Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
File: m0fuHxfJh967LAINi18ti9rb63c.mft (raw, json)
Hash identifier: liiApihxkpZscWavJeIgN8EXMzMlnAw+cJem17oEUSo=
Subject key identifier: 4D:CD:B7:0E:5E:78:40:3E:B9:FF:C5:7C:07:00:CD:4F:5C:D1:0E:3F
Authority key identifier: 9B:47:EE:1F:17:C9:87:DE:BB:2C:02:0D:8B:5F:2D:8B:DA:DB:EB:77
Certificate issuer: /CN=9b47ee1f17c987debb2c020d8b5f2d8bdadbeb77
Certificate serial: 0199C3E990ADCF40D410FE3E4D294F6AEC5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
Manifest number: 0EAF
Signing time: Wed 08 Oct 2025 13:01:27 +0000
Manifest this update: Wed 08 Oct 2025 13:01:27 +0000
Manifest next update: Thu 09 Oct 2025 13:01:27 +0000
Files and hashes: 1: 126M92i4yvgJWpcn8XcIW24xKRw.roa (hash: gvLu6/32Bhn0SToW2HYoFaVXP2rKf3ibNrus5LTj59I=)
2: 2Y-BQWwW7_ggvBXNnc8W9Hw_ByE.roa (hash: JhmK62xSjdy0MLOq5+Y9bNPh5TyhHzNoMKSxAmlyqP4=)
3: m0fuHxfJh967LAINi18ti9rb63c.crl (hash: pXbJI2ILiX3EbisiEKgyaANnTpFsZvZ/5etlrc7L0kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:e9:90:ad:cf:40:d4:10:fe:3e:4d:29:4f:6a:ec:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b47ee1f17c987debb2c020d8b5f2d8bdadbeb77
Validity
Not Before: Oct 8 13:01:27 2025 GMT
Not After : Oct 9 13:01:27 2025 GMT
Subject: CN=4dcdb70e5e78403eb9ffc57c0700cd4f5cd10e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:27:e5:50:e5:e4:3f:1d:ff:14:45:71:f7:9f:
9d:dd:ba:57:d7:fa:8d:29:62:7f:6c:32:33:c2:fa:
7c:d9:8f:3f:2d:e3:44:da:66:ea:63:86:e7:aa:99:
e5:df:7c:74:53:2b:15:95:aa:e0:60:85:a1:50:de:
f2:06:97:7b:53:5d:d3:e6:cd:37:30:10:40:42:ee:
a9:31:cc:b1:90:55:07:82:bc:06:05:67:d8:c9:84:
92:4f:d5:22:26:d5:19:49:5a:9e:3b:54:c8:a9:6e:
cf:e1:3a:f3:98:81:b9:5d:d0:e3:fa:66:b8:68:d8:
98:ed:ea:3a:22:e9:c8:2e:44:ed:85:a8:8d:94:bb:
2e:2d:66:81:4b:40:dc:00:ec:89:79:38:be:33:e3:
99:6f:ba:fd:f8:90:c6:8c:fa:3c:02:4a:49:da:cc:
65:f6:a6:d3:16:74:77:10:86:48:f4:fd:fc:0d:6b:
4a:7e:37:a5:8b:0a:02:57:9f:6f:db:2a:5a:10:e3:
12:c6:01:8d:c8:11:f6:4b:32:ba:db:45:3f:d6:41:
e4:e9:e7:fd:e2:7f:7c:9e:89:8e:4c:90:09:eb:9c:
bb:ea:00:7c:45:9d:0e:56:1e:81:de:d9:aa:96:99:
12:cc:cf:5e:99:f1:3c:b5:51:7c:7d:7d:d4:aa:d5:
64:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CD:B7:0E:5E:78:40:3E:B9:FF:C5:7C:07:00:CD:4F:5C:D1:0E:3F
X509v3 Authority Key Identifier:
keyid:9B:47:EE:1F:17:C9:87:DE:BB:2C:02:0D:8B:5F:2D:8B:DA:DB:EB:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:3f:c9:bd:51:c3:e0:c6:8f:5f:c9:5b:64:87:1f:5a:2f:3f:
ab:76:55:46:ba:b8:13:af:41:20:1e:92:b5:ee:73:54:ce:06:
dc:76:fd:34:6c:fc:d9:44:03:27:5d:eb:8b:2c:9c:69:63:0f:
3f:00:23:5d:bd:3c:ba:b9:b3:53:1c:20:70:57:7f:d5:7b:c3:
9c:26:26:f9:ed:d3:ce:8f:9c:00:ab:fb:ac:d2:6d:58:88:65:
ff:fd:ae:4a:10:21:93:f7:f1:f3:21:f6:86:da:f9:3f:8f:97:
ea:99:0e:43:7a:78:c3:a5:0d:2f:79:7e:6e:53:86:82:11:8f:
6f:d4:45:64:01:b3:2a:76:92:02:50:a8:7a:eb:7b:0f:28:19:
10:2a:4a:ee:8d:88:48:dc:9c:c4:9a:7c:3e:6c:b6:a0:ad:37:
f8:51:2f:33:25:63:d2:e7:a4:ed:49:9f:2a:95:d5:a1:5b:91:
f4:2c:08:23:61:09:7c:44:9c:70:8a:7f:7c:7a:e2:82:2d:36:
ab:52:66:da:95:d1:14:16:5d:4c:35:cd:75:d6:33:f8:f8:cf:
40:52:1d:44:fc:1c:8e:b6:b3:a2:ed:6e:ae:76:44:25:64:2c:
e7:73:36:12:6b:a2:a5:7d:c8:e9:48:a1:56:58:cd:39:6f:35:
bc:35:2f:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnD6ZCtz0DUEP4+TSlPauxeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNDdlZTFmMTdjOTg3ZGViYjJjMDIwZDhiNWYyZDhiZGFk
YmViNzcwHhcNMjUxMDA4MTMwMTI3WhcNMjUxMDA5MTMwMTI3WjAzMTEwLwYDVQQD
Eyg0ZGNkYjcwZTVlNzg0MDNlYjlmZmM1N2MwNzAwY2Q0ZjVjZDEwZTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iflUOXkPx3/FEVx95+d3bpX1/qN
KWJ/bDIzwvp82Y8/LeNE2mbqY4bnqpnl33x0UysVlargYIWhUN7yBpd7U13T5s03
MBBAQu6pMcyxkFUHgrwGBWfYyYSST9UiJtUZSVqeO1TIqW7P4TrzmIG5XdDj+ma4
aNiY7eo6IunILkTthaiNlLsuLWaBS0DcAOyJeTi+M+OZb7r9+JDGjPo8AkpJ2sxl
9qbTFnR3EIZI9P38DWtKfjeliwoCV59v2ypaEOMSxgGNyBH2SzK620U/1kHk6ef9
4n98nomOTJAJ65y76gB8RZ0OVh6B3tmqlpkSzM9emfE8tVF8fX3UqtVk0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3Ntw5eeEA+uf/FfAcAzU9c0Q4/MB8GA1UdIwQY
MBaAFJtH7h8XyYfeuywCDYtfLYva2+t3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTBmdUh4ZkpoOTY3TEFJTmkxOHRpOXJiNjNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS85YjE2ZjMtMDEwMC00OTY0LTllYzkt
ZTVlYzJjYzY0N2FhLzEvbTBmdUh4ZkpoOTY3TEFJTmkxOHRpOXJiNjNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS85YjE2ZjMtMDEwMC00OTY0LTllYzktZTVlYzJjYzY0N2Fh
LzEvbTBmdUh4ZkpoOTY3TEFJTmkxOHRpOXJiNjNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWj/JvVHD
4MaPX8lbZIcfWi8/q3ZVRrq4E69BIB6Ste5zVM4G3Hb9NGz82UQDJ13riyycaWMP
PwAjXb08urmzUxwgcFd/1XvDnCYm+e3Tzo+cAKv7rNJtWIhl//2uShAhk/fx8yH2
htr5P4+X6pkOQ3p4w6UNL3l+blOGghGPb9RFZAGzKnaSAlCoeut7DygZECpK7o2I
SNycxJp8Pmy2oK03+FEvMyVj0uek7UmfKpXVoVuR9CwII2EJfESccIp/fHrigi02
q1Jm2pXRFBZdTDXNddYz+PjPQFIdRPwcjrazou1urnZEJWQs53M2EmuipX3I6Uih
VljNOW81vDUvwg==
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:32:03 2025 by rpki-client