Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft
File: 9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft (raw, json)
Hash identifier: fbG07NLR08KHhqkICUbKrLRcn3rHL8J8EaNdtfKJGto=
Subject key identifier: 7A:3C:48:AB:24:60:96:A3:96:D9:F8:2F:43:3F:0E:9E:F0:C6:21:4E
Authority key identifier: F6:9F:8B:CF:2A:2E:C1:0F:9E:4B:63:02:E1:B3:50:9F:3D:03:36:EE
Certificate issuer: /CN=f69f8bcf2a2ec10f9e4b6302e1b3509f3d0336ee
Certificate serial: 0199FE7DBA13462B10DDF97835BA0F79E307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft
Manifest number: 12A8
Signing time: Sun 19 Oct 2025 22:01:16 +0000
Manifest this update: Sun 19 Oct 2025 22:01:16 +0000
Manifest next update: Mon 20 Oct 2025 22:01:16 +0000
Files and hashes: 1: 9p-LzyouwQ-eS2MC4bNQnz0DNu4.crl (hash: HdgFMn0iZKDbQWIgf3FEPInQX4zywmQxN7hUYic+r8I=)
2: NdVRxEIMNBunZfZP9qXNSfaySc4.roa (hash: KRJlcuUveV33SEu3V+UuJaoqvZJ1ZgJGxVWpQ++tEBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:ba:13:46:2b:10:dd:f9:78:35:ba:0f:79:e3:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69f8bcf2a2ec10f9e4b6302e1b3509f3d0336ee
Validity
Not Before: Oct 19 22:01:16 2025 GMT
Not After : Oct 20 22:01:16 2025 GMT
Subject: CN=7a3c48ab246096a396d9f82f433f0e9ef0c6214e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:91:63:95:80:24:0e:db:ce:f5:e1:18:92:a1:
43:4c:f7:8c:08:98:fb:04:49:a4:ce:62:c6:98:8c:
42:14:17:9e:0c:c7:81:77:79:d7:7e:a3:aa:40:74:
9d:72:04:6d:36:3b:26:60:9f:3a:c8:93:f7:92:d6:
ff:75:5a:b1:6d:2e:a6:74:20:33:ff:1b:70:93:0a:
27:8c:b3:a6:88:fa:49:1e:7f:73:75:cb:d7:7a:47:
06:e6:c6:ad:d4:f3:3f:93:17:2a:72:0c:b3:38:d9:
09:cf:66:66:5d:f4:bf:d7:f8:79:d4:12:a8:6a:4d:
b8:83:44:2f:47:db:5c:5b:dd:89:a1:50:30:b8:64:
58:82:a1:39:29:ac:2d:a6:3b:00:cb:c0:25:91:62:
c3:bb:70:cb:d8:82:e6:c5:e9:9b:85:2c:bb:24:a5:
d9:f9:54:05:31:3c:78:2e:8e:ac:ce:f0:3f:ff:b3:
08:55:32:cb:95:80:55:20:70:13:11:17:29:e3:ea:
20:59:8a:ea:43:48:2b:83:6b:9a:92:b5:a8:38:8f:
b0:50:e0:b9:91:c6:31:2e:78:62:f2:d1:4c:54:28:
83:53:b4:89:5b:82:8c:85:7b:41:2b:07:01:de:f5:
34:55:84:38:52:14:7d:9e:71:42:61:ec:d3:47:1f:
2a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3C:48:AB:24:60:96:A3:96:D9:F8:2F:43:3F:0E:9E:F0:C6:21:4E
X509v3 Authority Key Identifier:
keyid:F6:9F:8B:CF:2A:2E:C1:0F:9E:4B:63:02:E1:B3:50:9F:3D:03:36:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:37:28:ca:6c:e4:47:9e:dc:46:45:25:06:92:65:42:b0:8c:
e5:6c:81:bc:f3:13:e9:fb:4a:f3:18:a4:10:e0:7f:aa:24:ed:
96:e4:00:34:26:23:38:98:f3:6a:4f:f7:44:10:a0:21:a3:53:
b2:a0:f3:ce:f1:a4:09:f6:b5:52:8b:18:0f:ec:75:58:c9:e8:
1c:49:d7:0a:4d:bf:d9:3c:82:88:a8:6c:57:00:f2:59:72:d2:
68:71:81:c2:ae:20:f5:ed:19:d9:e4:8d:4e:21:ff:1e:8b:78:
d7:89:49:b6:25:57:4e:91:4a:95:7b:18:e5:8b:5a:59:8f:79:
40:9e:da:0e:06:7a:d4:a4:4a:d1:3b:0e:1f:4b:f0:a3:c1:47:
e4:02:72:ba:15:24:8b:e3:08:f2:18:61:e6:57:da:66:22:cb:
76:62:73:5c:18:e2:b3:99:66:82:58:5b:a8:82:77:25:3b:9b:
9a:fc:fb:da:76:c0:4b:ec:b7:f6:de:e5:01:4c:9b:00:0c:92:
6a:1a:cf:98:cb:89:d0:16:97:41:51:3c:a9:80:02:e4:7c:ba:
11:40:e5:b4:cb:1c:88:5c:9d:a3:f3:1c:7f:5a:6c:63:6b:2e:
1f:fd:93:a4:e8:a5:a6:70:a1:f5:f0:4d:a9:5e:b8:40:22:06:
a1:02:1e:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+fboTRisQ3fl4NboPeeMHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OWY4YmNmMmEyZWMxMGY5ZTRiNjMwMmUxYjM1MDlmM2Qw
MzM2ZWUwHhcNMjUxMDE5MjIwMTE2WhcNMjUxMDIwMjIwMTE2WjAzMTEwLwYDVQQD
Eyg3YTNjNDhhYjI0NjA5NmEzOTZkOWY4MmY0MzNmMGU5ZWYwYzYyMTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppFjlYAkDtvO9eEYkqFDTPeMCJj7
BEmkzmLGmIxCFBeeDMeBd3nXfqOqQHSdcgRtNjsmYJ86yJP3ktb/dVqxbS6mdCAz
/xtwkwonjLOmiPpJHn9zdcvXekcG5sat1PM/kxcqcgyzONkJz2ZmXfS/1/h51BKo
ak24g0QvR9tcW92JoVAwuGRYgqE5KawtpjsAy8AlkWLDu3DL2ILmxembhSy7JKXZ
+VQFMTx4Lo6szvA//7MIVTLLlYBVIHATERcp4+ogWYrqQ0grg2uakrWoOI+wUOC5
kcYxLnhi8tFMVCiDU7SJW4KMhXtBKwcB3vU0VYQ4UhR9nnFCYezTRx8qiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHo8SKskYJajltn4L0M/Dp7wxiFOMB8GA1UdIwQY
MBaAFPafi88qLsEPnktjAuGzUJ89AzbuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXAtTHp5b3V3US1lUzJNQzRiTlFuejBETnU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85YzhiYTEtODQwNy00YzJhLTkxMmEt
MDBhNzcwNDc3NGUxLzEvOXAtTHp5b3V3US1lUzJNQzRiTlFuejBETnU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi85YzhiYTEtODQwNy00YzJhLTkxMmEtMDBhNzcwNDc3NGUx
LzEvOXAtTHp5b3V3US1lUzJNQzRiTlFuejBETnU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkTcoymzk
R57cRkUlBpJlQrCM5WyBvPMT6ftK8xikEOB/qiTtluQANCYjOJjzak/3RBCgIaNT
sqDzzvGkCfa1UosYD+x1WMnoHEnXCk2/2TyCiKhsVwDyWXLSaHGBwq4g9e0Z2eSN
TiH/Hot414lJtiVXTpFKlXsY5YtaWY95QJ7aDgZ61KRK0TsOH0vwo8FH5AJyuhUk
i+MI8hhh5lfaZiLLdmJzXBjis5lmglhbqIJ3JTubmvz72nbAS+y39t7lAUybAAyS
ahrPmMuJ0BaXQVE8qYAC5Hy6EUDltMsciFydo/Mcf1psY2suH/2TpOilpnCh9fBN
qV64QCIGoQIePQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:41 2025 by rpki-client