Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
File: cX9V88YAexy91-ggiQVpAGdXs2Y.mft (raw, json)
Hash identifier: 3ST05A4ggv8V1F5VO19fsHQu9AhYboYftrGDvDMndDY=
Subject key identifier: 13:A4:53:C9:52:0D:B1:79:E7:9B:88:70:04:66:C8:10:59:92:FA:E5
Authority key identifier: 71:7F:55:F3:C6:00:7B:1C:BD:D7:E8:20:89:05:69:00:67:57:B3:66
Certificate issuer: /CN=717f55f3c6007b1cbdd7e820890569006757b366
Certificate serial: 019A03A426EF1762CD36E826738A8F74CBFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
Manifest number: 0E75
Signing time: Mon 20 Oct 2025 22:01:20 +0000
Manifest this update: Mon 20 Oct 2025 22:01:20 +0000
Manifest next update: Tue 21 Oct 2025 22:01:20 +0000
Files and hashes: 1: BNamB5vKS8VYoQEENNZLcbAD0yY.roa (hash: AZc2M6A0pF1sMbjRSCCXbLIDgidX2dUycGenbS2p6qA=)
2: cX9V88YAexy91-ggiQVpAGdXs2Y.crl (hash: V7JGkXcE5sWu0XgafEmBd9iE3QJZzTBcqVuFhrcDB+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a4:26:ef:17:62:cd:36:e8:26:73:8a:8f:74:cb:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=717f55f3c6007b1cbdd7e820890569006757b366
Validity
Not Before: Oct 20 22:01:20 2025 GMT
Not After : Oct 21 22:01:20 2025 GMT
Subject: CN=13a453c9520db179e79b88700466c8105992fae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:09:f3:8c:94:1f:46:9e:06:db:e8:62:ec:37:
ce:cb:c5:54:6e:ed:ae:4c:61:4d:93:06:4f:cb:86:
be:f7:9e:f0:dc:ac:90:8d:83:df:45:75:b0:65:07:
e4:78:a0:33:ff:e6:a2:f6:38:87:99:c4:75:81:2f:
43:9a:11:87:48:74:b7:b6:fa:ca:c8:d8:23:2e:45:
b1:16:ac:21:c1:46:e0:22:f2:72:38:dd:a2:0b:0e:
c9:4d:ae:db:3c:d5:4b:93:d3:6b:02:bc:81:50:4a:
b4:63:20:57:dd:3e:37:6c:a7:68:d3:c6:5a:7d:10:
c9:bb:71:ac:a4:eb:1b:c0:f2:fc:1c:dd:58:7a:5a:
c5:29:88:44:af:a4:f9:c0:0f:70:e8:9d:76:c2:c1:
f5:d2:9d:a3:20:dd:56:66:05:9d:6d:63:51:3c:d2:
63:6a:b2:ab:c8:b8:b2:5f:ac:d7:50:80:99:eb:7f:
5f:fd:f8:e6:b8:8e:d2:4c:51:4f:7d:92:fc:31:38:
d1:4c:c1:7a:c9:0a:65:4e:6f:62:2a:97:c9:51:53:
17:e9:38:d6:b7:3a:a1:3e:70:e6:4f:d9:42:a6:0f:
5a:50:46:b4:21:b2:05:e2:f1:bf:40:1c:17:c3:1a:
b1:86:a5:0a:c9:68:f5:2f:e3:ea:75:90:7d:23:98:
c0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A4:53:C9:52:0D:B1:79:E7:9B:88:70:04:66:C8:10:59:92:FA:E5
X509v3 Authority Key Identifier:
keyid:71:7F:55:F3:C6:00:7B:1C:BD:D7:E8:20:89:05:69:00:67:57:B3:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:01:44:78:ee:5f:05:e6:a9:1e:1e:f0:97:eb:4f:23:b1:2c:
d9:72:35:be:c7:dd:ff:02:94:9e:a4:7b:b3:28:66:e1:e7:bd:
75:1f:86:b9:e3:09:73:42:91:e4:ba:84:d1:41:01:b3:5b:6a:
bd:43:48:85:2d:75:5e:f3:db:61:8d:7b:90:43:bd:c6:04:57:
92:3a:1b:b8:f9:73:2a:7c:5d:92:61:ad:f3:7e:06:3d:a2:03:
d8:55:00:21:8b:ef:fe:31:2c:50:47:35:64:d5:75:ff:52:ad:
10:0d:1c:b5:fa:b2:64:24:e4:28:86:74:41:60:31:c7:8e:c0:
dc:83:1e:1c:96:e2:84:83:be:05:c8:a0:13:8c:2c:3e:5c:a2:
15:70:4f:d0:f6:f6:ce:b6:93:1c:8b:f4:a3:6d:38:61:14:1b:
bd:19:4b:c3:12:62:f3:8b:e1:3d:88:09:98:89:2d:3f:92:ef:
8d:96:19:8d:e7:7e:3f:2c:27:8f:f7:b4:11:69:04:f2:ee:b8:
55:fc:df:bf:54:9c:22:82:83:87:d6:aa:d0:0a:43:b3:21:55:
af:61:b1:f3:5f:6d:7f:a8:ee:41:60:81:6c:55:75:62:9e:63:
3d:c3:05:b5:4e:5c:23:66:5a:36:6d:cd:5b:30:69:42:26:f4:
42:ee:d0:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoDpCbvF2LNNugmc4qPdMv7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxN2Y1NWYzYzYwMDdiMWNiZGQ3ZTgyMDg5MDU2OTAwNjc1
N2IzNjYwHhcNMjUxMDIwMjIwMTIwWhcNMjUxMDIxMjIwMTIwWjAzMTEwLwYDVQQD
EygxM2E0NTNjOTUyMGRiMTc5ZTc5Yjg4NzAwNDY2YzgxMDU5OTJmYWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgnzjJQfRp4G2+hi7DfOy8VUbu2u
TGFNkwZPy4a+957w3KyQjYPfRXWwZQfkeKAz/+ai9jiHmcR1gS9DmhGHSHS3tvrK
yNgjLkWxFqwhwUbgIvJyON2iCw7JTa7bPNVLk9NrAryBUEq0YyBX3T43bKdo08Za
fRDJu3GspOsbwPL8HN1YelrFKYhEr6T5wA9w6J12wsH10p2jIN1WZgWdbWNRPNJj
arKryLiyX6zXUICZ639f/fjmuI7STFFPfZL8MTjRTMF6yQplTm9iKpfJUVMX6TjW
tzqhPnDmT9lCpg9aUEa0IbIF4vG/QBwXwxqxhqUKyWj1L+PqdZB9I5jAdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOkU8lSDbF555uIcARmyBBZkvrlMB8GA1UdIwQY
MBaAFHF/VfPGAHscvdfoIIkFaQBnV7NmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1g5Vjg4WUFleHk5MS1nZ2lRVnBBR2RYczJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iZWM0MWEtZDlmOC00NTQ1LThlNDgt
NjczNjQwMjMzNjY1LzEvY1g5Vjg4WUFleHk5MS1nZ2lRVnBBR2RYczJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9iZWM0MWEtZDlmOC00NTQ1LThlNDgtNjczNjQwMjMzNjY1
LzEvY1g5Vjg4WUFleHk5MS1nZ2lRVnBBR2RYczJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjAFEeO5f
BeapHh7wl+tPI7Es2XI1vsfd/wKUnqR7syhm4ee9dR+GueMJc0KR5LqE0UEBs1tq
vUNIhS11XvPbYY17kEO9xgRXkjobuPlzKnxdkmGt834GPaID2FUAIYvv/jEsUEc1
ZNV1/1KtEA0ctfqyZCTkKIZ0QWAxx47A3IMeHJbihIO+BcigE4wsPlyiFXBP0Pb2
zraTHIv0o204YRQbvRlLwxJi84vhPYgJmIktP5LvjZYZjed+Pywnj/e0EWkE8u64
Vfzfv1ScIoKDh9aq0ApDsyFVr2Gx819tf6juQWCBbFV1Yp5jPcMFtU5cI2ZaNm3N
WzBpQib0Qu7QMA==
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:33:59 2025 by rpki-client