Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
File: 9naIfyLs2o0HSBWgvPkfr4GUKr0.mft (raw, json)
Hash identifier: GxRu2dW9lFfqRmYTjmGSdI3FDGlh3cuMUHDnkJRej8k=
Subject key identifier: 03:9D:B1:83:08:96:BF:78:6C:A0:03:6D:78:8D:7F:86:3A:C2:EE:83
Authority key identifier: F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
Certificate issuer: /CN=f676887f22ecda8d074815a0bcf91faf81942abd
Certificate serial: 019922C355BA2C68007BE884C179B2FF148B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
Manifest number: 093C
Signing time: Sun 07 Sep 2025 06:00:50 +0000
Manifest this update: Sun 07 Sep 2025 06:00:50 +0000
Manifest next update: Mon 08 Sep 2025 06:00:50 +0000
Files and hashes: 1: 1--aJOHbG2HarYQRIFHME9kGdrI8.roa (hash: e0PFqEIF1I8KQrFh+AG+JLWzJuU3cKKiEgrK5TdCBkw=)
2: 9naIfyLs2o0HSBWgvPkfr4GUKr0.crl (hash: XU3M22oAVfoGb89RzBddqEBZTwTznBYwIPgM0wDs1rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:55:ba:2c:68:00:7b:e8:84:c1:79:b2:ff:14:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f676887f22ecda8d074815a0bcf91faf81942abd
Validity
Not Before: Sep 7 06:00:50 2025 GMT
Not After : Sep 8 06:00:50 2025 GMT
Subject: CN=039db1830896bf786ca0036d788d7f863ac2ee83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4e:2d:7d:24:e0:76:6c:1c:34:75:ed:8e:d6:
d7:f1:3f:08:9b:21:5f:0b:49:1b:f3:c8:54:60:9a:
9b:6c:43:35:11:e2:24:f2:2b:11:16:c8:5c:0e:5d:
d4:52:db:89:a5:ed:0c:a0:ad:65:23:58:b7:bf:74:
a2:47:12:7e:ab:28:b5:fe:64:bf:c6:fc:88:cf:1e:
69:6f:40:5f:3f:ac:5f:17:6e:1d:8e:b8:4a:02:e8:
aa:16:32:4e:ee:c4:ac:5a:be:89:9f:94:0d:d8:e4:
6e:c8:d0:f1:02:13:40:27:50:d1:2d:f3:40:7b:c9:
91:83:ba:8c:3e:74:1a:82:9d:d5:e6:b9:76:71:c7:
99:24:22:ef:64:04:79:2d:79:25:22:c7:ac:0d:fb:
dd:38:8a:70:bb:81:9c:5d:34:af:99:a0:aa:4a:ac:
d7:49:53:4f:ff:f4:d6:26:65:f6:d4:c1:3e:52:91:
ef:65:a3:3c:ca:71:f3:3e:21:12:af:42:ee:80:a5:
ce:34:26:64:72:84:7f:6c:fb:34:47:bc:ff:6d:30:
81:b0:ca:d8:f4:6a:5c:94:40:37:fd:9c:f3:db:96:
24:33:8b:78:55:44:20:67:f1:61:28:34:f5:70:32:
23:db:df:b0:af:17:3c:b1:bf:2b:4e:e0:fd:b1:4f:
ed:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9D:B1:83:08:96:BF:78:6C:A0:03:6D:78:8D:7F:86:3A:C2:EE:83
X509v3 Authority Key Identifier:
keyid:F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:f6:a7:ae:16:47:94:b9:66:83:01:ff:26:2b:a0:c1:23:5e:
62:ea:8c:2d:da:18:72:3d:ef:7b:2f:ad:f7:b7:ae:e6:fb:11:
f9:e9:cc:c2:74:1c:a3:e8:65:7c:ac:d5:5e:21:96:7e:1a:f8:
dd:e9:fa:9a:6b:80:d7:2b:24:cf:84:cb:12:9a:68:e5:88:b7:
96:05:f3:ea:7c:a7:d1:27:fb:ab:17:42:77:8d:e1:1f:8b:2f:
06:46:63:ca:ee:02:c9:f3:e5:2f:0b:13:5f:bc:97:26:d5:dd:
42:8b:9a:18:d6:2c:58:9c:7f:22:c7:6e:ea:a7:d6:9a:76:8e:
87:16:d4:26:45:38:97:29:39:9a:d7:ef:b0:98:33:ad:d4:b3:
4f:ca:7c:59:00:f2:dc:ae:44:fd:99:b1:66:91:21:54:70:99:
a8:3a:d2:e9:66:9a:ee:1b:01:9c:d8:87:91:e5:aa:48:e7:be:
8c:f0:08:ed:00:7c:10:0d:63:fe:ee:4a:a1:65:dd:6f:f8:15:
cf:47:ca:cf:10:85:c1:1c:f1:da:4b:40:a7:c5:fe:bc:1a:37:
6a:7e:f9:21:1e:4a:43:f1:aa:5b:f7:71:2a:d0:cc:8f:da:fc:
80:f5:f4:c1:7e:4c:b7:97:54:fb:0b:2a:16:81:5a:dd:74:14:
e2:56:a4:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw1W6LGgAe+iEwXmy/xSLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NzY4ODdmMjJlY2RhOGQwNzQ4MTVhMGJjZjkxZmFmODE5
NDJhYmQwHhcNMjUwOTA3MDYwMDUwWhcNMjUwOTA4MDYwMDUwWjAzMTEwLwYDVQQD
EygwMzlkYjE4MzA4OTZiZjc4NmNhMDAzNmQ3ODhkN2Y4NjNhYzJlZTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1U4tfSTgdmwcNHXtjtbX8T8ImyFf
C0kb88hUYJqbbEM1EeIk8isRFshcDl3UUtuJpe0MoK1lI1i3v3SiRxJ+qyi1/mS/
xvyIzx5pb0BfP6xfF24djrhKAuiqFjJO7sSsWr6Jn5QN2ORuyNDxAhNAJ1DRLfNA
e8mRg7qMPnQagp3V5rl2cceZJCLvZAR5LXklIsesDfvdOIpwu4GcXTSvmaCqSqzX
SVNP//TWJmX21ME+UpHvZaM8ynHzPiESr0LugKXONCZkcoR/bPs0R7z/bTCBsMrY
9GpclEA3/Zzz25YkM4t4VUQgZ/FhKDT1cDIj29+wrxc8sb8rTuD9sU/t+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAOdsYMIlr94bKADbXiNf4Y6wu6DMB8GA1UdIwQY
MBaAFPZ2iH8i7NqNB0gVoLz5H6+BlCq9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW5hSWZ5THMybzBIU0JXZ3ZQa2ZyNEdVS3IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jYmM0YmItOTk5Yy00OTg4LWExZTEt
Y2QyZGNiMzU1NjU1LzEvOW5hSWZ5THMybzBIU0JXZ3ZQa2ZyNEdVS3IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9jYmM0YmItOTk5Yy00OTg4LWExZTEtY2QyZGNiMzU1NjU1
LzEvOW5hSWZ5THMybzBIU0JXZ3ZQa2ZyNEdVS3IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1PanrhZH
lLlmgwH/JiugwSNeYuqMLdoYcj3vey+t97eu5vsR+enMwnQco+hlfKzVXiGWfhr4
3en6mmuA1yskz4TLEppo5Yi3lgXz6nyn0Sf7qxdCd43hH4svBkZjyu4CyfPlLwsT
X7yXJtXdQouaGNYsWJx/Isdu6qfWmnaOhxbUJkU4lyk5mtfvsJgzrdSzT8p8WQDy
3K5E/ZmxZpEhVHCZqDrS6Waa7hsBnNiHkeWqSOe+jPAI7QB8EA1j/u5KoWXdb/gV
z0fKzxCFwRzx2ktAp8X+vBo3an75IR5KQ/GqW/dxKtDMj9r8gPX0wX5Mt5dU+wsq
FoFa3XQU4lakSw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:38 2025 by rpki-client