Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
File: 9IOBPbTT97DwLDH4W1JDww9F4lI.mft (raw, json)
Hash identifier: ZC6TyblnE4XXJOEL2fuzqgx6Q3buPy7UnByYxn7UFVM=
Subject key identifier: 1F:29:B3:99:C6:37:39:01:C0:27:A0:93:CE:59:2F:94:4A:64:1D:82
Authority key identifier: F4:83:81:3D:B4:D3:F7:B0:F0:2C:31:F8:5B:52:43:C3:0F:45:E2:52
Certificate issuer: /CN=f483813db4d3f7b0f02c31f85b5243c30f45e252
Certificate serial: 019A71B7A5E795FA5E32518F737DEB543745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:00:52 +0000
Manifest this update: Tue 11 Nov 2025 07:00:52 +0000
Manifest next update: Wed 12 Nov 2025 07:00:52 +0000
Files and hashes: 1: 9IOBPbTT97DwLDH4W1JDww9F4lI.crl (hash: qVC2jbn/FYcn/G+scZt/1U3uOGh0opaV6OpJz6Ti25Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a5:e7:95:fa:5e:32:51:8f:73:7d:eb:54:37:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f483813db4d3f7b0f02c31f85b5243c30f45e252
Validity
Not Before: Nov 11 07:00:52 2025 GMT
Not After : Nov 12 07:00:52 2025 GMT
Subject: CN=1f29b399c6373901c027a093ce592f944a641d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:27:61:f5:dc:f5:3d:d4:98:7a:a7:eb:12:43:
76:0d:68:f6:46:2d:63:f6:f4:70:ea:2f:50:ed:5f:
03:92:75:61:d8:11:bb:a9:ce:59:e9:52:17:f6:38:
74:8e:91:90:38:41:88:7d:d2:62:c5:8a:6a:1b:ea:
de:38:0e:de:4c:8a:f1:ad:a9:35:79:51:eb:23:98:
8e:5d:b2:f9:dc:0a:9d:13:22:f0:6f:6d:3b:2b:6b:
d8:84:4b:3a:4d:3e:4a:25:86:1f:62:f4:5f:48:45:
1d:0d:66:77:44:c7:db:3b:5f:c7:93:0c:5a:76:8e:
e4:a3:48:44:48:ca:d0:17:77:24:94:dd:44:e0:49:
37:b1:76:2e:68:27:bb:e8:d4:e4:19:32:2f:0d:78:
08:f9:79:b0:e5:d7:f3:33:71:39:ab:c2:64:90:23:
84:88:e8:ab:94:40:45:0c:b5:aa:f1:ac:42:04:89:
7c:18:05:4c:e2:80:d7:1b:9e:d4:ee:61:7b:19:53:
2f:07:ab:f8:e9:85:39:1f:1b:d9:27:f4:a9:a7:e8:
92:56:a9:75:65:54:8d:0c:9f:f2:66:b0:87:11:5b:
f6:a9:a7:a8:81:bf:e5:ca:1f:2e:f2:d2:dc:3b:87:
b9:ff:fa:e5:b3:c8:59:52:3f:43:82:47:6a:57:a1:
11:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:29:B3:99:C6:37:39:01:C0:27:A0:93:CE:59:2F:94:4A:64:1D:82
X509v3 Authority Key Identifier:
keyid:F4:83:81:3D:B4:D3:F7:B0:F0:2C:31:F8:5B:52:43:C3:0F:45:E2:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:30:d1:54:e4:39:34:9f:4a:a6:40:77:39:9f:39:27:3f:1a:
39:93:ac:8b:57:3b:f4:17:84:68:10:31:3e:f9:21:f4:9c:bb:
32:56:d1:13:ce:2b:11:0f:54:4f:84:09:e6:ba:2f:b7:80:f7:
41:b3:cb:52:92:a1:68:26:76:ef:79:a3:85:e5:77:8a:e1:ca:
88:25:1c:dc:1f:69:a3:66:83:36:3e:f0:81:15:7a:a3:bc:c3:
4c:b5:0d:c3:4c:ac:c3:36:54:71:44:94:51:60:6f:97:89:52:
ed:63:41:5f:1c:cf:cb:e3:f4:d8:c4:d1:d4:46:44:ad:1e:93:
55:f7:0f:95:85:3f:8f:5c:3c:ff:30:25:12:3e:3c:53:97:f6:
aa:2d:ab:a2:46:48:e4:b2:62:d6:5e:d2:00:dc:fb:38:1a:4e:
cc:91:0f:be:61:33:31:35:7f:cb:a0:2b:45:6f:66:df:20:d8:
21:d6:06:af:bc:93:23:9d:e2:4b:9c:ba:e7:2b:2f:9e:e6:99:
99:49:f2:94:fa:35:2e:86:ed:b5:70:da:b1:46:a3:58:04:2f:
89:2c:f9:3f:21:68:99:cb:a3:e4:01:89:79:a9:63:38:b9:34:
21:c6:c8:54:f6:bd:b1:fb:55:96:22:7a:83:79:9c:d7:01:08:
28:d5:64:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt6XnlfpeMlGPc33rVDdFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ODM4MTNkYjRkM2Y3YjBmMDJjMzFmODViNTI0M2MzMGY0
NWUyNTIwHhcNMjUxMTExMDcwMDUyWhcNMjUxMTEyMDcwMDUyWjAzMTEwLwYDVQQD
EygxZjI5YjM5OWM2MzczOTAxYzAyN2EwOTNjZTU5MmY5NDRhNjQxZDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwidh9dz1PdSYeqfrEkN2DWj2Ri1j
9vRw6i9Q7V8DknVh2BG7qc5Z6VIX9jh0jpGQOEGIfdJixYpqG+reOA7eTIrxrak1
eVHrI5iOXbL53AqdEyLwb207K2vYhEs6TT5KJYYfYvRfSEUdDWZ3RMfbO1/Hkwxa
do7ko0hESMrQF3cklN1E4Ek3sXYuaCe76NTkGTIvDXgI+Xmw5dfzM3E5q8JkkCOE
iOirlEBFDLWq8axCBIl8GAVM4oDXG57U7mF7GVMvB6v46YU5HxvZJ/Spp+iSVql1
ZVSNDJ/yZrCHEVv2qaeogb/lyh8u8tLcO4e5//rls8hZUj9DgkdqV6ERUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8ps5nGNzkBwCegk85ZL5RKZB2CMB8GA1UdIwQY
MBaAFPSDgT200/ew8Cwx+FtSQ8MPReJSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUlPQlBiVFQ5N0R3TERINFcxSkR3dzlGNGxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9mZDJhNzMtMjE1Ny00NmNmLTk4MWEt
ZTcxOGM4NDNhMjk0LzEvOUlPQlBiVFQ5N0R3TERINFcxSkR3dzlGNGxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9mZDJhNzMtMjE1Ny00NmNmLTk4MWEtZTcxOGM4NDNhMjk0
LzEvOUlPQlBiVFQ5N0R3TERINFcxSkR3dzlGNGxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAejDRVOQ5
NJ9KpkB3OZ85Jz8aOZOsi1c79BeEaBAxPvkh9Jy7MlbRE84rEQ9UT4QJ5rovt4D3
QbPLUpKhaCZ273mjheV3iuHKiCUc3B9po2aDNj7wgRV6o7zDTLUNw0yswzZUcUSU
UWBvl4lS7WNBXxzPy+P02MTR1EZErR6TVfcPlYU/j1w8/zAlEj48U5f2qi2rokZI
5LJi1l7SANz7OBpOzJEPvmEzMTV/y6ArRW9m3yDYIdYGr7yTI53iS5y65ysvnuaZ
mUnylPo1LobttXDasUajWAQviSz5PyFomcuj5AGJealjOLk0IcbIVPa9sftVliJ6
g3mc1wEIKNVk7A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:40 2025 by rpki-client