
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
File: C89yHHHIrnyvcG2d8zWLEtVLTZA.mft (raw, json)
Hash identifier: s0QBJv3By6NA7NnPoBDopq36G5fLTJdH8ZhwzlcoILU=
Subject key identifier: 67:BF:5A:B8:50:AE:86:6F:C9:4E:D4:AB:4D:E4:48:AA:C6:40:79:DB
Authority key identifier: 0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
Certificate issuer: /CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Certificate serial: 0199FAD7A5A44902113206192A1C681F1E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
Manifest number: 0B09
Signing time: Sun 19 Oct 2025 05:01:00 +0000
Manifest this update: Sun 19 Oct 2025 05:01:00 +0000
Manifest next update: Mon 20 Oct 2025 05:01:00 +0000
Files and hashes: 1: 0Xw-5taoVNUPecPoG5bobjuIIc0.roa (hash: +uWkqdxHbLpuSBqT73af2/Y6rs7b1vl0IQ82rcCeayY=)
2: C89yHHHIrnyvcG2d8zWLEtVLTZA.crl (hash: AM/atGtHi63yrFVqr3G83B8LxzNd09cL1X25wT8YFT0=)
3: SYHyceqFtkyCyptfpg33iZNyTQg.roa (hash: nT6QUh5lUAAZS2ytChv8ohZK4q1mifNi1Au5J9VAH8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:a5:a4:49:02:11:32:06:19:2a:1c:68:1f:1e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Validity
Not Before: Oct 19 05:01:00 2025 GMT
Not After : Oct 20 05:01:00 2025 GMT
Subject: CN=67bf5ab850ae866fc94ed4ab4de448aac64079db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8a:4a:31:e5:36:7e:cd:a9:41:87:98:97:87:
87:98:b8:75:5f:6c:9a:ff:10:d0:86:67:08:27:4a:
06:bc:e9:53:5a:8d:3e:4b:69:44:42:9b:03:98:79:
7d:2d:1b:bf:f7:80:b3:32:c7:0a:d3:6a:e4:56:4c:
eb:ce:65:71:47:96:48:51:2c:5b:c1:0b:d6:9e:db:
b1:e5:4b:1d:48:15:b9:fe:3a:23:d7:e1:12:9b:7f:
f8:8d:14:4c:cd:8b:88:50:ae:73:77:6c:07:1f:0e:
e6:a5:53:f3:ec:6c:d7:41:cd:3e:2f:c6:7f:84:5c:
be:de:60:2c:56:d1:74:22:26:9a:95:d5:5f:45:c8:
f7:ba:3e:d2:10:af:8c:c4:da:20:37:d8:ae:3f:53:
fe:13:8d:5e:69:c1:1c:fb:e5:64:46:c6:ab:75:a2:
c3:8f:16:8f:05:22:31:71:3e:39:b0:b6:13:dc:88:
90:11:59:95:50:83:2f:e8:c0:b3:e5:82:8c:16:ad:
d4:68:ba:00:a5:22:58:aa:a1:a1:fb:c2:38:9b:87:
9c:e2:ea:12:40:23:ec:3a:37:a8:88:75:44:73:96:
35:2a:bb:1f:17:fe:3d:99:dd:88:73:a4:1f:61:5f:
d0:61:36:93:75:3b:3e:35:57:f7:6d:63:45:c4:d1:
d8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BF:5A:B8:50:AE:86:6F:C9:4E:D4:AB:4D:E4:48:AA:C6:40:79:DB
X509v3 Authority Key Identifier:
keyid:0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b6:ff:c0:f5:a6:21:4b:e8:3c:64:54:56:10:1a:49:ff:96:
95:2c:b6:cb:69:51:97:c8:bf:e1:ed:4a:83:b4:2b:bd:48:80:
02:8a:6d:97:e3:92:96:83:ce:bb:77:af:4c:b1:90:b0:d8:21:
38:de:22:ab:52:04:ab:8b:82:4c:c1:1a:29:9e:83:fa:58:50:
6f:a9:a3:fd:75:a5:7c:a8:12:33:8b:17:9e:91:ba:20:18:c1:
66:95:be:3b:ba:3c:8b:ce:6f:d5:8b:11:03:3f:2b:ee:23:13:
28:b6:9d:56:8e:fa:7d:71:b5:6c:bd:7d:48:b0:19:ea:d3:19:
f9:d0:6b:c8:26:14:54:64:37:bf:f5:7b:48:3b:24:d6:2e:56:
ae:31:37:43:a5:88:4f:dd:52:38:34:f5:ef:e1:1c:ed:f1:9c:
30:2d:9d:76:d2:c9:a6:03:2d:e4:da:a2:26:ec:6e:dc:24:12:
78:c1:b9:86:a0:50:f0:0e:9f:3c:c1:2f:2c:b7:50:a2:da:cb:
23:32:fb:19:a0:2d:31:88:c8:64:62:05:11:db:63:52:70:7f:
ef:de:5c:9f:c8:35:94:56:4a:31:ad:29:8f:ad:db:7f:7a:f7:
89:a5:cf:9d:2d:ef:c5:24:74:a1:1b:c5:e7:90:c0:95:87:34:
72:03:ed:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn616WkSQIRMgYZKhxoHx4cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiY2Y3MjFjNzFjOGFlN2NhZjcwNmQ5ZGYzMzU4YjEyZDU0
YjRkOTAwHhcNMjUxMDE5MDUwMTAwWhcNMjUxMDIwMDUwMTAwWjAzMTEwLwYDVQQD
Eyg2N2JmNWFiODUwYWU4NjZmYzk0ZWQ0YWI0ZGU0NDhhYWM2NDA3OWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIpKMeU2fs2pQYeYl4eHmLh1X2ya
/xDQhmcIJ0oGvOlTWo0+S2lEQpsDmHl9LRu/94CzMscK02rkVkzrzmVxR5ZIUSxb
wQvWntux5UsdSBW5/joj1+ESm3/4jRRMzYuIUK5zd2wHHw7mpVPz7GzXQc0+L8Z/
hFy+3mAsVtF0IiaaldVfRcj3uj7SEK+MxNogN9iuP1P+E41eacEc++VkRsardaLD
jxaPBSIxcT45sLYT3IiQEVmVUIMv6MCz5YKMFq3UaLoApSJYqqGh+8I4m4ec4uoS
QCPsOjeoiHVEc5Y1KrsfF/49md2Ic6QfYV/QYTaTdTs+NVf3bWNFxNHY9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGe/WrhQroZvyU7Uq03kSKrGQHnbMB8GA1UdIwQY
MBaAFAvPchxxyK58r3BtnfM1ixLVS02QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzg5eUhISElybnl2Y0cyZDh6V0xFdFZMVFpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8wZWUxMWYtNDFiNy00YWM5LTliMTYt
ZDllYjhkNTczNjZjLzEvQzg5eUhISElybnl2Y0cyZDh6V0xFdFZMVFpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8wZWUxMWYtNDFiNy00YWM5LTliMTYtZDllYjhkNTczNjZj
LzEvQzg5eUhISElybnl2Y0cyZDh6V0xFdFZMVFpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAobb/wPWm
IUvoPGRUVhAaSf+WlSy2y2lRl8i/4e1Kg7QrvUiAAoptl+OSloPOu3evTLGQsNgh
ON4iq1IEq4uCTMEaKZ6D+lhQb6mj/XWlfKgSM4sXnpG6IBjBZpW+O7o8i85v1YsR
Az8r7iMTKLadVo76fXG1bL19SLAZ6tMZ+dBryCYUVGQ3v/V7SDsk1i5WrjE3Q6WI
T91SODT17+Ec7fGcMC2ddtLJpgMt5NqiJuxu3CQSeMG5hqBQ8A6fPMEvLLdQotrL
IzL7GaAtMYjIZGIFEdtjUnB/795cn8g1lFZKMa0pj63bf3r3iaXPnS3vxSR0oRvF
55DAlYc0cgPtsA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:13 2025 by rpki-client