Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
File: 9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft (raw, json)
Hash identifier: Ug/k8zVCHlGLIHv78t2T5eWtx2oamkNDHEALATh9QoY=
Subject key identifier: F5:CC:E2:5D:51:BB:B0:75:48:F4:46:E2:1F:C8:EC:A7:CB:50:94:4B
Authority key identifier: F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58
Certificate issuer: /CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
Certificate serial: 0199FB7CED628E2842D70B67ACBFAEEB7C97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
Manifest number: 0B56
Signing time: Sun 19 Oct 2025 08:01:32 +0000
Manifest this update: Sun 19 Oct 2025 08:01:32 +0000
Manifest next update: Mon 20 Oct 2025 08:01:32 +0000
Files and hashes: 1: 9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl (hash: bfc2cQXnOuTYU1//lN8KA3s7YYjw3juU+hYkTTTc5yo=)
2: JFSPkHUXD6uekiRT14OFUV3SRJ8.roa (hash: d66KNl4Y3abt7U8S0mMyC51IECrPTJ0e2/YrGhdvTTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ed:62:8e:28:42:d7:0b:67:ac:bf:ae:eb:7c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
Validity
Not Before: Oct 19 08:01:32 2025 GMT
Not After : Oct 20 08:01:32 2025 GMT
Subject: CN=f5cce25d51bbb07548f446e21fc8eca7cb50944b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0f:f5:71:ca:a0:3e:01:6d:14:37:95:06:2c:
43:a0:02:f9:b9:2f:76:0f:30:7b:d8:6a:5f:6a:e1:
9f:d3:35:25:ad:5b:d8:f6:92:c1:24:54:25:b3:ee:
35:53:8f:27:a7:4b:1c:b5:ea:a8:11:2c:f9:16:91:
31:12:c0:9c:d9:fd:3a:35:bf:df:78:29:08:c0:ee:
ee:67:6e:83:92:e2:e6:81:31:35:62:6c:b3:d4:56:
1f:39:0f:d0:70:b9:69:de:57:83:12:2d:08:73:83:
73:4a:f3:a5:de:9b:a6:dc:2a:e2:9e:7a:be:a6:a0:
d0:29:32:23:cc:a4:5e:a6:9c:34:c2:43:9b:66:cc:
5a:04:40:89:56:cb:71:d2:60:26:14:3f:02:e5:28:
c2:c5:8e:dc:14:f5:70:ac:d9:45:98:c2:2c:c2:b8:
99:32:9a:1a:8c:b0:5a:36:4d:2c:56:02:79:28:b7:
94:e8:51:b2:7f:83:18:b8:3c:a5:ac:61:97:be:ae:
93:82:29:a4:19:cf:6e:5c:1d:9a:09:22:05:ea:9f:
2a:e7:b9:88:f7:ad:ae:f5:8c:7d:e6:52:5a:d0:1f:
cb:f5:98:71:3a:54:a7:f1:29:6d:c1:e2:be:8a:83:
bc:4e:09:cc:c7:c4:48:12:7e:01:3b:84:b4:50:44:
93:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CC:E2:5D:51:BB:B0:75:48:F4:46:E2:1F:C8:EC:A7:CB:50:94:4B
X509v3 Authority Key Identifier:
keyid:F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e6:92:54:93:a0:d4:64:9a:2a:06:1f:ba:8e:73:5a:d2:88:
84:55:ac:8d:93:6c:6d:91:ad:0c:b2:b7:52:f9:b0:72:bb:e2:
9c:4d:ee:ca:3e:b0:30:b6:df:c9:2a:de:e7:e7:9f:15:73:7b:
8e:6f:1b:d4:90:0c:50:dd:1f:b6:ad:9e:23:98:8c:79:23:6e:
92:6f:f7:56:76:8f:82:47:f7:c3:32:ed:0b:d1:7e:ec:a4:36:
cd:7e:75:40:67:63:82:7a:89:37:68:57:4c:03:29:7a:19:51:
ac:20:51:51:5d:83:a3:5b:c8:aa:31:1f:39:19:71:52:f3:6f:
79:40:2e:0c:79:f8:c8:ee:3c:8b:88:1a:dc:eb:18:9b:9f:2b:
bc:0c:fe:88:4f:b9:3f:e8:0d:38:e9:07:0f:37:85:5f:98:db:
a7:72:91:ef:96:6c:1a:7f:f1:f6:98:17:2c:08:f1:dc:c6:a1:
c9:e8:53:9e:d3:56:1a:83:35:1a:9e:4c:fb:32:7d:80:5d:f8:
8f:5c:cc:6d:e3:c0:c9:15:ad:a3:45:4d:56:10:12:e0:9c:1c:
d0:36:f3:ac:f6:fb:3e:f3:c4:f7:e6:3e:04:14:45:14:f9:40:
dd:23:5d:f6:d3:78:05:2b:01:39:78:35:06:34:25:d3:14:31:
f2:5e:84:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fO1ijihC1wtnrL+u63yXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0Njc0YjZhYjNkNWM2NzQzZDAwNGVjMDkyMGEwMzcxY2Uw
MTk3NTgwHhcNMjUxMDE5MDgwMTMyWhcNMjUxMDIwMDgwMTMyWjAzMTEwLwYDVQQD
EyhmNWNjZTI1ZDUxYmJiMDc1NDhmNDQ2ZTIxZmM4ZWNhN2NiNTA5NDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApA/1ccqgPgFtFDeVBixDoAL5uS92
DzB72GpfauGf0zUlrVvY9pLBJFQls+41U48np0scteqoESz5FpExEsCc2f06Nb/f
eCkIwO7uZ26DkuLmgTE1Ymyz1FYfOQ/QcLlp3leDEi0Ic4NzSvOl3pum3Crinnq+
pqDQKTIjzKReppw0wkObZsxaBECJVstx0mAmFD8C5SjCxY7cFPVwrNlFmMIswriZ
MpoajLBaNk0sVgJ5KLeU6FGyf4MYuDylrGGXvq6TgimkGc9uXB2aCSIF6p8q57mI
962u9Yx95lJa0B/L9ZhxOlSn8SltweK+ioO8TgnMx8RIEn4BO4S0UESTUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPXM4l1Ru7B1SPRG4h/I7KfLUJRLMB8GA1UdIwQY
MBaAFPRnS2qz1cZ0PQBOwJIKA3HOAZdYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUdkTGFyUFZ4blE5QUU3QWtnb0RjYzRCbDFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS83NDhlZGUtZGUzNy00MzA4LTg4NzIt
Mzk1NzBkNmYwMDllLzEvOUdkTGFyUFZ4blE5QUU3QWtnb0RjYzRCbDFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS83NDhlZGUtZGUzNy00MzA4LTg4NzItMzk1NzBkNmYwMDll
LzEvOUdkTGFyUFZ4blE5QUU3QWtnb0RjYzRCbDFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPeaSVJOg
1GSaKgYfuo5zWtKIhFWsjZNsbZGtDLK3UvmwcrvinE3uyj6wMLbfySre5+efFXN7
jm8b1JAMUN0ftq2eI5iMeSNukm/3VnaPgkf3wzLtC9F+7KQ2zX51QGdjgnqJN2hX
TAMpehlRrCBRUV2Do1vIqjEfORlxUvNveUAuDHn4yO48i4ga3OsYm58rvAz+iE+5
P+gNOOkHDzeFX5jbp3KR75ZsGn/x9pgXLAjx3MahyehTntNWGoM1Gp5M+zJ9gF34
j1zMbePAyRWto0VNVhAS4Jwc0DbzrPb7PvPE9+Y+BBRFFPlA3SNd9tN4BSsBOXg1
BjQl0xQx8l6EZQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:05 2025 by rpki-client