Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
File: _9v7226XXdyo9t2WjDen1VYOaR0.mft (raw, json)
Hash identifier: UhuqnkZqSyfDmswCF17V3XphkEv+PMkUMYYCQ+QGAiM=
Subject key identifier: 95:85:F0:B6:29:FF:FE:DC:77:14:6D:FC:F1:0B:8D:8C:BE:58:5F:08
Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
Certificate issuer: /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Certificate serial: 0198D5F19C3E9777BE3080BA0B15EE4C6672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
Manifest number: 05E9
Signing time: Sat 23 Aug 2025 08:00:37 +0000
Manifest this update: Sat 23 Aug 2025 08:00:37 +0000
Manifest next update: Sun 24 Aug 2025 08:00:37 +0000
Files and hashes: 1: 91Ml2kQH8w2tLiMLT6Fbcu6KSJM.roa (hash: EmTDmBXIKNOaEr2bWKxBRH3EXyiQ1ZJtO/knk/QxnbE=)
2: OI1uK9LvyBYMrxZk6Wtsms4rrxQ.roa (hash: r4xm6yQr/cgOXWzX1uA52pwqnclq3721sVsfso5FXPI=)
3: RuN1CEEKgWM9o41cCPWtfZFuKKk.roa (hash: KY9kNkQ0Sz03RyPbQ91gb1ujhJwFYP1J5IWur4t9itw=)
4: XtH0htLAKG6Q5dcfnWZEaEHDokg.roa (hash: 6hipGrL8gPx/AA1jsYDtYKkvzd7jAI7crI4ZoMmJgjA=)
5: _9v7226XXdyo9t2WjDen1VYOaR0.crl (hash: Euv7VACEY6VJmK+1dQu80PEHnrWRC4VYtsAMy3KmKuE=)
6: iw9kNkv-dkyYtEoLjtCHmwGGJs0.roa (hash: WAVrCgR0Lig7wZih5a6i+wCsRj3CJZHI3ntVJTN6GcM=)
7: jEuhOWOO-QlWKQlP_vQxpSPLQb4.roa (hash: T76BJeDOcF7APO1x6/gqGhi/5iskR6Zu3KBZKjePpuU=)
8: m07e6_Z6kS56JVFoiRbJDvuGsTk.roa (hash: VoYIwiaKUUQlxS0/2rdwETdn1uq8+mUfKc36O3nLq/M=)
9: w065yF2KMBb9aVnQ4BfNT-qmTRU.roa (hash: jJgjEmmyXXQf+/0rV+v9URt/GJe8fT1hRfQv43u3dw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:9c:3e:97:77:be:30:80:ba:0b:15:ee:4c:66:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Validity
Not Before: Aug 23 08:00:37 2025 GMT
Not After : Aug 24 08:00:37 2025 GMT
Subject: CN=9585f0b629fffedc77146dfcf10b8d8cbe585f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5c:54:51:dc:f3:0d:80:75:5b:0f:b9:6b:8b:
42:ed:cd:58:23:ab:72:9c:cc:9f:31:09:cf:ed:cd:
a8:82:d1:21:91:63:3c:ee:f5:b6:e7:2b:88:a5:e7:
b7:6e:5f:51:bc:0b:af:fd:d1:7c:39:68:1b:f9:ee:
9f:c1:c2:cc:a8:9f:2e:b5:fe:df:06:4d:7b:af:64:
4b:a2:0b:3a:81:07:2c:bd:45:c8:b8:f9:82:cf:46:
9d:1a:fc:d1:4a:fe:a0:a6:96:38:d4:82:d2:02:47:
09:50:9a:eb:c2:51:e0:57:6d:b5:8c:6e:8a:ea:49:
5f:4c:7d:10:63:14:42:04:c0:f1:cf:b9:39:1b:7b:
d9:e9:6f:45:e3:31:4c:a2:92:01:d6:cf:5e:32:da:
f7:1f:6b:08:9c:0d:42:c0:72:c8:8b:10:d4:93:78:
57:b2:97:4b:dd:07:42:c7:d9:72:0b:8e:dc:25:49:
f3:1f:b0:65:eb:c4:48:2c:49:6f:55:37:6d:b1:e5:
99:84:3c:2f:4b:86:6e:f9:86:81:9a:f9:ce:d0:ba:
3e:c8:95:5e:97:17:0e:35:7e:ed:a5:00:28:f9:e8:
3e:f3:4b:f0:75:dc:3f:3c:b9:82:98:9a:26:66:33:
3c:d2:a5:fc:c9:c0:b7:33:60:39:7b:95:92:c6:5f:
f7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:85:F0:B6:29:FF:FE:DC:77:14:6D:FC:F1:0B:8D:8C:BE:58:5F:08
X509v3 Authority Key Identifier:
keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:cb:8d:fb:73:0d:be:e9:76:17:69:c3:66:87:83:9f:10:4b:
7a:1a:cf:a2:21:d8:82:ad:da:8b:77:73:44:2b:f8:91:f5:07:
c8:50:ec:86:43:e0:20:62:87:d9:62:af:9a:8e:86:fa:d3:64:
15:e7:84:20:c5:33:25:18:6b:c2:10:7d:92:68:c2:5d:1f:bd:
e5:c4:8a:29:78:d5:15:fa:d9:16:27:92:fc:f9:cc:43:e7:8d:
b7:53:85:93:6a:d9:b9:03:34:00:26:4f:5a:e8:4b:10:9c:d7:
01:1a:7a:44:30:14:37:08:18:e6:63:e6:d3:31:94:26:f8:78:
7e:fa:31:e9:8b:01:5a:d8:3c:b9:c2:32:f8:91:59:22:54:2f:
7f:82:12:7e:07:00:a1:2d:5f:e3:69:2d:b1:14:0f:87:1d:df:
84:c8:7e:de:43:34:04:9e:c1:e5:9f:50:37:48:07:e7:71:35:
a2:94:c5:4b:32:67:55:33:17:99:4d:2b:05:ce:3f:35:df:a4:
fd:47:90:a5:26:6b:00:b4:65:e9:22:ec:61:95:6a:f5:db:b8:
f3:27:15:cc:50:e7:88:2a:ec:65:da:a7:e6:c6:40:1c:6d:fb:
ef:9b:e8:37:54:80:17:ed:6a:12:17:f6:da:a1:8a:bd:8b:70:
d9:47:9e:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8Zw+l3e+MIC6CxXuTGZyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZGJmYmRiNmU5NzVkZGNhOGY2ZGQ5NjhjMzdhN2Q1NTYw
ZTY5MWQwHhcNMjUwODIzMDgwMDM3WhcNMjUwODI0MDgwMDM3WjAzMTEwLwYDVQQD
Eyg5NTg1ZjBiNjI5ZmZmZWRjNzcxNDZkZmNmMTBiOGQ4Y2JlNTg1ZjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlxUUdzzDYB1Ww+5a4tC7c1YI6ty
nMyfMQnP7c2ogtEhkWM87vW25yuIpee3bl9RvAuv/dF8OWgb+e6fwcLMqJ8utf7f
Bk17r2RLogs6gQcsvUXIuPmCz0adGvzRSv6gppY41ILSAkcJUJrrwlHgV221jG6K
6klfTH0QYxRCBMDxz7k5G3vZ6W9F4zFMopIB1s9eMtr3H2sInA1CwHLIixDUk3hX
spdL3QdCx9lyC47cJUnzH7Bl68RILElvVTdtseWZhDwvS4Zu+YaBmvnO0Lo+yJVe
lxcONX7tpQAo+eg+80vwddw/PLmCmJomZjM80qX8ycC3M2A5e5WSxl/3xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWF8LYp//7cdxRt/PELjYy+WF8IMB8GA1UdIwQY
MBaAFP/b+9tul13cqPbdlow3p9VWDmkdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi82NmZmZjMtYmZhOS00NzMyLWI0YjUt
MTk3NjlmNTc4ZWZkLzEvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi82NmZmZjMtYmZhOS00NzMyLWI0YjUtMTk3NjlmNTc4ZWZk
LzEvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8uN+3MN
vul2F2nDZoeDnxBLehrPoiHYgq3ai3dzRCv4kfUHyFDshkPgIGKH2WKvmo6G+tNk
FeeEIMUzJRhrwhB9kmjCXR+95cSKKXjVFfrZFieS/PnMQ+eNt1OFk2rZuQM0ACZP
WuhLEJzXARp6RDAUNwgY5mPm0zGUJvh4fvox6YsBWtg8ucIy+JFZIlQvf4ISfgcA
oS1f42ktsRQPhx3fhMh+3kM0BJ7B5Z9QN0gH53E1opTFSzJnVTMXmU0rBc4/Nd+k
/UeQpSZrALRl6SLsYZVq9du48ycVzFDniCrsZdqn5sZAHG3775voN1SAF+1qEhf2
2qGKvYtw2Ueesw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:27 2025 by rpki-client