Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
File: 9eQecyfCwxDOBmr6-HGYhtcfs4A.mft (raw, json)
Hash identifier: bWZ8tOiRW3xT8qrX8jsXvP9tAJNfk5WlhRcN0ktXEh8=
Subject key identifier: E1:24:25:13:E5:61:18:AD:AC:9F:1D:89:E6:D4:92:F7:18:B8:30:99
Authority key identifier: F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80
Certificate issuer: /CN=f5e41e7327c2c310ce066afaf8719886d71fb380
Certificate serial: 0199FB45B66F1504FC2FF67C0301DDEDE1D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
Manifest number: 34
Signing time: Sun 19 Oct 2025 07:01:13 +0000
Manifest this update: Sun 19 Oct 2025 07:01:13 +0000
Manifest next update: Mon 20 Oct 2025 07:01:13 +0000
Files and hashes: 1: 9eQecyfCwxDOBmr6-HGYhtcfs4A.crl (hash: F4Uyb1qzhnhswD269Debg/uVbKjX8A0diG4c9UBr8WM=)
2: WPdzOJT4LC_TcCRm8RmxGjX_YK4.roa (hash: wrideVt96yprnS97lOHBi0r+Cs611ZDyctZNvffjpbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:b6:6f:15:04:fc:2f:f6:7c:03:01:dd:ed:e1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e41e7327c2c310ce066afaf8719886d71fb380
Validity
Not Before: Oct 19 07:01:13 2025 GMT
Not After : Oct 20 07:01:13 2025 GMT
Subject: CN=e1242513e56118adac9f1d89e6d492f718b83099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fb:5a:a0:e9:87:87:49:41:43:dc:80:50:a2:
77:56:e7:58:81:3d:be:d1:b5:7d:0b:a6:9e:d2:8f:
1e:6a:d1:af:50:3d:ee:d4:c3:4c:28:09:b6:04:05:
fc:0c:6c:25:b3:5c:2b:e6:35:82:bf:65:e6:59:5c:
02:1d:c3:a6:13:f7:93:4e:d2:e4:75:b3:e3:0e:8e:
59:58:76:57:03:ce:91:f9:b7:82:9f:ba:68:25:81:
b6:b4:cd:db:d3:d9:1a:6e:dd:76:4f:4b:59:81:54:
43:7d:d5:d8:d2:25:46:7d:3b:2b:5b:bd:cd:83:63:
f1:23:88:5e:77:2c:48:84:7d:f1:f4:e2:13:cf:53:
44:bd:12:19:d9:9a:ff:33:e4:10:18:a4:aa:91:9b:
7a:0d:ff:78:17:ed:d8:1d:50:30:2a:01:dd:d8:79:
51:e9:a0:6e:5f:11:ab:b0:37:80:42:23:97:90:b6:
50:b5:d3:9f:b1:91:ee:b4:aa:5e:8e:9a:6e:d4:c5:
87:8c:38:64:1d:6e:0e:cd:67:91:c8:26:6f:00:c7:
fe:e4:42:72:5a:2a:27:97:f7:4e:48:40:bb:d0:94:
c9:53:7f:88:c4:cb:77:39:be:3b:43:57:17:97:79:
af:0a:0c:4a:1d:95:cb:c0:85:7f:27:36:03:a6:26:
c2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:24:25:13:E5:61:18:AD:AC:9F:1D:89:E6:D4:92:F7:18:B8:30:99
X509v3 Authority Key Identifier:
keyid:F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:3e:a9:8e:aa:e2:36:83:79:08:10:7f:bc:de:6c:98:d1:07:
16:81:d2:a6:f7:39:3b:74:fc:fc:c6:94:33:d8:9a:45:c2:57:
b9:70:14:a6:0c:06:2d:76:43:08:7e:09:3a:42:c5:18:78:f4:
8c:70:fd:9b:1a:f5:9a:4f:9a:c7:bb:1b:f4:87:22:6d:4d:31:
36:fb:fe:d1:7b:6d:ff:4e:ad:c6:b6:80:a2:3b:f3:17:ab:06:
c8:23:64:2c:92:a4:5d:3c:a1:2f:f0:6c:4c:1b:d3:3f:b4:f8:
a8:71:07:eb:8a:87:db:57:cd:fe:c4:01:52:f8:47:2f:20:c7:
7a:2f:f8:96:e1:ea:83:5c:0a:90:0d:f7:cb:43:0f:f5:43:26:
33:13:a5:45:14:90:67:47:93:ee:6b:7f:98:89:56:a2:71:21:
2d:18:da:a2:ce:79:29:bc:40:89:42:86:49:36:d3:ec:98:e2:
36:8b:cf:93:f4:7d:bf:e4:dd:1a:8b:c9:b3:50:ea:69:83:5e:
a7:39:01:cd:7b:a1:e4:3b:ff:33:1e:56:13:49:be:94:8e:82:
4e:ff:7e:82:ed:82:85:9f:46:14:f2:29:5c:3e:40:f0:35:0e:
a7:00:42:cd:3d:c9:6e:a0:93:6b:23:ad:ee:9d:4a:de:b2:9b:
50:f1:52:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RbZvFQT8L/Z8AwHd7eHSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZTQxZTczMjdjMmMzMTBjZTA2NmFmYWY4NzE5ODg2ZDcx
ZmIzODAwHhcNMjUxMDE5MDcwMTEzWhcNMjUxMDIwMDcwMTEzWjAzMTEwLwYDVQQD
EyhlMTI0MjUxM2U1NjExOGFkYWM5ZjFkODllNmQ0OTJmNzE4YjgzMDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ftaoOmHh0lBQ9yAUKJ3VudYgT2+
0bV9C6ae0o8eatGvUD3u1MNMKAm2BAX8DGwls1wr5jWCv2XmWVwCHcOmE/eTTtLk
dbPjDo5ZWHZXA86R+beCn7poJYG2tM3b09kabt12T0tZgVRDfdXY0iVGfTsrW73N
g2PxI4hedyxIhH3x9OITz1NEvRIZ2Zr/M+QQGKSqkZt6Df94F+3YHVAwKgHd2HlR
6aBuXxGrsDeAQiOXkLZQtdOfsZHutKpejppu1MWHjDhkHW4OzWeRyCZvAMf+5EJy
Wionl/dOSEC70JTJU3+IxMt3Ob47Q1cXl3mvCgxKHZXLwIV/JzYDpibC8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOEkJRPlYRitrJ8diebUkvcYuDCZMB8GA1UdIwQY
MBaAFPXkHnMnwsMQzgZq+vhxmIbXH7OAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWVRZWN5ZkN3eERPQm1yNi1IR1lodGNmczRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9lZWMyZTktY2JhZS00NjU5LTkzODQt
MTNiNzQ2YmJhMjYyLzEvOWVRZWN5ZkN3eERPQm1yNi1IR1lodGNmczRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9lZWMyZTktY2JhZS00NjU5LTkzODQtMTNiNzQ2YmJhMjYy
LzEvOWVRZWN5ZkN3eERPQm1yNi1IR1lodGNmczRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATz6pjqri
NoN5CBB/vN5smNEHFoHSpvc5O3T8/MaUM9iaRcJXuXAUpgwGLXZDCH4JOkLFGHj0
jHD9mxr1mk+ax7sb9IcibU0xNvv+0Xtt/06txraAojvzF6sGyCNkLJKkXTyhL/Bs
TBvTP7T4qHEH64qH21fN/sQBUvhHLyDHei/4luHqg1wKkA33y0MP9UMmMxOlRRSQ
Z0eT7mt/mIlWonEhLRjaos55KbxAiUKGSTbT7JjiNovPk/R9v+TdGovJs1DqaYNe
pzkBzXuh5Dv/Mx5WE0m+lI6CTv9+gu2ChZ9GFPIpXD5A8DUOpwBCzT3JbqCTayOt
7p1K3rKbUPFSYw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:04 2025 by rpki-client