Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
File: C9fnDABfVWqCVOexKw6z0zFNReI.mft (raw, json)
Hash identifier: vhXYRWhUgKGNVhLG0Y83Bl7vpWbKL0np4uhxnfJC3Tk=
Subject key identifier: 21:75:6F:66:42:B9:BD:37:54:76:EC:24:BA:F6:F9:84:EA:B9:F6:80
Authority key identifier: 0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
Certificate issuer: /CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Certificate serial: 019A52D1B48C5648A1DA7A32D479F20E1CEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
Manifest number: 170D
Signing time: Wed 05 Nov 2025 07:01:06 +0000
Manifest this update: Wed 05 Nov 2025 07:01:06 +0000
Manifest next update: Thu 06 Nov 2025 07:01:06 +0000
Files and hashes: 1: C9fnDABfVWqCVOexKw6z0zFNReI.crl (hash: mACpQBRZe5JCrFPlpIabQDnYuZtwsLRei3Ec6P1PbQs=)
2: KALMVhqVFo0O99VrdECDqSH5Z6g.roa (hash: vjDA6l8MH7MrWb72G2c81lHoX5Ci2HwmnVXmzEUbWMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:b4:8c:56:48:a1:da:7a:32:d4:79:f2:0e:1c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Validity
Not Before: Nov 5 07:01:06 2025 GMT
Not After : Nov 6 07:01:06 2025 GMT
Subject: CN=21756f6642b9bd375476ec24baf6f984eab9f680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b1:3e:29:91:f4:df:e3:09:03:ec:3c:5f:cd:
68:ee:35:b5:89:8f:aa:dc:49:ea:96:e2:ad:7d:4a:
78:eb:b4:6f:dd:21:23:bf:67:de:38:3c:29:f0:3d:
46:1e:0f:16:f2:54:fc:26:23:cb:14:ec:98:f1:4d:
5c:2c:9b:2b:0c:e3:85:04:cb:8f:8a:19:87:64:eb:
de:01:92:84:3d:05:87:f1:ac:39:c4:3d:40:c2:c9:
c6:1c:50:ee:ed:17:7c:ab:99:4c:81:e7:2c:83:86:
e4:d4:bd:1d:63:df:f3:5a:54:f6:24:22:46:85:70:
81:eb:d7:d9:b4:e7:7b:95:e7:05:82:f8:b6:c8:9e:
ad:ab:0b:06:d3:27:a6:23:32:77:69:44:9a:a6:e9:
eb:b1:5d:c3:86:d9:ae:c1:6a:97:ac:0e:c8:c0:fa:
db:b5:90:9e:35:4b:3c:b7:8d:71:b1:dd:58:4f:fb:
6e:93:a4:8f:6e:6e:03:a8:c3:d7:e6:eb:73:d5:0e:
52:74:d1:49:4b:35:a6:df:00:5c:7b:08:a7:6f:2e:
8b:03:ee:74:74:61:ba:9b:11:60:ff:b0:9d:cd:fc:
61:a3:a5:45:09:44:b9:b1:47:77:15:8b:49:e9:e7:
01:fb:a5:ee:22:4f:b7:f6:91:f9:32:fa:08:4c:c5:
93:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:75:6F:66:42:B9:BD:37:54:76:EC:24:BA:F6:F9:84:EA:B9:F6:80
X509v3 Authority Key Identifier:
keyid:0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b7:b2:f7:04:f1:75:c7:bd:32:7c:ad:6c:3c:b8:e0:46:d9:
67:a9:2c:2c:80:40:64:45:f7:9d:d2:4e:0f:3d:6a:10:68:4b:
7b:ec:84:a3:c7:87:2e:d3:b3:ce:11:b7:b4:8a:69:6a:5f:3f:
01:b2:c2:08:d0:1e:00:b1:06:5a:96:6b:44:32:6c:bb:2d:4a:
8f:d9:3c:8a:21:f5:66:ab:d8:71:c5:6a:93:6b:4e:7d:43:7c:
f9:3f:d4:ae:60:c3:22:27:6d:ec:6b:0b:75:05:ea:37:3b:43:
5f:78:ab:08:70:b8:b8:61:27:02:fb:78:b9:69:20:28:b6:ef:
47:e5:79:7b:d3:ce:34:81:51:ee:4e:38:82:70:51:ed:61:17:
1c:d9:4a:6d:2e:96:6d:25:b0:7d:37:93:6b:cf:4e:13:43:39:
84:b6:a5:04:61:90:78:1d:52:6a:61:24:50:7b:b8:18:c0:51:
26:c4:34:d4:9f:e1:2c:4e:9a:ed:61:ce:e9:fe:5c:04:24:52:
01:0e:d1:5b:ed:cb:d2:6d:87:2f:ec:ef:bd:db:e5:51:ef:f5:
d9:23:7f:a7:da:85:d5:86:a0:63:26:4d:28:89:c9:48:1b:de:
ca:2f:07:d4:ab:d3:18:79:a3:0a:a6:8d:1b:ea:f2:10:95:24:
60:83:03:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0bSMVkih2noy1HnyDhzvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZDdlNzBjMDA1ZjU1NmE4MjU0ZTdiMTJiMGViM2QzMzE0
ZDQ1ZTIwHhcNMjUxMTA1MDcwMTA2WhcNMjUxMTA2MDcwMTA2WjAzMTEwLwYDVQQD
EygyMTc1NmY2NjQyYjliZDM3NTQ3NmVjMjRiYWY2Zjk4NGVhYjlmNjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8LE+KZH03+MJA+w8X81o7jW1iY+q
3EnqluKtfUp467Rv3SEjv2feODwp8D1GHg8W8lT8JiPLFOyY8U1cLJsrDOOFBMuP
ihmHZOveAZKEPQWH8aw5xD1AwsnGHFDu7Rd8q5lMgecsg4bk1L0dY9/zWlT2JCJG
hXCB69fZtOd7lecFgvi2yJ6tqwsG0yemIzJ3aUSapunrsV3DhtmuwWqXrA7IwPrb
tZCeNUs8t41xsd1YT/tuk6SPbm4DqMPX5utz1Q5SdNFJSzWm3wBcewinby6LA+50
dGG6mxFg/7Cdzfxho6VFCUS5sUd3FYtJ6ecB+6XuIk+39pH5MvoITMWToQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCF1b2ZCub03VHbsJLr2+YTqufaAMB8GA1UdIwQY
MBaAFAvX5wwAX1VqglTnsSsOs9MxTUXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzlmbkRBQmZWV3FDVk9leEt3NnowekZOUmVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80Y2ZmZWYtOWE5Ny00NTQ2LWJkZGQt
YmIzY2M3Yzk0NGFkLzEvQzlmbkRBQmZWV3FDVk9leEt3NnowekZOUmVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi80Y2ZmZWYtOWE5Ny00NTQ2LWJkZGQtYmIzY2M3Yzk0NGFk
LzEvQzlmbkRBQmZWV3FDVk9leEt3NnowekZOUmVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg7ey9wTx
dce9MnytbDy44EbZZ6ksLIBAZEX3ndJODz1qEGhLe+yEo8eHLtOzzhG3tIppal8/
AbLCCNAeALEGWpZrRDJsuy1Kj9k8iiH1ZqvYccVqk2tOfUN8+T/UrmDDIidt7GsL
dQXqNztDX3irCHC4uGEnAvt4uWkgKLbvR+V5e9PONIFR7k44gnBR7WEXHNlKbS6W
bSWwfTeTa89OE0M5hLalBGGQeB1SamEkUHu4GMBRJsQ01J/hLE6a7WHO6f5cBCRS
AQ7RW+3L0m2HL+zvvdvlUe/12SN/p9qF1YagYyZNKInJSBveyi8H1KvTGHmjCqaN
G+ryEJUkYIMDjg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:16:50 2025 by rpki-client