Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
File: 9X2cj_wgS2294BIFMDvfi1BjiqY.mft (raw, json)
Hash identifier: 2GDCZCXj3tB5TwfqaVmrK9q7NddQkHlF/mriC4DWfC4=
Subject key identifier: 8F:F7:F3:5C:D2:0C:F4:B2:89:59:12:60:FA:8E:26:65:05:80:54:D4
Authority key identifier: F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6
Certificate issuer: /CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
Certificate serial: 019A714A2FAB4DC28244EFD04423C623CDAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
Manifest number: 0224
Signing time: Tue 11 Nov 2025 05:01:18 +0000
Manifest this update: Tue 11 Nov 2025 05:01:18 +0000
Manifest next update: Wed 12 Nov 2025 05:01:18 +0000
Files and hashes: 1: 9X2cj_wgS2294BIFMDvfi1BjiqY.crl (hash: DoXSbXYwFUYTejKXIP5A2jDXx4aKYDebTvW0lHaIGTg=)
2: blFPI1QT3vGyXWS1-axkqAT7T1o.roa (hash: 9ZF4v61ldXuDLq/JdKEO0mrKJOTY13vVthxskJAXAEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:2f:ab:4d:c2:82:44:ef:d0:44:23:c6:23:cd:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
Validity
Not Before: Nov 11 05:01:18 2025 GMT
Not After : Nov 12 05:01:18 2025 GMT
Subject: CN=8ff7f35cd20cf4b289591260fa8e2665058054d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d1:7c:97:5a:13:38:07:b1:1e:98:67:0c:ea:
eb:34:0e:14:e5:b1:4b:5d:a0:97:c5:74:4c:cb:c4:
f7:c6:da:db:fe:cc:53:2f:4d:72:17:10:04:07:88:
97:15:24:0d:8f:29:40:05:7a:9a:82:ae:7d:b5:8a:
bb:66:ac:16:a7:a9:04:9f:09:09:70:3f:c1:93:e3:
5a:3d:a0:d6:44:df:5b:4b:6b:e1:c5:53:71:7c:07:
17:f8:88:89:d8:69:65:f5:46:e5:da:83:7b:a9:71:
28:c4:75:57:d0:9e:d9:17:08:54:e7:ab:cb:b2:30:
93:11:e3:33:45:38:27:0b:90:27:56:6c:18:bc:9d:
10:87:a7:c6:66:32:b4:dc:3b:08:50:4c:22:f7:0d:
2c:94:b5:07:8c:28:af:1b:2b:63:ea:44:0d:aa:b2:
12:c0:26:e9:3d:00:e4:1f:4a:21:17:a0:26:a4:2a:
c9:ba:a7:89:5b:35:80:85:61:79:43:92:99:cf:a8:
68:d5:ba:a9:24:85:47:b0:be:63:7b:10:2c:ca:01:
b7:25:f7:54:87:0a:b2:8d:c9:a6:f0:3e:45:0d:e1:
e1:6b:25:58:cc:8d:f9:f9:8e:40:57:f9:de:35:67:
84:17:8f:6e:37:90:c5:03:23:6f:b7:61:55:ba:95:
2f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F7:F3:5C:D2:0C:F4:B2:89:59:12:60:FA:8E:26:65:05:80:54:D4
X509v3 Authority Key Identifier:
keyid:F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:92:9b:04:43:99:b2:08:1f:45:d2:d2:6c:c4:44:c4:31:25:
4c:20:2b:9c:0f:22:bb:6c:e0:f5:81:24:a4:e9:56:5b:9c:97:
ee:96:fe:50:06:4f:9f:37:ff:17:cd:2d:95:6d:16:d8:c9:b2:
eb:33:eb:69:51:fd:43:0f:c8:8d:e4:b9:60:a1:57:a5:b5:9c:
8a:1f:0b:7e:de:4e:2d:34:09:88:93:d4:ad:19:d6:9e:38:f4:
60:68:f7:5f:ac:27:7a:0d:86:c3:7b:a4:d3:f9:c0:c1:83:45:
02:65:ef:89:d7:51:80:61:17:17:68:43:87:7c:46:e3:74:8c:
46:b6:86:b4:3b:57:29:d9:e2:54:68:c9:4c:96:0f:f1:7a:fd:
c7:74:f4:ec:72:9d:06:a9:e8:cf:aa:3b:09:d2:39:f1:f5:48:
85:27:f8:18:e6:37:49:e9:57:06:be:dc:56:b1:35:4b:7a:35:
8c:70:c7:46:92:c0:04:a9:f6:34:29:d1:90:f3:cc:fe:a1:de:
3c:2e:cc:06:a1:b7:aa:ab:8a:c7:f1:a8:ae:c1:17:16:ef:f8:
e9:9a:ef:9b:de:8b:a0:86:9b:ce:f1:db:f1:2a:73:24:72:b2:
9c:47:45:3a:0b:11:cb:f0:eb:b5:56:51:76:b4:2f:01:f7:bd:
03:d9:aa:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSi+rTcKCRO/QRCPGI82uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1N2Q5YzhmZmMyMDRiNmRiZGUwMTIwNTMwM2JkZjhiNTA2
MzhhYTYwHhcNMjUxMTExMDUwMTE4WhcNMjUxMTEyMDUwMTE4WjAzMTEwLwYDVQQD
Eyg4ZmY3ZjM1Y2QyMGNmNGIyODk1OTEyNjBmYThlMjY2NTA1ODA1NGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dF8l1oTOAexHphnDOrrNA4U5bFL
XaCXxXRMy8T3xtrb/sxTL01yFxAEB4iXFSQNjylABXqagq59tYq7ZqwWp6kEnwkJ
cD/Bk+NaPaDWRN9bS2vhxVNxfAcX+IiJ2Gll9Ubl2oN7qXEoxHVX0J7ZFwhU56vL
sjCTEeMzRTgnC5AnVmwYvJ0Qh6fGZjK03DsIUEwi9w0slLUHjCivGytj6kQNqrIS
wCbpPQDkH0ohF6AmpCrJuqeJWzWAhWF5Q5KZz6ho1bqpJIVHsL5jexAsygG3JfdU
hwqyjcmm8D5FDeHhayVYzI35+Y5AV/neNWeEF49uN5DFAyNvt2FVupUv1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/381zSDPSyiVkSYPqOJmUFgFTUMB8GA1UdIwQY
MBaAFPV9nI/8IEttveASBTA734tQY4qmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVgyY2pfd2dTMjI5NEJJRk1EdmZpMUJqaXFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lNTBiODMtYjI5Mi00MTE3LTg5OTEt
YjY3ZDMyMDk5MGM2LzEvOVgyY2pfd2dTMjI5NEJJRk1EdmZpMUJqaXFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9lNTBiODMtYjI5Mi00MTE3LTg5OTEtYjY3ZDMyMDk5MGM2
LzEvOVgyY2pfd2dTMjI5NEJJRk1EdmZpMUJqaXFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZKbBEOZ
sggfRdLSbMRExDElTCArnA8iu2zg9YEkpOlWW5yX7pb+UAZPnzf/F80tlW0W2Mmy
6zPraVH9Qw/IjeS5YKFXpbWcih8Lft5OLTQJiJPUrRnWnjj0YGj3X6wneg2Gw3uk
0/nAwYNFAmXviddRgGEXF2hDh3xG43SMRraGtDtXKdniVGjJTJYP8Xr9x3T07HKd
Bqnoz6o7CdI58fVIhSf4GOY3SelXBr7cVrE1S3o1jHDHRpLABKn2NCnRkPPM/qHe
PC7MBqG3qquKx/GorsEXFu/46Zrvm96LoIabzvHb8SpzJHKynEdFOgsRy/DrtVZR
drQvAfe9A9mqPg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:57 2025 by rpki-client