
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
File: 9IOBPbTT97DwLDH4W1JDww9F4lI.mft (raw, json)
Hash identifier: lhg8iaC2n1ZGkYG+yWycjtoBaf6wF4Ixr/B9f09oenw=
Subject key identifier: 04:40:8C:E2:4A:61:70:A4:0C:FC:8D:22:0C:3E:DB:28:AB:54:6C:C8
Authority key identifier: F4:83:81:3D:B4:D3:F7:B0:F0:2C:31:F8:5B:52:43:C3:0F:45:E2:52
Certificate issuer: /CN=f483813db4d3f7b0f02c31f85b5243c30f45e252
Certificate serial: 0199FFC871B6132969CC0A0DCF2DBF35A488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
Manifest number: 16E1
Signing time: Mon 20 Oct 2025 04:02:30 +0000
Manifest this update: Mon 20 Oct 2025 04:02:30 +0000
Manifest next update: Tue 21 Oct 2025 04:02:30 +0000
Files and hashes: 1: 9IOBPbTT97DwLDH4W1JDww9F4lI.crl (hash: 0dJJ+mHLzgOKbOVQ4Y/MByCVBJz+2RGI9/LWpCWE/0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:71:b6:13:29:69:cc:0a:0d:cf:2d:bf:35:a4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f483813db4d3f7b0f02c31f85b5243c30f45e252
Validity
Not Before: Oct 20 04:02:30 2025 GMT
Not After : Oct 21 04:02:30 2025 GMT
Subject: CN=04408ce24a6170a40cfc8d220c3edb28ab546cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c1:9c:86:84:67:5f:40:66:4f:83:17:10:c8:
3f:d5:f8:a4:17:65:c5:64:78:c6:28:ad:ae:ed:8f:
a8:3d:09:a2:52:81:47:2a:8c:03:a5:3f:2a:7f:bf:
20:cc:48:5d:66:f4:cf:10:eb:91:ce:60:d2:72:13:
80:cd:0d:0f:fa:83:ec:55:2e:95:7d:44:84:85:5c:
5a:8a:be:80:94:c7:05:a5:3c:de:a5:af:b6:46:40:
2c:38:6b:25:5d:08:5b:c6:19:20:40:f9:41:2a:49:
f0:96:a6:e4:f1:13:dd:84:b4:05:aa:f5:85:07:62:
3e:be:bc:a2:3b:9d:a3:b3:d7:15:9b:a1:41:2b:d1:
23:66:46:3b:cb:64:2f:ed:f5:f6:24:d7:47:fa:b5:
ea:94:44:51:0b:a5:65:fd:a7:88:34:8f:0f:2d:82:
93:73:7a:7b:7a:6f:94:26:3a:08:3f:12:ed:70:98:
85:7b:e0:28:c5:5c:a6:bb:42:2e:44:71:6a:14:47:
75:32:54:93:87:9a:b4:90:81:98:2d:0c:10:4f:d1:
e4:14:d8:08:df:0f:1e:72:1c:eb:d0:b6:fd:be:6f:
fa:ee:87:17:51:f6:c0:17:bd:67:f3:cf:43:10:c7:
c9:66:6c:de:1a:8c:25:32:70:3b:29:45:d0:8c:27:
a6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:40:8C:E2:4A:61:70:A4:0C:FC:8D:22:0C:3E:DB:28:AB:54:6C:C8
X509v3 Authority Key Identifier:
keyid:F4:83:81:3D:B4:D3:F7:B0:F0:2C:31:F8:5B:52:43:C3:0F:45:E2:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:9b:db:35:4a:34:a8:f4:bf:fb:e1:06:e4:e1:33:21:c9:65:
92:e0:f7:67:9c:95:c5:7e:e1:18:93:0f:59:21:75:2d:bb:36:
c5:e1:9a:ed:7f:c9:35:cf:1b:e8:b5:f0:f1:98:f3:24:c8:1d:
57:df:10:c2:d9:ab:64:ec:64:70:85:01:29:0d:bb:ff:2d:8d:
21:41:76:ec:56:11:32:db:97:a4:fa:a9:5d:59:08:31:07:b2:
68:43:86:99:62:ce:b9:21:b3:1b:4e:a9:ea:c9:96:2a:86:07:
23:5a:af:5e:42:90:1b:f6:c4:aa:60:53:31:79:ad:95:89:a7:
60:08:a4:ff:ea:55:ed:46:2c:9b:92:36:a5:31:c4:ed:dd:1e:
49:e4:4f:35:9a:e2:58:5d:d5:82:bd:3c:b6:c4:a3:b2:12:87:
98:98:ae:63:32:24:f1:5a:e6:9f:b7:33:0a:68:dc:62:62:9d:
25:59:08:22:d7:78:58:c0:2b:42:8f:98:73:26:24:c5:79:cf:
f2:5a:77:2b:18:f2:8a:79:f7:f4:7e:3d:ef:7f:a8:94:30:a4:
7f:1d:e1:cc:fc:06:f7:2c:b0:06:12:98:86:13:76:f4:a9:cb:
d7:de:22:79:03:be:ef:1c:f5:a9:96:a5:9a:ca:01:fb:53:89:
f9:cf:c4:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yHG2EylpzAoNzy2/NaSIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ODM4MTNkYjRkM2Y3YjBmMDJjMzFmODViNTI0M2MzMGY0
NWUyNTIwHhcNMjUxMDIwMDQwMjMwWhcNMjUxMDIxMDQwMjMwWjAzMTEwLwYDVQQD
EygwNDQwOGNlMjRhNjE3MGE0MGNmYzhkMjIwYzNlZGIyOGFiNTQ2Y2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8GchoRnX0BmT4MXEMg/1fikF2XF
ZHjGKK2u7Y+oPQmiUoFHKowDpT8qf78gzEhdZvTPEOuRzmDSchOAzQ0P+oPsVS6V
fUSEhVxair6AlMcFpTzepa+2RkAsOGslXQhbxhkgQPlBKknwlqbk8RPdhLQFqvWF
B2I+vryiO52js9cVm6FBK9EjZkY7y2Qv7fX2JNdH+rXqlERRC6Vl/aeINI8PLYKT
c3p7em+UJjoIPxLtcJiFe+AoxVymu0IuRHFqFEd1MlSTh5q0kIGYLQwQT9HkFNgI
3w8echzr0Lb9vm/67ocXUfbAF71n889DEMfJZmzeGowlMnA7KUXQjCemKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFARAjOJKYXCkDPyNIgw+2yirVGzIMB8GA1UdIwQY
MBaAFPSDgT200/ew8Cwx+FtSQ8MPReJSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUlPQlBiVFQ5N0R3TERINFcxSkR3dzlGNGxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9mZDJhNzMtMjE1Ny00NmNmLTk4MWEt
ZTcxOGM4NDNhMjk0LzEvOUlPQlBiVFQ5N0R3TERINFcxSkR3dzlGNGxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9mZDJhNzMtMjE1Ny00NmNmLTk4MWEtZTcxOGM4NDNhMjk0
LzEvOUlPQlBiVFQ5N0R3TERINFcxSkR3dzlGNGxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZvbNUo0
qPS/++EG5OEzIcllkuD3Z5yVxX7hGJMPWSF1Lbs2xeGa7X/JNc8b6LXw8ZjzJMgd
V98QwtmrZOxkcIUBKQ27/y2NIUF27FYRMtuXpPqpXVkIMQeyaEOGmWLOuSGzG06p
6smWKoYHI1qvXkKQG/bEqmBTMXmtlYmnYAik/+pV7UYsm5I2pTHE7d0eSeRPNZri
WF3Vgr08tsSjshKHmJiuYzIk8Vrmn7czCmjcYmKdJVkIItd4WMArQo+YcyYkxXnP
8lp3Kxjyinn39H4973+olDCkfx3hzPwG9yywBhKYhhN29KnL194ieQO+7xz1qZal
msoB+1OJ+c/E5Q==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:11:49 2025 by rpki-client