Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
File: 9l50I9P3sbLnrMG6HO4CQLfWedY.mft (raw, json)
Hash identifier: 101UKnanHFvd+fKkzdoOSJUS9o3aAqpfc61NTgwQo9I=
Subject key identifier: B6:DD:68:EE:01:DD:E2:62:17:EB:9B:69:F0:77:AB:AC:51:5B:10:45
Authority key identifier: F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
Certificate issuer: /CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Certificate serial: 0199FB45F04005A37B1646137337DBB0E788
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 07:01:28 +0000
Manifest this update: Sun 19 Oct 2025 07:01:28 +0000
Manifest next update: Mon 20 Oct 2025 07:01:28 +0000
Files and hashes: 1: 9l50I9P3sbLnrMG6HO4CQLfWedY.crl (hash: iJ7EJ0zfaXxnUOkb+FMOW5FtsC8c6nhMI3p9wMNp0eI=)
2: FAJKZDo6nLNipexAJT8L9FAGXrE.roa (hash: NVIidy7uobZX7hs2QRQ052g+pZeZGSMOgKQJmZ0nDuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:f0:40:05:a3:7b:16:46:13:73:37:db:b0:e7:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Validity
Not Before: Oct 19 07:01:28 2025 GMT
Not After : Oct 20 07:01:28 2025 GMT
Subject: CN=b6dd68ee01dde26217eb9b69f077abac515b1045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:07:85:d8:b1:2b:02:b3:1d:00:35:ca:0f:19:
f1:ec:ec:41:8f:b4:21:07:38:18:23:4f:6d:43:03:
a9:c0:1c:5f:e4:3d:8b:be:ea:0c:c0:c6:40:0a:5b:
6e:66:e2:a4:12:2b:69:93:de:d6:6c:6e:59:03:83:
c1:22:a5:e2:c7:a0:32:d2:b0:16:8c:05:af:fc:a5:
1d:10:17:41:97:ea:b4:10:59:19:1f:c5:7a:65:83:
7c:06:45:b1:62:74:82:66:d9:7b:7e:82:a0:79:95:
47:73:07:9b:c7:c8:4b:ab:10:9e:b8:97:a0:ed:05:
0b:9a:b6:48:bf:e0:39:51:e9:00:32:3d:13:1f:22:
e2:d9:92:60:48:fa:63:51:20:e2:7b:93:d2:3c:ff:
7a:41:3c:95:8b:68:e7:db:4a:e9:e0:66:52:cb:09:
c0:b2:d9:cb:f9:6e:18:ca:1e:ed:2f:88:51:31:e3:
8f:71:17:4b:4f:f4:31:0e:7d:b6:bf:30:f9:43:00:
8a:c1:e5:34:ad:9d:97:d8:ca:e6:84:b4:ef:f1:97:
4f:a2:64:d4:5d:d3:c7:24:11:ea:7a:f2:05:4d:1c:
61:d6:32:44:d3:f8:94:55:7e:05:40:45:bd:6c:5a:
76:40:23:4b:22:92:41:da:e9:7a:53:a4:ff:6d:e7:
42:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DD:68:EE:01:DD:E2:62:17:EB:9B:69:F0:77:AB:AC:51:5B:10:45
X509v3 Authority Key Identifier:
keyid:F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:25:d9:12:84:ad:91:16:94:68:da:ed:bd:1e:29:fc:f1:35:
f5:ac:00:e8:17:21:2d:f7:cb:d1:04:87:48:57:da:bf:27:37:
31:eb:21:3b:15:29:56:a8:80:4f:21:7c:a3:a9:25:d6:24:4b:
9d:9d:a7:9d:92:b5:80:4d:a6:7f:b8:f8:c3:4b:3c:80:7a:de:
6a:6b:14:04:82:4a:38:0b:0f:01:d8:ff:82:26:52:c6:02:d1:
14:83:c9:27:b5:e3:6a:e6:5d:42:b0:d8:03:07:f2:c0:56:5b:
9e:be:1f:a9:95:a3:c1:22:a7:2e:e9:99:39:f5:1c:4f:3a:13:
02:bb:fe:93:bd:73:04:28:26:72:53:d8:74:b7:87:4e:2c:40:
58:92:ac:de:52:b0:d8:19:84:c7:a3:b0:fc:33:cf:9e:9b:67:
da:45:ba:2f:e1:4c:91:0b:93:88:ef:04:99:22:db:f1:83:d2:
f6:2b:f7:a8:b3:03:06:e0:93:1b:d5:a6:a4:ba:69:84:80:cf:
f6:ba:f0:d9:e3:ea:bd:51:90:3f:02:cd:80:d4:b3:e6:8c:13:
c2:60:ee:86:39:51:df:b8:6a:05:ea:2b:7c:60:70:89:39:e3:
af:3a:48:e8:8a:5d:99:c3:e0:37:0c:d3:8a:5f:16:ab:e0:71:
fa:f1:58:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RfBABaN7FkYTczfbsOeIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NWU3NDIzZDNmN2IxYjJlN2FjYzFiYTFjZWUwMjQwYjdk
Njc5ZDYwHhcNMjUxMDE5MDcwMTI4WhcNMjUxMDIwMDcwMTI4WjAzMTEwLwYDVQQD
EyhiNmRkNjhlZTAxZGRlMjYyMTdlYjliNjlmMDc3YWJhYzUxNWIxMDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAeF2LErArMdADXKDxnx7OxBj7Qh
BzgYI09tQwOpwBxf5D2LvuoMwMZACltuZuKkEitpk97WbG5ZA4PBIqXix6Ay0rAW
jAWv/KUdEBdBl+q0EFkZH8V6ZYN8BkWxYnSCZtl7foKgeZVHcwebx8hLqxCeuJeg
7QULmrZIv+A5UekAMj0THyLi2ZJgSPpjUSDie5PSPP96QTyVi2jn20rp4GZSywnA
stnL+W4Yyh7tL4hRMeOPcRdLT/QxDn22vzD5QwCKweU0rZ2X2MrmhLTv8ZdPomTU
XdPHJBHqevIFTRxh1jJE0/iUVX4FQEW9bFp2QCNLIpJB2ul6U6T/bedCJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLbdaO4B3eJiF+ubafB3q6xRWxBFMB8GA1UdIwQY
MBaAFPZedCPT97Gy56zBuhzuAkC31nnWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWw1MEk5UDNzYkxuck1HNkhPNENRTGZXZWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8wMTMxNTMtYjYzYi00MDc0LWFjNWMt
ZjRkZDY2MzlmODc1LzEvOWw1MEk5UDNzYkxuck1HNkhPNENRTGZXZWRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8wMTMxNTMtYjYzYi00MDc0LWFjNWMtZjRkZDY2MzlmODc1
LzEvOWw1MEk5UDNzYkxuck1HNkhPNENRTGZXZWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUSXZEoSt
kRaUaNrtvR4p/PE19awA6BchLffL0QSHSFfavyc3MeshOxUpVqiATyF8o6kl1iRL
nZ2nnZK1gE2mf7j4w0s8gHreamsUBIJKOAsPAdj/giZSxgLRFIPJJ7XjauZdQrDY
AwfywFZbnr4fqZWjwSKnLumZOfUcTzoTArv+k71zBCgmclPYdLeHTixAWJKs3lKw
2BmEx6Ow/DPPnptn2kW6L+FMkQuTiO8EmSLb8YPS9iv3qLMDBuCTG9WmpLpphIDP
9rrw2ePqvVGQPwLNgNSz5owTwmDuhjlR37hqBeorfGBwiTnjrzpI6IpdmcPgNwzT
il8Wq+Bx+vFYJA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:34 2025 by rpki-client