Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
File: a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft (raw, json)
Hash identifier: s7GAaXfru7BqmDlNvwBOUgeWbxdNj+zElRJLoUwhp2A=
Subject key identifier: 7E:51:E2:97:50:F7:C5:4B:0A:CE:BC:62:17:5B:00:CB:D5:F6:86:0A
Authority key identifier: 6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7
Certificate issuer: /CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7
Certificate serial: 019A71B7C2B9DFDC119B63865FDD4FF58B22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
Manifest number: 0855
Signing time: Tue 11 Nov 2025 07:00:59 +0000
Manifest this update: Tue 11 Nov 2025 07:00:59 +0000
Manifest next update: Wed 12 Nov 2025 07:00:59 +0000
Files and hashes: 1: NaKshVhSKaYmb3Sdi3LLJdyjmds.roa (hash: d86txPLHJOy87A3pf1/eOV7404HvHGLlpkkFt/51J1U=)
2: a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl (hash: ITdoxAR1ipu/K/UQsZnVatPfNDCiYIiQIbReNS/FHKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:c2:b9:df:dc:11:9b:63:86:5f:dd:4f:f5:8b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7
Validity
Not Before: Nov 11 07:00:59 2025 GMT
Not After : Nov 12 07:00:59 2025 GMT
Subject: CN=7e51e29750f7c54b0acebc62175b00cbd5f6860a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:74:11:00:d6:16:76:5d:14:01:8e:13:55:fb:
33:05:b0:3b:19:12:a7:a3:a8:26:1b:f0:91:89:08:
ca:ed:30:f1:a9:58:82:fe:9b:f4:77:19:8f:73:5a:
45:b7:9a:fe:cd:5b:1c:62:b5:70:bd:74:ff:d4:83:
13:60:eb:69:4a:7b:15:d9:e3:e1:40:6d:4b:11:77:
9d:95:a3:51:e8:77:46:bc:02:ad:e4:85:23:02:89:
d6:0d:29:d7:8c:c2:0f:2a:53:4e:75:78:38:ef:96:
bc:e1:f3:0e:e7:d1:73:e6:3f:09:88:77:75:e5:78:
29:28:43:53:fc:b4:a4:49:f6:8e:31:12:59:44:66:
6f:81:82:1d:26:78:16:1e:ba:08:ee:a8:c2:ed:f2:
1f:90:58:d7:fc:b2:0d:3a:43:a7:d8:ba:21:41:2a:
cb:7b:23:0b:43:64:b7:30:18:d0:64:1f:6a:a4:b1:
cc:3a:b8:49:d8:f7:50:98:aa:21:ea:ce:b2:25:1e:
58:81:ca:6c:2d:e3:b9:88:5b:22:03:e3:53:49:4b:
33:35:3e:95:69:d7:fb:94:b7:d1:bd:d1:cf:39:f4:
89:9d:f4:f5:af:e7:a0:a9:83:b3:a3:43:19:7c:33:
8e:28:8a:17:3a:d0:dd:c1:b1:42:5d:79:fc:52:5f:
5f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:51:E2:97:50:F7:C5:4B:0A:CE:BC:62:17:5B:00:CB:D5:F6:86:0A
X509v3 Authority Key Identifier:
keyid:6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:7d:0d:f9:81:14:62:f0:a6:ea:ca:6f:97:79:a7:e6:dd:39:
91:4e:c1:d7:8d:ad:e7:83:42:6a:1e:1d:cc:f6:99:d7:14:47:
53:5f:2d:69:a6:36:49:10:54:c2:fa:23:21:13:0b:af:c0:95:
ac:33:c3:c1:62:df:1e:d8:4c:b4:54:e6:c4:d2:5d:8a:39:47:
c7:75:38:20:28:1d:18:1f:83:1c:b5:e5:5d:66:31:0f:95:22:
f8:34:16:50:d1:31:12:25:12:11:81:0a:b0:17:2e:4c:01:94:
0a:b1:fb:e6:fb:45:23:9f:c9:4c:5d:31:9d:59:39:e7:b0:30:
0a:49:aa:6a:36:41:00:d1:f3:3c:28:e3:f0:a2:29:14:2e:a7:
df:59:9c:f6:a6:ba:20:64:78:bf:f4:19:ac:2b:79:cf:37:a6:
c9:18:51:b8:de:46:b7:c9:7e:21:f3:6a:c8:99:9a:72:97:c0:
ee:0e:65:87:dc:4c:d1:bc:fb:09:52:ed:cd:7e:d0:44:64:32:
6d:9f:be:e9:8e:db:c7:ce:08:39:92:7b:72:e9:30:51:24:69:
a4:ed:88:13:61:b4:03:f5:13:a4:9e:b4:3a:48:3a:b7:a6:cc:
12:f8:ed:6f:bd:e5:a7:5f:f2:e4:ad:fc:b7:ab:5a:b7:89:1e:
24:d8:b2:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt8K539wRm2OGX91P9YsiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZDE5ZDY5NzAxZjEzYTU5NzdjZDIyOTZmYTg3YTI1MmZi
ZjA1ZjcwHhcNMjUxMTExMDcwMDU5WhcNMjUxMTEyMDcwMDU5WjAzMTEwLwYDVQQD
Eyg3ZTUxZTI5NzUwZjdjNTRiMGFjZWJjNjIxNzViMDBjYmQ1ZjY4NjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHQRANYWdl0UAY4TVfszBbA7GRKn
o6gmG/CRiQjK7TDxqViC/pv0dxmPc1pFt5r+zVscYrVwvXT/1IMTYOtpSnsV2ePh
QG1LEXedlaNR6HdGvAKt5IUjAonWDSnXjMIPKlNOdXg475a84fMO59Fz5j8JiHd1
5XgpKENT/LSkSfaOMRJZRGZvgYIdJngWHroI7qjC7fIfkFjX/LINOkOn2LohQSrL
eyMLQ2S3MBjQZB9qpLHMOrhJ2PdQmKoh6s6yJR5YgcpsLeO5iFsiA+NTSUszNT6V
adf7lLfRvdHPOfSJnfT1r+egqYOzo0MZfDOOKIoXOtDdwbFCXXn8Ul9fUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5R4pdQ98VLCs68YhdbAMvV9oYKMB8GA1UdIwQY
MBaAFGvRnWlwHxOll3zSKW+oeiUvvwX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTlHZGFYQWZFNldYZk5JcGI2aDZKUy1fQmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny80ZGFlYmEtMzZiNC00OTQ5LTgzODUt
OGYwZDRlZWY2YWI1LzEvYTlHZGFYQWZFNldYZk5JcGI2aDZKUy1fQmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny80ZGFlYmEtMzZiNC00OTQ5LTgzODUtOGYwZDRlZWY2YWI1
LzEvYTlHZGFYQWZFNldYZk5JcGI2aDZKUy1fQmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiH0N+YEU
YvCm6spvl3mn5t05kU7B142t54NCah4dzPaZ1xRHU18taaY2SRBUwvojIRMLr8CV
rDPDwWLfHthMtFTmxNJdijlHx3U4ICgdGB+DHLXlXWYxD5Ui+DQWUNExEiUSEYEK
sBcuTAGUCrH75vtFI5/JTF0xnVk557AwCkmqajZBANHzPCjj8KIpFC6n31mc9qa6
IGR4v/QZrCt5zzemyRhRuN5Gt8l+IfNqyJmacpfA7g5lh9xM0bz7CVLtzX7QRGQy
bZ++6Y7bx84IOZJ7cukwUSRppO2IE2G0A/UTpJ60Okg6t6bMEvjtb73lp1/y5K38
t6tat4keJNiycQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:19 2025 by rpki-client