Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
File: 0u9GpBNBlOckI9VyobZtSp0uTBM.mft (raw, json)
Hash identifier: sCMiHk17IVOb0HGcCAizTUlodXJFk9UVHOV4jffC6VA=
Subject key identifier: BD:19:CB:BD:B4:C4:A5:C7:D0:54:08:AF:69:60:16:33:51:E6:8A:6C
Authority key identifier: D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13
Certificate issuer: /CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
Certificate serial: 019A706E7F30F7D490BEBE3E6D2A2DEC1FDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
Manifest number: 1460
Signing time: Tue 11 Nov 2025 01:01:20 +0000
Manifest this update: Tue 11 Nov 2025 01:01:20 +0000
Manifest next update: Wed 12 Nov 2025 01:01:20 +0000
Files and hashes: 1: 0u9GpBNBlOckI9VyobZtSp0uTBM.crl (hash: fNCgywYlXlIqDCTfew7HjFMuI9Eodi8rKg3Z6ijQH78=)
2: dW_FLnsv0zWikILQzBidDijXgG4.roa (hash: ma0ra8OYlImfY3CwT3NNDf0BfbTV59KzDn/miuP7r78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:7f:30:f7:d4:90:be:be:3e:6d:2a:2d:ec:1f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
Validity
Not Before: Nov 11 01:01:20 2025 GMT
Not After : Nov 12 01:01:20 2025 GMT
Subject: CN=bd19cbbdb4c4a5c7d05408af6960163351e68a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9d:c8:76:13:88:20:f1:cc:98:02:9f:4a:be:
3d:a4:1f:2f:7f:74:fd:07:e8:7d:3a:36:f0:22:c5:
52:12:8c:90:7a:1c:bf:7b:2b:ac:52:81:f4:66:a0:
8b:fc:b1:e6:30:f0:b9:b9:e7:6b:53:61:7a:64:e9:
25:c2:04:20:32:dc:79:85:f6:3e:af:17:c4:5a:b8:
52:80:b6:d3:58:de:ce:f1:01:ea:30:73:8e:8c:62:
cb:c5:1b:9b:45:94:a4:3b:c1:63:ef:7c:47:10:37:
7c:bc:d0:27:63:18:e3:f2:c1:39:98:1a:90:15:a0:
4a:c0:5d:63:2c:bd:c7:1b:c0:8a:d4:f5:aa:3b:22:
53:4e:1f:d5:bc:82:1e:ef:90:63:32:2c:c6:e5:4c:
aa:ff:cb:42:81:8b:a4:57:0b:88:c5:df:0c:4c:96:
76:51:0b:f2:b7:72:1b:63:54:4e:a6:2b:d4:35:22:
15:65:05:46:59:65:56:2e:1a:24:d4:8a:3a:66:fd:
e1:3c:1c:f3:55:f7:3c:6e:a6:2e:cd:b3:3a:c7:64:
80:b6:c3:0f:98:11:a8:d3:04:5e:88:1b:3f:6d:88:
c6:37:07:0e:3c:0c:74:36:53:2d:e9:6b:8e:6a:e2:
1e:b1:26:07:c3:f8:0f:dd:fb:77:88:24:5b:46:eb:
4e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:19:CB:BD:B4:C4:A5:C7:D0:54:08:AF:69:60:16:33:51:E6:8A:6C
X509v3 Authority Key Identifier:
keyid:D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c9:20:82:19:9a:ce:1a:6c:29:e7:42:2d:65:4d:7a:82:0d:
6f:c8:ab:bb:16:0b:69:84:c2:a9:93:0a:f4:f1:5a:71:f2:b4:
60:26:33:bd:ac:c5:c3:43:40:89:25:01:69:05:0b:c1:e3:d5:
92:78:75:56:96:99:55:8e:e9:19:4c:c4:24:fc:a0:6c:80:47:
63:77:9a:1d:ff:3f:c9:cd:74:c2:3d:b0:90:bb:e1:a9:53:93:
b0:3e:5f:c2:85:24:93:a2:af:ff:98:82:85:17:91:f7:94:c0:
a8:fe:88:19:1c:50:cd:4d:62:a4:2f:48:52:b6:4f:1e:5f:4e:
e0:53:5f:51:c8:d8:6b:cc:59:9d:a2:84:3b:c0:1e:7a:b7:45:
7a:ae:78:f5:21:7b:cd:c0:e3:20:32:b2:69:84:c5:12:07:da:
f3:a5:54:4d:fb:1c:9a:d9:b6:2c:99:3c:36:60:b9:72:85:04:
e3:11:4b:f3:03:87:63:d8:d8:88:33:43:7a:be:ff:db:90:92:
1a:66:31:b1:e1:7f:19:06:b2:6e:88:73:a0:59:eb:52:6c:89:
8d:c8:e4:38:ec:cf:b8:b8:98:82:b1:11:b6:5e:30:6f:0f:13:
11:d4:55:31:71:40:3f:79:2c:02:48:5b:9a:c9:ae:f4:1e:1d:
7f:7b:f4:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwbn8w99SQvr4+bSot7B/cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZWY0NmE0MTM0MTk0ZTcyNDIzZDU3MmExYjY2ZDRhOWQy
ZTRjMTMwHhcNMjUxMTExMDEwMTIwWhcNMjUxMTEyMDEwMTIwWjAzMTEwLwYDVQQD
EyhiZDE5Y2JiZGI0YzRhNWM3ZDA1NDA4YWY2OTYwMTYzMzUxZTY4YTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJ3IdhOIIPHMmAKfSr49pB8vf3T9
B+h9OjbwIsVSEoyQehy/eyusUoH0ZqCL/LHmMPC5uedrU2F6ZOklwgQgMtx5hfY+
rxfEWrhSgLbTWN7O8QHqMHOOjGLLxRubRZSkO8Fj73xHEDd8vNAnYxjj8sE5mBqQ
FaBKwF1jLL3HG8CK1PWqOyJTTh/VvIIe75BjMizG5Uyq/8tCgYukVwuIxd8MTJZ2
UQvyt3IbY1ROpivUNSIVZQVGWWVWLhok1Io6Zv3hPBzzVfc8bqYuzbM6x2SAtsMP
mBGo0wReiBs/bYjGNwcOPAx0NlMt6WuOauIesSYHw/gP3ft3iCRbRutOJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0Zy720xKXH0FQIr2lgFjNR5opsMB8GA1UdIwQY
MBaAFNLvRqQTQZTnJCPVcqG2bUqdLkwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHU5R3BCTkJsT2NrSTlWeW9iWnRTcDB1VEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS82NDUzYzQtNjY4Ny00ZWY5LTlmZGMt
YTg4YmI3ODA1YjA5LzEvMHU5R3BCTkJsT2NrSTlWeW9iWnRTcDB1VEJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS82NDUzYzQtNjY4Ny00ZWY5LTlmZGMtYTg4YmI3ODA1YjA5
LzEvMHU5R3BCTkJsT2NrSTlWeW9iWnRTcDB1VEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYckgghma
zhpsKedCLWVNeoINb8iruxYLaYTCqZMK9PFacfK0YCYzvazFw0NAiSUBaQULwePV
knh1VpaZVY7pGUzEJPygbIBHY3eaHf8/yc10wj2wkLvhqVOTsD5fwoUkk6Kv/5iC
hReR95TAqP6IGRxQzU1ipC9IUrZPHl9O4FNfUcjYa8xZnaKEO8AeerdFeq549SF7
zcDjIDKyaYTFEgfa86VUTfscmtm2LJk8NmC5coUE4xFL8wOHY9jYiDNDer7/25CS
GmYxseF/GQaybohzoFnrUmyJjcjkOOzPuLiYgrERtl4wbw8TEdRVMXFAP3ksAkhb
msmu9B4df3v08Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:47 2025 by rpki-client