Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
File: 9XGHM6rUPvapm9jZUEog3YkCLo8.mft (raw, json)
Hash identifier: lksGp2dl0pp9vkGsW0dZO4Bpi0I+7PVNZF2baIEs60A=
Subject key identifier: 83:B5:C4:61:CC:25:EE:00:5C:19:6C:5B:7C:EB:72:4F:C8:7C:68:8F
Authority key identifier: F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F
Certificate issuer: /CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f
Certificate serial: 0199FF226F05ADD2A2BC9EA9DF60C3BB34D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
Manifest number: 13E3
Signing time: Mon 20 Oct 2025 01:01:10 +0000
Manifest this update: Mon 20 Oct 2025 01:01:10 +0000
Manifest next update: Tue 21 Oct 2025 01:01:10 +0000
Files and hashes: 1: 9XGHM6rUPvapm9jZUEog3YkCLo8.crl (hash: ksbhIZh6nH5nMpOAf77osG/eGpcOpNZk4cr9z+YpHBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:6f:05:ad:d2:a2:bc:9e:a9:df:60:c3:bb:34:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f
Validity
Not Before: Oct 20 01:01:10 2025 GMT
Not After : Oct 21 01:01:10 2025 GMT
Subject: CN=83b5c461cc25ee005c196c5b7ceb724fc87c688f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c2:52:83:99:ca:27:86:49:9e:c5:e5:4a:74:
a8:32:27:cd:3d:97:bd:f8:ae:1a:23:0d:7d:90:23:
4a:0b:3e:35:91:6d:4e:4d:f9:22:b6:8e:82:82:7c:
d0:a3:23:5b:fd:03:13:4b:dc:e6:36:f3:0e:75:fe:
92:dd:c8:b9:1b:ee:7f:16:ba:58:32:fe:ad:77:79:
fe:52:44:e6:5a:59:b7:2e:75:3b:bd:c0:84:a7:20:
35:83:70:b5:fe:28:cf:e6:f8:ba:13:c4:89:de:d8:
12:f9:73:63:06:60:e4:62:92:9f:18:a7:74:1e:e2:
16:01:c7:8c:b3:db:56:a4:b3:93:e0:82:18:91:25:
d8:c7:f2:a8:d0:44:62:4d:d3:b0:ff:12:7e:9f:f8:
d9:59:e0:72:52:7a:34:60:01:dd:5e:8d:63:f6:01:
c8:cf:6b:e1:89:6a:6c:c2:2a:fa:08:8e:c9:98:a2:
c8:15:21:97:c2:9a:4f:69:34:a1:69:f6:4b:7e:da:
1b:9f:4e:0e:00:6c:b9:d0:a8:95:1e:49:ee:5f:86:
36:70:47:af:78:9b:da:1e:05:e8:c9:bf:a0:4f:05:
21:51:c5:8a:2e:b3:32:7a:3f:dc:ba:79:dc:a7:8e:
77:8a:72:9e:47:45:8e:89:73:8c:6e:70:f5:b9:7f:
25:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B5:C4:61:CC:25:EE:00:5C:19:6C:5B:7C:EB:72:4F:C8:7C:68:8F
X509v3 Authority Key Identifier:
keyid:F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a7:fc:bf:fc:24:cf:c5:c6:22:67:8d:23:39:83:97:3a:b7:
6c:f1:ce:a4:aa:15:de:8b:30:38:b1:14:6f:bb:c8:a4:3f:07:
90:7d:83:70:46:95:b1:09:31:62:e4:4d:e7:a9:ae:58:35:4a:
73:30:a1:bc:3e:7c:e4:bc:c5:79:39:96:9b:3e:84:aa:f9:01:
ef:ed:dc:21:0b:89:03:3a:9f:5c:96:95:06:0b:50:4e:95:7d:
84:7b:e4:8a:0c:05:2b:ce:4e:c4:a3:96:03:a8:45:d8:2f:7a:
1a:8f:19:34:af:44:4d:14:06:fe:06:e2:4d:6d:b1:48:13:d8:
62:e0:0d:73:71:00:22:7d:cb:2d:24:42:95:0c:90:a6:38:5f:
7e:16:19:7d:19:f8:45:48:ca:d8:d9:da:30:b4:0c:e7:52:76:
35:22:60:fe:db:d2:a4:06:4b:04:b4:a5:7f:9d:8a:d1:4f:68:
66:94:0d:1f:b2:70:2d:a6:17:b7:a3:b9:c2:51:60:5e:0e:f6:
47:2a:3e:29:2b:f7:ca:b9:ba:5f:6b:ae:e9:e8:6d:c6:89:b4:
ba:34:fe:97:f1:a3:24:db:5b:3b:f8:ad:fb:6c:49:03:c0:c8:
df:62:38:05:2d:ee:44:14:7e:ce:0e:92:2a:0b:1f:63:0b:df:
ea:49:e3:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/Im8FrdKivJ6p32DDuzTWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NzE4NzMzYWFkNDNlZjZhOTliZDhkOTUwNGEyMGRkODkw
MjJlOGYwHhcNMjUxMDIwMDEwMTEwWhcNMjUxMDIxMDEwMTEwWjAzMTEwLwYDVQQD
Eyg4M2I1YzQ2MWNjMjVlZTAwNWMxOTZjNWI3Y2ViNzI0ZmM4N2M2ODhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscJSg5nKJ4ZJnsXlSnSoMifNPZe9
+K4aIw19kCNKCz41kW1OTfkito6CgnzQoyNb/QMTS9zmNvMOdf6S3ci5G+5/FrpY
Mv6td3n+UkTmWlm3LnU7vcCEpyA1g3C1/ijP5vi6E8SJ3tgS+XNjBmDkYpKfGKd0
HuIWAceMs9tWpLOT4IIYkSXYx/Ko0ERiTdOw/xJ+n/jZWeByUno0YAHdXo1j9gHI
z2vhiWpswir6CI7JmKLIFSGXwppPaTShafZLftobn04OAGy50KiVHknuX4Y2cEev
eJvaHgXoyb+gTwUhUcWKLrMyej/cunncp453inKeR0WOiXOMbnD1uX8lAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIO1xGHMJe4AXBlsW3zrck/IfGiPMB8GA1UdIwQY
MBaAFPVxhzOq1D72qZvY2VBKIN2JAi6PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVhHSE02clVQdmFwbTlqWlVFb2czWWtDTG84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yMzMzN2MtMzc1OC00MGI2LWE5Yzgt
ZDcyNWZhNjczMmI2LzEvOVhHSE02clVQdmFwbTlqWlVFb2czWWtDTG84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8yMzMzN2MtMzc1OC00MGI2LWE5YzgtZDcyNWZhNjczMmI2
LzEvOVhHSE02clVQdmFwbTlqWlVFb2czWWtDTG84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgqf8v/wk
z8XGImeNIzmDlzq3bPHOpKoV3oswOLEUb7vIpD8HkH2DcEaVsQkxYuRN56muWDVK
czChvD585LzFeTmWmz6EqvkB7+3cIQuJAzqfXJaVBgtQTpV9hHvkigwFK85OxKOW
A6hF2C96Go8ZNK9ETRQG/gbiTW2xSBPYYuANc3EAIn3LLSRClQyQpjhffhYZfRn4
RUjK2NnaMLQM51J2NSJg/tvSpAZLBLSlf52K0U9oZpQNH7JwLaYXt6O5wlFgXg72
Ryo+KSv3yrm6X2uu6ehtxom0ujT+l/GjJNtbO/it+2xJA8DI32I4BS3uRBR+zg6S
KgsfYwvf6knjsw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:21:57 2025 by rpki-client