Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
File: 9H1LS48bGIg-rDtJnA8EKsomsKk.mft (raw, json)
Hash identifier: SHigyWH9WTG+GuQDw0wT0qqd+h3zFmVc9TI9Y/P3y0A=
Subject key identifier: 0E:03:CA:88:BF:8E:CF:45:99:8D:43:DC:5C:A6:CD:32:82:9E:C9:93
Authority key identifier: F4:7D:4B:4B:8F:1B:18:88:3E:AC:3B:49:9C:0F:04:2A:CA:26:B0:A9
Certificate issuer: /CN=f47d4b4b8f1b18883eac3b499c0f042aca26b0a9
Certificate serial: 0199FFC84965092154665F5BC61B46F43B34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
Manifest number: 0A16
Signing time: Mon 20 Oct 2025 04:02:19 +0000
Manifest this update: Mon 20 Oct 2025 04:02:19 +0000
Manifest next update: Tue 21 Oct 2025 04:02:19 +0000
Files and hashes: 1: 9H1LS48bGIg-rDtJnA8EKsomsKk.crl (hash: HdCl+kH/kCuujbIwSqO+s5stkUOuRN6f7F6mbrpmSFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:49:65:09:21:54:66:5f:5b:c6:1b:46:f4:3b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f47d4b4b8f1b18883eac3b499c0f042aca26b0a9
Validity
Not Before: Oct 20 04:02:19 2025 GMT
Not After : Oct 21 04:02:19 2025 GMT
Subject: CN=0e03ca88bf8ecf45998d43dc5ca6cd32829ec993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3e:96:f6:1d:cb:cc:cd:fc:86:9c:d3:dd:6f:
c0:a5:ba:41:b8:61:56:83:52:d4:45:fb:2b:f2:e5:
13:63:1d:32:d6:98:a3:1a:aa:7e:25:37:18:d7:32:
b1:2a:8d:d1:7b:3e:25:69:5d:9e:25:7b:65:73:09:
96:cd:1e:68:9d:c6:2d:8a:c1:87:58:ae:f8:f7:6c:
e2:f5:59:b1:96:33:bc:67:a4:3e:d2:82:05:82:71:
62:0f:a9:ab:ed:e1:f6:14:d1:09:41:9c:03:e2:90:
a0:82:8b:24:60:57:28:06:7d:f8:ae:30:52:46:df:
43:67:60:14:80:e3:27:6f:98:d0:7f:a1:d2:79:87:
77:4a:ff:9a:ce:89:5f:8c:35:9a:55:c9:74:db:6c:
6b:9a:ce:2b:f5:18:79:01:97:f0:ec:94:0b:d9:4d:
5f:2d:71:b2:2b:84:5c:7b:85:b1:24:1d:06:34:25:
8a:b5:01:df:68:c1:cb:90:a3:7c:88:d8:6c:82:9f:
1f:df:df:51:4e:60:4e:58:cf:4a:70:0d:05:bd:26:
a3:a3:76:9d:b7:70:fc:be:79:5b:7a:47:b0:20:45:
30:cf:68:f0:4e:67:b6:26:eb:e1:ae:36:07:b3:df:
c8:8c:38:a9:f2:35:91:9b:5b:72:32:d3:77:5d:d4:
d4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:03:CA:88:BF:8E:CF:45:99:8D:43:DC:5C:A6:CD:32:82:9E:C9:93
X509v3 Authority Key Identifier:
keyid:F4:7D:4B:4B:8F:1B:18:88:3E:AC:3B:49:9C:0F:04:2A:CA:26:B0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f2:84:07:05:9f:61:ae:7d:62:ce:66:2a:2c:43:eb:76:ac:
3d:84:a5:18:d3:3e:0c:96:b5:26:ae:30:f7:23:03:cf:b2:16:
c7:67:03:2a:91:3b:6b:cb:42:56:79:6c:2a:61:6e:b8:c6:78:
de:76:ae:2f:46:74:52:c0:40:c3:83:b6:02:9c:61:ee:23:9c:
eb:96:d0:86:bb:ab:07:c4:6d:ce:27:ea:25:d5:de:a2:a2:b6:
68:47:23:ce:e6:6f:ae:75:61:b1:5b:78:24:4f:97:1d:6e:cb:
49:df:aa:e5:49:92:df:00:8a:43:5a:c1:e0:c4:9c:b1:bb:93:
e6:d8:22:9d:3c:6c:6d:23:9d:d9:10:a7:88:67:da:12:0f:ae:
10:ef:45:e9:e1:b1:22:cd:b6:77:e5:cb:09:67:4c:4d:86:73:
5b:a3:2e:58:74:42:29:17:7f:43:9b:1e:6c:bb:cf:1a:c1:a6:
bb:e2:02:63:cd:ab:32:20:d4:88:d0:e5:c2:ed:25:19:fe:e5:
46:98:1a:90:2d:8c:19:53:1a:2c:2c:80:ea:31:f4:15:bf:28:
ec:37:85:2a:1c:4e:5a:da:d2:07:13:b3:f4:9e:1d:8c:2a:99:
92:b9:09:dd:05:f8:41:bf:89:c9:fd:66:9d:61:d8:32:64:63:
77:41:40:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yEllCSFUZl9bxhtG9Ds0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0N2Q0YjRiOGYxYjE4ODgzZWFjM2I0OTljMGYwNDJhY2Ey
NmIwYTkwHhcNMjUxMDIwMDQwMjE5WhcNMjUxMDIxMDQwMjE5WjAzMTEwLwYDVQQD
EygwZTAzY2E4OGJmOGVjZjQ1OTk4ZDQzZGM1Y2E2Y2QzMjgyOWVjOTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT6W9h3LzM38hpzT3W/ApbpBuGFW
g1LURfsr8uUTYx0y1pijGqp+JTcY1zKxKo3Rez4laV2eJXtlcwmWzR5oncYtisGH
WK7492zi9VmxljO8Z6Q+0oIFgnFiD6mr7eH2FNEJQZwD4pCggoskYFcoBn34rjBS
Rt9DZ2AUgOMnb5jQf6HSeYd3Sv+azolfjDWaVcl022xrms4r9Rh5AZfw7JQL2U1f
LXGyK4Rce4WxJB0GNCWKtQHfaMHLkKN8iNhsgp8f399RTmBOWM9KcA0FvSajo3ad
t3D8vnlbekewIEUwz2jwTme2JuvhrjYHs9/IjDip8jWRm1tyMtN3XdTUVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4Dyoi/js9FmY1D3FymzTKCnsmTMB8GA1UdIwQY
MBaAFPR9S0uPGxiIPqw7SZwPBCrKJrCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUgxTFM0OGJHSWctckR0Sm5BOEVLc29tc0trLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNzZkMWYtZWVkZi00YTRkLTg5NWIt
MjcxNjY3NTNkZjA4LzEvOUgxTFM0OGJHSWctckR0Sm5BOEVLc29tc0trLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9mNzZkMWYtZWVkZi00YTRkLTg5NWItMjcxNjY3NTNkZjA4
LzEvOUgxTFM0OGJHSWctckR0Sm5BOEVLc29tc0trLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX/KEBwWf
Ya59Ys5mKixD63asPYSlGNM+DJa1Jq4w9yMDz7IWx2cDKpE7a8tCVnlsKmFuuMZ4
3nauL0Z0UsBAw4O2Apxh7iOc65bQhrurB8RtzifqJdXeoqK2aEcjzuZvrnVhsVt4
JE+XHW7LSd+q5UmS3wCKQ1rB4MScsbuT5tginTxsbSOd2RCniGfaEg+uEO9F6eGx
Is22d+XLCWdMTYZzW6MuWHRCKRd/Q5sebLvPGsGmu+ICY82rMiDUiNDlwu0lGf7l
RpgakC2MGVMaLCyA6jH0Fb8o7DeFKhxOWtrSBxOz9J4djCqZkrkJ3QX4Qb+Jyf1m
nWHYMmRjd0FAuA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:12:51 2025 by rpki-client