Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
File: _9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft (raw, json)
Hash identifier: EgkuAGnpvtXMHPi3IyabP0AmnulpRb8JWB5NOqhvNAM=
Subject key identifier: 1E:DB:27:A0:10:78:77:39:A8:BB:CF:12:B5:38:A1:B3:97:57:F0:AB
Authority key identifier: FF:D3:C1:74:2F:C0:5A:80:A2:DC:6B:B0:EB:E1:03:0A:9B:BC:8C:94
Certificate issuer: /CN=ffd3c1742fc05a80a2dc6bb0ebe1030a9bbc8c94
Certificate serial: 019A0259E9F61A47EDBC0E5B81ACB4274682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
Manifest number: 1676
Signing time: Mon 20 Oct 2025 16:00:38 +0000
Manifest this update: Mon 20 Oct 2025 16:00:38 +0000
Manifest next update: Tue 21 Oct 2025 16:00:38 +0000
Files and hashes: 1: GDYfoKKG3yFaIjJkJ3YCAK8hLqA.roa (hash: erb5aM2h7W5I1XqnWYG/lDx7/8zDPLRd0RbZw0dE/qs=)
2: _9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl (hash: H99b6Tv8R2UuMP5xORqeD/noGlLNi5Z7/uZ2KcTHO3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 15:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:59:e9:f6:1a:47:ed:bc:0e:5b:81:ac:b4:27:46:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffd3c1742fc05a80a2dc6bb0ebe1030a9bbc8c94
Validity
Not Before: Oct 20 16:00:38 2025 GMT
Not After : Oct 21 16:00:38 2025 GMT
Subject: CN=1edb27a010787739a8bbcf12b538a1b39757f0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4f:1c:3e:2b:4f:f1:9d:2a:24:8e:4f:72:cf:
ba:30:3e:9b:c3:f1:f1:a1:f6:41:36:40:3e:cf:f9:
3e:0b:7d:48:f6:e5:30:78:7d:06:17:12:bb:00:c4:
ad:70:0d:72:3f:3c:58:cd:29:3b:ad:6a:9c:ec:af:
8a:b4:b0:c0:9f:d4:07:ad:ea:9c:ca:55:d5:55:46:
e6:58:95:e5:f5:a5:1e:da:89:c4:a7:4b:eb:0a:34:
61:bc:31:10:ec:c2:07:ff:0e:e6:c2:6d:9c:60:f3:
6c:bd:0f:2d:76:26:ce:8e:e4:0c:1f:0a:03:1b:68:
91:df:f8:79:80:10:58:1b:43:a9:bc:42:8c:1a:71:
22:c9:70:85:70:28:83:30:7f:a6:b2:4f:cb:86:a6:
6d:bf:19:a8:27:47:15:6d:6f:90:96:37:b8:bf:6f:
98:74:98:98:87:65:0f:c4:ae:c0:0f:ca:d0:a3:fe:
91:f0:49:2f:d4:ea:38:0a:d8:9c:21:31:4e:f1:25:
fc:e0:82:dd:02:df:3d:03:d0:c6:a7:1f:3c:37:d5:
b9:a1:45:a8:f0:20:90:66:bc:ee:cb:24:a1:3d:04:
5f:9f:32:88:1e:60:7e:28:c5:29:87:d1:d5:54:1c:
b6:42:bd:11:70:13:63:b6:bc:87:6c:b6:bf:18:37:
c7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DB:27:A0:10:78:77:39:A8:BB:CF:12:B5:38:A1:B3:97:57:F0:AB
X509v3 Authority Key Identifier:
keyid:FF:D3:C1:74:2F:C0:5A:80:A2:DC:6B:B0:EB:E1:03:0A:9B:BC:8C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:93:91:d4:ae:12:58:19:f3:40:6f:e2:05:45:19:72:5f:10:
21:70:35:31:b8:74:86:99:ad:28:ff:42:0d:67:9f:c1:33:9c:
44:e0:79:c0:54:da:fa:19:ac:1b:92:ad:3c:87:1a:45:1f:de:
90:99:45:a2:13:cf:5f:b1:2f:03:b4:72:41:13:75:b5:bf:2d:
ef:4a:69:b5:f7:27:58:50:9c:45:9d:73:0c:d2:64:63:85:71:
1e:6d:1c:7c:dc:6a:19:ed:d0:3e:5c:8b:52:37:c9:b7:ae:e4:
33:76:67:9e:0b:5e:5d:1e:20:eb:62:0c:4c:ae:ff:52:f3:74:
db:24:65:c8:f3:9f:b9:86:1a:88:99:67:bd:aa:73:ce:53:12:
e3:3b:e8:82:7b:7a:d4:b8:e1:5c:a1:7c:c5:59:42:06:55:d6:
a9:0f:06:c9:21:b5:e3:f5:b5:f7:81:8f:b8:aa:9a:d0:36:4f:
3c:b7:6b:6b:8a:81:0f:1b:ec:da:ea:a3:eb:dc:c5:67:4d:00:
c8:d5:fd:f0:53:ee:8f:97:0c:21:02:de:fa:9c:a7:76:90:48:
4f:b1:2d:55:b1:34:69:b3:cd:ae:eb:41:84:a4:bd:cf:d0:72:
de:39:c7:db:b2:17:2b:07:35:8c:85:4b:63:b6:c0:d2:36:5c:
73:ab:50:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoCWen2GkftvA5bgay0J0aCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZDNjMTc0MmZjMDVhODBhMmRjNmJiMGViZTEwMzBhOWJi
YzhjOTQwHhcNMjUxMDIwMTYwMDM4WhcNMjUxMDIxMTYwMDM4WjAzMTEwLwYDVQQD
EygxZWRiMjdhMDEwNzg3NzM5YThiYmNmMTJiNTM4YTFiMzk3NTdmMGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4k8cPitP8Z0qJI5Pcs+6MD6bw/Hx
ofZBNkA+z/k+C31I9uUweH0GFxK7AMStcA1yPzxYzSk7rWqc7K+KtLDAn9QHreqc
ylXVVUbmWJXl9aUe2onEp0vrCjRhvDEQ7MIH/w7mwm2cYPNsvQ8tdibOjuQMHwoD
G2iR3/h5gBBYG0OpvEKMGnEiyXCFcCiDMH+msk/LhqZtvxmoJ0cVbW+Qlje4v2+Y
dJiYh2UPxK7AD8rQo/6R8Ekv1Oo4CticITFO8SX84ILdAt89A9DGpx88N9W5oUWo
8CCQZrzuyyShPQRfnzKIHmB+KMUph9HVVBy2Qr0RcBNjtryHbLa/GDfHxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7bJ6AQeHc5qLvPErU4obOXV/CrMB8GA1UdIwQY
MBaAFP/TwXQvwFqAotxrsOvhAwqbvIyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzlQQmRDX0FXb0NpM0d1dzYtRURDcHU4akpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9jMzNkZjktZWRkNS00NjNiLWIwNTIt
MGYwYmM0MDFlMWUxLzEvXzlQQmRDX0FXb0NpM0d1dzYtRURDcHU4akpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9jMzNkZjktZWRkNS00NjNiLWIwNTItMGYwYmM0MDFlMWUx
LzEvXzlQQmRDX0FXb0NpM0d1dzYtRURDcHU4akpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJOR1K4S
WBnzQG/iBUUZcl8QIXA1Mbh0hpmtKP9CDWefwTOcROB5wFTa+hmsG5KtPIcaRR/e
kJlFohPPX7EvA7RyQRN1tb8t70pptfcnWFCcRZ1zDNJkY4VxHm0cfNxqGe3QPlyL
UjfJt67kM3ZnngteXR4g62IMTK7/UvN02yRlyPOfuYYaiJlnvapzzlMS4zvognt6
1LjhXKF8xVlCBlXWqQ8GySG14/W194GPuKqa0DZPPLdra4qBDxvs2uqj69zFZ00A
yNX98FPuj5cMIQLe+pyndpBIT7EtVbE0abPNrutBhKS9z9By3jnH27IXKwc1jIVL
Y7bA0jZcc6tQvw==
-----END CERTIFICATE-----
Generated at Tue Oct 21 00:36:05 2025 by rpki-client