Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
File: D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft (raw, json)
Hash identifier: 6pQTi04lcezvmBUFOh8GCD3UPIdHTgh8NC8L9S8C8ZA=
Subject key identifier: 8D:81:FD:7E:73:A6:C6:D6:E9:5D:E2:90:86:F0:B1:98:10:EA:92:DF
Authority key identifier: 0F:D1:D0:CC:53:21:9B:6F:E6:81:E1:89:E5:E9:3D:63:57:73:6C:CF
Certificate issuer: /CN=0fd1d0cc53219b6fe681e189e5e93d6357736ccf
Certificate serial: 019A1FBF6E97DC9F7AB52FB5BA230120CF94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
Manifest number: 0104
Signing time: Sun 26 Oct 2025 09:00:30 +0000
Manifest this update: Sun 26 Oct 2025 09:00:30 +0000
Manifest next update: Mon 27 Oct 2025 09:00:30 +0000
Files and hashes: 1: 249HxpirTi_osbw5WvlBrcgIzks.roa (hash: yk0Ki2ByYsC3iFN0F5s91hPx79cwtd3H/FikkHXhlh8=)
2: D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl (hash: N/EIoaqE+OKiF1qXoHhjz0dJcHsR7KXVNeW3qZO2KtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:bf:6e:97:dc:9f:7a:b5:2f:b5:ba:23:01:20:cf:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fd1d0cc53219b6fe681e189e5e93d6357736ccf
Validity
Not Before: Oct 26 09:00:30 2025 GMT
Not After : Oct 27 09:00:30 2025 GMT
Subject: CN=8d81fd7e73a6c6d6e95de29086f0b19810ea92df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:94:ed:bc:76:34:08:53:8c:3a:48:04:63:23:
b1:f8:b0:02:96:e6:7e:d4:dd:46:de:8e:14:09:e4:
03:c9:c8:b8:95:e3:78:cc:4b:00:4b:c2:bc:26:81:
f6:ff:e0:41:85:83:c8:63:e6:aa:3d:d9:8a:10:c1:
c2:ca:0a:36:f3:99:07:9c:06:5b:3f:5c:c1:3a:7b:
b6:93:6a:fb:bd:cb:74:93:f5:d0:f0:45:c2:d3:e6:
7d:b4:65:3b:f4:2e:cb:39:a0:db:9c:4c:5e:ee:d6:
b8:2c:4e:ec:d3:87:e6:6f:1d:a0:1d:f4:eb:92:ea:
24:af:81:77:df:11:d0:47:a1:fd:fa:06:8d:41:6a:
5a:5b:7f:85:94:14:98:3f:67:5b:cd:a0:01:d5:b2:
48:dc:db:62:1a:9f:b5:b5:b3:6f:82:78:5e:fa:8d:
81:fa:40:5c:53:04:4b:db:cf:de:21:52:16:19:e8:
98:28:d5:d6:8f:8a:46:90:29:5a:fc:4e:7b:69:b4:
6b:e0:99:4b:89:4e:76:bb:a3:73:f7:8e:bf:02:3d:
50:76:a8:14:fd:bb:2f:bb:c6:fd:73:a7:48:d4:2c:
eb:85:07:8d:80:1e:1c:bf:47:f5:2e:7a:2c:a2:d2:
cf:d4:fd:31:20:be:4c:e4:0e:f7:2b:34:ff:85:32:
26:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:81:FD:7E:73:A6:C6:D6:E9:5D:E2:90:86:F0:B1:98:10:EA:92:DF
X509v3 Authority Key Identifier:
keyid:0F:D1:D0:CC:53:21:9B:6F:E6:81:E1:89:E5:E9:3D:63:57:73:6C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5e:1f:58:9b:f6:bd:39:76:2c:8d:1b:37:ab:51:87:62:c6:
d2:4e:4c:38:f5:ec:e9:d7:39:5a:5f:68:e4:e0:af:33:8a:5c:
63:d9:48:2d:2e:c9:7f:e6:cd:99:8d:53:a9:3e:b5:58:a9:d8:
46:5b:22:44:49:91:2b:7a:65:a9:85:01:0a:1d:f9:63:ae:55:
04:b3:13:eb:3d:4c:86:72:20:51:05:bf:37:cc:40:2a:2a:72:
55:10:b7:77:a0:46:3f:31:f1:03:c3:da:c2:a0:9d:ac:7c:26:
17:e0:51:1c:71:50:1e:86:89:a1:06:dd:33:ad:47:05:a6:73:
ae:ec:c4:ed:dd:18:06:82:30:c1:2b:1c:8e:05:a6:94:32:da:
8b:d3:d1:5d:f2:6e:13:42:f8:7a:60:1a:36:a4:5f:33:5b:87:
e0:fc:c7:96:c4:54:a1:40:08:39:e1:b8:b1:4b:c3:35:89:4e:
d0:ed:40:90:00:6b:30:dc:86:05:b7:a1:45:22:ec:08:d0:b1:
e1:77:fd:8d:6e:34:43:6a:d2:2c:bb:47:d5:c9:dc:fa:b8:b8:
bf:bd:c9:96:6b:c9:97:8c:1f:65:dc:f7:f8:8d:bf:86:e6:0b:
6a:e5:bb:e9:0f:c5:ec:ff:b4:2e:01:d6:87:15:f6:38:3d:bb:
81:aa:ab:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZofv26X3J96tS+1uiMBIM+UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZDFkMGNjNTMyMTliNmZlNjgxZTE4OWU1ZTkzZDYzNTc3
MzZjY2YwHhcNMjUxMDI2MDkwMDMwWhcNMjUxMDI3MDkwMDMwWjAzMTEwLwYDVQQD
Eyg4ZDgxZmQ3ZTczYTZjNmQ2ZTk1ZGUyOTA4NmYwYjE5ODEwZWE5MmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45TtvHY0CFOMOkgEYyOx+LACluZ+
1N1G3o4UCeQDyci4leN4zEsAS8K8JoH2/+BBhYPIY+aqPdmKEMHCygo285kHnAZb
P1zBOnu2k2r7vct0k/XQ8EXC0+Z9tGU79C7LOaDbnExe7ta4LE7s04fmbx2gHfTr
kuokr4F33xHQR6H9+gaNQWpaW3+FlBSYP2dbzaAB1bJI3NtiGp+1tbNvgnhe+o2B
+kBcUwRL28/eIVIWGeiYKNXWj4pGkCla/E57abRr4JlLiU52u6Nz946/Aj1QdqgU
/bsvu8b9c6dI1CzrhQeNgB4cv0f1LnosotLP1P0xIL5M5A73KzT/hTImaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2B/X5zpsbW6V3ikIbwsZgQ6pLfMB8GA1UdIwQY
MBaAFA/R0MxTIZtv5oHhieXpPWNXc2zPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDlIUXpGTWhtMl9tZ2VHSjVlazlZMWR6Yk04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83ZWU0NDItMGVkNS00MzAzLTk2YmQt
NDEwYjk5NjZlMjA1LzEvRDlIUXpGTWhtMl9tZ2VHSjVlazlZMWR6Yk04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi83ZWU0NDItMGVkNS00MzAzLTk2YmQtNDEwYjk5NjZlMjA1
LzEvRDlIUXpGTWhtMl9tZ2VHSjVlazlZMWR6Yk04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcl4fWJv2
vTl2LI0bN6tRh2LG0k5MOPXs6dc5Wl9o5OCvM4pcY9lILS7Jf+bNmY1TqT61WKnY
RlsiREmRK3plqYUBCh35Y65VBLMT6z1MhnIgUQW/N8xAKipyVRC3d6BGPzHxA8Pa
wqCdrHwmF+BRHHFQHoaJoQbdM61HBaZzruzE7d0YBoIwwSscjgWmlDLai9PRXfJu
E0L4emAaNqRfM1uH4PzHlsRUoUAIOeG4sUvDNYlO0O1AkABrMNyGBbehRSLsCNCx
4Xf9jW40Q2rSLLtH1cnc+ri4v73JlmvJl4wfZdz3+I2/huYLauW76Q/F7P+0LgHW
hxX2OD27gaqrOw==
-----END CERTIFICATE-----
Generated at Sun Oct 26 13:45:21 2025 by rpki-client