Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft
File: 9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft (raw, json)
Hash identifier: kxdJ0Rnrlrt4TUntBW6rHhPuRFdSY1IYS4bsPVT5YC0=
Subject key identifier: C9:AE:AD:38:09:77:F3:A5:0A:B8:FF:D8:AF:F6:D8:9E:14:D1:EC:6E
Authority key identifier: F6:05:7E:74:AA:D2:1A:BC:F1:33:74:F5:91:5B:1A:7E:82:7D:4E:A1
Certificate issuer: /CN=f6057e74aad21abcf13374f5915b1a7e827d4ea1
Certificate serial: 019A71B80A8F2BDB68885FDD79C7A9489FF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gV-dKrSGrzxM3T1kVsafoJ9TqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft
Manifest number: 1433
Signing time: Tue 11 Nov 2025 07:01:18 +0000
Manifest this update: Tue 11 Nov 2025 07:01:18 +0000
Manifest next update: Wed 12 Nov 2025 07:01:18 +0000
Files and hashes: 1: 9gV-dKrSGrzxM3T1kVsafoJ9TqE.crl (hash: OApS4SDQxbTkH1GalCQ/BJllxCP/Q+NLs/J+jvfGOvM=)
2: aDwAS1LQt-dxkqhRRrd8pQDVwd4.roa (hash: duXpBH3mnr8j/KJuHRzuQfhllP9IGUW8jdVpYb4QHpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9gV-dKrSGrzxM3T1kVsafoJ9TqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:0a:8f:2b:db:68:88:5f:dd:79:c7:a9:48:9f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6057e74aad21abcf13374f5915b1a7e827d4ea1
Validity
Not Before: Nov 11 07:01:18 2025 GMT
Not After : Nov 12 07:01:18 2025 GMT
Subject: CN=c9aead380977f3a50ab8ffd8aff6d89e14d1ec6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f6:1f:ea:07:1b:79:9c:28:7b:87:e8:a5:41:
31:76:66:ae:6a:08:12:9c:a3:39:f5:8d:26:d0:b7:
b5:00:69:3c:6e:2b:ab:12:71:47:3c:cb:f9:7f:6e:
c4:1b:08:94:27:64:1e:6c:07:b8:33:c9:75:04:5c:
72:93:e3:c2:60:f0:f2:3a:56:6c:b6:33:b0:c0:0c:
7c:5c:a9:2b:2d:1f:78:6a:c4:98:03:8d:e7:ff:9c:
96:50:eb:2c:08:9b:f1:7c:18:7e:92:ca:7f:17:ed:
f5:fc:f8:9e:de:63:df:93:e5:a8:d0:3d:30:cb:c8:
08:18:70:17:78:ca:4f:20:e6:46:2d:3a:70:92:c6:
d9:3e:0e:20:34:a6:e8:61:5c:da:bb:a8:a1:79:f8:
d1:0b:10:8e:5f:e5:9e:48:9c:26:54:ef:5e:b8:f2:
f3:ea:63:88:c4:a4:c8:dd:c9:10:22:6b:4a:02:a5:
de:ae:dc:ac:35:13:ce:bf:35:b4:73:c1:3f:b7:b8:
4e:82:84:97:de:10:f0:3f:f3:c5:60:99:02:c0:6e:
86:f2:32:44:37:36:29:63:12:94:a3:76:e7:f7:ba:
20:29:fb:8f:bf:ec:ab:81:63:13:0a:cd:2c:0e:ed:
93:5a:41:e3:ff:f6:db:25:3d:6f:75:57:ba:5e:d4:
d9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AE:AD:38:09:77:F3:A5:0A:B8:FF:D8:AF:F6:D8:9E:14:D1:EC:6E
X509v3 Authority Key Identifier:
keyid:F6:05:7E:74:AA:D2:1A:BC:F1:33:74:F5:91:5B:1A:7E:82:7D:4E:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gV-dKrSGrzxM3T1kVsafoJ9TqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:27:bd:cd:01:1e:f0:15:e9:98:c4:93:93:a2:1e:9c:df:65:
4d:fd:e3:ec:4e:f8:5e:e0:61:59:fe:c1:1b:0d:eb:83:3a:eb:
33:08:fb:f2:21:f2:54:3d:18:15:03:62:f8:1f:b8:f9:a3:b6:
32:33:93:21:75:96:3a:30:21:61:3b:98:83:00:36:9f:1b:12:
b1:c0:28:06:89:41:bb:ee:be:6c:eb:f4:ef:da:c6:88:99:af:
ff:9a:00:81:a4:06:b3:20:b3:ec:db:b1:c5:fc:f0:30:fc:39:
ff:1b:27:c6:21:11:74:21:fb:13:d8:a2:91:7b:d7:65:b9:07:
ed:5a:de:73:7c:ec:c9:19:7c:54:4c:fd:64:95:6c:56:b7:85:
8a:23:a2:90:44:6a:c5:f1:c4:0e:a8:de:ba:c7:1e:2a:8b:7a:
a5:86:c5:25:89:2d:8d:10:ec:89:fe:18:b9:b4:66:48:76:c2:
89:9f:7a:8d:90:60:96:97:a0:e9:cc:4a:4a:ce:1c:13:0f:19:
2f:ae:f8:0b:50:fd:b6:31:c3:ce:26:1f:ee:2d:ee:ed:d2:a5:
80:69:48:ea:f9:91:dc:5b:66:db:33:2d:1d:50:2a:65:ab:49:
f1:1a:aa:b2:ee:46:74:59:f3:3b:8b:37:a4:57:33:af:ca:9d:
f1:c1:4d:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuAqPK9toiF/decepSJ/0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2MDU3ZTc0YWFkMjFhYmNmMTMzNzRmNTkxNWIxYTdlODI3
ZDRlYTEwHhcNMjUxMTExMDcwMTE4WhcNMjUxMTEyMDcwMTE4WjAzMTEwLwYDVQQD
EyhjOWFlYWQzODA5NzdmM2E1MGFiOGZmZDhhZmY2ZDg5ZTE0ZDFlYzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/Yf6gcbeZwoe4fopUExdmauaggS
nKM59Y0m0Le1AGk8biurEnFHPMv5f27EGwiUJ2QebAe4M8l1BFxyk+PCYPDyOlZs
tjOwwAx8XKkrLR94asSYA43n/5yWUOssCJvxfBh+ksp/F+31/Pie3mPfk+Wo0D0w
y8gIGHAXeMpPIOZGLTpwksbZPg4gNKboYVzau6ihefjRCxCOX+WeSJwmVO9euPLz
6mOIxKTI3ckQImtKAqXertysNRPOvzW0c8E/t7hOgoSX3hDwP/PFYJkCwG6G8jJE
NzYpYxKUo3bn97ogKfuPv+yrgWMTCs0sDu2TWkHj//bbJT1vdVe6XtTZ1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMmurTgJd/OlCrj/2K/22J4U0exuMB8GA1UdIwQY
MBaAFPYFfnSq0hq88TN09ZFbGn6CfU6hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWdWLWRLclNHcnp4TTNUMWtWc2Fmb0o5VHFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zYWUxZGUtYmQ1Yy00YTE3LTlmYTgt
MGE5YTFmMWM5ODljLzEvOWdWLWRLclNHcnp4TTNUMWtWc2Fmb0o5VHFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zYWUxZGUtYmQ1Yy00YTE3LTlmYTgtMGE5YTFmMWM5ODlj
LzEvOWdWLWRLclNHcnp4TTNUMWtWc2Fmb0o5VHFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfye9zQEe
8BXpmMSTk6IenN9lTf3j7E74XuBhWf7BGw3rgzrrMwj78iHyVD0YFQNi+B+4+aO2
MjOTIXWWOjAhYTuYgwA2nxsSscAoBolBu+6+bOv079rGiJmv/5oAgaQGsyCz7Nux
xfzwMPw5/xsnxiERdCH7E9iikXvXZbkH7Vrec3zsyRl8VEz9ZJVsVreFiiOikERq
xfHEDqjeusceKot6pYbFJYktjRDsif4YubRmSHbCiZ96jZBglpeg6cxKSs4cEw8Z
L674C1D9tjHDziYf7i3u7dKlgGlI6vmR3Ftm2zMtHVAqZatJ8Rqqsu5GdFnzO4s3
pFczr8qd8cFNPA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:29 2025 by rpki-client