Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
File: 9oXcPBRGS4xAgXUl2aJUtO06ijo.mft (raw, json)
Hash identifier: anJliPhuNpmhKS5QkCz1TzeneJMZpt7jazMeJxo7olg=
Subject key identifier: FC:44:2F:CA:4F:DC:A4:64:08:71:E6:3B:4A:03:D2:0F:7F:C9:77:E8
Authority key identifier: F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A
Certificate issuer: /CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a
Certificate serial: 019A72CA5EF911C20ACB510A461DDCACDB8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
Manifest number: 017B
Signing time: Tue 11 Nov 2025 12:00:56 +0000
Manifest this update: Tue 11 Nov 2025 12:00:56 +0000
Manifest next update: Wed 12 Nov 2025 12:00:56 +0000
Files and hashes: 1: 1-A_irtWwfr7YbN9N57Y3W8ENeUY.roa (hash: Pj4tBJ5c5Ic2RFVavExezSrK0oZePPimYoJBCQFnu8o=)
2: 9oXcPBRGS4xAgXUl2aJUtO06ijo.crl (hash: jMhY5PdDgJilB/xQP84ohv5LLuXru/VqBH+vpI2TF4o=)
3: Is71eUc7Q0aGa38UvjoD1fxVCa0.roa (hash: o3QoJnjZZqmX4CC/3QVDf3vqO7q6XpT3vRmbQX4Rx/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:5e:f9:11:c2:0a:cb:51:0a:46:1d:dc:ac:db:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a
Validity
Not Before: Nov 11 12:00:56 2025 GMT
Not After : Nov 12 12:00:56 2025 GMT
Subject: CN=fc442fca4fdca4640871e63b4a03d20f7fc977e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bb:a8:27:5a:2b:2f:ce:b3:f0:21:a4:d4:20:
35:17:58:d9:f7:7c:f5:0e:b7:b6:f8:3f:e5:ef:a4:
79:ec:4e:38:4d:ee:6b:80:9c:cd:57:01:c0:56:da:
42:96:ff:a2:42:bd:83:05:13:05:9b:08:48:90:04:
c7:a7:1f:83:92:59:2f:26:80:dd:2c:a0:1e:28:73:
3e:92:d9:e9:49:68:c8:fa:6f:08:c4:97:82:57:71:
8c:3d:6e:af:50:ef:2b:6a:57:cd:d0:5a:4c:cf:3e:
cf:8e:34:80:62:3c:2a:ac:ba:ff:d9:5d:bb:60:d8:
c9:50:6d:2e:a0:4a:81:84:a0:74:b2:9d:d3:bd:92:
9c:22:e6:13:3b:a2:07:d2:22:83:35:c5:d2:15:46:
51:7c:b2:5e:aa:fa:0b:f1:25:67:79:ca:9c:d7:5f:
a2:66:a8:81:12:27:0e:38:68:58:1a:98:2c:b1:b4:
fe:c6:37:5d:f3:20:45:a4:a1:b3:c4:a5:07:19:6c:
38:8f:e0:3a:52:11:e1:00:17:ad:98:13:a8:c4:56:
cc:d0:d9:be:1d:5f:86:83:11:0e:e3:3f:c1:c8:31:
59:45:c4:7b:9b:b9:0b:0b:d2:90:c0:bd:8d:b5:4f:
7d:35:66:70:7f:0c:d5:4d:75:58:3d:82:6f:91:fc:
76:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:44:2F:CA:4F:DC:A4:64:08:71:E6:3B:4A:03:D2:0F:7F:C9:77:E8
X509v3 Authority Key Identifier:
keyid:F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e5:30:6d:71:70:af:a0:db:c5:22:fa:15:30:cd:f3:56:dc:
01:04:4e:d0:e7:f9:26:df:1f:a9:d9:69:0a:1c:ec:84:43:d7:
f1:cf:15:80:21:93:8b:0d:48:92:bd:ea:d7:92:9b:a4:91:c1:
09:50:77:e3:31:51:ff:ad:67:cf:ee:c7:14:a1:fe:f4:54:6c:
31:61:b7:ae:b4:5c:1a:ea:9c:ea:9d:06:26:de:a4:30:f2:50:
1c:67:cf:f8:1e:d1:93:91:4c:7a:78:db:1f:db:5e:6a:ec:15:
0f:e7:58:9c:02:51:de:08:59:43:70:d0:dc:12:63:69:f6:aa:
b8:c9:17:e4:08:c5:f6:d4:7a:4f:3b:e5:0c:e1:1a:a8:57:ca:
7d:da:21:30:39:f3:0f:16:ad:3f:da:e3:65:44:9a:04:57:a0:
24:9f:19:92:91:06:02:7a:18:0a:0a:0b:6d:e6:98:d8:20:51:
28:79:04:ac:fa:1c:41:10:a6:3f:47:03:d7:46:37:3a:a7:87:
a5:97:b5:ca:a6:ba:77:eb:c5:2f:86:82:25:9e:da:48:0b:b5:
78:56:ca:ac:1f:db:04:40:a3:71:e4:d4:1b:91:f5:73:95:da:
61:7a:7d:cd:ce:f6:40:13:c7:89:66:de:ca:ed:17:05:86:42:
92:aa:2d:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyyl75EcIKy1EKRh3crNuMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ODVkYzNjMTQ0NjRiOGM0MDgxNzUyNWQ5YTI1NGI0ZWQz
YThhM2EwHhcNMjUxMTExMTIwMDU2WhcNMjUxMTEyMTIwMDU2WjAzMTEwLwYDVQQD
EyhmYzQ0MmZjYTRmZGNhNDY0MDg3MWU2M2I0YTAzZDIwZjdmYzk3N2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbuoJ1orL86z8CGk1CA1F1jZ93z1
Dre2+D/l76R57E44Te5rgJzNVwHAVtpClv+iQr2DBRMFmwhIkATHpx+DklkvJoDd
LKAeKHM+ktnpSWjI+m8IxJeCV3GMPW6vUO8ralfN0FpMzz7PjjSAYjwqrLr/2V27
YNjJUG0uoEqBhKB0sp3TvZKcIuYTO6IH0iKDNcXSFUZRfLJeqvoL8SVnecqc11+i
ZqiBEicOOGhYGpgssbT+xjdd8yBFpKGzxKUHGWw4j+A6UhHhABetmBOoxFbM0Nm+
HV+GgxEO4z/ByDFZRcR7m7kLC9KQwL2NtU99NWZwfwzVTXVYPYJvkfx2jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxEL8pP3KRkCHHmO0oD0g9/yXfoMB8GA1UdIwQY
MBaAFPaF3DwURkuMQIF1JdmiVLTtOoo6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW9YY1BCUkdTNHhBZ1hVbDJhSlV0TzA2aWpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8yMDQyNzUtYTM2OC00MzFiLThmZjYt
ZWI2N2Y4ZTYzMmI4LzEvOW9YY1BCUkdTNHhBZ1hVbDJhSlV0TzA2aWpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8yMDQyNzUtYTM2OC00MzFiLThmZjYtZWI2N2Y4ZTYzMmI4
LzEvOW9YY1BCUkdTNHhBZ1hVbDJhSlV0TzA2aWpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATOUwbXFw
r6DbxSL6FTDN81bcAQRO0Of5Jt8fqdlpChzshEPX8c8VgCGTiw1Ikr3q15KbpJHB
CVB34zFR/61nz+7HFKH+9FRsMWG3rrRcGuqc6p0GJt6kMPJQHGfP+B7Rk5FMenjb
H9teauwVD+dYnAJR3ghZQ3DQ3BJjafaquMkX5AjF9tR6TzvlDOEaqFfKfdohMDnz
DxatP9rjZUSaBFegJJ8ZkpEGAnoYCgoLbeaY2CBRKHkErPocQRCmP0cD10Y3OqeH
pZe1yqa6d+vFL4aCJZ7aSAu1eFbKrB/bBECjceTUG5H1c5XaYXp9zc72QBPHiWbe
yu0XBYZCkqot7w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:38 2025 by rpki-client