Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft
File: m9ReJgecMchSFrcwDNjmMw1D1a8.mft (raw, json)
Hash identifier: ipFqUF0fJPmEzXvU15TfNgN/CFfFqm3sIvnhaSX3TQc=
Subject key identifier: BF:3A:C4:EA:FC:56:6E:CC:97:19:8D:50:93:49:15:7F:F9:D1:83:3D
Authority key identifier: 9B:D4:5E:26:07:9C:31:C8:52:16:B7:30:0C:D8:E6:33:0D:43:D5:AF
Certificate issuer: /CN=9bd45e26079c31c85216b7300cd8e6330d43d5af
Certificate serial: 019A714A24C822158F22EE14CE5FCB0D9B82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft
Manifest number: 01AF
Signing time: Tue 11 Nov 2025 05:01:15 +0000
Manifest this update: Tue 11 Nov 2025 05:01:15 +0000
Manifest next update: Wed 12 Nov 2025 05:01:15 +0000
Files and hashes: 1: f1BUILnewKi0pPk0-cUIO9sX1N4.roa (hash: upOHsTvU2HpEvGGaQw5H57ty1Pp8ZO03Lz1+b3tzvFA=)
2: m9ReJgecMchSFrcwDNjmMw1D1a8.crl (hash: HN01EhSbT7umnNtK/ASFO0eHBCjtyjeu5TGFtC5Lyd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:24:c8:22:15:8f:22:ee:14:ce:5f:cb:0d:9b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd45e26079c31c85216b7300cd8e6330d43d5af
Validity
Not Before: Nov 11 05:01:15 2025 GMT
Not After : Nov 12 05:01:15 2025 GMT
Subject: CN=bf3ac4eafc566ecc97198d509349157ff9d1833d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:1b:06:66:7f:3f:6a:67:06:9c:87:a9:6b:02:
be:24:ed:6f:86:d5:cd:e3:30:f3:04:87:56:ce:62:
5c:4a:1a:57:84:71:fd:22:c3:f2:a5:7f:39:7d:dc:
84:0b:a1:94:ad:47:a7:e0:aa:08:62:11:30:d5:76:
93:79:11:f1:f7:13:13:f8:0b:96:e2:94:ce:c3:f3:
53:9e:05:89:27:8f:c1:c1:7f:42:11:b0:01:5f:65:
c3:f5:df:48:60:9f:c9:a4:7a:e0:77:f6:b7:e2:d9:
c7:c7:0c:94:8e:1a:93:a0:1b:24:b8:41:da:12:4a:
75:d8:5e:d6:7a:53:ff:d5:8b:0e:2c:12:b0:62:99:
9a:cb:61:7b:67:4f:2d:f8:4c:0f:05:6f:3a:3d:0b:
72:0c:7a:0d:f6:df:ee:e3:bb:11:21:bd:e7:50:8e:
f1:07:47:62:b4:aa:0d:e2:d0:f5:04:02:18:2e:d1:
b7:b0:9c:20:8b:a7:e9:58:7f:51:5f:fb:11:83:7e:
37:63:c0:8d:c2:b8:a6:5d:fe:51:83:35:99:d7:e5:
a1:dc:1f:ad:cd:44:49:a7:79:e5:c2:28:4a:b6:82:
00:42:07:05:7d:d7:0a:b5:f8:f6:ee:8d:69:0d:b0:
07:59:d3:63:35:35:db:a5:00:82:3f:48:2a:ff:c3:
a2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3A:C4:EA:FC:56:6E:CC:97:19:8D:50:93:49:15:7F:F9:D1:83:3D
X509v3 Authority Key Identifier:
keyid:9B:D4:5E:26:07:9C:31:C8:52:16:B7:30:0C:D8:E6:33:0D:43:D5:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3b:b5:ad:b1:30:f2:8a:e0:d7:64:38:90:67:cb:38:3b:e9:
1a:6a:86:f0:ab:b3:41:b2:9c:ea:ae:d8:ca:d9:b2:c5:2d:c4:
5c:57:ea:e4:a3:12:f8:65:4d:43:3e:64:c3:96:9c:13:1e:26:
b1:af:d0:c9:d6:0f:c0:f2:e3:27:51:d6:b4:74:96:e0:c3:31:
ff:35:7e:7b:d4:fa:92:a4:07:ea:06:d0:7c:67:0a:db:be:6a:
19:81:bc:3b:c6:83:7a:76:6b:92:d3:32:3b:ba:7b:2b:39:bd:
86:44:d6:d3:24:6f:85:5b:58:09:38:da:92:46:5e:2a:d8:37:
4c:9f:eb:2b:02:fa:c3:66:50:7a:fb:0d:ae:e6:32:fc:37:da:
95:aa:d8:af:e6:66:d6:05:77:78:5d:51:fd:74:12:f7:94:8f:
97:15:0e:7a:bf:c6:60:1d:7a:51:e5:10:37:cc:61:f2:a2:5c:
95:5e:ba:62:cf:76:62:fe:db:77:e0:c8:62:47:f8:8f:e1:c1:
40:88:c2:2d:f1:dc:e1:61:18:8f:2c:f7:aa:aa:46:c8:86:b0:
41:6a:81:12:7d:d4:92:05:fc:ce:30:c8:6b:e6:95:09:04:24:
37:52:24:d7:65:04:70:da:b6:d2:ab:0e:fb:dd:9b:63:5e:eb:
58:4d:d4:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSiTIIhWPIu4Uzl/LDZuCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZDQ1ZTI2MDc5YzMxYzg1MjE2YjczMDBjZDhlNjMzMGQ0
M2Q1YWYwHhcNMjUxMTExMDUwMTE1WhcNMjUxMTEyMDUwMTE1WjAzMTEwLwYDVQQD
EyhiZjNhYzRlYWZjNTY2ZWNjOTcxOThkNTA5MzQ5MTU3ZmY5ZDE4MzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hsGZn8/amcGnIepawK+JO1vhtXN
4zDzBIdWzmJcShpXhHH9IsPypX85fdyEC6GUrUen4KoIYhEw1XaTeRHx9xMT+AuW
4pTOw/NTngWJJ4/BwX9CEbABX2XD9d9IYJ/JpHrgd/a34tnHxwyUjhqToBskuEHa
Ekp12F7WelP/1YsOLBKwYpmay2F7Z08t+EwPBW86PQtyDHoN9t/u47sRIb3nUI7x
B0ditKoN4tD1BAIYLtG3sJwgi6fpWH9RX/sRg343Y8CNwrimXf5RgzWZ1+Wh3B+t
zURJp3nlwihKtoIAQgcFfdcKtfj27o1pDbAHWdNjNTXbpQCCP0gq/8OiUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL86xOr8Vm7MlxmNUJNJFX/50YM9MB8GA1UdIwQY
MBaAFJvUXiYHnDHIUha3MAzY5jMNQ9WvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTlSZUpnZWNNY2hTRnJjd0ROam1NdzFEMWE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9jZWI2MGUtMGQyYS00MTcxLWJjYjUt
ZGY5ZDVmYmRiYzE1LzEvbTlSZUpnZWNNY2hTRnJjd0ROam1NdzFEMWE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9jZWI2MGUtMGQyYS00MTcxLWJjYjUtZGY5ZDVmYmRiYzE1
LzEvbTlSZUpnZWNNY2hTRnJjd0ROam1NdzFEMWE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWzu1rbEw
8org12Q4kGfLODvpGmqG8KuzQbKc6q7YytmyxS3EXFfq5KMS+GVNQz5kw5acEx4m
sa/QydYPwPLjJ1HWtHSW4MMx/zV+e9T6kqQH6gbQfGcK275qGYG8O8aDenZrktMy
O7p7Kzm9hkTW0yRvhVtYCTjakkZeKtg3TJ/rKwL6w2ZQevsNruYy/DfalarYr+Zm
1gV3eF1R/XQS95SPlxUOer/GYB16UeUQN8xh8qJclV66Ys92Yv7bd+DIYkf4j+HB
QIjCLfHc4WEYjyz3qqpGyIawQWqBEn3UkgX8zjDIa+aVCQQkN1Ik12UEcNq20qsO
+92bY17rWE3U6Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:53 2025 by rpki-client