Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
File: 9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft (raw, json)
Hash identifier: M8Xs2DoaKsw7Y2jQ71G13MhYnFNAaYUNjgWUF9USGLM=
Subject key identifier: BD:9B:67:0C:F1:E7:CB:1B:36:E3:D9:63:23:51:54:F3:4A:4D:27:DE
Authority key identifier: F6:DB:1B:69:1B:30:DB:E4:8E:78:8B:7C:CA:4A:D3:1D:CD:C8:5C:76
Certificate issuer: /CN=f6db1b691b30dbe48e788b7cca4ad31dcdc85c76
Certificate serial: 019A7226495B5A4462286C2340E704D41D9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 09:01:43 +0000
Manifest this update: Tue 11 Nov 2025 09:01:43 +0000
Manifest next update: Wed 12 Nov 2025 09:01:43 +0000
Files and hashes: 1: 9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl (hash: 9DzqSBio4G6+2NXuVB1eIBavUKMNyryR6PpBretJV2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:49:5b:5a:44:62:28:6c:23:40:e7:04:d4:1d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6db1b691b30dbe48e788b7cca4ad31dcdc85c76
Validity
Not Before: Nov 11 09:01:43 2025 GMT
Not After : Nov 12 09:01:43 2025 GMT
Subject: CN=bd9b670cf1e7cb1b36e3d963235154f34a4d27de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:07:e3:97:d1:18:c1:e6:16:6a:9d:85:91:a9:
19:2b:8a:8b:e0:25:79:d0:f4:d3:04:12:47:7e:6c:
46:28:80:bf:08:4e:c0:81:da:c8:91:b9:aa:dc:9c:
a5:a9:49:69:99:0e:63:8b:ff:3a:97:f2:b4:f4:84:
d0:b7:1d:83:84:8e:9a:81:e5:69:19:f5:d2:9c:7c:
32:cd:19:67:34:c6:c5:6e:ad:1b:24:d7:0d:7c:70:
30:82:eb:f2:ab:4d:65:1a:99:3b:87:06:b2:d8:6b:
1b:b5:0d:71:23:c3:44:ec:79:35:0a:71:bc:12:cf:
90:cb:dd:29:ad:05:b1:8c:5f:9d:f9:ea:b2:b9:a0:
25:04:04:76:0e:37:95:20:37:7c:ab:1a:88:3f:23:
dc:34:76:ff:01:51:77:84:b4:e2:85:12:fe:12:22:
2e:18:ca:7d:46:ae:a3:d2:ef:60:87:2d:44:15:57:
d9:2a:ba:d2:3e:47:f2:ab:8e:24:31:1a:78:07:ef:
86:7b:11:b9:f1:3b:98:42:3c:18:3e:61:c8:50:cc:
22:d8:2d:35:9f:90:0a:ba:fe:59:62:0d:ac:45:60:
0a:4e:89:21:ff:9c:5f:e5:60:0a:f8:52:fd:ef:a3:
42:a1:03:ea:1d:f3:98:23:85:a8:6a:e7:6d:ea:35:
66:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9B:67:0C:F1:E7:CB:1B:36:E3:D9:63:23:51:54:F3:4A:4D:27:DE
X509v3 Authority Key Identifier:
keyid:F6:DB:1B:69:1B:30:DB:E4:8E:78:8B:7C:CA:4A:D3:1D:CD:C8:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:6a:13:9b:8a:ef:51:8e:88:b8:ca:b3:71:18:82:2c:f3:26:
ec:65:7f:c9:66:af:e9:fc:f7:ec:76:ab:2c:23:df:c6:d7:bd:
0f:bc:d5:6e:16:74:e2:ba:c7:62:c4:8e:0a:c9:80:34:4a:d9:
fe:f4:fc:6c:37:57:c0:e7:b5:b7:cf:5e:29:4b:c2:af:1b:82:
b9:c0:ab:db:10:e7:b8:69:51:45:64:5c:9a:df:3b:36:bb:9a:
01:02:ce:4b:c4:df:ce:51:42:56:76:01:db:49:34:68:98:94:
80:d4:09:34:dd:3e:63:ff:66:7c:f8:6a:3e:9a:fa:07:38:c4:
8a:81:ad:71:a1:84:d0:f0:be:e8:94:cc:c3:b7:90:8c:a5:bc:
f1:69:71:26:ba:6c:76:1b:b8:a3:9f:e9:6c:d5:da:32:d7:ee:
8c:eb:f8:81:67:21:d8:bd:a8:fb:dd:50:a4:5e:b0:3c:42:9a:
d5:74:ed:8d:b6:58:2a:5b:67:08:74:ec:b0:81:a5:cc:ef:30:
3e:a1:d2:7b:34:16:6c:9d:08:1f:25:c5:13:55:df:3e:e0:5b:
da:d5:cb:3c:f0:4f:17:f4:f5:64:e0:b4:61:59:91:dd:08:0f:
57:df:64:f1:ed:75:05:07:bb:8a:de:b7:8a:ca:51:25:e8:0a:
46:fa:a9:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJklbWkRiKGwjQOcE1B2dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ZGIxYjY5MWIzMGRiZTQ4ZTc4OGI3Y2NhNGFkMzFkY2Rj
ODVjNzYwHhcNMjUxMTExMDkwMTQzWhcNMjUxMTEyMDkwMTQzWjAzMTEwLwYDVQQD
EyhiZDliNjcwY2YxZTdjYjFiMzZlM2Q5NjMyMzUxNTRmMzRhNGQyN2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQfjl9EYweYWap2FkakZK4qL4CV5
0PTTBBJHfmxGKIC/CE7AgdrIkbmq3JylqUlpmQ5ji/86l/K09ITQtx2DhI6ageVp
GfXSnHwyzRlnNMbFbq0bJNcNfHAwguvyq01lGpk7hway2GsbtQ1xI8NE7Hk1CnG8
Es+Qy90prQWxjF+d+eqyuaAlBAR2DjeVIDd8qxqIPyPcNHb/AVF3hLTihRL+EiIu
GMp9Rq6j0u9ghy1EFVfZKrrSPkfyq44kMRp4B++GexG58TuYQjwYPmHIUMwi2C01
n5AKuv5ZYg2sRWAKTokh/5xf5WAK+FL976NCoQPqHfOYI4Woaudt6jVmbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2bZwzx58sbNuPZYyNRVPNKTSfeMB8GA1UdIwQY
MBaAFPbbG2kbMNvkjniLfMpK0x3NyFx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXRzYmFSc3cyLVNPZUl0OHlrclRIYzNJWEhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lMzRmYTUtNGU4ZC00YjQxLWJiYjgt
ZTMxY2UxYjk2N2U5LzEvOXRzYmFSc3cyLVNPZUl0OHlrclRIYzNJWEhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9lMzRmYTUtNGU4ZC00YjQxLWJiYjgtZTMxY2UxYjk2N2U5
LzEvOXRzYmFSc3cyLVNPZUl0OHlrclRIYzNJWEhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcGoTm4rv
UY6IuMqzcRiCLPMm7GV/yWav6fz37HarLCPfxte9D7zVbhZ04rrHYsSOCsmANErZ
/vT8bDdXwOe1t89eKUvCrxuCucCr2xDnuGlRRWRcmt87NruaAQLOS8TfzlFCVnYB
20k0aJiUgNQJNN0+Y/9mfPhqPpr6BzjEioGtcaGE0PC+6JTMw7eQjKW88WlxJrps
dhu4o5/pbNXaMtfujOv4gWch2L2o+91QpF6wPEKa1XTtjbZYKltnCHTssIGlzO8w
PqHSezQWbJ0IHyXFE1XfPuBb2tXLPPBPF/T1ZOC0YVmR3QgPV99k8e11BQe7it63
ispRJegKRvqpJQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:03 2025 by rpki-client