Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
File: 9X3FmWyBeMDeLqIEme696t5AI-s.mft (raw, json)
Hash identifier: dTVF3UkcQImVeTO1+Ohc9t5DhU/V/RWVF7J8KO6EyUQ=
Subject key identifier: EF:DA:BD:AF:87:E4:F3:11:2A:0D:FF:0F:A4:FA:B9:00:CC:F7:73:96
Authority key identifier: F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB
Certificate issuer: /CN=f57dc5996c8178c0de2ea20499eebdeade4023eb
Certificate serial: 0199FF5933FB0A3659F8D09095C6D772FD3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 02:00:59 +0000
Manifest this update: Mon 20 Oct 2025 02:00:59 +0000
Manifest next update: Tue 21 Oct 2025 02:00:59 +0000
Files and hashes: 1: 9X3FmWyBeMDeLqIEme696t5AI-s.crl (hash: AhmROZqHIh45DsC3Behw+6TQQwem31BX2HqRMKCYUVM=)
2: Ja-1OHflBPV5uzkrzsrUkckcSDQ.roa (hash: 5hTfi5zIdy0pksBzayRUkBZiz92X7DgH1Hnbmun+ujM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:33:fb:0a:36:59:f8:d0:90:95:c6:d7:72:fd:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57dc5996c8178c0de2ea20499eebdeade4023eb
Validity
Not Before: Oct 20 02:00:59 2025 GMT
Not After : Oct 21 02:00:59 2025 GMT
Subject: CN=efdabdaf87e4f3112a0dff0fa4fab900ccf77396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b1:ad:11:89:7b:09:58:2a:93:da:cc:3d:e5:
32:72:46:b1:67:58:cd:e2:e3:0e:9d:24:0b:ec:6d:
ae:30:7a:d5:92:85:b9:30:59:58:15:c0:9b:c7:70:
fd:94:2f:17:6f:da:c7:1c:77:cc:b7:b6:11:27:b1:
1d:b1:d0:a2:6f:92:0c:55:4b:11:0b:7c:62:57:ba:
47:b9:63:9b:07:fd:98:94:2e:a5:ea:5d:b6:85:06:
af:cb:f6:c6:d5:89:3b:0d:e8:fc:37:96:04:86:ad:
0b:aa:30:86:b9:98:07:29:a3:8a:f5:16:58:4e:5d:
e7:3f:8a:eb:16:3d:2d:68:70:2a:70:7f:2f:4c:f7:
ad:fb:3b:b4:f0:cc:1b:b1:1b:ff:92:11:16:23:23:
04:8f:8a:94:cb:8d:7a:92:4c:26:3a:7c:da:cc:ac:
1a:b7:84:be:d0:12:8b:be:56:20:6c:88:71:27:81:
df:5e:4e:a2:ae:2e:7c:68:6e:dd:2d:d6:0c:28:8b:
9b:c1:b6:c1:00:ee:e0:27:fa:55:bf:eb:67:62:20:
25:ec:c0:b4:5e:b9:17:58:fc:bd:71:06:14:ce:77:
dc:d2:5c:f4:87:9a:3a:b5:d7:e6:42:d0:28:ac:c9:
db:22:51:b6:11:bf:e0:3a:4d:9a:8b:ec:aa:bd:9b:
d2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DA:BD:AF:87:E4:F3:11:2A:0D:FF:0F:A4:FA:B9:00:CC:F7:73:96
X509v3 Authority Key Identifier:
keyid:F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:1c:01:da:d1:0c:5c:c1:8e:c7:91:b7:70:cc:a9:84:9c:2e:
be:d2:a1:ca:d9:2c:5c:0a:b7:22:2f:cf:7c:4f:63:51:05:f8:
95:c6:a0:42:d8:25:c8:57:31:bb:70:bd:41:c0:96:d3:b4:c3:
da:d9:65:9f:64:d4:81:e4:b9:9d:cd:09:c2:26:26:ee:50:09:
35:12:e2:7c:d8:22:d3:25:2c:ea:53:0a:09:5b:e2:42:f6:0b:
fc:9d:7b:6a:5b:9a:ba:b7:d8:2d:57:d4:b9:79:9e:97:a4:24:
0f:36:22:15:65:a5:0f:0b:f2:e6:fb:45:fe:70:31:db:53:fe:
ab:db:5d:51:b6:29:bf:75:7d:6c:e2:53:2e:49:0e:71:e9:c4:
51:6a:fd:19:88:8f:56:75:03:81:65:45:22:22:66:01:f5:31:
85:26:2e:ac:d5:59:07:b2:57:db:18:96:6d:13:da:50:33:72:
95:95:80:3f:fb:47:5d:07:a6:9a:2e:52:ad:0b:c8:3a:73:e7:
90:80:35:b6:ce:42:f1:4c:e0:82:fc:a6:5c:0a:6f:e4:79:ae:
82:1b:74:f2:c9:cb:ca:5c:02:a0:f1:e4:81:87:45:3c:a5:af:
dd:6f:03:43:42:62:1f:f9:a8:7e:7e:d9:bf:38:b6:84:59:1f:
f1:84:93:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/WTP7CjZZ+NCQlcbXcv06MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1N2RjNTk5NmM4MTc4YzBkZTJlYTIwNDk5ZWViZGVhZGU0
MDIzZWIwHhcNMjUxMDIwMDIwMDU5WhcNMjUxMDIxMDIwMDU5WjAzMTEwLwYDVQQD
EyhlZmRhYmRhZjg3ZTRmMzExMmEwZGZmMGZhNGZhYjkwMGNjZjc3Mzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bGtEYl7CVgqk9rMPeUyckaxZ1jN
4uMOnSQL7G2uMHrVkoW5MFlYFcCbx3D9lC8Xb9rHHHfMt7YRJ7EdsdCib5IMVUsR
C3xiV7pHuWObB/2YlC6l6l22hQavy/bG1Yk7Dej8N5YEhq0LqjCGuZgHKaOK9RZY
Tl3nP4rrFj0taHAqcH8vTPet+zu08MwbsRv/khEWIyMEj4qUy416kkwmOnzazKwa
t4S+0BKLvlYgbIhxJ4HfXk6iri58aG7dLdYMKIubwbbBAO7gJ/pVv+tnYiAl7MC0
XrkXWPy9cQYUznfc0lz0h5o6tdfmQtAorMnbIlG2Eb/gOk2ai+yqvZvS5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/ava+H5PMRKg3/D6T6uQDM93OWMB8GA1UdIwQY
MBaAFPV9xZlsgXjA3i6iBJnuvereQCPrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVgzRm1XeUJlTURlTHFJRW1lNjk2dDVBSS1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My82N2UzYWMtYzMzMi00ZDEzLTgzZWYt
YzdiMTBkNTA1Y2ZlLzEvOVgzRm1XeUJlTURlTHFJRW1lNjk2dDVBSS1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My82N2UzYWMtYzMzMi00ZDEzLTgzZWYtYzdiMTBkNTA1Y2Zl
LzEvOVgzRm1XeUJlTURlTHFJRW1lNjk2dDVBSS1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjxwB2tEM
XMGOx5G3cMyphJwuvtKhytksXAq3Ii/PfE9jUQX4lcagQtglyFcxu3C9QcCW07TD
2tlln2TUgeS5nc0JwiYm7lAJNRLifNgi0yUs6lMKCVviQvYL/J17aluaurfYLVfU
uXmel6QkDzYiFWWlDwvy5vtF/nAx21P+q9tdUbYpv3V9bOJTLkkOcenEUWr9GYiP
VnUDgWVFIiJmAfUxhSYurNVZB7JX2xiWbRPaUDNylZWAP/tHXQemmi5SrQvIOnPn
kIA1ts5C8UzggvymXApv5Hmught08snLylwCoPHkgYdFPKWv3W8DQ0JiH/mofn7Z
vzi2hFkf8YST6Q==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:39 2025 by rpki-client