Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
File: _9YayMVuOP32EjgDbHNUcnADRjE.mft (raw, json)
Hash identifier: ab9wK+R2i6QO/okvxnNSRXOrOOVHVqBAsvfWoEnwFGk=
Subject key identifier: 76:6D:B7:7B:1E:76:01:39:CC:A6:BB:9D:24:98:D7:06:04:B5:72:9A
Authority key identifier: FF:D6:1A:C8:C5:6E:38:FD:F6:12:38:03:6C:73:54:72:70:03:46:31
Certificate issuer: /CN=ffd61ac8c56e38fdf61238036c73547270034631
Certificate serial: 0199FEEBF2954CA431DD48D9A701B48298DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9YayMVuOP32EjgDbHNUcnADRjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 00:01:39 +0000
Manifest this update: Mon 20 Oct 2025 00:01:39 +0000
Manifest next update: Tue 21 Oct 2025 00:01:39 +0000
Files and hashes: 1: _9YayMVuOP32EjgDbHNUcnADRjE.crl (hash: Xvcil0pA/kqcz4dmpDifWQL/KiVyXbjvtrtle3YiIXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9YayMVuOP32EjgDbHNUcnADRjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:f2:95:4c:a4:31:dd:48:d9:a7:01:b4:82:98:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffd61ac8c56e38fdf61238036c73547270034631
Validity
Not Before: Oct 20 00:01:39 2025 GMT
Not After : Oct 21 00:01:39 2025 GMT
Subject: CN=766db77b1e760139cca6bb9d2498d70604b5729a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:38:cb:aa:86:a4:3b:15:e3:71:63:20:dd:37:
50:9f:3f:66:7e:64:e1:f8:a3:32:ef:69:7a:73:ec:
d2:66:6d:f9:ce:65:27:27:c7:fc:10:5c:42:bb:98:
76:b0:7c:37:d8:13:1d:e2:f4:f8:99:bc:1e:85:b5:
4e:ac:c0:32:3e:23:02:7a:79:91:0f:4c:16:c3:d3:
fa:8b:06:e3:24:82:83:5f:ff:81:d1:05:72:b0:e7:
b3:e9:0d:81:29:23:48:98:f2:16:9d:0c:17:b1:d6:
da:a7:4c:7b:f3:2c:1a:65:5d:11:6d:b2:19:39:9d:
cc:2b:c7:43:9b:09:7d:f7:fe:60:0e:4d:0d:36:80:
8d:1b:93:74:dc:b1:ca:92:91:8b:0d:fd:ca:8c:38:
0a:df:2e:7d:43:40:e1:76:b5:cd:fe:8f:37:7b:bf:
e0:cc:dc:c2:a9:d5:28:95:e7:e4:da:7e:e2:d6:66:
d4:40:b2:89:c0:45:6d:e2:96:84:ae:af:a4:d8:20:
57:9d:d8:c3:fc:a0:47:00:15:10:0d:d8:83:df:fe:
bb:87:71:65:c9:a1:5c:23:48:48:6d:b5:e7:b7:b1:
43:37:9c:0c:ad:b3:6e:71:56:3a:76:8a:6b:48:8e:
38:0b:9d:eb:22:4d:e9:66:31:5c:92:0d:c5:ee:1e:
07:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:6D:B7:7B:1E:76:01:39:CC:A6:BB:9D:24:98:D7:06:04:B5:72:9A
X509v3 Authority Key Identifier:
keyid:FF:D6:1A:C8:C5:6E:38:FD:F6:12:38:03:6C:73:54:72:70:03:46:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9YayMVuOP32EjgDbHNUcnADRjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:4f:7f:8f:0f:01:b1:b3:10:e8:e9:63:5b:69:98:3f:86:78:
39:29:2e:02:00:c9:cf:de:58:78:e3:78:77:a6:70:00:fc:9a:
54:74:01:84:a6:13:39:49:c3:00:fc:d0:e5:43:e7:c6:f7:43:
4d:3e:0a:03:c3:d5:45:b7:ba:60:11:35:0f:c5:ec:6e:9e:77:
d2:29:1d:b7:0f:2a:ac:99:f0:f2:8b:d9:7d:b2:ce:78:f9:69:
ad:b8:ad:ae:3b:70:82:1b:f6:af:01:a0:cf:05:4a:fb:9d:80:
b4:86:1c:30:a0:c2:76:27:4d:08:4e:aa:01:bc:65:fd:53:64:
84:8a:30:19:8f:af:0e:13:50:a1:31:2b:c7:8f:c8:3e:26:5e:
dc:7d:80:f8:da:57:7c:78:71:a4:03:38:86:7d:51:e4:25:7b:
94:13:cc:4d:84:ca:e4:48:fd:ec:26:f4:b3:0e:99:08:10:be:
16:0e:48:cf:5f:59:b4:d9:28:7d:cc:29:b6:d8:a4:c4:07:af:
56:f8:ab:78:8e:3c:17:8d:e2:05:29:62:ce:b6:ba:b1:9e:52:
30:1d:51:1d:60:c4:04:41:02:02:2c:4c:d2:99:21:86:17:76:
08:ab:df:61:bb:98:e4:48:42:01:66:50:f1:58:e0:24:db:dc:
5c:df:f6:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+6/KVTKQx3UjZpwG0gpjdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZDYxYWM4YzU2ZTM4ZmRmNjEyMzgwMzZjNzM1NDcyNzAw
MzQ2MzEwHhcNMjUxMDIwMDAwMTM5WhcNMjUxMDIxMDAwMTM5WjAzMTEwLwYDVQQD
Eyg3NjZkYjc3YjFlNzYwMTM5Y2NhNmJiOWQyNDk4ZDcwNjA0YjU3MjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjjLqoakOxXjcWMg3TdQnz9mfmTh
+KMy72l6c+zSZm35zmUnJ8f8EFxCu5h2sHw32BMd4vT4mbwehbVOrMAyPiMCenmR
D0wWw9P6iwbjJIKDX/+B0QVysOez6Q2BKSNImPIWnQwXsdbap0x78ywaZV0RbbIZ
OZ3MK8dDmwl99/5gDk0NNoCNG5N03LHKkpGLDf3KjDgK3y59Q0DhdrXN/o83e7/g
zNzCqdUolefk2n7i1mbUQLKJwEVt4paErq+k2CBXndjD/KBHABUQDdiD3/67h3Fl
yaFcI0hIbbXnt7FDN5wMrbNucVY6doprSI44C53rIk3pZjFckg3F7h4HmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZtt3sedgE5zKa7nSSY1wYEtXKaMB8GA1UdIwQY
MBaAFP/WGsjFbjj99hI4A2xzVHJwA0YxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzlZYXlNVnVPUDMyRWpnRGJITlVjbkFEUmpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8xNGQ3YjgtYWZjZS00NWExLWIyNzIt
MDRkOTZmYTgzZDA3LzEvXzlZYXlNVnVPUDMyRWpnRGJITlVjbkFEUmpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8xNGQ3YjgtYWZjZS00NWExLWIyNzItMDRkOTZmYTgzZDA3
LzEvXzlZYXlNVnVPUDMyRWpnRGJITlVjbkFEUmpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp09/jw8B
sbMQ6OljW2mYP4Z4OSkuAgDJz95YeON4d6ZwAPyaVHQBhKYTOUnDAPzQ5UPnxvdD
TT4KA8PVRbe6YBE1D8Xsbp530ikdtw8qrJnw8ovZfbLOePlprbitrjtwghv2rwGg
zwVK+52AtIYcMKDCdidNCE6qAbxl/VNkhIowGY+vDhNQoTErx4/IPiZe3H2A+NpX
fHhxpAM4hn1R5CV7lBPMTYTK5Ej97Cb0sw6ZCBC+Fg5Iz19ZtNkofcwpttikxAev
VvireI48F43iBSlizra6sZ5SMB1RHWDEBEECAixM0pkhhhd2CKvfYbuY5EhCAWZQ
8VjgJNvcXN/2eA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:56 2025 by rpki-client