Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
File: 9NwmxibFHF3vbyRm849VslApZC8.mft (raw, json)
Hash identifier: G82JkraHcM9e7EdGsKKpsWsSpccDMg2VWYpybU88Lc8=
Subject key identifier: ED:95:63:32:23:B6:EB:E1:66:0C:9A:6C:C2:6B:91:47:FC:1E:EC:6A
Authority key identifier: F4:DC:26:C6:26:C5:1C:5D:EF:6F:24:66:F3:8F:55:B2:50:29:64:2F
Certificate issuer: /CN=f4dc26c626c51c5def6f2466f38f55b25029642f
Certificate serial: 0199FBEBB446D27007C4AF74A3ECF81E736F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
Manifest number: 0F4D
Signing time: Sun 19 Oct 2025 10:02:32 +0000
Manifest this update: Sun 19 Oct 2025 10:02:32 +0000
Manifest next update: Mon 20 Oct 2025 10:02:32 +0000
Files and hashes: 1: 9NwmxibFHF3vbyRm849VslApZC8.crl (hash: mtpzK0xXLhzVz5hQgjl4z3skcF2RgCuwoqbBub5MxKk=)
2: XI2V1xAOtuCnHnEsCZ4HB4sk5c0.roa (hash: NGuYGkHyS6sZ+OmDpCbd7Xg31/u7/ppig2sfjfcm+Ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b4:46:d2:70:07:c4:af:74:a3:ec:f8:1e:73:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dc26c626c51c5def6f2466f38f55b25029642f
Validity
Not Before: Oct 19 10:02:32 2025 GMT
Not After : Oct 20 10:02:32 2025 GMT
Subject: CN=ed95633223b6ebe1660c9a6cc26b9147fc1eec6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e5:f5:4c:e6:c1:bc:0a:19:df:6b:b8:1a:36:
41:20:fd:2f:1e:b6:a1:71:8a:5f:5d:ed:0b:cd:68:
03:06:05:e9:58:93:c0:1b:2e:f7:79:82:a8:6e:61:
de:09:68:4b:56:7a:fa:7b:26:8c:2f:b6:2e:3a:33:
ac:a0:7a:eb:09:6f:a1:a4:11:68:f4:12:43:db:9e:
b6:73:c1:79:5b:fa:9b:fa:ba:05:71:e5:2d:b1:20:
d1:38:2e:3e:16:ee:99:73:10:57:fc:b3:67:d3:f6:
5b:41:5c:5e:cb:ee:f4:a2:f5:c0:74:ee:d3:04:7d:
47:36:0f:39:55:a3:51:ba:d4:41:32:16:8b:1c:23:
c6:90:4f:21:98:32:b4:9c:85:a4:3f:fb:05:ad:71:
21:db:18:f1:98:3c:9e:b5:4a:18:29:8a:95:ea:2b:
d2:3b:b5:a6:67:66:a2:b5:7b:b7:ba:0a:54:75:0d:
44:f0:4d:21:31:5e:64:07:b1:aa:0e:4c:bc:20:81:
fa:25:26:73:69:99:cc:4d:6f:3b:4a:7d:a3:65:76:
b9:cf:5d:36:68:26:a1:e1:68:ae:ca:7b:5d:fb:8c:
f8:04:d6:01:a7:8c:74:03:eb:ff:0a:fd:3a:6d:f8:
49:b4:3c:b1:d6:2a:86:4e:55:6f:85:3d:1f:36:b4:
2c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:95:63:32:23:B6:EB:E1:66:0C:9A:6C:C2:6B:91:47:FC:1E:EC:6A
X509v3 Authority Key Identifier:
keyid:F4:DC:26:C6:26:C5:1C:5D:EF:6F:24:66:F3:8F:55:B2:50:29:64:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:95:f4:59:e5:e9:cf:58:a9:d6:99:4a:a8:f7:a7:ae:0a:e8:
d4:0d:cb:1b:3e:28:cb:07:5e:c5:a9:28:91:83:6a:db:62:3f:
9a:b1:88:e9:a8:87:6f:4a:29:33:74:a4:5d:8c:63:76:7a:cf:
eb:6a:cc:4f:cb:f6:73:05:c5:f9:97:9a:ab:6a:88:06:a5:67:
14:c7:4b:8d:04:3b:45:ef:77:fd:c8:55:bd:3b:95:d0:d0:43:
9c:ab:1c:b2:8c:21:0b:79:d9:28:fd:01:17:ab:c4:39:da:9e:
9d:57:3e:dd:73:a7:7a:55:1b:f5:8f:3d:d7:66:68:d7:49:87:
2f:0e:5a:c4:f7:e6:98:34:87:98:51:c1:1d:fe:4e:9a:7e:b9:
9d:17:cd:68:79:21:f1:e2:e9:2d:41:36:ac:18:fa:fb:bf:1f:
a4:14:6f:fa:a9:45:76:2d:4c:91:28:39:05:09:5e:09:b7:5a:
4a:8d:a4:c7:d1:c4:54:5e:ef:3a:f7:15:69:f1:30:35:aa:9a:
13:f8:2b:48:43:38:e5:cd:b9:5a:49:f0:17:77:dd:8b:52:58:
e7:94:e5:8d:50:c5:c5:d8:53:25:ab:05:5d:e8:3b:c6:00:e0:
18:18:5c:ef:b5:d1:09:00:0a:6e:77:06:20:6d:35:f6:ea:49:
b0:39:3f:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn767RG0nAHxK90o+z4HnNvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZGMyNmM2MjZjNTFjNWRlZjZmMjQ2NmYzOGY1NWIyNTAy
OTY0MmYwHhcNMjUxMDE5MTAwMjMyWhcNMjUxMDIwMTAwMjMyWjAzMTEwLwYDVQQD
EyhlZDk1NjMzMjIzYjZlYmUxNjYwYzlhNmNjMjZiOTE0N2ZjMWVlYzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+X1TObBvAoZ32u4GjZBIP0vHrah
cYpfXe0LzWgDBgXpWJPAGy73eYKobmHeCWhLVnr6eyaML7YuOjOsoHrrCW+hpBFo
9BJD2562c8F5W/qb+roFceUtsSDROC4+Fu6ZcxBX/LNn0/ZbQVxey+70ovXAdO7T
BH1HNg85VaNRutRBMhaLHCPGkE8hmDK0nIWkP/sFrXEh2xjxmDyetUoYKYqV6ivS
O7WmZ2aitXu3ugpUdQ1E8E0hMV5kB7GqDky8IIH6JSZzaZnMTW87Sn2jZXa5z102
aCah4Wiuyntd+4z4BNYBp4x0A+v/Cv06bfhJtDyx1iqGTlVvhT0fNrQsXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2VYzIjtuvhZgyabMJrkUf8HuxqMB8GA1UdIwQY
MBaAFPTcJsYmxRxd728kZvOPVbJQKWQvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU53bXhpYkZIRjN2YnlSbTg0OVZzbEFwWkM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wODc5ZDgtZjIxNi00NWFiLWJmODct
MjNlMWRhZGYxMDZjLzEvOU53bXhpYkZIRjN2YnlSbTg0OVZzbEFwWkM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wODc5ZDgtZjIxNi00NWFiLWJmODctMjNlMWRhZGYxMDZj
LzEvOU53bXhpYkZIRjN2YnlSbTg0OVZzbEFwWkM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdpX0WeXp
z1ip1plKqPenrgro1A3LGz4oywdexakokYNq22I/mrGI6aiHb0opM3SkXYxjdnrP
62rMT8v2cwXF+Zeaq2qIBqVnFMdLjQQ7Re93/chVvTuV0NBDnKscsowhC3nZKP0B
F6vEOdqenVc+3XOnelUb9Y8912Zo10mHLw5axPfmmDSHmFHBHf5Omn65nRfNaHkh
8eLpLUE2rBj6+78fpBRv+qlFdi1MkSg5BQleCbdaSo2kx9HEVF7vOvcVafEwNaqa
E/grSEM45c25WknwF3fdi1JY55TljVDFxdhTJasFXeg7xgDgGBhc77XRCQAKbncG
IG019upJsDk/lg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:37:55 2025 by rpki-client