Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
File: 9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft (raw, json)
Hash identifier: +LMRhACvzdlo44QVy4S/pkWE5bAKF1obtwx3lo3A7e4=
Subject key identifier: F8:F6:50:AB:AB:CA:6A:08:7D:FE:2C:5B:48:9D:C1:CE:F8:E4:4A:5B
Authority key identifier: F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
Certificate issuer: /CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Certificate serial: 019A71EEB819210DFC6EB778E7B643E32D48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
Manifest number: 0C3B
Signing time: Tue 11 Nov 2025 08:01:01 +0000
Manifest this update: Tue 11 Nov 2025 08:01:01 +0000
Manifest next update: Wed 12 Nov 2025 08:01:01 +0000
Files and hashes: 1: 9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl (hash: MY+Lez9kPFgpr+VITYJMJ9KqqBqzE2H+zvqgQ62xUFo=)
2: cQb4a56386hwKkX2XTV23EzTpVI.roa (hash: T6mT7SHm8VLGp8LXtDhfbm2F1razovLuYTeTLKEqGFE=)
3: gQRYgjDqN747YcFSZ_0L7G8Y0Qw.roa (hash: knELgWCfA/Sf8Z/AQKl4MF48MxHULiqnBptb464jAhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b8:19:21:0d:fc:6e:b7:78:e7:b6:43:e3:2d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Validity
Not Before: Nov 11 08:01:01 2025 GMT
Not After : Nov 12 08:01:01 2025 GMT
Subject: CN=f8f650ababca6a087dfe2c5b489dc1cef8e44a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:14:6e:9b:f7:e0:06:3a:96:e1:e8:ca:74:8b:
ad:7d:0d:f0:e5:d3:4e:f0:b2:c1:12:3a:8a:b1:8e:
d5:1a:79:39:01:72:15:20:53:63:2f:fa:bc:1b:6e:
fa:f4:ca:84:b1:29:b0:bc:d4:3b:66:6d:20:ca:24:
77:43:a5:07:58:ea:bb:a3:c2:c8:3a:3e:fd:c4:ed:
fa:b2:60:de:b6:13:3c:16:f9:31:87:56:8e:6c:3a:
c2:a8:95:39:00:d6:75:f9:4f:2f:56:57:75:65:40:
5d:93:31:a4:0f:b7:92:78:29:ca:d3:9e:f0:21:fc:
6f:5d:84:05:ba:a0:23:6f:be:d5:db:8e:7e:a4:f9:
3f:fa:04:b1:2e:d3:85:08:9d:da:62:00:52:e0:ea:
42:5c:78:5d:7f:47:5e:23:56:99:d5:c0:8a:b3:44:
7a:1b:fc:ed:d3:b4:13:bf:8e:ae:30:54:27:54:e3:
51:1d:b7:4e:17:bc:ff:e7:f6:02:e3:c7:ff:ce:d3:
0c:19:b1:24:cd:51:45:27:ae:0a:6b:e6:e4:f8:72:
48:ef:09:92:d9:30:6f:a7:02:6e:51:44:e1:32:68:
7b:e1:24:a0:82:6b:61:6e:c6:69:f0:b4:15:f4:c8:
62:44:0c:e8:f4:9e:c7:2c:a0:26:77:08:32:34:a6:
eb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F6:50:AB:AB:CA:6A:08:7D:FE:2C:5B:48:9D:C1:CE:F8:E4:4A:5B
X509v3 Authority Key Identifier:
keyid:F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:71:da:6d:02:08:84:08:01:68:2d:36:d8:f1:85:9d:80:51:
b5:6b:75:df:08:19:b6:f6:ec:6b:2b:8f:ec:4f:d9:6e:a7:6b:
96:47:06:6f:ec:36:ab:ea:db:77:e2:c9:db:cf:f1:4d:b4:46:
1b:10:70:0a:30:21:7b:59:9f:86:03:42:e6:29:ba:4e:5c:20:
0f:aa:b2:dd:b3:2a:42:4c:6d:b8:dc:37:09:d4:6d:b1:b3:7b:
42:8a:f4:75:a4:c5:65:0a:27:25:8d:78:6d:0d:31:91:a2:50:
53:ef:f7:f1:c7:c4:30:59:65:06:e6:64:11:40:a6:85:8e:4a:
92:5e:d2:f7:f1:a3:a1:da:94:65:9f:4b:92:e8:bb:a9:d0:51:
d7:d1:7a:9f:38:19:64:bd:a7:b1:f4:4c:4c:d8:1e:b3:da:ff:
d7:fe:ba:73:07:38:fa:ac:76:02:d8:a1:76:22:03:90:34:c3:
99:09:c9:74:70:69:cf:29:ce:1b:df:8c:bf:62:91:9e:7e:aa:
e3:c1:2d:c2:b5:24:5f:7e:3a:8c:c1:96:33:ba:d4:75:48:d0:
e1:71:6f:c4:8e:f2:65:2d:96:36:ff:13:0f:92:4c:d5:5a:ff:
8c:47:3e:1c:fd:d9:6a:2d:70:7b:ad:ab:ed:32:2c:9b:d7:97:
bd:37:a5:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7rgZIQ38brd457ZD4y1IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MjRjYmE1MjFjMDgwZGI3MmE2ZTU0YTFiOGNmNDQ5NWNi
YmM3ZDYwHhcNMjUxMTExMDgwMTAxWhcNMjUxMTEyMDgwMTAxWjAzMTEwLwYDVQQD
EyhmOGY2NTBhYmFiY2E2YTA4N2RmZTJjNWI0ODlkYzFjZWY4ZTQ0YTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hRum/fgBjqW4ejKdIutfQ3w5dNO
8LLBEjqKsY7VGnk5AXIVIFNjL/q8G2769MqEsSmwvNQ7Zm0gyiR3Q6UHWOq7o8LI
Oj79xO36smDethM8Fvkxh1aObDrCqJU5ANZ1+U8vVld1ZUBdkzGkD7eSeCnK057w
IfxvXYQFuqAjb77V245+pPk/+gSxLtOFCJ3aYgBS4OpCXHhdf0deI1aZ1cCKs0R6
G/zt07QTv46uMFQnVONRHbdOF7z/5/YC48f/ztMMGbEkzVFFJ64Ka+bk+HJI7wmS
2TBvpwJuUUThMmh74SSggmthbsZp8LQV9MhiRAzo9J7HLKAmdwgyNKbrkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPj2UKurymoIff4sW0idwc745EpbMB8GA1UdIwQY
MBaAFPcky6UhwIDbcqblShuM9Elcu8fWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXlUTHBTSEFnTnR5cHVWS0c0ejBTVnk3eDlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80OGI1MGItYWRmZS00ZGZiLWFkODAt
MTAzYjIwNmJhMjhiLzEvOXlUTHBTSEFnTnR5cHVWS0c0ejBTVnk3eDlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy80OGI1MGItYWRmZS00ZGZiLWFkODAtMTAzYjIwNmJhMjhi
LzEvOXlUTHBTSEFnTnR5cHVWS0c0ejBTVnk3eDlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmXHabQII
hAgBaC022PGFnYBRtWt13wgZtvbsayuP7E/ZbqdrlkcGb+w2q+rbd+LJ28/xTbRG
GxBwCjAhe1mfhgNC5im6TlwgD6qy3bMqQkxtuNw3CdRtsbN7Qor0daTFZQonJY14
bQ0xkaJQU+/38cfEMFllBuZkEUCmhY5Kkl7S9/GjodqUZZ9Lkui7qdBR19F6nzgZ
ZL2nsfRMTNges9r/1/66cwc4+qx2AtihdiIDkDTDmQnJdHBpzynOG9+Mv2KRnn6q
48EtwrUkX346jMGWM7rUdUjQ4XFvxI7yZS2WNv8TD5JM1Vr/jEc+HP3Zai1we62r
7TIsm9eXvTelog==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:44 2025 by rpki-client