Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
File: 9naIfyLs2o0HSBWgvPkfr4GUKr0.mft (raw, json)
Hash identifier: qFYB1j/8/+WerfPdaOIrT+JlHVaWv2zIvLg/lGAkuG0=
Subject key identifier: C0:E7:39:12:CE:09:41:80:38:78:57:16:C9:C7:9C:34:61:25:08:45
Authority key identifier: F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
Certificate issuer: /CN=f676887f22ecda8d074815a0bcf91faf81942abd
Certificate serial: 019A239C295C268296DEDFAC7AD754431AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
Manifest number: 09C1
Signing time: Mon 27 Oct 2025 03:00:28 +0000
Manifest this update: Mon 27 Oct 2025 03:00:28 +0000
Manifest next update: Tue 28 Oct 2025 03:00:28 +0000
Files and hashes: 1: 1--aJOHbG2HarYQRIFHME9kGdrI8.roa (hash: e0PFqEIF1I8KQrFh+AG+JLWzJuU3cKKiEgrK5TdCBkw=)
2: 9naIfyLs2o0HSBWgvPkfr4GUKr0.crl (hash: 0QRoXUBr3GRuAZ1q+G6Z4Co8WTqWBle/gOX81JRlo3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:9c:29:5c:26:82:96:de:df:ac:7a:d7:54:43:1a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f676887f22ecda8d074815a0bcf91faf81942abd
Validity
Not Before: Oct 27 03:00:28 2025 GMT
Not After : Oct 28 03:00:28 2025 GMT
Subject: CN=c0e73912ce09418038785716c9c79c3461250845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b2:14:58:8e:04:31:0a:5d:39:bc:10:1d:29:
37:dd:cd:b7:29:3b:d5:b0:32:29:e6:3f:75:dc:44:
4f:c8:12:85:96:aa:fe:a2:0f:a3:87:b8:99:f5:bf:
91:30:ef:84:ea:58:3c:f1:ee:50:e1:6e:b4:72:bf:
da:9c:5d:58:14:3b:0a:52:85:74:c7:a9:5c:7f:06:
7e:91:8d:4d:47:2f:1d:f0:63:41:e0:fe:b6:5c:0c:
ab:9a:36:52:6b:64:f7:76:06:c4:c0:8e:8c:ba:c1:
b0:b4:e1:ed:53:50:8d:f5:12:e1:de:68:0b:bf:30:
57:c2:0e:5f:96:63:f6:18:27:c5:66:ed:26:b9:b2:
27:73:73:c6:f0:a2:e2:68:86:4c:47:fd:a1:6b:66:
35:9f:03:64:a8:bb:2a:58:70:fc:79:0e:3d:42:86:
71:d1:64:e4:a8:ab:7a:89:3b:3f:be:22:eb:4f:35:
45:bb:5b:d9:44:9f:11:85:5c:00:d3:de:7b:59:71:
fb:3b:fa:92:d0:ee:e6:94:3e:30:3f:29:de:3e:5a:
e1:8e:dd:73:47:ed:bd:8e:b7:31:20:cc:5e:de:9e:
a6:bb:e8:e3:c1:eb:cf:e8:7a:9b:d9:76:38:7b:54:
e1:08:ea:83:25:5f:33:73:3c:31:d0:5f:69:e0:ef:
ca:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E7:39:12:CE:09:41:80:38:78:57:16:C9:C7:9C:34:61:25:08:45
X509v3 Authority Key Identifier:
keyid:F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b5:ca:e0:cf:d8:1d:a6:26:a4:0b:c2:4f:a0:f0:93:f7:77:
5c:2d:eb:d4:28:36:c2:ea:87:9e:6e:bc:96:db:48:0a:08:d8:
8e:ca:e0:2e:13:ad:10:cf:f7:d9:24:5e:3a:91:ae:d1:bc:06:
8a:5b:47:ef:e5:60:de:ba:f2:92:35:34:64:47:26:43:96:85:
9d:3e:9f:2c:2a:b2:58:d5:6b:87:01:10:79:7b:e4:ef:0d:42:
7e:9d:a5:3c:30:3e:57:40:fa:8a:a5:f0:c6:10:31:31:1b:12:
df:ae:7c:5d:e1:01:af:96:e5:f6:92:20:80:58:c1:57:e5:ff:
37:87:fd:b0:f2:46:89:80:0e:98:bf:68:1a:fc:d5:05:93:16:
8f:55:b7:83:04:87:8d:37:77:eb:56:7a:f5:c1:b9:a3:74:7a:
28:ae:de:1d:21:37:28:5d:99:b2:de:20:f0:29:31:b3:17:e9:
e7:70:7a:7b:ba:9b:fd:4c:03:d9:b1:3c:9a:c0:4c:69:80:b5:
3f:01:15:57:ad:e8:4e:69:78:f8:02:02:a7:c0:22:2f:c7:7f:
70:02:0c:16:5d:97:67:33:cb:43:af:20:63:98:d5:aa:b6:fb:
31:fc:11:b2:47:45:65:ec:18:32:4c:42:09:00:ed:52:69:45:
72:92:f2:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZojnClcJoKW3t+setdUQxqkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NzY4ODdmMjJlY2RhOGQwNzQ4MTVhMGJjZjkxZmFmODE5
NDJhYmQwHhcNMjUxMDI3MDMwMDI4WhcNMjUxMDI4MDMwMDI4WjAzMTEwLwYDVQQD
EyhjMGU3MzkxMmNlMDk0MTgwMzg3ODU3MTZjOWM3OWMzNDYxMjUwODQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrIUWI4EMQpdObwQHSk33c23KTvV
sDIp5j913ERPyBKFlqr+og+jh7iZ9b+RMO+E6lg88e5Q4W60cr/anF1YFDsKUoV0
x6lcfwZ+kY1NRy8d8GNB4P62XAyrmjZSa2T3dgbEwI6MusGwtOHtU1CN9RLh3mgL
vzBXwg5flmP2GCfFZu0mubInc3PG8KLiaIZMR/2ha2Y1nwNkqLsqWHD8eQ49QoZx
0WTkqKt6iTs/viLrTzVFu1vZRJ8RhVwA0957WXH7O/qS0O7mlD4wPynePlrhjt1z
R+29jrcxIMxe3p6mu+jjwevP6Hqb2XY4e1ThCOqDJV8zczwx0F9p4O/KHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDnORLOCUGAOHhXFsnHnDRhJQhFMB8GA1UdIwQY
MBaAFPZ2iH8i7NqNB0gVoLz5H6+BlCq9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW5hSWZ5THMybzBIU0JXZ3ZQa2ZyNEdVS3IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jYmM0YmItOTk5Yy00OTg4LWExZTEt
Y2QyZGNiMzU1NjU1LzEvOW5hSWZ5THMybzBIU0JXZ3ZQa2ZyNEdVS3IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9jYmM0YmItOTk5Yy00OTg4LWExZTEtY2QyZGNiMzU1NjU1
LzEvOW5hSWZ5THMybzBIU0JXZ3ZQa2ZyNEdVS3IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPLXK4M/Y
HaYmpAvCT6Dwk/d3XC3r1Cg2wuqHnm68lttICgjYjsrgLhOtEM/32SReOpGu0bwG
iltH7+Vg3rrykjU0ZEcmQ5aFnT6fLCqyWNVrhwEQeXvk7w1Cfp2lPDA+V0D6iqXw
xhAxMRsS3658XeEBr5bl9pIggFjBV+X/N4f9sPJGiYAOmL9oGvzVBZMWj1W3gwSH
jTd361Z69cG5o3R6KK7eHSE3KF2Zst4g8Ckxsxfp53B6e7qb/UwD2bE8msBMaYC1
PwEVV63oTml4+AICp8AiL8d/cAIMFl2XZzPLQ68gY5jVqrb7MfwRskdFZewYMkxC
CQDtUmlFcpLyzQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 12:27:24 2025 by rpki-client