Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
File: r9v0VgEKm9FJQcoskcpTPn71F4o.mft (raw, json)
Hash identifier: Zw0AmztwZNFmxeA44NerRLUE4494ncmzE9qWGLXVAxI=
Subject key identifier: A4:3F:68:56:07:60:16:51:A6:D6:F8:FE:C4:7D:0F:53:E1:D4:68:E7
Authority key identifier: AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A
Certificate issuer: /CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a
Certificate serial: 019A71B861777AD609747EC14CDCDCDE37A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
Manifest number: 0FF7
Signing time: Tue 11 Nov 2025 07:01:40 +0000
Manifest this update: Tue 11 Nov 2025 07:01:40 +0000
Manifest next update: Wed 12 Nov 2025 07:01:40 +0000
Files and hashes: 1: ajkzuEH8FnXzD6y9WqgTkvcAyWQ.roa (hash: ezeCzHTBFnMMCDhX8NkCA6ybD9xQfKuL+xUd+x4C3b4=)
2: r9v0VgEKm9FJQcoskcpTPn71F4o.crl (hash: ZYN0614RgEP7z9F45g45/qnscl+wiBU9W5lhpWO0xmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:61:77:7a:d6:09:74:7e:c1:4c:dc:dc:de:37:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a
Validity
Not Before: Nov 11 07:01:40 2025 GMT
Not After : Nov 12 07:01:40 2025 GMT
Subject: CN=a43f685607601651a6d6f8fec47d0f53e1d468e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d3:d3:b5:01:c8:b8:8c:f2:91:13:28:ee:a5:
4f:06:dd:dd:c7:55:31:4a:6d:0b:dd:50:6c:d0:1e:
97:4a:33:58:5b:de:2f:9e:c5:df:c8:70:4d:b9:69:
8b:d5:72:36:be:07:68:e1:1c:72:57:ca:b4:31:f7:
8c:60:85:1f:ed:a0:11:2f:c3:c8:c3:4d:cc:bf:7e:
59:4a:5b:4e:f6:88:11:d5:cf:8d:85:9f:17:d1:81:
48:f9:d2:4d:cc:7a:68:0d:e3:09:d9:8b:0a:12:8b:
1a:37:6c:3a:fd:8e:e6:35:bc:38:57:dc:89:a7:20:
ca:e3:fb:b6:6d:31:c1:a5:3c:cd:ba:11:59:c7:57:
eb:27:4e:90:89:73:a4:58:c0:32:54:62:0c:db:f8:
d7:7a:56:38:0a:c5:32:66:27:11:ad:9b:7d:94:a6:
5e:25:56:75:96:de:d3:1a:2b:5e:f3:b9:ac:1a:ef:
57:96:7c:ff:9d:dc:5f:78:2e:5f:3d:b7:f5:fc:38:
74:a7:9f:ef:92:f2:b3:5c:2a:df:69:ff:54:d1:24:
8e:e7:ec:0b:ae:89:03:89:4d:be:6d:57:90:5a:06:
11:c6:54:03:93:aa:27:d8:5c:fc:bb:8c:7b:30:f5:
fb:a0:ab:da:70:5a:b4:89:d5:ca:72:b8:d3:83:cf:
b7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3F:68:56:07:60:16:51:A6:D6:F8:FE:C4:7D:0F:53:E1:D4:68:E7
X509v3 Authority Key Identifier:
keyid:AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:7e:89:31:fc:2d:e9:65:ef:ac:70:e2:a6:5c:d8:fa:bb:34:
3c:62:c3:0e:47:5e:ec:58:9e:37:32:de:70:cc:be:ae:1c:db:
9d:65:1a:c4:24:e7:28:d4:a5:dc:dd:d4:e0:2e:e9:df:6f:7e:
c1:91:6e:a0:f2:fd:72:0e:42:b2:70:87:da:f0:dc:1c:bb:68:
a5:07:37:59:fc:66:dd:7c:2a:6c:78:c5:0e:3e:34:6c:cc:78:
05:41:8d:82:2f:e5:3b:5d:8e:d3:17:b8:e9:f1:47:7d:92:97:
45:e9:35:6d:61:3c:1f:35:8c:39:eb:44:b4:02:2d:42:08:84:
8f:6d:05:4a:d8:0b:22:b6:b8:de:b9:58:c9:a2:11:0e:11:00:
35:ca:d3:c2:0e:a3:ae:eb:cf:c9:fc:e1:b8:7f:51:4a:13:ae:
bd:e0:25:09:91:44:ac:ec:89:b5:ef:07:48:b2:f8:4f:de:42:
3c:3e:b5:55:23:2b:f5:18:16:95:72:ec:30:be:13:2f:b6:13:
40:e2:f9:99:36:f5:db:65:ee:73:34:28:ab:f3:1c:85:53:ed:
d0:74:42:11:f9:16:58:5c:d6:73:7a:3e:b9:d1:62:cf:45:62:
fe:bc:57:52:18:88:cb:5b:ea:06:d4:12:63:16:ac:01:5f:d8:
56:c7:2e:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuGF3etYJdH7BTNzc3jegMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZGJmNDU2MDEwYTliZDE0OTQxY2EyYzkxY2E1MzNlN2Vm
NTE3OGEwHhcNMjUxMTExMDcwMTQwWhcNMjUxMTEyMDcwMTQwWjAzMTEwLwYDVQQD
EyhhNDNmNjg1NjA3NjAxNjUxYTZkNmY4ZmVjNDdkMGY1M2UxZDQ2OGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtPTtQHIuIzykRMo7qVPBt3dx1Ux
Sm0L3VBs0B6XSjNYW94vnsXfyHBNuWmL1XI2vgdo4RxyV8q0MfeMYIUf7aARL8PI
w03Mv35ZSltO9ogR1c+NhZ8X0YFI+dJNzHpoDeMJ2YsKEosaN2w6/Y7mNbw4V9yJ
pyDK4/u2bTHBpTzNuhFZx1frJ06QiXOkWMAyVGIM2/jXelY4CsUyZicRrZt9lKZe
JVZ1lt7TGite87msGu9Xlnz/ndxfeC5fPbf1/Dh0p5/vkvKzXCrfaf9U0SSO5+wL
rokDiU2+bVeQWgYRxlQDk6on2Fz8u4x7MPX7oKvacFq0idXKcrjTg8+3wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQ/aFYHYBZRptb4/sR9D1Ph1GjnMB8GA1UdIwQY
MBaAFK/b9FYBCpvRSUHKLJHKUz5+9ReKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjl2MFZnRUttOUZKUWNvc2tjcFRQbjcxRjRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8zZWVmYzEtNGYwOC00NTJlLTg0YjQt
M2NkZGYxNzUxZjU5LzEvcjl2MFZnRUttOUZKUWNvc2tjcFRQbjcxRjRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8zZWVmYzEtNGYwOC00NTJlLTg0YjQtM2NkZGYxNzUxZjU5
LzEvcjl2MFZnRUttOUZKUWNvc2tjcFRQbjcxRjRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgX6JMfwt
6WXvrHDiplzY+rs0PGLDDkde7FieNzLecMy+rhzbnWUaxCTnKNSl3N3U4C7p329+
wZFuoPL9cg5CsnCH2vDcHLtopQc3Wfxm3XwqbHjFDj40bMx4BUGNgi/lO12O0xe4
6fFHfZKXRek1bWE8HzWMOetEtAItQgiEj20FStgLIra43rlYyaIRDhEANcrTwg6j
ruvPyfzhuH9RShOuveAlCZFErOyJte8HSLL4T95CPD61VSMr9RgWlXLsML4TL7YT
QOL5mTb122XuczQoq/MchVPt0HRCEfkWWFzWc3o+udFiz0Vi/rxXUhiIy1vqBtQS
YxasAV/YVscuhQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:13 2025 by rpki-client