Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
File: 9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft (raw, json)
Hash identifier: /callajMxnsqH2510lCjZCxctlTthcXgd01eoAr6lgs=
Subject key identifier: EE:F0:9A:3E:42:EA:71:C5:FE:C6:54:9C:8C:7C:05:14:00:A8:F7:83
Authority key identifier: F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4
Certificate issuer: /CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
Certificate serial: 0199C2D6824C55A6D9953FEF3BF28DA6570D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
Manifest number: 0695
Signing time: Wed 08 Oct 2025 08:01:01 +0000
Manifest this update: Wed 08 Oct 2025 08:01:01 +0000
Manifest next update: Thu 09 Oct 2025 08:01:01 +0000
Files and hashes: 1: 9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl (hash: QFjUNouPkYMJmRxabBwCYLrArE+daSnxQcvXyeOfVSA=)
2: GaOIxHYrGt_x1xNOwfVe1mM1uls.roa (hash: 6h4qg1f7k4UwgHPBRYv76SUwfsVkd9pZo7L1FeBQMpI=)
3: S3-UGk16fgBKghN_7jlpmFhtevk.roa (hash: svmOkbDlORnE+JdlDBeTol63DbR+qbg9OLTtqku/fJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c2:d6:82:4c:55:a6:d9:95:3f:ef:3b:f2:8d:a6:57:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
Validity
Not Before: Oct 8 08:01:01 2025 GMT
Not After : Oct 9 08:01:01 2025 GMT
Subject: CN=eef09a3e42ea71c5fec6549c8c7c051400a8f783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:47:11:dd:9f:64:64:c7:0a:c9:4b:b3:ca:8c:
3d:38:ff:41:7e:7a:df:d7:9f:a5:5f:e8:5d:03:d9:
fe:5e:2d:ea:39:6f:f6:6b:24:fc:de:ed:fc:41:fa:
11:12:f3:55:16:de:8c:63:a6:57:5e:9e:80:d7:e6:
f4:a0:c3:6a:81:f7:e7:1b:4e:2e:72:f5:9c:09:92:
b1:10:28:a9:5a:b6:e1:8b:5e:3b:c0:88:74:02:04:
96:13:31:4a:2d:14:4c:b4:4e:fc:24:e9:d9:d0:08:
ec:cb:25:6a:d1:d9:cd:be:be:a9:68:4b:c6:79:a1:
3e:da:2c:47:33:fd:89:16:8c:f6:73:37:01:92:8e:
c1:52:53:42:11:b1:f8:e4:3f:f2:4c:e7:ff:50:8a:
9f:84:9a:bc:ee:b2:86:ab:cf:ed:8e:6c:74:e9:31:
e6:ac:a7:5b:48:fa:91:b6:76:c1:21:06:b9:4a:29:
63:66:1f:9b:f3:7e:7f:74:27:a9:04:96:ca:3e:2c:
17:22:f4:34:a9:a1:92:85:76:ea:b1:e6:fd:d6:ac:
7b:0b:45:66:97:a8:f3:ad:15:a6:7f:61:b2:26:2c:
3a:1e:3d:a0:76:f4:03:2a:39:27:f1:6b:1e:bc:79:
53:28:df:85:d4:6c:07:73:1d:df:dc:9a:2a:c3:29:
4f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F0:9A:3E:42:EA:71:C5:FE:C6:54:9C:8C:7C:05:14:00:A8:F7:83
X509v3 Authority Key Identifier:
keyid:F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d2:7d:c3:58:f8:3e:55:ca:c0:04:25:c3:a5:7b:f7:2f:c5:
79:06:1a:39:e3:0d:d1:77:db:3d:b6:8b:d0:a8:68:99:af:7a:
2a:eb:62:85:28:24:34:21:23:be:c3:a4:b1:b0:7a:07:7e:9c:
78:2b:06:0a:99:00:38:1a:ed:cd:e0:44:50:ca:f8:9d:62:a1:
e5:9e:3c:db:0e:b8:29:2d:88:9f:5c:ca:ff:ca:02:82:e5:6d:
ce:0d:d4:35:9d:86:19:1f:fb:19:fa:01:e9:d1:59:e0:50:01:
07:1f:65:63:82:ee:19:76:fb:11:8a:b1:e7:30:2e:83:15:08:
8f:32:c7:45:86:15:cd:00:d1:39:60:54:2d:22:ad:6f:39:8c:
37:36:d3:1d:0c:18:44:28:a7:07:2d:82:ac:5b:d5:70:ef:e3:
e0:a4:18:c6:e2:d3:16:92:1b:5c:7b:b3:2e:96:af:01:18:9b:
a0:c2:05:64:f1:7d:62:4b:cf:47:cd:20:95:ab:dc:e2:2a:33:
e4:1c:4b:6b:40:06:d3:7e:4a:eb:90:4b:2f:30:b2:dc:92:62:
37:73:6b:91:aa:7b:28:ad:a2:83:a2:de:d3:b8:ad:b4:69:b3:
08:8b:15:46:7b:64:87:46:cb:e6:6c:1e:5f:ca:79:ae:d1:a3:
6c:7a:3d:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnC1oJMVabZlT/vO/KNplcNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MmU5YzkxNDZlZDdiYzU4Yzg1Y2RhYjZlYjg1OGU0MjI4
NmVlZjQwHhcNMjUxMDA4MDgwMTAxWhcNMjUxMDA5MDgwMTAxWjAzMTEwLwYDVQQD
EyhlZWYwOWEzZTQyZWE3MWM1ZmVjNjU0OWM4YzdjMDUxNDAwYThmNzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykcR3Z9kZMcKyUuzyow9OP9Bfnrf
15+lX+hdA9n+Xi3qOW/2ayT83u38QfoREvNVFt6MY6ZXXp6A1+b0oMNqgffnG04u
cvWcCZKxECipWrbhi147wIh0AgSWEzFKLRRMtE78JOnZ0AjsyyVq0dnNvr6paEvG
eaE+2ixHM/2JFoz2czcBko7BUlNCEbH45D/yTOf/UIqfhJq87rKGq8/tjmx06THm
rKdbSPqRtnbBIQa5SiljZh+b835/dCepBJbKPiwXIvQ0qaGShXbqseb91qx7C0Vm
l6jzrRWmf2GyJiw6Hj2gdvQDKjkn8WsevHlTKN+F1GwHcx3f3JoqwylPNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7wmj5C6nHF/sZUnIx8BRQAqPeDMB8GA1UdIwQY
MBaAFPcunJFG7XvFjIXNq264WOQihu70MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXk2Y2tVYnRlOFdNaGMycmJyaFk1Q0tHN3ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC81ZWZlZjQtNjI5OS00N2NjLWE5Y2Et
ZDUxNmYwZTE0ODdiLzEvOXk2Y2tVYnRlOFdNaGMycmJyaFk1Q0tHN3ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC81ZWZlZjQtNjI5OS00N2NjLWE5Y2EtZDUxNmYwZTE0ODdi
LzEvOXk2Y2tVYnRlOFdNaGMycmJyaFk1Q0tHN3ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfdJ9w1j4
PlXKwAQlw6V79y/FeQYaOeMN0XfbPbaL0Khoma96KutihSgkNCEjvsOksbB6B36c
eCsGCpkAOBrtzeBEUMr4nWKh5Z482w64KS2In1zK/8oCguVtzg3UNZ2GGR/7GfoB
6dFZ4FABBx9lY4LuGXb7EYqx5zAugxUIjzLHRYYVzQDROWBULSKtbzmMNzbTHQwY
RCinBy2CrFvVcO/j4KQYxuLTFpIbXHuzLpavARiboMIFZPF9YkvPR80glavc4ioz
5BxLa0AG035K65BLLzCy3JJiN3Nrkap7KK2ig6Le07ittGmzCIsVRntkh0bL5mwe
X8p5rtGjbHo95Q==
-----END CERTIFICATE-----
Generated at Wed Oct 8 15:49:00 2025 by rpki-client