Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
File: 9p8HIQsohLT-pQe94id5WyZAYu0.mft (raw, json)
Hash identifier: pBvyfILVeJB/jsupLQh70JSbHEH+z+y8k3dZ9Xjr97o=
Subject key identifier: 7B:10:74:DB:5F:2C:AB:CA:5A:C2:09:FC:83:98:77:B4:30:05:19:27
Authority key identifier: F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED
Certificate issuer: /CN=f69f07210b2884b4fea507bde227795b264062ed
Certificate serial: 0199FC218AB60FB6B9C0E7CCC96D06449C3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
Manifest number: 03ED
Signing time: Sun 19 Oct 2025 11:01:20 +0000
Manifest this update: Sun 19 Oct 2025 11:01:20 +0000
Manifest next update: Mon 20 Oct 2025 11:01:20 +0000
Files and hashes: 1: 9p8HIQsohLT-pQe94id5WyZAYu0.crl (hash: b6Zdk3L6A4myDXzIs0rLPeiRPikpJV++SLzL9zy+h8g=)
2: jYwiLy6C8PrH1zmVRebb5xoCcHg.roa (hash: B/91TwKxBsOKKHQE6s1Ydkjq/nj0hd3T+71Ppy1e7kI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:8a:b6:0f:b6:b9:c0:e7:cc:c9:6d:06:44:9c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69f07210b2884b4fea507bde227795b264062ed
Validity
Not Before: Oct 19 11:01:20 2025 GMT
Not After : Oct 20 11:01:20 2025 GMT
Subject: CN=7b1074db5f2cabca5ac209fc839877b430051927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:56:7f:45:e9:92:61:83:31:76:d7:30:55:05:
fa:86:52:e8:58:62:52:a1:59:e8:34:37:39:79:23:
4e:63:b9:2c:a0:5d:d4:3b:86:81:9d:ad:77:c4:ce:
89:1d:d6:42:eb:2b:24:bc:c3:39:bb:c4:c2:fe:5e:
62:f0:6c:b1:89:69:b9:f1:8d:1c:de:1b:01:62:85:
f0:de:3e:7e:fb:d6:5f:ec:29:0c:37:d2:95:86:4f:
47:4f:85:9a:02:5f:3f:9d:44:ad:39:4d:8d:c8:52:
61:ae:c6:31:1a:94:9a:50:4c:40:5f:de:55:a6:a9:
be:24:a5:9c:65:03:1a:3d:eb:f9:03:64:24:4e:bf:
28:bd:12:9c:44:f9:0a:e5:b4:62:1b:c7:d1:e5:d2:
ca:d9:68:b8:41:e4:fb:ba:3e:81:55:c9:cc:3f:a8:
9a:e9:8e:45:5c:81:6e:ea:f7:a5:ef:99:2f:f1:06:
7b:fd:0b:da:07:b3:65:e3:1c:71:4d:a3:c3:74:71:
56:3d:d4:ac:d2:76:a7:be:5d:3b:1d:71:27:81:4f:
18:52:e2:72:9b:5c:43:43:6f:fd:71:2d:5a:87:fa:
e8:ff:31:e3:0e:f9:80:ac:31:c6:09:69:0c:57:1d:
36:4c:ed:8b:5e:25:0d:de:df:4f:3d:53:d5:52:60:
90:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:10:74:DB:5F:2C:AB:CA:5A:C2:09:FC:83:98:77:B4:30:05:19:27
X509v3 Authority Key Identifier:
keyid:F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:dd:cb:14:2d:c8:48:b9:ee:87:90:be:7d:b5:b9:0a:99:61:
f0:b4:ee:3c:26:6a:a8:48:f8:da:22:1f:67:51:89:16:14:d3:
6b:2f:64:86:ad:21:74:83:16:5c:1e:ad:30:c3:9b:7b:d8:c2:
dd:b2:b2:bb:07:cf:90:dd:e9:fa:88:99:b6:c0:43:a6:2a:38:
c4:03:89:e3:3e:76:9a:aa:6a:c5:04:77:1c:61:30:6b:51:55:
f7:5b:c2:6f:14:5d:71:d9:d5:a0:b9:ab:50:7d:a0:ba:92:bb:
75:04:1c:3a:ad:45:c0:43:3b:95:c3:50:e7:56:7a:9d:75:36:
eb:dd:21:e5:20:90:e3:ab:6b:cc:e8:0f:e7:09:29:29:4f:14:
2e:8a:af:35:3c:7d:34:2b:80:63:f5:1b:4c:29:ee:03:9a:f6:
7f:d8:27:7d:5c:60:ea:d6:fd:92:26:ea:bd:e8:75:37:47:a7:
bf:c4:6f:29:c1:f6:be:56:5d:f9:ca:38:48:8b:ff:a9:35:ee:
03:a3:89:0b:00:e1:c0:73:f6:ee:8d:c8:ba:00:af:66:ce:ec:
9c:83:e3:32:2b:f6:cb:8a:a0:7f:e8:c8:78:ae:56:a9:41:35:
73:6d:bf:18:46:54:4e:51:e1:2c:43:93:8e:32:fa:93:a2:c0:
76:bd:3d:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IYq2D7a5wOfMyW0GRJw6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OWYwNzIxMGIyODg0YjRmZWE1MDdiZGUyMjc3OTViMjY0
MDYyZWQwHhcNMjUxMDE5MTEwMTIwWhcNMjUxMDIwMTEwMTIwWjAzMTEwLwYDVQQD
Eyg3YjEwNzRkYjVmMmNhYmNhNWFjMjA5ZmM4Mzk4NzdiNDMwMDUxOTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFZ/RemSYYMxdtcwVQX6hlLoWGJS
oVnoNDc5eSNOY7ksoF3UO4aBna13xM6JHdZC6yskvMM5u8TC/l5i8GyxiWm58Y0c
3hsBYoXw3j5++9Zf7CkMN9KVhk9HT4WaAl8/nUStOU2NyFJhrsYxGpSaUExAX95V
pqm+JKWcZQMaPev5A2QkTr8ovRKcRPkK5bRiG8fR5dLK2Wi4QeT7uj6BVcnMP6ia
6Y5FXIFu6vel75kv8QZ7/QvaB7Nl4xxxTaPDdHFWPdSs0nanvl07HXEngU8YUuJy
m1xDQ2/9cS1ah/ro/zHjDvmArDHGCWkMVx02TO2LXiUN3t9PPVPVUmCQIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsQdNtfLKvKWsIJ/IOYd7QwBRknMB8GA1UdIwQY
MBaAFPafByELKIS0/qUHveIneVsmQGLtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXA4SElRc29oTFQtcFFlOTRpZDVXeVpBWXUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82YmY1MjgtYmQzNC00MGVlLWIwZGMt
NDVmNjBmNDE0ZmY3LzEvOXA4SElRc29oTFQtcFFlOTRpZDVXeVpBWXUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82YmY1MjgtYmQzNC00MGVlLWIwZGMtNDVmNjBmNDE0ZmY3
LzEvOXA4SElRc29oTFQtcFFlOTRpZDVXeVpBWXUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2N3LFC3I
SLnuh5C+fbW5Cplh8LTuPCZqqEj42iIfZ1GJFhTTay9khq0hdIMWXB6tMMObe9jC
3bKyuwfPkN3p+oiZtsBDpio4xAOJ4z52mqpqxQR3HGEwa1FV91vCbxRdcdnVoLmr
UH2gupK7dQQcOq1FwEM7lcNQ51Z6nXU2690h5SCQ46trzOgP5wkpKU8ULoqvNTx9
NCuAY/UbTCnuA5r2f9gnfVxg6tb9kibqveh1N0env8RvKcH2vlZd+co4SIv/qTXu
A6OJCwDhwHP27o3IugCvZs7snIPjMiv2y4qgf+jIeK5WqUE1c22/GEZUTlHhLEOT
jjL6k6LAdr09Qg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:01:15 2025 by rpki-client