Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
File: 9iwrcwAEBoJN-8euOIbreGf47G4.mft (raw, json)
Hash identifier: F1flN+gg1f5XsV/D0okQlBHi4QMkGSIKXHSpmlqjyuM=
Subject key identifier: 34:51:89:89:C0:94:F1:73:BE:A9:6D:6E:74:22:39:0B:B7:04:CD:B3
Authority key identifier: F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E
Certificate issuer: /CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
Certificate serial: 019A006C30F4869FDB48180E7DE348C2075B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 07:01:21 +0000
Manifest this update: Mon 20 Oct 2025 07:01:21 +0000
Manifest next update: Tue 21 Oct 2025 07:01:21 +0000
Files and hashes: 1: 9iwrcwAEBoJN-8euOIbreGf47G4.crl (hash: 4ER7xx077SijaQhzd6G6sqbAcGNb16E8Iz01uNz03e0=)
2: ceDg72YenqK4_dFvq8QBAcGglOc.roa (hash: Zws7AOUBGinLUnjZoVBw7x3JkyX35Jt03arL9swrd5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:30:f4:86:9f:db:48:18:0e:7d:e3:48:c2:07:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
Validity
Not Before: Oct 20 07:01:21 2025 GMT
Not After : Oct 21 07:01:21 2025 GMT
Subject: CN=34518989c094f173bea96d6e7422390bb704cdb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:51:bf:f0:d0:68:99:2d:c0:0f:fe:16:e5:d9:
61:25:71:76:cc:e1:6e:8e:5d:bb:92:8f:c9:ed:3c:
4b:fb:13:44:31:c1:f4:4e:fb:36:e2:7f:ab:c2:bb:
5e:e4:86:45:5f:53:21:13:f1:80:5b:9e:1f:6d:ca:
d7:8b:35:39:9c:1f:a4:7e:89:84:f9:06:ac:7e:73:
7c:8c:16:b6:e6:81:16:e1:90:9b:d8:9b:4c:94:7a:
b1:50:b8:47:28:73:41:82:49:a1:57:91:11:12:f3:
4d:3c:31:10:04:56:e7:21:da:5b:87:80:87:eb:a3:
30:f3:78:00:95:04:b9:59:4c:ed:a8:10:56:25:32:
be:b2:23:56:9f:c1:f0:0f:02:ca:bb:14:1c:4f:41:
cc:62:50:a7:6e:4c:c2:ab:a5:3a:0e:bd:7a:13:f7:
96:7a:da:f1:19:64:de:1a:01:ef:1e:21:9b:31:9b:
ef:7d:96:96:70:08:28:8a:b0:de:f1:c7:83:ce:b2:
9b:c9:12:87:a5:ec:1b:80:51:6e:51:96:61:24:ae:
1f:59:c2:d9:e2:6a:a2:8a:33:df:d0:d4:b7:5f:d8:
bb:d9:89:97:3c:31:02:7b:bf:4a:45:b6:f4:f6:70:
b6:8c:0e:66:1a:4e:e1:36:62:07:fc:58:cd:53:31:
eb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:51:89:89:C0:94:F1:73:BE:A9:6D:6E:74:22:39:0B:B7:04:CD:B3
X509v3 Authority Key Identifier:
keyid:F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:0b:ed:e3:74:f1:c2:4b:70:05:90:b7:29:00:a8:80:74:a9:
3e:39:b0:12:cd:28:bc:a4:e3:39:b2:9f:7c:5e:48:90:fb:cf:
c0:b2:48:dd:5d:1c:9d:58:bd:e7:17:dc:14:db:03:5a:08:34:
2c:bc:a7:a0:d7:cf:56:04:c9:17:10:bb:41:c7:a0:25:1e:af:
d3:02:92:56:54:ab:3a:96:41:8a:90:52:b8:01:52:1d:4f:28:
b8:cc:33:18:46:44:1e:d1:b9:a3:88:72:ab:b8:30:91:c5:9b:
42:7c:2a:dc:f0:c7:5e:cd:d7:f2:32:94:cf:79:77:a0:07:fa:
54:a9:e7:12:a1:ce:74:37:b2:a8:a5:29:f5:23:64:07:3e:88:
e6:d6:19:bf:32:ed:01:05:2c:70:b5:d9:eb:6f:d0:15:1c:b9:
ef:c1:7d:78:b2:63:49:24:ae:b1:2d:4d:47:07:9c:d0:f2:82:
f2:7f:69:ef:53:e9:19:45:bc:20:23:cc:17:96:f7:5d:cf:8a:
fc:87:5c:90:54:16:96:be:46:08:2d:7d:07:29:5d:a4:bd:f6:
d5:7b:2a:46:28:e5:f0:47:21:e7:bf:42:8c:a5:ee:9b:b7:4b:
8f:ba:c3:30:ee:08:5f:30:b7:39:1b:41:42:54:b4:34:ec:1c:
4f:b5:2b:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAbDD0hp/bSBgOfeNIwgdbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2MmMyYjczMDAwNDA2ODI0ZGZiYzdhZTM4ODZlYjc4Njdm
OGVjNmUwHhcNMjUxMDIwMDcwMTIxWhcNMjUxMDIxMDcwMTIxWjAzMTEwLwYDVQQD
EygzNDUxODk4OWMwOTRmMTczYmVhOTZkNmU3NDIyMzkwYmI3MDRjZGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFG/8NBomS3AD/4W5dlhJXF2zOFu
jl27ko/J7TxL+xNEMcH0Tvs24n+rwrte5IZFX1MhE/GAW54fbcrXizU5nB+kfomE
+QasfnN8jBa25oEW4ZCb2JtMlHqxULhHKHNBgkmhV5EREvNNPDEQBFbnIdpbh4CH
66Mw83gAlQS5WUztqBBWJTK+siNWn8HwDwLKuxQcT0HMYlCnbkzCq6U6Dr16E/eW
etrxGWTeGgHvHiGbMZvvfZaWcAgoirDe8ceDzrKbyRKHpewbgFFuUZZhJK4fWcLZ
4mqiijPf0NS3X9i72YmXPDECe79KRbb09nC2jA5mGk7hNmIH/FjNUzHrKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDRRiYnAlPFzvqltbnQiOQu3BM2zMB8GA1UdIwQY
MBaAFPYsK3MABAaCTfvHrjiG63hn+OxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWl3cmN3QUVCb0pOLThldU9JYnJlR2Y0N0c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82ODI5YWEtMTFhNS00MmU3LTlmOTYt
NTZlYmY4MjlkNmIyLzEvOWl3cmN3QUVCb0pOLThldU9JYnJlR2Y0N0c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS82ODI5YWEtMTFhNS00MmU3LTlmOTYtNTZlYmY4MjlkNmIy
LzEvOWl3cmN3QUVCb0pOLThldU9JYnJlR2Y0N0c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwvt43Tx
wktwBZC3KQCogHSpPjmwEs0ovKTjObKffF5IkPvPwLJI3V0cnVi95xfcFNsDWgg0
LLynoNfPVgTJFxC7QcegJR6v0wKSVlSrOpZBipBSuAFSHU8ouMwzGEZEHtG5o4hy
q7gwkcWbQnwq3PDHXs3X8jKUz3l3oAf6VKnnEqHOdDeyqKUp9SNkBz6I5tYZvzLt
AQUscLXZ62/QFRy578F9eLJjSSSusS1NRwec0PKC8n9p71PpGUW8ICPMF5b3Xc+K
/IdckFQWlr5GCC19ByldpL321XsqRijl8Ech579CjKXum7dLj7rDMO4IXzC3ORtB
QlS0NOwcT7UrDg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:00:02 2025 by rpki-client