Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
File: k9t6NCzZOS76XNM4lHQcqKW09Cs.mft (raw, json)
Hash identifier: S0mmsYnAUWj+VLFCkJqCnntYBrFY7Fxs7Igmg16qufw=
Subject key identifier: B5:EF:F7:E9:E2:05:85:25:83:D7:21:6C:D2:DB:0E:17:AB:09:95:F4
Authority key identifier: 93:DB:7A:34:2C:D9:39:2E:FA:5C:D3:38:94:74:1C:A8:A5:B4:F4:2B
Certificate issuer: /CN=93db7a342cd9392efa5cd33894741ca8a5b4f42b
Certificate serial: 0199FCC656C6C4116E398F3A4ABE0F7420EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
Manifest number: 13E7
Signing time: Sun 19 Oct 2025 14:01:20 +0000
Manifest this update: Sun 19 Oct 2025 14:01:20 +0000
Manifest next update: Mon 20 Oct 2025 14:01:20 +0000
Files and hashes: 1: C0l1kbYeZRM84TKToVwBlk7pBo4.roa (hash: ICfWfDWeurFnZl2wkXnfN6jvCsTCoCZA5TA91nRjfW4=)
2: k9t6NCzZOS76XNM4lHQcqKW09Cs.crl (hash: fOFS37OJZSwyDRXJ8EVgNlqiKajWAysb52LIAfqKQKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:56:c6:c4:11:6e:39:8f:3a:4a:be:0f:74:20:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93db7a342cd9392efa5cd33894741ca8a5b4f42b
Validity
Not Before: Oct 19 14:01:20 2025 GMT
Not After : Oct 20 14:01:20 2025 GMT
Subject: CN=b5eff7e9e205852583d7216cd2db0e17ab0995f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ef:66:70:cd:da:05:fb:dd:7e:32:d6:4f:47:
73:1e:23:ad:7d:37:53:cc:65:0e:d7:9c:6f:10:7d:
d6:87:6d:d6:f4:08:22:d9:d8:30:8c:38:5d:94:ca:
d7:54:64:3d:1f:0f:46:67:ae:9f:9d:b7:39:ab:a1:
67:98:6b:42:ac:6b:7c:0a:56:14:9d:1e:69:fc:d7:
c7:b3:0a:ed:a1:f1:4e:f5:24:ed:9c:3a:48:3f:6f:
c9:ab:57:dd:b9:df:d8:5c:72:d6:87:f0:65:d5:30:
ae:24:a4:1c:ca:a3:ad:e3:54:6e:19:c3:ba:32:95:
45:a7:c9:56:c0:b6:1c:46:df:be:a7:39:e0:9c:94:
20:36:e0:8d:95:78:b8:67:06:cf:c6:7a:38:35:c9:
bd:c2:a6:1e:e4:36:ea:22:95:27:ec:dc:e3:22:84:
ff:c9:0f:74:cb:00:19:7b:73:40:6f:a7:8a:eb:ea:
a9:75:0c:f3:02:7d:a5:f6:24:bd:47:e0:ed:37:2f:
a1:b1:47:14:60:16:9c:06:c4:ab:8c:07:e9:64:92:
ce:5e:67:aa:7e:f6:83:a6:fb:df:75:da:9b:92:7e:
0c:15:ec:fe:22:ce:9d:45:1a:88:52:8e:19:64:e6:
16:e4:17:56:67:d2:74:48:cb:dd:cc:eb:14:94:c2:
15:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EF:F7:E9:E2:05:85:25:83:D7:21:6C:D2:DB:0E:17:AB:09:95:F4
X509v3 Authority Key Identifier:
keyid:93:DB:7A:34:2C:D9:39:2E:FA:5C:D3:38:94:74:1C:A8:A5:B4:F4:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b0:5e:88:13:d1:2f:75:77:1a:59:4c:00:76:3e:11:0d:7e:
e6:35:79:11:28:5e:87:9a:81:b9:8d:a9:ac:24:b5:c7:fe:20:
82:dc:c4:6d:07:75:ae:f6:1b:5c:df:70:94:ce:5e:28:0b:90:
6c:97:19:7d:c9:39:e9:e8:1a:07:83:e0:7d:3d:7d:0f:db:12:
05:d1:95:b7:7c:a4:ad:68:43:af:e7:ef:62:77:30:b5:9e:d1:
48:40:50:27:de:7f:72:73:27:8d:37:a2:20:fc:37:03:fd:9d:
b5:89:ec:83:f1:09:bd:45:b2:53:ae:3a:ca:7d:10:a0:77:a8:
3e:95:56:c7:dd:04:97:ce:5f:a1:02:b3:6c:75:6d:26:c9:49:
4d:97:15:1f:ad:51:f6:f8:e3:b6:3b:e3:4c:ce:c9:a7:f9:57:
ef:ae:9b:64:88:85:cc:6b:3c:f5:aa:a2:ef:a2:0b:39:57:a3:
91:11:de:e1:c9:0f:ab:0a:dd:1b:ba:69:7a:88:bd:03:00:94:
cb:d6:ba:77:40:ca:5a:50:ce:a1:63:b0:db:ce:e0:cf:82:9b:
bd:5c:75:82:9d:69:1f:6d:16:6f:5c:8a:3f:7f:1f:99:83:e0:
1f:d6:ea:df:38:42:53:53:70:8c:8c:3d:f0:c6:95:1d:8a:06:
ca:72:a8:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xlbGxBFuOY86Sr4PdCDrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZGI3YTM0MmNkOTM5MmVmYTVjZDMzODk0NzQxY2E4YTVi
NGY0MmIwHhcNMjUxMDE5MTQwMTIwWhcNMjUxMDIwMTQwMTIwWjAzMTEwLwYDVQQD
EyhiNWVmZjdlOWUyMDU4NTI1ODNkNzIxNmNkMmRiMGUxN2FiMDk5NWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAze9mcM3aBfvdfjLWT0dzHiOtfTdT
zGUO15xvEH3Wh23W9Agi2dgwjDhdlMrXVGQ9Hw9GZ66fnbc5q6FnmGtCrGt8ClYU
nR5p/NfHswrtofFO9STtnDpIP2/Jq1fdud/YXHLWh/Bl1TCuJKQcyqOt41RuGcO6
MpVFp8lWwLYcRt++pzngnJQgNuCNlXi4ZwbPxno4Ncm9wqYe5DbqIpUn7NzjIoT/
yQ90ywAZe3NAb6eK6+qpdQzzAn2l9iS9R+DtNy+hsUcUYBacBsSrjAfpZJLOXmeq
fvaDpvvfddqbkn4MFez+Is6dRRqIUo4ZZOYW5BdWZ9J0SMvdzOsUlMIVSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXv9+niBYUlg9chbNLbDherCZX0MB8GA1UdIwQY
MBaAFJPbejQs2Tku+lzTOJR0HKiltPQrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazl0Nk5DelpPUzc2WE5NNGxIUWNxS1cwOUNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8zMDhmNTMtOGJmZi00OTkwLThkN2It
ZTcxODVjZGVjY2QzLzEvazl0Nk5DelpPUzc2WE5NNGxIUWNxS1cwOUNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8zMDhmNTMtOGJmZi00OTkwLThkN2ItZTcxODVjZGVjY2Qz
LzEvazl0Nk5DelpPUzc2WE5NNGxIUWNxS1cwOUNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7BeiBPR
L3V3GllMAHY+EQ1+5jV5ESheh5qBuY2prCS1x/4ggtzEbQd1rvYbXN9wlM5eKAuQ
bJcZfck56egaB4PgfT19D9sSBdGVt3ykrWhDr+fvYncwtZ7RSEBQJ95/cnMnjTei
IPw3A/2dtYnsg/EJvUWyU646yn0QoHeoPpVWx90El85foQKzbHVtJslJTZcVH61R
9vjjtjvjTM7Jp/lX766bZIiFzGs89aqi76ILOVejkRHe4ckPqwrdG7ppeoi9AwCU
y9a6d0DKWlDOoWOw287gz4KbvVx1gp1pH20Wb1yKP38fmYPgH9bq3zhCU1NwjIw9
8MaVHYoGynKoqw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:37 2025 by rpki-client