Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
File: 9fqTbNBbJl9g8zNAqMY952gvw18.mft (raw, json)
Hash identifier: YbKO7Qz6TH4E+2B9oLfe5iqSxNgxfhGqlzqCtpMeaNU=
Subject key identifier: BC:9A:75:44:79:88:8E:41:7E:2C:F2:77:29:29:D9:EC:8C:D2:6B:15
Authority key identifier: F5:FA:93:6C:D0:5B:26:5F:60:F3:33:40:A8:C6:3D:E7:68:2F:C3:5F
Certificate issuer: /CN=f5fa936cd05b265f60f33340a8c63de7682fc35f
Certificate serial: 0199FD341A4F487B5608DA41147A60ADC769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
Manifest number: 06D0
Signing time: Sun 19 Oct 2025 16:01:14 +0000
Manifest this update: Sun 19 Oct 2025 16:01:14 +0000
Manifest next update: Mon 20 Oct 2025 16:01:14 +0000
Files and hashes: 1: 9fqTbNBbJl9g8zNAqMY952gvw18.crl (hash: 0h9wdoDhgaFE0kv10inN5ph3kIv5t+1PWzTvIS1t6oE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:1a:4f:48:7b:56:08:da:41:14:7a:60:ad:c7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fa936cd05b265f60f33340a8c63de7682fc35f
Validity
Not Before: Oct 19 16:01:14 2025 GMT
Not After : Oct 20 16:01:14 2025 GMT
Subject: CN=bc9a754479888e417e2cf2772929d9ec8cd26b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9a:00:bd:b8:d4:a8:b7:c0:00:ea:9b:0c:29:
d8:5d:fb:32:0e:c9:2f:cd:22:ed:bb:7a:a8:ce:f5:
c4:7e:ed:b7:70:06:94:16:5a:5f:09:ee:74:4e:70:
04:64:fd:14:6e:2d:73:97:c9:b0:07:43:26:99:95:
bf:85:49:53:40:63:d0:ad:05:04:c3:77:bb:92:7c:
82:31:99:d2:33:8a:b1:cc:b9:f0:53:c4:f1:e9:3f:
55:5a:ab:ee:fb:c0:26:44:93:01:a8:6a:fa:65:75:
ee:e3:dd:76:e6:45:ff:e8:b0:bd:85:58:3f:33:15:
24:09:84:0b:e7:10:6d:28:d4:e2:cd:f0:8a:5a:ea:
d8:b8:47:63:96:14:80:90:c0:aa:e7:8a:fc:76:a9:
30:66:dd:67:f0:f0:75:09:03:a7:5c:41:e9:5d:a6:
25:f7:07:1d:92:e1:a3:5f:70:61:a0:29:bc:ab:d7:
4f:ee:07:ee:ea:96:fb:d8:87:5c:69:5b:93:e8:71:
f7:ff:bd:83:36:59:34:1a:61:cb:9c:93:c0:e9:17:
f4:17:93:fa:b2:d9:d0:2f:04:b3:19:1b:6f:71:7d:
34:59:b3:40:02:6c:48:dc:e2:56:c1:c5:34:c0:50:
1d:bc:35:f7:55:0d:19:d1:56:d8:40:98:48:79:cd:
7f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9A:75:44:79:88:8E:41:7E:2C:F2:77:29:29:D9:EC:8C:D2:6B:15
X509v3 Authority Key Identifier:
keyid:F5:FA:93:6C:D0:5B:26:5F:60:F3:33:40:A8:C6:3D:E7:68:2F:C3:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a0:5b:91:94:83:97:45:8d:c7:1a:91:cb:34:ac:bc:f7:e4:
90:cd:04:db:bd:a1:c8:6f:10:15:99:49:16:a3:6c:8d:e9:df:
21:e4:a6:ae:47:26:01:54:4c:bb:74:7f:0a:11:3b:b1:3f:66:
cd:aa:4c:06:54:77:f4:0f:27:27:40:5e:8c:9a:71:5f:c4:55:
5a:41:6b:9e:5b:48:88:a0:e3:bd:83:b4:aa:d3:4e:53:69:6f:
8e:ab:65:45:d5:4f:5e:b5:cd:16:e2:36:5a:a3:2c:7d:c1:ab:
ab:bf:51:0b:87:ae:d7:a3:22:d1:6c:9a:88:e0:27:98:76:54:
fa:07:6b:d8:4f:46:4a:19:90:38:ec:f2:08:87:ca:86:1e:74:
f6:58:62:0f:c1:b3:e9:0b:04:f0:18:9c:4a:38:95:cf:45:76:
4a:c9:db:0e:f7:39:47:92:17:3f:90:07:ce:05:94:e1:00:58:
ac:2d:ca:6e:53:80:64:6c:2a:ef:bc:7c:ff:10:23:34:51:28:
f9:56:ec:e5:77:ce:1a:5d:70:29:9b:07:69:c1:6c:1a:ef:36:
fc:fc:9f:5c:97:0a:53:14:37:04:fd:b9:ee:e8:75:86:ea:4d:
a9:d8:40:e8:8c:08:2d:da:36:b7:c8:5f:7b:3b:0a:a2:9e:cf:
65:83:af:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NBpPSHtWCNpBFHpgrcdpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZmE5MzZjZDA1YjI2NWY2MGYzMzM0MGE4YzYzZGU3Njgy
ZmMzNWYwHhcNMjUxMDE5MTYwMTE0WhcNMjUxMDIwMTYwMTE0WjAzMTEwLwYDVQQD
EyhiYzlhNzU0NDc5ODg4ZTQxN2UyY2YyNzcyOTI5ZDllYzhjZDI2YjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5oAvbjUqLfAAOqbDCnYXfsyDskv
zSLtu3qozvXEfu23cAaUFlpfCe50TnAEZP0Ubi1zl8mwB0MmmZW/hUlTQGPQrQUE
w3e7knyCMZnSM4qxzLnwU8Tx6T9VWqvu+8AmRJMBqGr6ZXXu49125kX/6LC9hVg/
MxUkCYQL5xBtKNTizfCKWurYuEdjlhSAkMCq54r8dqkwZt1n8PB1CQOnXEHpXaYl
9wcdkuGjX3BhoCm8q9dP7gfu6pb72IdcaVuT6HH3/72DNlk0GmHLnJPA6Rf0F5P6
stnQLwSzGRtvcX00WbNAAmxI3OJWwcU0wFAdvDX3VQ0Z0VbYQJhIec1/3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyadUR5iI5Bfizydykp2eyM0msVMB8GA1UdIwQY
MBaAFPX6k2zQWyZfYPMzQKjGPedoL8NfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWZxVGJOQmJKbDlnOHpOQXFNWTk1Mmd2dzE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC82ZTc2NzAtNjMxZC00Nzg3LWFlZGEt
ZjE1ODZmYmRlODFhLzEvOWZxVGJOQmJKbDlnOHpOQXFNWTk1Mmd2dzE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC82ZTc2NzAtNjMxZC00Nzg3LWFlZGEtZjE1ODZmYmRlODFh
LzEvOWZxVGJOQmJKbDlnOHpOQXFNWTk1Mmd2dzE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE6BbkZSD
l0WNxxqRyzSsvPfkkM0E272hyG8QFZlJFqNsjenfIeSmrkcmAVRMu3R/ChE7sT9m
zapMBlR39A8nJ0BejJpxX8RVWkFrnltIiKDjvYO0qtNOU2lvjqtlRdVPXrXNFuI2
WqMsfcGrq79RC4eu16Mi0WyaiOAnmHZU+gdr2E9GShmQOOzyCIfKhh509lhiD8Gz
6QsE8BicSjiVz0V2SsnbDvc5R5IXP5AHzgWU4QBYrC3KblOAZGwq77x8/xAjNFEo
+Vbs5XfOGl1wKZsHacFsGu82/PyfXJcKUxQ3BP257uh1hupNqdhA6IwILdo2t8hf
ezsKop7PZYOvWQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:00:08 2025 by rpki-client