Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
File: 0R9tkk1vbMDpQIN9kwH85zIGV3E.mft (raw, json)
Hash identifier: VTfS6/mQXVkS4/pUYUYCYxGrorCx2Q7Fcw5OzjLipMs=
Subject key identifier: A7:C2:66:BC:9A:8E:AC:C3:81:D8:69:C2:FE:AA:FB:B5:FE:8F:DB:53
Authority key identifier: D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71
Certificate issuer: /CN=d11f6d924d6f6cc0e940837d9301fce732065771
Certificate serial: 0199FEEBBDFCDD36CAADDE65BC0D3C0A85BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
Manifest number: 053C
Signing time: Mon 20 Oct 2025 00:01:26 +0000
Manifest this update: Mon 20 Oct 2025 00:01:26 +0000
Manifest next update: Tue 21 Oct 2025 00:01:26 +0000
Files and hashes: 1: 0R9tkk1vbMDpQIN9kwH85zIGV3E.crl (hash: gDJYzr2jdGTpx22mGK3cE3HLhr9aaD7M2DFffNTREh0=)
2: iJSQx0f1nTa0-CmNbadm7Gos7IA.roa (hash: LXabEDWzH1fx8QmFW8g5Pa/8Oh8pnxFijMUOQc1WwTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:bd:fc:dd:36:ca:ad:de:65:bc:0d:3c:0a:85:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d11f6d924d6f6cc0e940837d9301fce732065771
Validity
Not Before: Oct 20 00:01:26 2025 GMT
Not After : Oct 21 00:01:26 2025 GMT
Subject: CN=a7c266bc9a8eacc381d869c2feaafbb5fe8fdb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:36:40:be:68:1c:63:ea:f0:5e:33:79:9c:01:
3c:62:ad:1c:65:b0:e5:c4:fe:5b:c9:9a:f4:f0:5c:
83:f3:19:08:f8:56:79:5f:13:1b:e5:56:8d:57:a9:
64:d0:6a:1a:95:e7:30:ec:1a:4d:20:67:58:48:8e:
fd:38:cf:20:59:89:9b:1f:d8:bd:54:2d:f8:17:dd:
f3:1d:cd:91:90:67:bd:82:b7:ce:5e:61:b7:14:d8:
ff:81:3b:de:3d:6f:0e:b7:79:15:a8:40:aa:ae:7f:
b6:2c:cf:4a:3d:a7:7c:1b:90:9a:87:fe:84:e8:e9:
ac:3f:d8:40:b1:35:e5:9b:a3:91:d0:25:3f:00:a9:
e8:b1:50:6b:e2:99:ff:aa:6b:8f:e6:a9:c0:9a:22:
8c:25:e0:20:52:6d:63:2c:22:39:26:f1:a9:ae:39:
ae:30:6f:e4:2c:fa:bd:39:e3:7f:6e:ca:7c:98:34:
6d:7b:87:20:02:0b:cc:2c:e4:52:e4:3b:e4:71:c0:
29:23:29:b6:2e:33:d9:17:bd:e6:1a:f2:5b:82:4e:
0b:2e:d3:48:a6:39:82:35:4c:75:ab:6f:ba:ac:ad:
e7:9e:88:57:ef:ec:af:f4:02:27:33:32:d1:14:3a:
f6:6e:20:2c:84:40:c3:51:c3:eb:64:e8:7f:31:4a:
c8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C2:66:BC:9A:8E:AC:C3:81:D8:69:C2:FE:AA:FB:B5:FE:8F:DB:53
X509v3 Authority Key Identifier:
keyid:D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:53:b5:c4:9b:87:81:cf:57:0d:a9:83:27:1e:e4:ae:14:0f:
d9:9d:b0:11:41:5d:56:1b:7b:47:ac:6d:e5:a3:51:68:c4:d2:
00:67:d9:ae:ae:10:bb:13:71:7c:81:7f:62:d5:5b:76:2e:a1:
bd:b4:46:ed:06:9f:06:59:d3:5a:96:95:b2:08:7f:02:91:f0:
78:0e:bf:59:4d:13:7b:19:49:66:e0:cf:86:e0:7d:9d:a9:72:
4f:f6:3a:8c:1d:f2:8a:16:bc:0f:1b:b8:6d:fc:6e:38:63:16:
83:ae:50:8c:8c:8a:1d:df:cf:9f:c4:e7:61:87:ff:5d:d4:50:
d1:51:0d:ac:cb:ff:71:ec:a7:96:c0:74:2c:27:39:68:bb:68:
fe:07:cd:ed:cc:0b:f7:88:8c:78:f7:6d:d8:a0:34:ef:1e:25:
1e:5d:9f:b8:44:f4:d2:ad:ed:26:f1:70:87:bb:c2:ed:fa:06:
a7:c8:eb:c1:12:5c:ed:8f:fb:6d:de:6e:39:2a:de:7a:13:0a:
d7:e0:34:92:7b:13:b1:9b:15:96:55:8c:84:5b:b2:7c:48:1b:
10:b2:cb:25:f1:20:20:21:f7:7a:47:72:bb:a4:90:f0:73:eb:
95:ea:58:5a:ad:89:68:5e:08:1c:c8:c4:38:65:9c:31:ad:05:
86:dc:ce:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+67383TbKrd5lvA08CoW9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMWY2ZDkyNGQ2ZjZjYzBlOTQwODM3ZDkzMDFmY2U3MzIw
NjU3NzEwHhcNMjUxMDIwMDAwMTI2WhcNMjUxMDIxMDAwMTI2WjAzMTEwLwYDVQQD
EyhhN2MyNjZiYzlhOGVhY2MzODFkODY5YzJmZWFhZmJiNWZlOGZkYjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTZAvmgcY+rwXjN5nAE8Yq0cZbDl
xP5byZr08FyD8xkI+FZ5XxMb5VaNV6lk0Goalecw7BpNIGdYSI79OM8gWYmbH9i9
VC34F93zHc2RkGe9grfOXmG3FNj/gTvePW8Ot3kVqECqrn+2LM9KPad8G5Cah/6E
6OmsP9hAsTXlm6OR0CU/AKnosVBr4pn/qmuP5qnAmiKMJeAgUm1jLCI5JvGprjmu
MG/kLPq9OeN/bsp8mDRte4cgAgvMLORS5DvkccApIym2LjPZF73mGvJbgk4LLtNI
pjmCNUx1q2+6rK3nnohX7+yv9AInMzLRFDr2biAshEDDUcPrZOh/MUrIzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfCZryajqzDgdhpwv6q+7X+j9tTMB8GA1UdIwQY
MBaAFNEfbZJNb2zA6UCDfZMB/OcyBldxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFI5dGtrMXZiTURwUUlOOWt3SDg1eklHVjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS84M2M5YjktYTFhYy00NTE2LWFiZTgt
OWVkOTcxMGQ2ZWEyLzEvMFI5dGtrMXZiTURwUUlOOWt3SDg1eklHVjNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS84M2M5YjktYTFhYy00NTE2LWFiZTgtOWVkOTcxMGQ2ZWEy
LzEvMFI5dGtrMXZiTURwUUlOOWt3SDg1eklHVjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1O1xJuH
gc9XDamDJx7krhQP2Z2wEUFdVht7R6xt5aNRaMTSAGfZrq4QuxNxfIF/YtVbdi6h
vbRG7QafBlnTWpaVsgh/ApHweA6/WU0TexlJZuDPhuB9nalyT/Y6jB3yiha8Dxu4
bfxuOGMWg65QjIyKHd/Pn8TnYYf/XdRQ0VENrMv/ceynlsB0LCc5aLto/gfN7cwL
94iMePdt2KA07x4lHl2fuET00q3tJvFwh7vC7foGp8jrwRJc7Y/7bd5uOSreehMK
1+A0knsTsZsVllWMhFuyfEgbELLLJfEgICH3ekdyu6SQ8HPrlepYWq2JaF4IHMjE
OGWcMa0FhtzO/A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:22 2025 by rpki-client