Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
File: 9Il_29x9JQjfzRTP9gCtQ7knkks.mft (raw, json)
Hash identifier: AgkfSttRhYo5+ftV5CDdhwqmlc1gb5Qva2ReQSuGWl8=
Subject key identifier: 16:87:8A:69:7F:17:5D:1A:50:1F:47:72:22:CD:1A:23:81:B9:1C:9F
Authority key identifier: F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
Certificate issuer: /CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Certificate serial: 0199FFFE3E954A4B2CD639FA16E61DD4F0B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
Manifest number: 0C16
Signing time: Mon 20 Oct 2025 05:01:16 +0000
Manifest this update: Mon 20 Oct 2025 05:01:16 +0000
Manifest next update: Tue 21 Oct 2025 05:01:16 +0000
Files and hashes: 1: 9Il_29x9JQjfzRTP9gCtQ7knkks.crl (hash: zZhFijIltcoVAj7Zdgw8nNABqD2/IbELvy8bw0ouhFw=)
2: goWXgCcrT8sdpWvs98SjkshS1QQ.roa (hash: pL/QBtJXrUgZbyv/2j+3PUPuF0UtD1Pg09swJJxayTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:3e:95:4a:4b:2c:d6:39:fa:16:e6:1d:d4:f0:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Validity
Not Before: Oct 20 05:01:16 2025 GMT
Not After : Oct 21 05:01:16 2025 GMT
Subject: CN=16878a697f175d1a501f477222cd1a2381b91c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:33:26:77:a6:db:1b:a6:1d:eb:32:c4:84:e7:
c7:c4:1a:84:0f:d7:a2:14:b1:24:41:9d:ae:6f:ec:
99:1c:52:97:c3:47:6a:12:30:4f:d9:6b:0e:73:96:
a3:9f:66:da:64:7f:33:3e:39:b5:cd:b7:39:a5:a0:
1c:de:0e:47:9e:c3:c9:59:33:ca:86:27:e1:fa:0a:
f1:e4:33:b6:ac:55:28:6e:50:f1:5d:ff:6b:a8:f0:
9c:d4:8d:1d:bb:7c:0b:99:a2:eb:3e:6d:32:cb:de:
b3:f0:0b:56:3f:95:c1:25:9c:32:58:8e:13:76:67:
ea:17:46:28:41:42:a3:6a:59:8a:e0:f8:c4:5e:42:
d3:b7:ff:ae:b0:ee:2f:ba:64:e4:31:3c:68:73:38:
33:56:a4:68:e3:22:94:0c:89:c8:0e:37:d9:69:31:
82:c9:ff:00:ea:33:a0:26:56:08:38:f1:b7:eb:4a:
7b:af:84:2a:78:ad:4c:d3:2a:bb:e0:fd:59:1f:2b:
56:89:15:2c:8d:4e:50:c7:5e:13:57:98:cf:c8:2b:
98:96:94:2c:ef:6f:72:3c:51:e5:39:6b:ec:d1:17:
c3:b8:36:c6:09:42:fa:84:36:4b:10:d6:59:74:31:
35:19:84:98:07:6e:8f:c3:58:a8:01:8b:35:22:bc:
54:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:87:8A:69:7F:17:5D:1A:50:1F:47:72:22:CD:1A:23:81:B9:1C:9F
X509v3 Authority Key Identifier:
keyid:F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:9d:9d:80:7b:a5:01:00:ef:ca:8c:3d:31:26:dc:33:24:9d:
f4:ed:cd:55:48:30:9b:4a:8e:ce:7c:62:8e:2b:4c:70:1b:74:
6b:c8:5f:7a:2c:a1:47:1c:f2:5e:19:ba:01:29:17:3b:60:1a:
41:d4:08:83:4b:6c:37:c6:af:5c:1f:53:09:b7:a9:e8:d4:0c:
dc:7e:3e:77:8f:a3:54:1e:c3:e8:f8:0a:6a:c7:8e:cb:88:87:
ea:f7:66:c9:91:85:73:53:46:11:42:14:e9:c4:19:a6:14:30:
98:51:69:57:8b:27:5e:7e:c1:78:ba:f0:42:94:cc:d7:5a:a9:
57:4f:ae:b4:8d:52:6a:17:ce:39:9c:cb:24:fc:08:9a:fd:bc:
fa:8d:e3:36:19:22:75:dd:a0:a7:a6:5a:2f:b4:2a:fd:34:ae:
2d:7b:a9:19:3a:8f:ec:b7:b0:af:a4:65:0a:13:bb:f6:25:7b:
02:62:0e:36:f6:be:c1:8d:3a:25:d6:f4:d8:c1:b4:b1:a7:dc:
b6:a0:5d:a2:5c:29:83:ac:12:16:24:e0:ae:97:52:a2:6d:59:
5f:a8:bb:17:74:81:d3:0b:e7:53:b7:b8:df:09:30:36:9c:a1:
4c:c1:6e:58:86:89:fc:1d:b3:b3:40:4d:66:b0:9b:97:13:39:
f8:7e:eb:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn//j6VSkss1jn6FuYd1PC5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ODk3ZmRiZGM3ZDI1MDhkZmNkMTRjZmY2MDBhZDQzYjky
NzkyNGIwHhcNMjUxMDIwMDUwMTE2WhcNMjUxMDIxMDUwMTE2WjAzMTEwLwYDVQQD
EygxNjg3OGE2OTdmMTc1ZDFhNTAxZjQ3NzIyMmNkMWEyMzgxYjkxYzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DMmd6bbG6Yd6zLEhOfHxBqED9ei
FLEkQZ2ub+yZHFKXw0dqEjBP2WsOc5ajn2baZH8zPjm1zbc5paAc3g5HnsPJWTPK
hifh+grx5DO2rFUoblDxXf9rqPCc1I0du3wLmaLrPm0yy96z8AtWP5XBJZwyWI4T
dmfqF0YoQUKjalmK4PjEXkLTt/+usO4vumTkMTxoczgzVqRo4yKUDInIDjfZaTGC
yf8A6jOgJlYIOPG360p7r4QqeK1M0yq74P1ZHytWiRUsjU5Qx14TV5jPyCuYlpQs
729yPFHlOWvs0RfDuDbGCUL6hDZLENZZdDE1GYSYB26Pw1ioAYs1IrxU0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBaHiml/F10aUB9HciLNGiOBuRyfMB8GA1UdIwQY
MBaAFPSJf9vcfSUI380Uz/YArUO5J5JLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83Yjk5N2ItYmVhNi00ODkxLTk1ZDEt
OTRjNmY3NDRkZTQ2LzEvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC83Yjk5N2ItYmVhNi00ODkxLTk1ZDEtOTRjNmY3NDRkZTQ2
LzEvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZ2dgHul
AQDvyow9MSbcMySd9O3NVUgwm0qOznxijitMcBt0a8hfeiyhRxzyXhm6ASkXO2Aa
QdQIg0tsN8avXB9TCbep6NQM3H4+d4+jVB7D6PgKaseOy4iH6vdmyZGFc1NGEUIU
6cQZphQwmFFpV4snXn7BeLrwQpTM11qpV0+utI1SahfOOZzLJPwImv28+o3jNhki
dd2gp6ZaL7Qq/TSuLXupGTqP7Lewr6RlChO79iV7AmIONva+wY06Jdb02MG0safc
tqBdolwpg6wSFiTgrpdSom1ZX6i7F3SB0wvnU7e43wkwNpyhTMFuWIaJ/B2zs0BN
ZrCblxM5+H7rKQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:43:34 2025 by rpki-client