Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
File: 9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft (raw, json)
Hash identifier: XBNcrxGmfX5zMdsSuAZ2DFFRNWmL6BrtAIdYz6gjnD4=
Subject key identifier: B6:95:BF:84:F2:DC:C1:C3:C2:F7:E0:4D:C4:82:06:03:3D:F0:BA:0E
Authority key identifier: F6:F4:9B:FB:2A:0B:82:44:60:60:C7:FC:90:78:10:E5:18:70:59:36
Certificate issuer: /CN=f6f49bfb2a0b82446060c7fc907810e518705936
Certificate serial: 019A70A535B32823C145FFDA579F9F587634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
Manifest number: 0385
Signing time: Tue 11 Nov 2025 02:01:06 +0000
Manifest this update: Tue 11 Nov 2025 02:01:06 +0000
Manifest next update: Wed 12 Nov 2025 02:01:06 +0000
Files and hashes: 1: 9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl (hash: p7YhcH9AcglwajknQugIHUwg6Z3BG8lvDMZBODT2Lgk=)
2: jSx6lr1ClHwvX34A8pMwt0RR9b8.roa (hash: 8qaP26J8XC7Mhz3DA86mgKU6vMfpb43EGZW/j662nEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:35:b3:28:23:c1:45:ff:da:57:9f:9f:58:76:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6f49bfb2a0b82446060c7fc907810e518705936
Validity
Not Before: Nov 11 02:01:06 2025 GMT
Not After : Nov 12 02:01:06 2025 GMT
Subject: CN=b695bf84f2dcc1c3c2f7e04dc48206033df0ba0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d5:0f:ef:da:e4:e4:69:35:d5:b1:55:88:ba:
98:80:bc:8a:e0:91:c7:dc:1a:02:04:89:c7:c5:90:
d4:9a:d3:b3:de:ed:dd:8f:4f:d1:cb:63:33:9b:eb:
aa:4b:1e:c0:9e:fe:76:45:61:c7:7c:75:4e:38:01:
49:7d:b0:00:2e:26:d6:22:55:f4:87:9e:3b:35:2a:
82:7e:d4:54:47:eb:d3:42:b4:d6:0c:af:8d:45:7f:
bf:e2:44:29:21:29:2e:0a:6b:33:6f:72:4e:65:02:
7c:b5:1b:50:d5:8d:7a:a2:ea:33:01:9a:4a:e9:ef:
32:e0:08:a4:9a:14:92:93:dd:94:38:a4:f5:5c:0b:
fe:9d:ef:df:96:a2:a6:d0:55:2c:e0:93:06:b6:ab:
93:df:39:c9:4b:a8:a8:e2:70:d9:06:da:d8:88:37:
c5:2f:99:39:d1:6e:75:28:69:c6:9f:99:51:a5:07:
b3:94:ad:20:71:3f:07:b9:01:a7:fe:f1:50:fc:33:
dc:3b:6b:8a:a9:f8:be:36:4c:36:0c:4d:0c:ff:72:
fe:db:cc:b8:ef:5a:b6:80:64:c0:6c:04:fe:98:da:
f4:31:c3:1e:5c:ac:36:bd:6e:d8:ae:7c:c7:52:e8:
32:23:e8:64:7a:57:38:92:fc:e9:a0:c9:45:07:2d:
16:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:95:BF:84:F2:DC:C1:C3:C2:F7:E0:4D:C4:82:06:03:3D:F0:BA:0E
X509v3 Authority Key Identifier:
keyid:F6:F4:9B:FB:2A:0B:82:44:60:60:C7:FC:90:78:10:E5:18:70:59:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b2:0f:dd:d2:73:4b:ce:9a:0a:78:e1:3c:63:cb:13:08:3b:
5f:1c:a1:a1:4e:33:47:d1:fd:9b:1d:e3:08:1b:90:dd:8e:af:
d8:b1:e2:67:1c:b4:f9:b2:c2:67:ab:3c:16:67:da:70:3e:a9:
62:95:01:a6:1c:97:2d:21:e1:5c:4a:e5:ce:bf:08:70:b6:66:
bb:97:1e:c4:cd:6c:70:f2:4f:25:e6:d5:a1:f6:1e:b9:df:9b:
d5:56:a1:c8:e1:2e:48:ab:a1:36:c9:a5:42:9c:ff:88:ec:92:
e8:21:6e:3c:f5:7d:ba:69:33:5d:4a:13:04:28:0a:86:43:43:
3e:81:ce:57:b5:c9:cf:9e:dd:f8:15:a5:be:84:c6:55:73:81:
4f:65:ef:5e:d0:99:78:18:44:1e:bb:77:b7:0a:ad:b7:68:26:
16:db:bf:7b:6c:71:16:98:38:62:e5:7a:4c:a4:c3:f2:9c:9d:
a3:e1:0f:c6:17:8c:6b:ed:49:92:1e:28:9e:98:4b:08:ed:4b:
a2:d8:38:18:49:c8:79:13:6b:bd:38:23:9b:03:09:b6:d6:84:
95:03:bc:e8:fa:a6:ec:1b:73:ed:09:93:4c:6d:08:f5:e6:0e:
94:bb:34:0e:7d:74:e5:cc:64:4d:75:61:83:fa:b9:2d:28:b6:
80:52:4c:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpTWzKCPBRf/aV5+fWHY0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ZjQ5YmZiMmEwYjgyNDQ2MDYwYzdmYzkwNzgxMGU1MTg3
MDU5MzYwHhcNMjUxMTExMDIwMTA2WhcNMjUxMTEyMDIwMTA2WjAzMTEwLwYDVQQD
EyhiNjk1YmY4NGYyZGNjMWMzYzJmN2UwNGRjNDgyMDYwMzNkZjBiYTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9UP79rk5Gk11bFViLqYgLyK4JHH
3BoCBInHxZDUmtOz3u3dj0/Ry2Mzm+uqSx7Anv52RWHHfHVOOAFJfbAALibWIlX0
h547NSqCftRUR+vTQrTWDK+NRX+/4kQpISkuCmszb3JOZQJ8tRtQ1Y16ouozAZpK
6e8y4AikmhSSk92UOKT1XAv+ne/flqKm0FUs4JMGtquT3znJS6io4nDZBtrYiDfF
L5k50W51KGnGn5lRpQezlK0gcT8HuQGn/vFQ/DPcO2uKqfi+Nkw2DE0M/3L+28y4
71q2gGTAbAT+mNr0McMeXKw2vW7YrnzHUugyI+hkelc4kvzpoMlFBy0WRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaVv4Ty3MHDwvfgTcSCBgM98LoOMB8GA1UdIwQY
MBaAFPb0m/sqC4JEYGDH/JB4EOUYcFk2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXZTYi15b0xna1JnWU1mOGtIZ1E1Umh3V1RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My83NzcyOGQtYWNmZS00NGE0LWJjOTIt
MzNhNTZmNDU5YmMwLzEvOXZTYi15b0xna1JnWU1mOGtIZ1E1Umh3V1RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My83NzcyOGQtYWNmZS00NGE0LWJjOTItMzNhNTZmNDU5YmMw
LzEvOXZTYi15b0xna1JnWU1mOGtIZ1E1Umh3V1RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLIP3dJz
S86aCnjhPGPLEwg7XxyhoU4zR9H9mx3jCBuQ3Y6v2LHiZxy0+bLCZ6s8FmfacD6p
YpUBphyXLSHhXErlzr8IcLZmu5cexM1scPJPJebVofYeud+b1VahyOEuSKuhNsml
Qpz/iOyS6CFuPPV9umkzXUoTBCgKhkNDPoHOV7XJz57d+BWlvoTGVXOBT2XvXtCZ
eBhEHrt3twqtt2gmFtu/e2xxFpg4YuV6TKTD8pydo+EPxheMa+1Jkh4onphLCO1L
otg4GEnIeRNrvTgjmwMJttaElQO86Pqm7Btz7QmTTG0I9eYOlLs0Dn105cxkTXVh
g/q5LSi2gFJMCA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:17 2025 by rpki-client