKWcpNIIPUmVlvY7sJ28VI66OxR1LLuyCrmjw
kTOk3h99aoDcsvES1YTDcIbYCMv+L/lzYuGYztMUcT/yTyDUcJhcsikbGbPxXSqU
lWASfv9nk7MuAyHjFlpsA1lFcJKbpNVD31ko/CWBijDyk3uvRQcp4R1iDJTr09Z0
yMNMASljG8w5dhQPdIQ3qL/6J8LrM8Xj/hQVv8C+5ejFPh0otIR5kxB3lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPSCZopL157zyasFt8+0lOC5YvAMB8GA1UdIwQY
MBaAFDPS2IVHfQKAJk5FjrBx9F2RaRUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTlMWWhVZDlBb0FtVGtXT3NISDBYWkZwRlNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS83MTU5ZWItZGQzNy00NGFkLTgzZTIt
YjI2NDEyYWViM2FlLzEvTTlMWWhVZDlBb0FtVGtXT3NISDBYWkZwRlNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS83MTU5ZWItZGQzNy00NGFkLTgzZTItYjI2NDEyYWViM2Fl
LzEvTTlMWWhVZDlBb0FtVGtXT3NISDBYWkZwRlNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOmtcr5gW
IWp8ucvX/fHDB+99lIFxlc1u1+d6nOKAQ6/mg++gFLLRHDYynfFGXk0HVFqtfzMs
VweyR1hmP7roRSoOQZpt69zzEwYVwTT/n+2hIKZpmn272NySgOiyyGfuUrZaubuY
uMVyOYQBIZAyblbI4wAr/POQoYkcbJXs1KP8zU1icRc8nRMxTMfg9oXLGgkNoV3x
+ixwCKbFQ8/BMP77w93yk1gjP2UVX9Uxz6gD1aHnDCeAsi9Yik94tXEjl4FgjvqG
JDS0HNDoJKQj3UNdhJj10zogX1BrVSBW9thiRWQlmNIpsNTJaPO5Wn1ANLgrFFc6
CAA5wlzgTFzsUQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:56 2025 by rpki-client