Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
File: 9IFCCQRj_g9JoTDRUYZql3F9RCo.mft (raw, json)
Hash identifier: 9u9EnXblrBvXdkFouYzth3If2/d7ZhfUYBYiK8dNcHo=
Subject key identifier: 0D:94:7D:2C:3A:02:74:FB:4A:10:74:6F:0A:D2:2C:0E:B8:D7:83:A8
Authority key identifier: F4:81:42:09:04:63:FE:0F:49:A1:30:D1:51:86:6A:97:71:7D:44:2A
Certificate issuer: /CN=f48142090463fe0f49a130d151866a97717d442a
Certificate serial: 0199FC2188BDAAFA8C4680E21FC1A3DDD2B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9IFCCQRj_g9JoTDRUYZql3F9RCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
Manifest number: 0431
Signing time: Sun 19 Oct 2025 11:01:20 +0000
Manifest this update: Sun 19 Oct 2025 11:01:20 +0000
Manifest next update: Mon 20 Oct 2025 11:01:20 +0000
Files and hashes: 1: 9IFCCQRj_g9JoTDRUYZql3F9RCo.crl (hash: le+Q2GCnNj2CCnF6UIxJsKIFWdOnTpbw2VC2wJ7NKLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9IFCCQRj_g9JoTDRUYZql3F9RCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:88:bd:aa:fa:8c:46:80:e2:1f:c1:a3:dd:d2:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48142090463fe0f49a130d151866a97717d442a
Validity
Not Before: Oct 19 11:01:20 2025 GMT
Not After : Oct 20 11:01:20 2025 GMT
Subject: CN=0d947d2c3a0274fb4a10746f0ad22c0eb8d783a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:02:f7:b4:ba:4f:57:0f:05:65:56:cd:24:8b:
e1:51:c8:6b:35:10:2d:5a:2e:9a:c3:73:e0:d6:e9:
86:1a:54:e7:24:24:74:11:c3:19:24:ee:fc:ed:31:
a4:fd:e6:ad:0a:a0:47:f5:4f:18:71:14:fe:52:9a:
a5:30:19:e2:31:8a:33:76:ac:a4:ac:01:19:13:ce:
dd:e0:09:4d:88:1b:ce:08:1b:5f:a2:6e:f9:61:86:
fd:bf:21:03:f0:67:c7:7d:77:25:19:99:2e:0c:80:
c9:d8:8b:ee:a3:60:76:70:a3:8e:06:c7:3f:5a:57:
f9:15:99:15:00:96:c5:47:b5:5f:8b:3c:35:bb:af:
8f:b9:20:f7:2b:14:2b:7b:cc:26:ca:4e:03:f0:a4:
c7:b2:da:6d:2d:ce:4e:7e:0d:e5:6a:56:dc:54:7c:
c5:d1:30:c3:64:f0:ac:20:74:06:e0:93:9a:d8:36:
5a:77:52:16:9c:19:0a:02:cb:e1:1d:b3:8a:1a:af:
54:21:1f:58:11:47:a5:64:10:66:d6:8a:41:50:32:
49:f5:4e:60:24:51:1f:db:bd:08:a5:60:e2:65:74:
3c:17:9b:66:83:aa:53:a6:d0:a3:38:5f:c0:4f:c4:
8a:5d:c6:8e:19:42:b6:3a:4b:5e:fb:9c:81:2c:70:
96:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:94:7D:2C:3A:02:74:FB:4A:10:74:6F:0A:D2:2C:0E:B8:D7:83:A8
X509v3 Authority Key Identifier:
keyid:F4:81:42:09:04:63:FE:0F:49:A1:30:D1:51:86:6A:97:71:7D:44:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9IFCCQRj_g9JoTDRUYZql3F9RCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/808e41-8fec-4ffd-884f-c2c742e122ce/1/9IFCCQRj_g9JoTDRUYZql3F9RCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:93:f2:86:44:be:be:36:b5:3b:1a:bb:23:54:bb:f6:79:d8:
4e:5a:b0:e6:19:ac:43:b2:6f:d1:f1:55:61:f4:da:3b:cc:80:
df:4c:88:c6:ce:23:b4:df:8e:ab:8a:2d:d8:e3:98:9d:68:10:
e3:84:9b:07:a7:da:42:35:83:ad:4d:44:0a:ce:ab:0c:39:d1:
18:1f:f6:27:6f:2c:a7:33:3b:9f:64:40:72:7b:8a:b1:d7:68:
5f:d5:f3:3c:cb:8e:09:26:0f:46:a5:00:58:62:99:7b:2a:dc:
39:a0:f6:0c:70:0b:62:d8:d5:ec:c2:32:e6:4a:1e:68:4e:71:
24:54:54:2d:d2:8c:95:5a:6c:1e:fa:c2:dd:d6:07:42:ba:89:
0f:cd:92:4b:a2:d2:2e:5a:a5:a9:49:89:81:b6:77:54:53:07:
41:e7:0a:5f:21:a1:a7:41:7c:01:71:37:fe:e5:65:d2:98:d4:
8e:18:e1:2f:e2:5d:99:78:41:89:7e:67:59:e0:ac:3d:a6:44:
97:e0:19:a6:70:31:3c:33:4b:b2:ab:0c:cf:2d:3e:52:4c:f2:
f0:ef:72:f2:00:69:bc:1b:8a:78:41:8f:b7:de:7e:76:3c:27:
d2:c6:7c:6a:dd:10:18:4d:17:5d:90:41:d5:be:9c:7a:fe:2d:
f1:36:b7:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IYi9qvqMRoDiH8Gj3dK0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ODE0MjA5MDQ2M2ZlMGY0OWExMzBkMTUxODY2YTk3NzE3
ZDQ0MmEwHhcNMjUxMDE5MTEwMTIwWhcNMjUxMDIwMTEwMTIwWjAzMTEwLwYDVQQD
EygwZDk0N2QyYzNhMDI3NGZiNGExMDc0NmYwYWQyMmMwZWI4ZDc4M2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wL3tLpPVw8FZVbNJIvhUchrNRAt
Wi6aw3Pg1umGGlTnJCR0EcMZJO787TGk/eatCqBH9U8YcRT+UpqlMBniMYozdqyk
rAEZE87d4AlNiBvOCBtfom75YYb9vyED8GfHfXclGZkuDIDJ2Ivuo2B2cKOOBsc/
Wlf5FZkVAJbFR7Vfizw1u6+PuSD3KxQre8wmyk4D8KTHstptLc5Ofg3lalbcVHzF
0TDDZPCsIHQG4JOa2DZad1IWnBkKAsvhHbOKGq9UIR9YEUelZBBm1opBUDJJ9U5g
JFEf270IpWDiZXQ8F5tmg6pTptCjOF/AT8SKXcaOGUK2Okte+5yBLHCWoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2UfSw6AnT7ShB0bwrSLA6414OoMB8GA1UdIwQY
MBaAFPSBQgkEY/4PSaEw0VGGapdxfUQqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUlGQ0NRUmpfZzlKb1REUlVZWnFsM0Y5UkNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC84MDhlNDEtOGZlYy00ZmZkLTg4NGYt
YzJjNzQyZTEyMmNlLzEvOUlGQ0NRUmpfZzlKb1REUlVZWnFsM0Y5UkNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC84MDhlNDEtOGZlYy00ZmZkLTg4NGYtYzJjNzQyZTEyMmNl
LzEvOUlGQ0NRUmpfZzlKb1REUlVZWnFsM0Y5UkNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYpPyhkS+
vja1Oxq7I1S79nnYTlqw5hmsQ7Jv0fFVYfTaO8yA30yIxs4jtN+Oq4ot2OOYnWgQ
44SbB6faQjWDrU1ECs6rDDnRGB/2J28spzM7n2RAcnuKsddoX9XzPMuOCSYPRqUA
WGKZeyrcOaD2DHALYtjV7MIy5koeaE5xJFRULdKMlVpsHvrC3dYHQrqJD82SS6LS
LlqlqUmJgbZ3VFMHQecKXyGhp0F8AXE3/uVl0pjUjhjhL+JdmXhBiX5nWeCsPaZE
l+AZpnAxPDNLsqsMzy0+Ukzy8O9y8gBpvBuKeEGPt95+djwn0sZ8at0QGE0XXZBB
1b6cev4t8Ta31Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:00 2025 by rpki-client