Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
File: 9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft (raw, json)
Hash identifier: w4wDzA1++l7UaiIjiMGu6zcyVdgcZVtJ2yAVYnN3Ksk=
Subject key identifier: CE:51:DF:C3:D3:5F:6B:26:FE:1C:83:54:72:74:B1:26:3F:69:72:55
Authority key identifier: F6:9F:B2:4C:E6:7C:21:12:97:B0:65:C6:7F:1B:82:09:B9:94:4B:0F
Certificate issuer: /CN=f69fb24ce67c211297b065c67f1b8209b9944b0f
Certificate serial: 019A70DC1AEFD7ACB163136957238B66A694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
Manifest number: 0341
Signing time: Tue 11 Nov 2025 03:01:04 +0000
Manifest this update: Tue 11 Nov 2025 03:01:04 +0000
Manifest next update: Wed 12 Nov 2025 03:01:04 +0000
Files and hashes: 1: 862AzXPpO4q0TZw2prtOswI6C3U.roa (hash: UvMXTudocwR1LdtSYifhkjBcDLnzk1IebtQXMqpmBY0=)
2: 9p-yTOZ8IRKXsGXGfxuCCbmUSw8.crl (hash: rJZu0fEDQHzuXhy5qG/rgQUE8zJPODuAmMVxEOTCKcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:1a:ef:d7:ac:b1:63:13:69:57:23:8b:66:a6:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69fb24ce67c211297b065c67f1b8209b9944b0f
Validity
Not Before: Nov 11 03:01:04 2025 GMT
Not After : Nov 12 03:01:04 2025 GMT
Subject: CN=ce51dfc3d35f6b26fe1c83547274b1263f697255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:50:29:0d:70:bf:d8:67:26:bd:33:59:12:
a2:19:19:18:c4:e7:1b:89:fc:d8:d9:44:cc:1e:11:
bd:19:13:ac:2f:67:3e:02:4d:17:64:04:51:8c:11:
7b:2c:4a:63:69:a6:38:de:fe:fa:bf:3e:9f:6c:72:
f5:64:7d:53:39:b5:a6:d5:f9:73:34:43:f2:a1:81:
24:f5:01:3c:b8:f9:5a:eb:10:95:df:35:ea:50:34:
cb:19:39:eb:ed:6c:55:a3:b2:43:1f:21:97:37:e2:
d8:36:cc:9c:c4:f4:f9:3f:90:98:70:59:3d:61:d4:
84:ee:97:de:13:b9:c9:d6:bb:41:21:00:58:78:f8:
5a:00:4b:5d:88:15:ac:00:95:ee:10:96:8e:18:7d:
fb:af:60:b0:c3:03:6a:29:c2:a1:c1:89:e6:1a:c5:
ad:3c:c8:5d:bf:ca:e8:30:2f:de:e5:c6:c9:20:54:
de:a4:20:51:1d:cc:8b:2e:1e:ab:69:d6:2a:7b:0e:
96:76:76:ab:4f:36:41:a7:01:24:32:c1:64:34:54:
f2:b0:e5:dc:35:c0:70:68:86:0d:84:c8:11:97:6c:
e3:75:ab:e8:5a:4a:f9:e5:cd:ad:45:66:af:92:d1:
11:20:f3:db:24:8c:b0:fe:37:32:de:1a:5d:f5:a2:
b8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:51:DF:C3:D3:5F:6B:26:FE:1C:83:54:72:74:B1:26:3F:69:72:55
X509v3 Authority Key Identifier:
keyid:F6:9F:B2:4C:E6:7C:21:12:97:B0:65:C6:7F:1B:82:09:B9:94:4B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a3:b6:cd:77:47:23:62:be:6e:9b:fe:d8:97:7a:9d:e3:e2:
6e:9d:8f:6e:5f:cb:7f:55:57:85:b9:88:8c:f2:08:8c:45:19:
8a:26:8c:af:a4:e2:68:49:dd:3e:04:81:ff:43:86:fd:34:19:
af:6d:41:21:5a:8f:dc:f0:20:4d:15:fb:14:9e:ed:e8:c9:2c:
e5:17:58:ce:4b:9d:6f:1b:19:39:8a:6e:76:4f:a4:3a:16:28:
1e:8b:96:d5:2b:c3:99:d6:88:93:2e:0f:a1:e8:6d:6c:71:79:
a6:81:88:d0:93:9d:4a:c0:f9:8f:0a:e7:1e:5b:db:6c:59:90:
39:1e:91:c2:cc:c0:52:c3:d6:1e:50:6c:ff:fa:41:8c:88:de:
86:6e:1a:04:23:d8:02:61:67:6c:89:a2:69:08:0a:5c:a1:70:
0c:d8:8a:f0:b5:e6:b0:68:4f:19:89:81:00:de:7c:aa:e8:4b:
f4:06:73:0f:57:26:ff:ca:86:87:ec:8e:a0:c4:92:b0:6c:90:
6b:82:9f:d9:17:b5:ed:71:ca:e5:f1:13:63:2e:ae:10:20:81:
79:0e:5a:8e:01:d6:bd:59:a4:15:36:a3:c7:c9:b3:c8:a6:5d:
37:8c:aa:89:b4:51:87:9a:84:f9:29:9c:cb:e6:0d:8d:19:b6:
03:24:77:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3Brv16yxYxNpVyOLZqaUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OWZiMjRjZTY3YzIxMTI5N2IwNjVjNjdmMWI4MjA5Yjk5
NDRiMGYwHhcNMjUxMTExMDMwMTA0WhcNMjUxMTEyMDMwMTA0WjAzMTEwLwYDVQQD
EyhjZTUxZGZjM2QzNWY2YjI2ZmUxYzgzNTQ3Mjc0YjEyNjNmNjk3MjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+NQKQ1wv9hnJr0zWRKiGRkYxOcb
ifzY2UTMHhG9GROsL2c+Ak0XZARRjBF7LEpjaaY43v76vz6fbHL1ZH1TObWm1flz
NEPyoYEk9QE8uPla6xCV3zXqUDTLGTnr7WxVo7JDHyGXN+LYNsycxPT5P5CYcFk9
YdSE7pfeE7nJ1rtBIQBYePhaAEtdiBWsAJXuEJaOGH37r2CwwwNqKcKhwYnmGsWt
PMhdv8roMC/e5cbJIFTepCBRHcyLLh6radYqew6WdnarTzZBpwEkMsFkNFTysOXc
NcBwaIYNhMgRl2zjdavoWkr55c2tRWavktERIPPbJIyw/jcy3hpd9aK4TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5R38PTX2sm/hyDVHJ0sSY/aXJVMB8GA1UdIwQY
MBaAFPafskzmfCESl7Blxn8bggm5lEsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXAteVRPWjhJUktYc0dYR2Z4dUNDYm1VU3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8zZTZiMjYtYTE0Ni00MmNmLTgyZjMt
OWU1MTM4ZTEyMGM5LzEvOXAteVRPWjhJUktYc0dYR2Z4dUNDYm1VU3c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8zZTZiMjYtYTE0Ni00MmNmLTgyZjMtOWU1MTM4ZTEyMGM5
LzEvOXAteVRPWjhJUktYc0dYR2Z4dUNDYm1VU3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbKO2zXdH
I2K+bpv+2Jd6nePibp2Pbl/Lf1VXhbmIjPIIjEUZiiaMr6TiaEndPgSB/0OG/TQZ
r21BIVqP3PAgTRX7FJ7t6Mks5RdYzkudbxsZOYpudk+kOhYoHouW1SvDmdaIky4P
oehtbHF5poGI0JOdSsD5jwrnHlvbbFmQOR6RwszAUsPWHlBs//pBjIjehm4aBCPY
AmFnbImiaQgKXKFwDNiK8LXmsGhPGYmBAN58quhL9AZzD1cm/8qGh+yOoMSSsGyQ
a4Kf2Re17XHK5fETYy6uECCBeQ5ajgHWvVmkFTajx8mzyKZdN4yqibRRh5qE+Smc
y+YNjRm2AyR3Dw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:24 2025 by rpki-client