Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
File: 9aUA85diOrHVYASDVGf8zz0KOw8.mft (raw, json)
Hash identifier: KJ7O2T4f1A39XiuMl/jVtignSDfji/iQX89ifLZOg3U=
Subject key identifier: BE:C5:BB:20:A6:26:0C:9B:74:6D:74:CA:B7:0D:0B:38:97:C8:72:B6
Authority key identifier: F5:A5:00:F3:97:62:3A:B1:D5:60:04:83:54:67:FC:CF:3D:0A:3B:0F
Certificate issuer: /CN=f5a500f397623ab1d56004835467fccf3d0a3b0f
Certificate serial: 019A714A15E0ED03E33C0FF2881398323331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
Manifest number: 0DB8
Signing time: Tue 11 Nov 2025 05:01:11 +0000
Manifest this update: Tue 11 Nov 2025 05:01:11 +0000
Manifest next update: Wed 12 Nov 2025 05:01:11 +0000
Files and hashes: 1: 9aUA85diOrHVYASDVGf8zz0KOw8.crl (hash: ur+aPXz313Vy1JCQWnh3KyzFD0Y/yRv+EUkBPjO6ozg=)
2: QcGmgONWTyq5Fz8rEzipqonOAWw.roa (hash: 22mskH997ckztTLrFVqkKSOahK8av0gX4PoZWQuu36A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:15:e0:ed:03:e3:3c:0f:f2:88:13:98:32:33:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a500f397623ab1d56004835467fccf3d0a3b0f
Validity
Not Before: Nov 11 05:01:11 2025 GMT
Not After : Nov 12 05:01:11 2025 GMT
Subject: CN=bec5bb20a6260c9b746d74cab70d0b3897c872b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:43:9e:81:5f:94:99:a0:cf:17:d2:a2:0a:c8:
20:c2:98:2e:da:b0:3b:86:67:3c:8f:1e:f9:0e:76:
84:41:88:77:8b:2c:9d:10:44:97:6f:00:47:e5:ee:
cf:c0:25:30:c5:e6:ba:22:97:ae:9c:ff:08:fd:eb:
88:39:9a:83:70:de:d3:1f:6e:80:d6:c2:04:0a:27:
74:88:e8:49:b7:67:f1:9d:11:03:af:76:58:61:15:
dc:8c:7d:f0:62:9b:19:57:08:7e:32:a6:fe:e5:d5:
39:15:83:d3:3a:f6:59:e4:4b:da:71:4c:fe:56:68:
d7:53:12:1c:8a:f9:53:9f:d7:8d:9f:41:8c:12:75:
a5:b0:09:0b:f0:b3:98:2a:65:98:ca:9f:1e:51:e6:
9b:75:88:c5:c5:70:c1:ab:9f:83:6f:1c:57:a2:c3:
78:35:04:8d:63:f0:cc:8e:16:6c:d4:88:08:21:22:
84:03:e7:4c:8e:61:64:ca:08:15:a3:e1:4b:12:d0:
58:ad:61:0c:61:5d:1c:28:67:b2:10:a8:14:fc:76:
3a:6a:bb:07:c3:07:92:9b:a4:ed:a0:e7:b3:dc:94:
9c:35:6a:87:b1:29:75:43:e1:19:d6:98:8d:51:c7:
60:e6:5f:34:5f:34:03:c6:2e:db:79:bd:d7:ed:5c:
79:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C5:BB:20:A6:26:0C:9B:74:6D:74:CA:B7:0D:0B:38:97:C8:72:B6
X509v3 Authority Key Identifier:
keyid:F5:A5:00:F3:97:62:3A:B1:D5:60:04:83:54:67:FC:CF:3D:0A:3B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:1f:2b:b7:42:af:62:87:71:f3:f8:30:91:a6:be:cf:62:bb:
75:9a:b6:b8:ee:55:00:ed:35:56:a6:d9:b7:2c:87:da:ea:34:
8c:c7:78:06:b2:6b:c9:5d:95:bb:5b:58:1f:65:ac:58:38:d5:
70:a6:b7:fe:11:b9:65:7b:90:b3:70:dd:43:e7:82:90:58:ea:
8d:1b:51:a7:be:be:be:53:06:2a:d0:06:46:d7:a9:bb:df:bb:
92:59:e4:f2:78:66:64:39:33:79:57:b7:af:ac:ec:11:bd:11:
23:e2:15:fc:e7:f2:32:f6:05:a9:eb:2c:f1:c0:3e:0f:fb:b4:
1e:38:b1:61:78:0e:fd:50:51:2d:76:6d:6e:e1:38:f4:2a:27:
3e:0a:e2:87:c4:b7:64:9e:36:26:21:c0:2e:c8:e3:95:d1:c6:
fc:f2:0d:6d:87:6e:80:e1:d0:b0:55:52:88:44:5d:a7:ae:e6:
50:77:79:d1:b6:39:33:b0:c7:71:a1:c3:ff:f1:4d:73:54:15:
30:e0:89:ec:53:1e:f2:6e:ff:98:aa:b6:08:f4:54:a9:6f:9a:
7a:a8:00:98:8e:9b:9e:1d:d6:70:b9:e7:21:33:97:03:04:15:
f0:df:36:fc:eb:b8:89:95:6d:9b:b7:35:cc:eb:2b:ef:9b:b8:
eb:34:67:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxShXg7QPjPA/yiBOYMjMxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YTUwMGYzOTc2MjNhYjFkNTYwMDQ4MzU0NjdmY2NmM2Qw
YTNiMGYwHhcNMjUxMTExMDUwMTExWhcNMjUxMTEyMDUwMTExWjAzMTEwLwYDVQQD
EyhiZWM1YmIyMGE2MjYwYzliNzQ2ZDc0Y2FiNzBkMGIzODk3Yzg3MmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00OegV+UmaDPF9KiCsggwpgu2rA7
hmc8jx75DnaEQYh3iyydEESXbwBH5e7PwCUwxea6IpeunP8I/euIOZqDcN7TH26A
1sIECid0iOhJt2fxnREDr3ZYYRXcjH3wYpsZVwh+Mqb+5dU5FYPTOvZZ5EvacUz+
VmjXUxIcivlTn9eNn0GMEnWlsAkL8LOYKmWYyp8eUeabdYjFxXDBq5+DbxxXosN4
NQSNY/DMjhZs1IgIISKEA+dMjmFkyggVo+FLEtBYrWEMYV0cKGeyEKgU/HY6arsH
wweSm6TtoOez3JScNWqHsSl1Q+EZ1piNUcdg5l80XzQDxi7beb3X7Vx5FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7FuyCmJgybdG10yrcNCziXyHK2MB8GA1UdIwQY
MBaAFPWlAPOXYjqx1WAEg1Rn/M89CjsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWFVQTg1ZGlPckhWWUFTRFZHZjh6ejBLT3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9hNzYwZjMtMDA2Mi00Mzc0LTgyOTAt
ZTc2ZmQ5YzlkYzhjLzEvOWFVQTg1ZGlPckhWWUFTRFZHZjh6ejBLT3c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9hNzYwZjMtMDA2Mi00Mzc0LTgyOTAtZTc2ZmQ5YzlkYzhj
LzEvOWFVQTg1ZGlPckhWWUFTRFZHZjh6ejBLT3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmx8rt0Kv
Yodx8/gwkaa+z2K7dZq2uO5VAO01VqbZtyyH2uo0jMd4BrJryV2Vu1tYH2WsWDjV
cKa3/hG5ZXuQs3DdQ+eCkFjqjRtRp76+vlMGKtAGRtepu9+7klnk8nhmZDkzeVe3
r6zsEb0RI+IV/OfyMvYFqess8cA+D/u0HjixYXgO/VBRLXZtbuE49ConPgrih8S3
ZJ42JiHALsjjldHG/PINbYdugOHQsFVSiERdp67mUHd50bY5M7DHcaHD//FNc1QV
MOCJ7FMe8m7/mKq2CPRUqW+aeqgAmI6bnh3WcLnnITOXAwQV8N82/Ou4iZVtm7c1
zOsr75u46zRnMg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:19 2025 by rpki-client