Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
File: 9pGrMkX_iVpy3W_wdDw3e28PiaY.mft (raw, json)
Hash identifier: f45dkDFSe8UzCkTv81ezzpiTMm6frp59MegOm0rTki0=
Subject key identifier: D7:CC:AF:9C:8C:5B:FB:26:B2:05:CD:37:0C:48:37:D7:12:2F:0D:B9
Authority key identifier: F6:91:AB:32:45:FF:89:5A:72:DD:6F:F0:74:3C:37:7B:6F:0F:89:A6
Certificate issuer: /CN=f691ab3245ff895a72dd6ff0743c377b6f0f89a6
Certificate serial: 019A01EC331AB854D459B2C0BF976A44751D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
Manifest number: 0804
Signing time: Mon 20 Oct 2025 14:00:47 +0000
Manifest this update: Mon 20 Oct 2025 14:00:47 +0000
Manifest next update: Tue 21 Oct 2025 14:00:47 +0000
Files and hashes: 1: 9pGrMkX_iVpy3W_wdDw3e28PiaY.crl (hash: lQSmkB+SfUOw33b3/rCK43XumVL/wVWI1YFyOtpFSOE=)
2: NNs7_agCq4a5LGK9vlJAbRyPMSw.roa (hash: /RavIGbCYx2zogfJiuXee/WpGjlrh9UdwbzPF7/qVAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:ec:33:1a:b8:54:d4:59:b2:c0:bf:97:6a:44:75:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f691ab3245ff895a72dd6ff0743c377b6f0f89a6
Validity
Not Before: Oct 20 14:00:47 2025 GMT
Not After : Oct 21 14:00:47 2025 GMT
Subject: CN=d7ccaf9c8c5bfb26b205cd370c4837d7122f0db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bf:f0:d5:2c:3c:bf:dc:2b:80:b6:1b:4d:aa:
06:64:ad:b5:57:62:d8:76:b9:2a:91:57:4e:2a:a8:
ac:84:82:28:0e:a5:f4:4b:d0:fe:f6:f9:e3:1a:e5:
ef:09:f2:e9:66:fc:ba:a1:fd:b5:a1:9b:3a:13:fb:
9e:d5:14:3d:65:61:08:b3:b7:2c:1e:b9:a1:c7:0a:
89:2d:3d:0d:fc:f6:25:f9:52:d6:dc:f9:e9:bf:41:
f8:cf:00:a3:bf:b5:61:88:cc:57:e6:22:dd:24:4a:
3f:74:8b:10:d2:25:96:32:11:e5:79:0d:44:d3:b0:
84:76:21:40:52:a5:0a:da:20:33:49:de:66:59:bf:
fa:59:6f:cf:a9:b3:e7:77:5e:6c:c2:0b:75:c5:fe:
49:de:8a:54:2b:58:25:10:84:94:81:1f:7d:9e:1f:
16:da:31:c3:fe:45:52:1e:c7:21:0c:49:26:4c:06:
0b:a5:54:e2:00:7c:79:f4:ce:21:5b:57:29:72:5d:
2b:b2:af:2d:76:68:8f:e2:7e:89:ba:09:81:42:35:
e5:23:af:06:11:12:1c:c8:06:fe:10:95:81:4e:9c:
33:33:fa:cb:70:89:04:70:0f:ef:53:9a:f6:3e:14:
74:7e:6d:11:16:1c:2e:7e:54:f4:f2:28:d3:ee:5d:
9c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CC:AF:9C:8C:5B:FB:26:B2:05:CD:37:0C:48:37:D7:12:2F:0D:B9
X509v3 Authority Key Identifier:
keyid:F6:91:AB:32:45:FF:89:5A:72:DD:6F:F0:74:3C:37:7B:6F:0F:89:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:30:2c:a2:48:15:f0:ef:ed:4e:8c:47:dd:bf:c0:e1:9d:30:
e7:ad:ea:fb:7e:3a:f3:94:7a:d2:17:6c:6e:df:70:8d:c2:69:
06:cd:2c:4c:97:ec:ea:35:0f:04:d0:bd:9f:ca:ca:1a:10:71:
fd:a5:9d:b0:2b:49:a9:65:6a:c8:f5:12:67:78:56:ca:c2:11:
3a:bc:33:45:3e:7d:bc:16:27:85:3f:ae:73:4b:ac:20:a5:1d:
63:1c:b5:06:58:25:00:18:e9:e5:f9:2e:ad:51:18:d0:70:ce:
47:29:aa:72:6a:04:40:df:53:8c:79:32:40:f4:7a:38:72:9b:
e7:03:40:7b:cf:3b:63:b0:9f:b1:a2:fa:99:7b:30:e4:f2:ac:
96:c8:28:8b:05:33:e6:b4:23:ee:fd:da:3f:ec:99:70:9c:0f:
ae:e4:a3:d5:d4:e5:5f:b3:63:b5:8f:65:92:b8:6c:21:3c:d3:
3c:51:c0:94:bb:f1:93:26:c0:3f:de:dc:01:44:7b:e4:50:d9:
99:62:dc:62:14:58:dc:d6:5d:5e:4a:a1:1a:21:9e:d2:4a:f4:
4c:3b:de:51:d5:fd:b1:d9:f2:84:32:ad:ca:08:22:67:69:17:
54:1b:7d:f1:6b:4d:c9:29:01:bf:60:3a:94:6d:52:68:61:fe:
fe:73:df:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoB7DMauFTUWbLAv5dqRHUdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OTFhYjMyNDVmZjg5NWE3MmRkNmZmMDc0M2MzNzdiNmYw
Zjg5YTYwHhcNMjUxMDIwMTQwMDQ3WhcNMjUxMDIxMTQwMDQ3WjAzMTEwLwYDVQQD
EyhkN2NjYWY5YzhjNWJmYjI2YjIwNWNkMzcwYzQ4MzdkNzEyMmYwZGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7/w1Sw8v9wrgLYbTaoGZK21V2LY
drkqkVdOKqishIIoDqX0S9D+9vnjGuXvCfLpZvy6of21oZs6E/ue1RQ9ZWEIs7cs
HrmhxwqJLT0N/PYl+VLW3Pnpv0H4zwCjv7VhiMxX5iLdJEo/dIsQ0iWWMhHleQ1E
07CEdiFAUqUK2iAzSd5mWb/6WW/PqbPnd15swgt1xf5J3opUK1glEISUgR99nh8W
2jHD/kVSHschDEkmTAYLpVTiAHx59M4hW1cpcl0rsq8tdmiP4n6JugmBQjXlI68G
ERIcyAb+EJWBTpwzM/rLcIkEcA/vU5r2PhR0fm0RFhwuflT08ijT7l2cBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfMr5yMW/smsgXNNwxIN9cSLw25MB8GA1UdIwQY
MBaAFPaRqzJF/4lact1v8HQ8N3tvD4mmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXBHck1rWF9pVnB5M1dfd2REdzNlMjhQaWFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yNDRhNzEtZTZhZi00OTA1LWJmNjUt
ZGZlM2M0YzUyODhjLzEvOXBHck1rWF9pVnB5M1dfd2REdzNlMjhQaWFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8yNDRhNzEtZTZhZi00OTA1LWJmNjUtZGZlM2M0YzUyODhj
LzEvOXBHck1rWF9pVnB5M1dfd2REdzNlMjhQaWFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXjAsokgV
8O/tToxH3b/A4Z0w563q+34685R60hdsbt9wjcJpBs0sTJfs6jUPBNC9n8rKGhBx
/aWdsCtJqWVqyPUSZ3hWysIROrwzRT59vBYnhT+uc0usIKUdYxy1BlglABjp5fku
rVEY0HDORymqcmoEQN9TjHkyQPR6OHKb5wNAe887Y7CfsaL6mXsw5PKslsgoiwUz
5rQj7v3aP+yZcJwPruSj1dTlX7NjtY9lkrhsITzTPFHAlLvxkybAP97cAUR75FDZ
mWLcYhRY3NZdXkqhGiGe0kr0TDveUdX9sdnyhDKtyggiZ2kXVBt98WtNySkBv2A6
lG1SaGH+/nPfBA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:32:48 2025 by rpki-client