Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
File: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft (raw, json)
Hash identifier: rESoAoW/ZUnPhuY55XJHipgZ2Bdb8Ebz0UIAd2IJzVk=
Subject key identifier: 3A:97:83:71:0B:96:FF:7C:61:E2:54:F7:DB:24:10:F4:71:05:0B:EF
Authority key identifier: F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
Certificate issuer: /CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Certificate serial: 019A0B5D599AF5A0453063B7FB405ABF4F77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
Manifest number: 16D3
Signing time: Wed 22 Oct 2025 10:00:58 +0000
Manifest this update: Wed 22 Oct 2025 10:00:58 +0000
Manifest next update: Thu 23 Oct 2025 10:00:58 +0000
Files and hashes: 1: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl (hash: z7G36+Cesc+/lB7g+OhGHhEkGuE6q6H3XTnjs/tw71k=)
2: SJe0yiKrFFgre-LwlA373na16-M.roa (hash: W+lZ86QtGfH27JSeGBvOgaus0tZU6nh0IODmn6TYevo=)
3: rXYQihXZcHzDYDPfOCw2uf0QxOs.roa (hash: mgxpGPq3j8kcIVwK/lsmtpT+En8AA3E9GG8LueVY7g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:5d:59:9a:f5:a0:45:30:63:b7:fb:40:5a:bf:4f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Validity
Not Before: Oct 22 10:00:58 2025 GMT
Not After : Oct 23 10:00:58 2025 GMT
Subject: CN=3a9783710b96ff7c61e254f7db2410f471050bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:eb:8c:8a:05:09:46:2d:82:d2:bf:3e:2a:03:
4f:89:5c:98:35:c7:6e:80:9d:b4:e5:f5:a5:78:59:
4c:a8:e2:22:59:90:bd:a9:03:cb:dc:69:ad:28:f1:
87:ea:d5:f3:01:bf:86:8a:f9:21:23:d1:d2:8c:b0:
1d:fb:11:80:ff:04:4c:0f:d7:d2:81:c3:0b:7b:9b:
94:cd:9d:db:d3:f7:2d:8d:f6:ae:d4:a1:01:cb:7c:
13:ed:4f:4b:ee:e3:36:91:00:47:35:56:b9:47:a7:
53:f9:f1:08:cc:69:ce:e7:87:1e:66:65:20:23:51:
11:cd:b1:82:df:bc:09:87:7b:be:39:56:ee:6c:cc:
45:63:ba:69:19:96:ba:9e:18:f5:a7:ae:90:aa:a8:
fe:91:3a:0b:c0:3d:fa:f3:68:de:89:11:3b:71:70:
6b:18:9a:d1:91:69:00:e8:7d:2f:75:13:38:26:b0:
64:e4:92:39:d2:05:33:c8:c1:54:c5:d6:43:33:16:
44:9b:27:fd:af:33:88:75:28:04:4b:43:e0:f5:af:
85:2f:bb:e2:51:b0:55:72:cc:f4:b9:29:76:2e:78:
54:99:fe:54:6d:62:98:fc:2c:02:83:c5:54:12:59:
13:07:be:8f:38:75:b0:88:14:80:7a:06:89:55:7c:
a1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:97:83:71:0B:96:FF:7C:61:E2:54:F7:DB:24:10:F4:71:05:0B:EF
X509v3 Authority Key Identifier:
keyid:F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c4:57:c4:bd:1f:5d:ac:38:db:76:53:01:42:89:4d:ee:21:
a8:f5:47:e4:64:08:f8:1d:dd:52:46:ec:83:66:10:d1:5b:74:
18:92:61:68:6c:10:c9:e5:6e:9f:0a:47:8f:b7:b4:43:07:ad:
9c:6e:7a:8f:40:bf:f7:f7:42:b9:c0:58:4a:9f:c9:bc:19:fd:
49:4b:24:53:2e:7e:3a:48:38:08:27:90:65:0e:78:1f:43:21:
88:6c:73:10:43:51:38:af:43:87:b1:56:44:0e:18:57:b1:cf:
7d:cc:ce:5f:43:c8:85:2c:95:2d:52:77:b1:e5:11:41:2d:87:
bf:5d:ab:14:08:1d:49:45:ba:47:d7:e4:28:b0:7b:36:a2:6c:
ad:25:6f:f4:e4:99:34:9a:15:43:71:a2:11:63:bb:88:84:fd:
46:19:f7:ed:42:ae:70:cf:0a:5b:37:2d:49:16:55:6c:ab:69:
17:ba:45:6c:68:2c:3d:e6:54:3c:3d:77:1b:75:21:4e:6a:f0:
3c:a2:36:02:35:a4:f0:45:e9:c1:03:0c:39:b0:1e:a4:65:c9:
10:fb:5f:53:80:e1:95:8c:10:5d:ed:b0:a6:c4:39:78:4f:a3:
b4:4f:6c:74:cb:b2:db:55:92:4d:f4:ce:a2:4b:a6:a6:72:84:
20:5a:bc:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoLXVma9aBFMGO3+0Bav093MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZTY3OWU1OGU0YjhiZjYzZTk1MDAyYjU0YmU0NzFkNjM0
Yjk1MDYwHhcNMjUxMDIyMTAwMDU4WhcNMjUxMDIzMTAwMDU4WjAzMTEwLwYDVQQD
EygzYTk3ODM3MTBiOTZmZjdjNjFlMjU0ZjdkYjI0MTBmNDcxMDUwYmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOuMigUJRi2C0r8+KgNPiVyYNcdu
gJ205fWleFlMqOIiWZC9qQPL3GmtKPGH6tXzAb+GivkhI9HSjLAd+xGA/wRMD9fS
gcMLe5uUzZ3b0/ctjfau1KEBy3wT7U9L7uM2kQBHNVa5R6dT+fEIzGnO54ceZmUg
I1ERzbGC37wJh3u+OVbubMxFY7ppGZa6nhj1p66Qqqj+kToLwD3682jeiRE7cXBr
GJrRkWkA6H0vdRM4JrBk5JI50gUzyMFUxdZDMxZEmyf9rzOIdSgES0Pg9a+FL7vi
UbBVcsz0uSl2LnhUmf5UbWKY/CwCg8VUElkTB76POHWwiBSAegaJVXyhEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqXg3ELlv98YeJU99skEPRxBQvvMB8GA1UdIwQY
MBaAFPfmeeWOS4v2PpUAK1S+Rx1jS5UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOS1aNTVZNUxpX1ktbFFBclZMNUhIV05MbFFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC80ZmM3ODctZTY4MS00ZTE2LWIxZWMt
YTFjNWQ3ZWI0YmQ3LzEvOS1aNTVZNUxpX1ktbFFBclZMNUhIV05MbFFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC80ZmM3ODctZTY4MS00ZTE2LWIxZWMtYTFjNWQ3ZWI0YmQ3
LzEvOS1aNTVZNUxpX1ktbFFBclZMNUhIV05MbFFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACcRXxL0f
Xaw423ZTAUKJTe4hqPVH5GQI+B3dUkbsg2YQ0Vt0GJJhaGwQyeVunwpHj7e0Qwet
nG56j0C/9/dCucBYSp/JvBn9SUskUy5+Okg4CCeQZQ54H0MhiGxzEENROK9Dh7FW
RA4YV7HPfczOX0PIhSyVLVJ3seURQS2Hv12rFAgdSUW6R9fkKLB7NqJsrSVv9OSZ
NJoVQ3GiEWO7iIT9Rhn37UKucM8KWzctSRZVbKtpF7pFbGgsPeZUPD13G3UhTmrw
PKI2AjWk8EXpwQMMObAepGXJEPtfU4DhlYwQXe2wpsQ5eE+jtE9sdMuy21WSTfTO
okumpnKEIFq82Q==
-----END CERTIFICATE-----
Generated at Wed Oct 22 12:10:42 2025 by rpki-client