Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
File: 9QG54gYW1oa0BdqQavpZdjUGNkA.mft (raw, json)
Hash identifier: 4IokoaYHLEhndF4Hhc0H03ZcizjcIIYi9ojzSTbIjLI=
Subject key identifier: 00:98:FD:CA:D2:49:08:B4:51:56:D0:7D:22:21:55:A3:D6:F3:62:8B
Authority key identifier: F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
Certificate issuer: /CN=f501b9e20616d686b405da906afa597635063640
Certificate serial: 019A725C7EE5CB787AB9700817C83CC48AD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
Manifest number: 145B
Signing time: Tue 11 Nov 2025 10:00:55 +0000
Manifest this update: Tue 11 Nov 2025 10:00:55 +0000
Manifest next update: Wed 12 Nov 2025 10:00:55 +0000
Files and hashes: 1: 9QG54gYW1oa0BdqQavpZdjUGNkA.crl (hash: d3sAIJlrg9GIuimJlbWe3qnkuHIlNY/ALq+AA9N0F9w=)
2: VBSMUM2E1eY-HeRIXiGsI4i681A.roa (hash: 9hPqZnbB+hAnaLIqMz7J1BKYjhJ96B3SoRz8LPWNz7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:7e:e5:cb:78:7a:b9:70:08:17:c8:3c:c4:8a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f501b9e20616d686b405da906afa597635063640
Validity
Not Before: Nov 11 10:00:55 2025 GMT
Not After : Nov 12 10:00:55 2025 GMT
Subject: CN=0098fdcad24908b45156d07d222155a3d6f3628b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6a:94:c7:03:c2:94:86:e4:85:6a:62:2a:3e:
d4:dc:4c:b7:c9:a8:e0:de:a7:80:f7:61:27:f5:fd:
f9:2f:6c:50:33:1f:87:8e:82:2e:96:a2:c8:a0:0b:
6d:1b:a0:ce:19:23:70:ff:de:64:dc:05:79:fa:41:
b9:c1:4d:74:89:4e:70:74:56:47:d5:1c:71:5a:d7:
a0:71:5d:9c:8b:06:41:45:ff:3d:9b:ff:9b:3d:53:
e3:4c:27:1d:a6:a3:12:d2:9e:57:22:a8:53:b8:74:
64:96:12:b5:1f:c8:38:f6:ad:ea:36:44:37:b4:36:
63:36:db:4f:a5:30:1f:5f:6a:ad:7f:05:ec:c2:e6:
f4:95:83:66:ee:c3:b4:09:fe:b6:a3:f2:5f:1b:ef:
aa:f8:80:9a:e9:06:95:cb:9d:c4:cc:43:4f:81:6c:
3d:1a:e3:ed:96:b7:1f:a4:07:07:ff:ad:f8:b5:2c:
77:13:ad:c5:34:22:48:ea:7b:eb:49:d3:f1:01:35:
9c:9d:26:b5:7a:af:a2:cc:58:f6:4a:80:a9:7b:3d:
96:1c:8d:f1:52:6d:3f:b5:88:f5:eb:1b:5e:87:a7:
ce:96:67:0e:4a:27:05:89:01:46:28:e2:7a:af:10:
e8:07:70:1b:72:30:eb:92:dd:66:15:bb:e2:61:e2:
48:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:98:FD:CA:D2:49:08:B4:51:56:D0:7D:22:21:55:A3:D6:F3:62:8B
X509v3 Authority Key Identifier:
keyid:F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d5:0e:96:db:e7:eb:cc:5f:ce:6b:2e:14:e1:2d:17:5b:80:
de:5b:cd:86:92:44:00:ef:bf:84:e6:dc:22:b3:02:5c:dc:be:
7e:2a:2a:f6:1c:bf:ba:ef:fa:48:e5:1c:71:d9:ee:96:c6:f9:
d8:9e:a6:1f:00:1f:3b:be:e5:e3:b9:76:a6:0e:98:f7:b7:db:
80:0f:e7:78:dc:9d:2b:fe:8a:80:3c:59:97:dc:d7:2f:a9:b1:
e5:d9:87:55:7c:f1:ec:a4:36:91:43:26:6b:06:72:90:51:ce:
b5:5f:35:c4:e3:f3:81:1e:1d:01:b6:da:20:6f:ab:3b:96:62:
e0:c9:4b:17:c8:ca:5c:31:b9:cf:ca:24:0b:b0:56:5a:f7:26:
81:c0:a1:44:d8:32:65:2c:c3:4c:89:1c:6f:07:8a:b9:0d:62:
57:43:73:36:4f:c2:9a:64:9e:ea:bb:4d:df:fc:a1:67:79:e1:
42:96:2c:39:f2:b1:5e:4d:3b:70:3e:2c:23:de:35:58:0b:5a:
cf:ec:9a:49:f6:dc:db:4c:11:e3:ce:a7:02:d6:20:59:84:b5:
20:8b:bd:01:67:ad:ec:c4:b8:f6:07:94:07:20:a1:78:43:f6:
c0:0d:9f:ea:45:5d:f6:79:d7:87:08:c3:34:8c:0e:25:2e:7e:
73:91:2a:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXH7ly3h6uXAIF8g8xIrYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MDFiOWUyMDYxNmQ2ODZiNDA1ZGE5MDZhZmE1OTc2MzUw
NjM2NDAwHhcNMjUxMTExMTAwMDU1WhcNMjUxMTEyMTAwMDU1WjAzMTEwLwYDVQQD
EygwMDk4ZmRjYWQyNDkwOGI0NTE1NmQwN2QyMjIxNTVhM2Q2ZjM2MjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmqUxwPClIbkhWpiKj7U3Ey3yajg
3qeA92En9f35L2xQMx+HjoIulqLIoAttG6DOGSNw/95k3AV5+kG5wU10iU5wdFZH
1RxxWtegcV2ciwZBRf89m/+bPVPjTCcdpqMS0p5XIqhTuHRklhK1H8g49q3qNkQ3
tDZjNttPpTAfX2qtfwXswub0lYNm7sO0Cf62o/JfG++q+ICa6QaVy53EzENPgWw9
GuPtlrcfpAcH/634tSx3E63FNCJI6nvrSdPxATWcnSa1eq+izFj2SoCpez2WHI3x
Um0/tYj16xteh6fOlmcOSicFiQFGKOJ6rxDoB3AbcjDrkt1mFbviYeJINwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFACY/crSSQi0UVbQfSIhVaPW82KLMB8GA1UdIwQY
MBaAFPUBueIGFtaGtAXakGr6WXY1BjZAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVFHNTRnWVcxb2EwQmRxUWF2cFpkalVHTmtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83YWZjZTQtMjE4Yi00N2VkLTk1YWIt
NzVkNTg0M2FhNDg5LzEvOVFHNTRnWVcxb2EwQmRxUWF2cFpkalVHTmtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC83YWZjZTQtMjE4Yi00N2VkLTk1YWItNzVkNTg0M2FhNDg5
LzEvOVFHNTRnWVcxb2EwQmRxUWF2cFpkalVHTmtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm9UOltvn
68xfzmsuFOEtF1uA3lvNhpJEAO+/hObcIrMCXNy+fioq9hy/uu/6SOUccdnulsb5
2J6mHwAfO77l47l2pg6Y97fbgA/neNydK/6KgDxZl9zXL6mx5dmHVXzx7KQ2kUMm
awZykFHOtV81xOPzgR4dAbbaIG+rO5Zi4MlLF8jKXDG5z8okC7BWWvcmgcChRNgy
ZSzDTIkcbweKuQ1iV0NzNk/CmmSe6rtN3/yhZ3nhQpYsOfKxXk07cD4sI941WAta
z+yaSfbc20wR486nAtYgWYS1IIu9AWet7MS49geUByCheEP2wA2f6kVd9nnXhwjD
NIwOJS5+c5EqPg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:59:24 2025 by rpki-client