Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
File: C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft (raw, json)
Hash identifier: uFVps7Cj61gGWEb5bvgt709CQzO0S9ccD4FuQgSPUJ4=
Subject key identifier: 02:BF:F1:3E:A0:A1:A9:7D:13:48:35:5E:B3:CF:A2:0F:07:9D:E5:37
Authority key identifier: 0B:D6:4F:E7:F4:38:78:2E:C8:AF:A9:EE:F5:48:7B:5D:B8:0E:4D:EA
Certificate issuer: /CN=0bd64fe7f438782ec8afa9eef5487b5db80e4dea
Certificate serial: 019A1FBF75EB5BA936E87A8BE09FEDA9D24F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
Manifest number: 0317
Signing time: Sun 26 Oct 2025 09:00:32 +0000
Manifest this update: Sun 26 Oct 2025 09:00:32 +0000
Manifest next update: Mon 27 Oct 2025 09:00:32 +0000
Files and hashes: 1: C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl (hash: 9RTGMOu8HNUyCfFwuBnBUrZ24IcKnxdt1fdEkhfkuM4=)
2: wD9ir4CCy4E7zOefD7Z-y5RvpRY.roa (hash: 7sn9k3wlZ/27RuueZ6o2qKtcwJI5H5fdnvFFf1ud6xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:bf:75:eb:5b:a9:36:e8:7a:8b:e0:9f:ed:a9:d2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd64fe7f438782ec8afa9eef5487b5db80e4dea
Validity
Not Before: Oct 26 09:00:32 2025 GMT
Not After : Oct 27 09:00:32 2025 GMT
Subject: CN=02bff13ea0a1a97d1348355eb3cfa20f079de537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:5a:1b:a1:2a:71:a7:b6:bf:bb:5f:d0:43:d0:
ba:b4:0a:9e:03:19:8b:f6:64:34:e0:66:25:85:df:
e9:50:a6:df:82:f8:7f:a0:60:aa:79:43:11:0e:27:
bf:e4:19:d1:38:2d:63:c3:2d:10:aa:a4:df:f3:ae:
18:9a:86:8a:e6:60:c1:2f:da:47:ab:49:d1:f6:3b:
b1:c9:3a:9b:dc:00:38:e4:d1:90:5d:de:48:2d:71:
a1:05:59:a6:70:d8:be:a1:4d:c8:41:a6:70:59:5e:
92:c1:c4:fc:a7:15:84:42:02:e6:0a:88:24:0c:3c:
e5:29:c4:6d:ea:ac:ed:ec:6d:db:89:d0:25:c5:29:
ba:fd:17:fc:37:c2:28:9f:54:e1:ad:bb:0a:58:b7:
b5:d0:eb:42:03:a1:9f:d0:4d:20:7f:94:c3:8c:1f:
f8:47:fc:3d:56:2c:c5:d1:6c:13:ed:79:62:3e:80:
5b:86:86:05:3c:b2:ec:16:a0:43:4f:e9:ba:a9:08:
df:6a:53:50:dc:f2:5e:81:e1:8d:c5:f0:cf:fb:43:
01:68:d8:c3:c6:fe:0e:32:61:00:7e:8e:1b:fb:5c:
43:27:cb:af:b7:88:1a:10:17:ce:b1:1b:dc:63:06:
f9:ca:20:27:6c:8e:b2:33:a6:4c:35:dc:ff:91:f2:
b0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BF:F1:3E:A0:A1:A9:7D:13:48:35:5E:B3:CF:A2:0F:07:9D:E5:37
X509v3 Authority Key Identifier:
keyid:0B:D6:4F:E7:F4:38:78:2E:C8:AF:A9:EE:F5:48:7B:5D:B8:0E:4D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e9:1d:bb:a4:3e:41:57:e1:4b:f2:2c:ff:d7:2f:52:6a:c4:
f8:bd:f8:d7:6b:1a:83:eb:d4:31:1c:45:5c:84:b7:d4:14:ed:
2b:7c:03:c7:72:32:c9:47:d7:df:26:ed:63:8f:68:a9:1d:c5:
da:57:60:d7:2a:92:3c:e4:eb:de:78:b1:05:64:8a:79:14:98:
ac:73:ba:ef:bf:31:34:30:6d:e1:d5:da:0f:d5:fd:26:6a:17:
59:79:4b:9d:06:8b:d3:db:ce:7f:7d:26:8a:37:f3:5a:a5:1d:
e1:84:ae:03:76:75:96:12:d7:dd:4b:ae:91:76:5d:48:8f:d1:
d8:80:c2:53:86:a5:31:21:bd:e0:c8:39:39:43:99:4f:cf:93:
3f:02:6d:e5:50:06:0f:37:bb:24:26:24:89:f1:f1:de:a3:51:
49:b3:37:a0:8e:99:2d:72:24:17:91:ad:25:8a:6f:f3:96:0b:
84:73:dc:b5:a5:34:fd:cc:e9:b7:a9:3f:5c:31:88:a3:8d:90:
fd:5a:08:03:2b:a6:01:61:91:a8:81:1e:43:38:18:32:aa:bd:
93:2a:89:5a:a0:2c:07:a7:32:2d:35:11:a9:cd:ea:40:e1:55:
e0:82:75:47:9d:5f:f0:58:65:c5:94:01:fa:57:82:e2:18:34:
c6:bd:93:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZofv3XrW6k26HqL4J/tqdJPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZDY0ZmU3ZjQzODc4MmVjOGFmYTllZWY1NDg3YjVkYjgw
ZTRkZWEwHhcNMjUxMDI2MDkwMDMyWhcNMjUxMDI3MDkwMDMyWjAzMTEwLwYDVQQD
EygwMmJmZjEzZWEwYTFhOTdkMTM0ODM1NWViM2NmYTIwZjA3OWRlNTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8loboSpxp7a/u1/QQ9C6tAqeAxmL
9mQ04GYlhd/pUKbfgvh/oGCqeUMRDie/5BnROC1jwy0QqqTf864YmoaK5mDBL9pH
q0nR9juxyTqb3AA45NGQXd5ILXGhBVmmcNi+oU3IQaZwWV6SwcT8pxWEQgLmCogk
DDzlKcRt6qzt7G3bidAlxSm6/Rf8N8Ion1ThrbsKWLe10OtCA6Gf0E0gf5TDjB/4
R/w9VizF0WwT7XliPoBbhoYFPLLsFqBDT+m6qQjfalNQ3PJegeGNxfDP+0MBaNjD
xv4OMmEAfo4b+1xDJ8uvt4gaEBfOsRvcYwb5yiAnbI6yM6ZMNdz/kfKwSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAK/8T6goal9E0g1XrPPog8HneU3MB8GA1UdIwQY
MBaAFAvWT+f0OHguyK+p7vVIe124Dk3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzlaUDVfUTRlQzdJcjZudTlVaDdYYmdPVGVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9kMjBjMGUtNjM4NS00YWI3LWI1ZmYt
ZDE1YmRiODg2YzZkLzEvQzlaUDVfUTRlQzdJcjZudTlVaDdYYmdPVGVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9kMjBjMGUtNjM4NS00YWI3LWI1ZmYtZDE1YmRiODg2YzZk
LzEvQzlaUDVfUTRlQzdJcjZudTlVaDdYYmdPVGVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOekdu6Q+
QVfhS/Is/9cvUmrE+L3412sag+vUMRxFXIS31BTtK3wDx3IyyUfX3ybtY49oqR3F
2ldg1yqSPOTr3nixBWSKeRSYrHO6778xNDBt4dXaD9X9JmoXWXlLnQaL09vOf30m
ijfzWqUd4YSuA3Z1lhLX3UuukXZdSI/R2IDCU4alMSG94Mg5OUOZT8+TPwJt5VAG
Dze7JCYkifHx3qNRSbM3oI6ZLXIkF5GtJYpv85YLhHPctaU0/czpt6k/XDGIo42Q
/VoIAyumAWGRqIEeQzgYMqq9kyqJWqAsB6cyLTURqc3qQOFV4IJ1R51f8FhlxZQB
+leC4hg0xr2T8w==
-----END CERTIFICATE-----
Generated at Sun Oct 26 12:00:45 2025 by rpki-client