Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
File: 9poKXR6NVCSOh2Z-mIPJAvF14uc.mft (raw, json)
Hash identifier: 4fChcW/pWV4FqTmHeEOiHGGn9RQK/I7CjA/5BilPllM=
Subject key identifier: E4:4F:13:80:FA:C9:54:8B:AE:09:53:86:7B:1D:7C:C1:91:DE:0F:A3
Authority key identifier: F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
Certificate issuer: /CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Certificate serial: 0199FBEC3D12E27846D9484D3C1E707A27A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:03:07 +0000
Manifest this update: Sun 19 Oct 2025 10:03:07 +0000
Manifest next update: Mon 20 Oct 2025 10:03:07 +0000
Files and hashes: 1: 9poKXR6NVCSOh2Z-mIPJAvF14uc.crl (hash: uZuFY3x1GnYoB8JKVinK8Ybx5lh+3hbFB9nGb0DxZbI=)
2: HmMkZMs_L5qVhevMb58XTv8ACos.roa (hash: p6Cspm4w36V6nse6CJ6sMJJCGrV41tHwZhdpXbj7GQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:3d:12:e2:78:46:d9:48:4d:3c:1e:70:7a:27:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Validity
Not Before: Oct 19 10:03:07 2025 GMT
Not After : Oct 20 10:03:07 2025 GMT
Subject: CN=e44f1380fac9548bae0953867b1d7cc191de0fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7c:7d:87:f2:1b:6e:8e:b6:58:4b:92:e4:0a:
3b:20:c9:68:ab:37:d4:d4:9c:4c:5d:a3:ef:64:7e:
28:78:92:bb:3c:80:3d:6a:3d:f7:e7:cb:4f:d4:c5:
67:95:3f:53:2b:e2:79:bd:af:52:d8:df:1d:57:d4:
2e:a7:d6:3f:a3:f0:9f:11:dc:a8:49:b3:73:e3:c3:
4e:e3:28:6e:db:58:9e:0c:ea:62:1d:69:94:8d:54:
4e:b8:0a:1f:2f:08:eb:98:e5:0e:fa:19:bd:99:a3:
36:58:4e:5f:6d:7b:72:02:88:a6:a8:94:33:8b:56:
d4:fb:d6:46:74:d7:4b:76:1b:68:8b:44:bf:e1:7b:
52:c5:63:17:16:c5:17:a8:dc:ee:6a:09:20:dc:00:
80:f7:c4:18:3f:ca:6f:7a:50:17:c6:bb:b7:14:bc:
71:5f:3a:f4:d9:cf:14:ab:ff:c0:de:18:47:41:3e:
3f:9b:86:6e:0d:61:30:3a:29:38:db:ee:8c:53:f1:
23:88:53:f6:7b:49:8a:34:1b:c4:fa:41:7b:9a:67:
7d:76:21:bc:59:e8:f9:ad:88:2f:00:fe:32:8d:5f:
aa:52:59:e1:1a:f6:4d:48:80:99:d1:b7:ee:61:0c:
ca:2f:4b:fe:67:ed:82:20:5b:a7:a1:74:45:12:92:
d7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:4F:13:80:FA:C9:54:8B:AE:09:53:86:7B:1D:7C:C1:91:DE:0F:A3
X509v3 Authority Key Identifier:
keyid:F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:39:5b:77:7c:d1:15:b0:6a:f2:93:1e:c8:37:05:2d:bc:34:
bd:b4:8c:ae:7a:3a:5e:d2:f9:bb:5a:a9:56:bc:60:70:29:a6:
0d:81:8a:2e:93:76:c0:5e:86:75:35:6c:ff:1c:2b:aa:5f:99:
71:fc:f9:0d:77:cc:ab:71:8b:03:c3:93:d0:07:28:6a:d3:c5:
aa:ec:fe:51:09:79:ef:7d:2b:ac:0f:b8:81:4f:2b:84:3c:b9:
96:e6:0f:f4:6e:2c:ab:c5:1d:2a:04:12:14:61:75:3f:17:2e:
5f:b8:ef:f8:1b:79:79:bc:34:59:d3:88:6f:ba:1e:fc:ab:78:
a5:35:c3:43:28:0e:7c:0b:30:9d:10:d9:9f:f0:9f:29:f5:97:
e5:85:24:fb:c0:9e:ff:5e:59:7e:73:e0:8d:8c:e6:b0:b5:50:
49:1f:3b:60:16:39:f5:82:65:46:5f:ef:52:ec:68:9a:24:45:
f6:0a:8c:cd:ea:4e:f2:42:d6:b6:f9:bb:5b:ad:f2:7b:ba:79:
ab:75:57:31:d0:18:5b:67:8e:9a:e8:c5:23:ec:69:a1:6e:db:
63:08:4e:12:23:e4:0b:b0:79:4f:a5:15:7f:4d:cf:5f:18:ef:
b1:25:b7:ab:28:54:5f:26:a8:4f:08:1f:92:4b:9c:2a:bc:01:
4c:bd:60:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77D0S4nhG2UhNPB5weielMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OWEwYTVkMWU4ZDU0MjQ4ZTg3NjY3ZTk4ODNjOTAyZjE3
NWUyZTcwHhcNMjUxMDE5MTAwMzA3WhcNMjUxMDIwMTAwMzA3WjAzMTEwLwYDVQQD
EyhlNDRmMTM4MGZhYzk1NDhiYWUwOTUzODY3YjFkN2NjMTkxZGUwZmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnx9h/Ibbo62WEuS5Ao7IMloqzfU
1JxMXaPvZH4oeJK7PIA9aj3358tP1MVnlT9TK+J5va9S2N8dV9Qup9Y/o/CfEdyo
SbNz48NO4yhu21ieDOpiHWmUjVROuAofLwjrmOUO+hm9maM2WE5fbXtyAoimqJQz
i1bU+9ZGdNdLdhtoi0S/4XtSxWMXFsUXqNzuagkg3ACA98QYP8pvelAXxru3FLxx
Xzr02c8Uq//A3hhHQT4/m4ZuDWEwOik42+6MU/EjiFP2e0mKNBvE+kF7mmd9diG8
Wej5rYgvAP4yjV+qUlnhGvZNSICZ0bfuYQzKL0v+Z+2CIFunoXRFEpLX7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORPE4D6yVSLrglThnsdfMGR3g+jMB8GA1UdIwQY
MBaAFPaaCl0ejVQkjodmfpiDyQLxdeLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXBvS1hSNk5WQ1NPaDJaLW1JUEpBdkYxNHVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS85NDQwYTQtMGI0Mi00YTU4LTkwMGEt
ZTk5ZjIyNzcyNjI0LzEvOXBvS1hSNk5WQ1NPaDJaLW1JUEpBdkYxNHVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS85NDQwYTQtMGI0Mi00YTU4LTkwMGEtZTk5ZjIyNzcyNjI0
LzEvOXBvS1hSNk5WQ1NPaDJaLW1JUEpBdkYxNHVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHzlbd3zR
FbBq8pMeyDcFLbw0vbSMrno6XtL5u1qpVrxgcCmmDYGKLpN2wF6GdTVs/xwrql+Z
cfz5DXfMq3GLA8OT0AcoatPFquz+UQl5730rrA+4gU8rhDy5luYP9G4sq8UdKgQS
FGF1PxcuX7jv+Bt5ebw0WdOIb7oe/Kt4pTXDQygOfAswnRDZn/CfKfWX5YUk+8Ce
/15ZfnPgjYzmsLVQSR87YBY59YJlRl/vUuxomiRF9gqMzepO8kLWtvm7W63ye7p5
q3VXMdAYW2eOmujFI+xpoW7bYwhOEiPkC7B5T6UVf03PXxjvsSW3qyhUXyaoTwgf
kkucKrwBTL1gRw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:38 2025 by rpki-client