Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
File: 9EjuY_GdDB8ixvYc5Kgezqu455A.mft (raw, json)
Hash identifier: +xW+2M6P8+R0ajIQmnjt89+IQwek4b/46psTBgpOf0U=
Subject key identifier: BF:A5:B1:CC:2C:0C:E6:80:08:B1:75:79:D7:7D:6F:77:1B:BC:48:CD
Authority key identifier: F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
Certificate issuer: /CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Certificate serial: 019A70A51A7BA50D1B6F7A3F3DBD18DF19AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 02:00:59 +0000
Manifest this update: Tue 11 Nov 2025 02:00:59 +0000
Manifest next update: Wed 12 Nov 2025 02:00:59 +0000
Files and hashes: 1: 9EjuY_GdDB8ixvYc5Kgezqu455A.crl (hash: Y7UGc7VFLdPwcUBcZAlAQHJIfx2Cn7BDjueoKIHF0K0=)
2: B9CXmyFJNB3NRKLw7pcYD1T3USA.roa (hash: o1kjShDcQ5C/vUtm9CAhci51t+PYFYlIsERtctgtwmA=)
3: R22iI1mywVUVnDgDeyudtXDFOv8.roa (hash: EJnfxzuCupdtpPIwG2LRwVFupOoF9Zl3laDZ5Fu0Lzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:1a:7b:a5:0d:1b:6f:7a:3f:3d:bd:18:df:19:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Validity
Not Before: Nov 11 02:00:59 2025 GMT
Not After : Nov 12 02:00:59 2025 GMT
Subject: CN=bfa5b1cc2c0ce68008b17579d77d6f771bbc48cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f6:64:5b:7c:26:a6:e2:c4:ce:19:fb:dc:22:
0d:4b:a8:b6:69:4c:6e:79:f7:01:53:96:73:45:e1:
5a:62:c7:d0:89:eb:82:f3:ec:5f:d3:af:f9:fd:21:
26:e2:91:25:44:eb:57:78:ca:e2:3e:a0:c1:1c:cd:
f2:c9:6a:b2:5d:05:2d:6e:c0:64:8d:89:f9:a7:58:
88:6e:dc:39:49:b8:d8:47:77:f3:8b:f4:97:22:06:
03:22:7d:1b:de:2d:e1:ac:46:3a:5c:82:84:0a:57:
71:bd:2e:39:ab:ba:50:b4:ad:c4:da:7b:f9:9c:d5:
38:b0:8c:11:90:b3:d1:56:1a:a4:5b:12:56:e9:c4:
ce:89:cb:db:66:2f:33:61:10:e4:c8:c1:2b:ca:50:
11:51:af:fd:86:96:9f:7b:d0:e5:b1:dd:42:fc:17:
9d:cb:32:07:84:76:e8:3e:75:d0:bb:3e:90:86:6c:
a5:b3:30:97:ef:78:23:10:d7:0a:31:04:09:dd:84:
7f:ee:58:7b:ca:0d:14:8a:f4:b8:1f:3d:31:4b:2b:
25:71:1b:44:ac:ec:1c:de:ef:49:58:39:df:8d:8b:
02:02:fb:c6:08:77:1a:cf:1f:37:7e:d0:98:4d:af:
95:d3:88:52:11:c0:9b:77:0d:21:2d:ad:ae:36:40:
2f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A5:B1:CC:2C:0C:E6:80:08:B1:75:79:D7:7D:6F:77:1B:BC:48:CD
X509v3 Authority Key Identifier:
keyid:F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a2:a2:9b:88:18:96:43:ef:40:07:9b:4e:50:9d:c0:cf:ca:
dd:46:73:c9:3f:4d:b8:0f:aa:aa:3b:1e:43:8b:ee:f6:d8:fe:
37:03:d7:5a:b0:2a:c0:b8:30:ae:2e:e0:26:2d:79:8a:62:8f:
00:64:b0:da:1e:c1:42:31:ff:ab:2a:1b:88:eb:2f:49:f4:9f:
fd:e3:46:48:0b:a1:d1:0d:59:d8:80:37:57:a4:06:6b:89:a4:
c3:57:e7:bb:9f:48:9d:ab:4f:b9:6c:f2:1d:48:0b:43:3d:98:
e6:b4:7e:42:a9:29:bf:bb:de:62:68:14:f1:5d:31:6f:f4:3d:
71:dd:c9:a3:c8:ab:58:60:36:ba:d2:4b:5e:ce:5d:3e:59:ab:
89:70:63:47:b9:fe:13:58:52:fd:a2:e7:49:d8:21:50:a3:39:
f2:44:e2:f4:d0:2b:05:59:94:7c:ce:7c:83:90:a2:e6:a4:32:
e7:ef:09:6c:9f:fe:03:a3:81:f3:95:96:c0:d8:3e:1c:eb:b9:
ce:f1:2e:5c:c8:08:f4:74:44:0e:21:2a:fa:ea:fa:37:64:f5:
94:31:0e:9b:c9:aa:0c:4b:97:d8:06:07:eb:e0:6e:24:64:85:
74:3a:bd:ee:72:26:d2:40:8f:49:17:ff:b5:39:41:06:1b:00:
96:e6:4f:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpRp7pQ0bb3o/Pb0Y3xmqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NDhlZTYzZjE5ZDBjMWYyMmM2ZjYxY2U0YTgxZWNlYWJi
OGU3OTAwHhcNMjUxMTExMDIwMDU5WhcNMjUxMTEyMDIwMDU5WjAzMTEwLwYDVQQD
EyhiZmE1YjFjYzJjMGNlNjgwMDhiMTc1NzlkNzdkNmY3NzFiYmM0OGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfZkW3wmpuLEzhn73CINS6i2aUxu
efcBU5ZzReFaYsfQieuC8+xf06/5/SEm4pElROtXeMriPqDBHM3yyWqyXQUtbsBk
jYn5p1iIbtw5SbjYR3fzi/SXIgYDIn0b3i3hrEY6XIKECldxvS45q7pQtK3E2nv5
nNU4sIwRkLPRVhqkWxJW6cTOicvbZi8zYRDkyMErylARUa/9hpafe9Dlsd1C/Bed
yzIHhHboPnXQuz6QhmylszCX73gjENcKMQQJ3YR/7lh7yg0UivS4Hz0xSyslcRtE
rOwc3u9JWDnfjYsCAvvGCHcazx83ftCYTa+V04hSEcCbdw0hLa2uNkAvUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+lscwsDOaACLF1edd9b3cbvEjNMB8GA1UdIwQY
MBaAFPRI7mPxnQwfIsb2HOSoHs6ruOeQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUVqdVlfR2REQjhpeHZZYzVLZ2V6cXU0NTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS82NDAxZTgtODJkZC00ODExLTgwMTEt
NzE5NDAxYmJjYTJlLzEvOUVqdVlfR2REQjhpeHZZYzVLZ2V6cXU0NTVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS82NDAxZTgtODJkZC00ODExLTgwMTEtNzE5NDAxYmJjYTJl
LzEvOUVqdVlfR2REQjhpeHZZYzVLZ2V6cXU0NTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATqKim4gY
lkPvQAebTlCdwM/K3UZzyT9NuA+qqjseQ4vu9tj+NwPXWrAqwLgwri7gJi15imKP
AGSw2h7BQjH/qyobiOsvSfSf/eNGSAuh0Q1Z2IA3V6QGa4mkw1fnu59InatPuWzy
HUgLQz2Y5rR+Qqkpv7veYmgU8V0xb/Q9cd3Jo8irWGA2utJLXs5dPlmriXBjR7n+
E1hS/aLnSdghUKM58kTi9NArBVmUfM58g5Ci5qQy5+8JbJ/+A6OB85WWwNg+HOu5
zvEuXMgI9HREDiEq+ur6N2T1lDEOm8mqDEuX2AYH6+BuJGSFdDq97nIm0kCPSRf/
tTlBBhsAluZPBg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:55:34 2025 by rpki-client