Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.mft
File: 9wC7WRwCd4gZrqH1uPZEFns9fC4.mft (raw, json)
Hash identifier: ilOnfDSERw0xeDGGgftNqKwbUSrTtlaN3Nj97MNXnpQ=
Subject key identifier: 76:E5:11:3C:26:BC:5A:EE:58:85:ED:FB:E5:B3:2F:3F:88:DD:D8:10
Authority key identifier: F7:00:BB:59:1C:02:77:88:19:AE:A1:F5:B8:F6:44:16:7B:3D:7C:2E
Certificate issuer: /CN=f700bb591c02778819aea1f5b8f644167b3d7c2e
Certificate serial: 019922555EC2C642CD3C57AEFAA76B8E37BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9wC7WRwCd4gZrqH1uPZEFns9fC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.mft
Manifest number: 0F71
Signing time: Sun 07 Sep 2025 04:00:44 +0000
Manifest this update: Sun 07 Sep 2025 04:00:44 +0000
Manifest next update: Mon 08 Sep 2025 04:00:44 +0000
Files and hashes: 1: 9wC7WRwCd4gZrqH1uPZEFns9fC4.crl (hash: 9hiha8+V91wFMG7oFsg/Nt2C3IeTxaNerXz1AjJwg7U=)
2: K4Gb3AwaGq3gzkyO-1MyxTIk3gg.roa (hash: DCLfidqg0r72HrTsNGYvW13eljCKxYuCqdsXQsy2ahc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9wC7WRwCd4gZrqH1uPZEFns9fC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:5e:c2:c6:42:cd:3c:57:ae:fa:a7:6b:8e:37:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f700bb591c02778819aea1f5b8f644167b3d7c2e
Validity
Not Before: Sep 7 04:00:44 2025 GMT
Not After : Sep 8 04:00:44 2025 GMT
Subject: CN=76e5113c26bc5aee5885edfbe5b32f3f88ddd810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:54:b7:71:2d:06:12:bb:d9:6d:b6:81:b7:94:
43:11:6c:88:df:7b:8f:96:68:20:29:17:c2:7f:51:
16:be:e2:ff:33:cb:68:60:d1:22:99:10:03:97:f7:
75:f5:b7:39:ed:f3:90:b8:89:da:e7:de:53:24:1c:
1e:5a:3b:4c:08:35:20:19:be:1b:cb:ae:c6:aa:cf:
39:76:84:37:de:41:0b:30:b9:40:6f:2d:da:a1:29:
22:df:66:2e:ee:ed:65:3f:3d:7c:46:14:86:24:7b:
94:07:4b:45:2f:ac:af:c3:22:d9:67:8c:48:d3:ec:
b4:23:79:dc:9a:ff:9a:60:d5:55:8c:6c:27:20:14:
13:6c:48:52:de:d0:9d:05:99:55:e9:56:1d:67:6c:
ef:05:bd:b4:33:c2:5b:98:95:5f:93:35:82:7e:e2:
83:f3:b5:e0:cb:6e:f8:2b:20:bc:af:ec:a7:a7:bb:
20:3f:fb:8e:65:e6:db:90:f6:04:67:b3:83:94:de:
32:f8:52:24:19:88:15:a9:41:fb:ab:54:1f:e4:ab:
19:76:e9:06:6d:9f:d5:30:95:fd:51:0c:76:cc:a3:
d7:e2:a3:2a:7c:2b:fc:71:e1:fd:05:03:6d:b5:49:
d1:f6:d7:b2:25:77:dd:0d:52:dd:96:9d:fc:f9:e0:
80:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E5:11:3C:26:BC:5A:EE:58:85:ED:FB:E5:B3:2F:3F:88:DD:D8:10
X509v3 Authority Key Identifier:
keyid:F7:00:BB:59:1C:02:77:88:19:AE:A1:F5:B8:F6:44:16:7B:3D:7C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wC7WRwCd4gZrqH1uPZEFns9fC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:94:89:6e:df:03:94:46:b3:0e:97:d1:7c:9e:b6:00:6e:f6:
02:01:eb:1e:8d:63:09:7f:1e:c1:e8:13:65:cd:12:1b:60:72:
98:bc:82:46:51:fb:44:a2:fc:c2:f4:66:be:20:d4:59:4d:21:
30:75:2b:5d:8e:db:3b:0d:26:38:e2:6c:d5:b7:fd:74:57:f8:
8b:cd:02:31:80:a3:e1:7a:37:4c:18:21:90:5e:4a:fe:95:c0:
e4:3c:76:a3:df:d5:c4:b9:f5:9d:de:77:29:fc:0a:fb:b8:1b:
52:a0:13:aa:c9:3c:89:6f:0f:ac:3c:39:03:e6:91:43:3d:f0:
56:9a:a1:03:83:a2:37:e5:db:62:30:07:11:3e:8d:b9:e3:55:
f2:d1:85:56:03:ec:dc:b5:60:f6:9e:2d:7e:2a:3c:8e:e9:06:
53:d0:d8:08:95:96:85:eb:a4:c3:12:42:06:ae:f4:cc:1d:94:
30:d4:07:e3:de:4a:c1:9a:a8:e0:fc:8b:e3:77:19:fc:19:2d:
b9:cf:bc:85:7e:bc:3e:83:b4:ae:1d:a7:cb:81:8d:14:48:5a:
99:72:8b:ac:80:db:39:31:c8:98:94:88:19:53:20:cc:29:bf:
7b:98:e4:77:d8:69:6e:2b:20:f5:41:73:9b:d3:48:f4:92:3f:
51:17:af:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVV7CxkLNPFeu+qdrjje6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MDBiYjU5MWMwMjc3ODgxOWFlYTFmNWI4ZjY0NDE2N2Iz
ZDdjMmUwHhcNMjUwOTA3MDQwMDQ0WhcNMjUwOTA4MDQwMDQ0WjAzMTEwLwYDVQQD
Eyg3NmU1MTEzYzI2YmM1YWVlNTg4NWVkZmJlNWIzMmYzZjg4ZGRkODEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlS3cS0GErvZbbaBt5RDEWyI33uP
lmggKRfCf1EWvuL/M8toYNEimRADl/d19bc57fOQuIna595TJBweWjtMCDUgGb4b
y67Gqs85doQ33kELMLlAby3aoSki32Yu7u1lPz18RhSGJHuUB0tFL6yvwyLZZ4xI
0+y0I3ncmv+aYNVVjGwnIBQTbEhS3tCdBZlV6VYdZ2zvBb20M8JbmJVfkzWCfuKD
87Xgy274KyC8r+ynp7sgP/uOZebbkPYEZ7ODlN4y+FIkGYgVqUH7q1Qf5KsZdukG
bZ/VMJX9UQx2zKPX4qMqfCv8ceH9BQNttUnR9teyJXfdDVLdlp38+eCAmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHblETwmvFruWIXt++WzLz+I3dgQMB8GA1UdIwQY
MBaAFPcAu1kcAneIGa6h9bj2RBZ7PXwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXdDN1dSd0NkNGdacnFIMXVQWkVGbnM5ZkM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8wNWY3YzUtYjIxYi00MzVlLThlYmMt
ODJhNjgxMThjNzUyLzEvOXdDN1dSd0NkNGdacnFIMXVQWkVGbnM5ZkM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8wNWY3YzUtYjIxYi00MzVlLThlYmMtODJhNjgxMThjNzUy
LzEvOXdDN1dSd0NkNGdacnFIMXVQWkVGbnM5ZkM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALpSJbt8D
lEazDpfRfJ62AG72AgHrHo1jCX8ewegTZc0SG2BymLyCRlH7RKL8wvRmviDUWU0h
MHUrXY7bOw0mOOJs1bf9dFf4i80CMYCj4Xo3TBghkF5K/pXA5Dx2o9/VxLn1nd53
KfwK+7gbUqATqsk8iW8PrDw5A+aRQz3wVpqhA4OiN+XbYjAHET6NueNV8tGFVgPs
3LVg9p4tfio8jukGU9DYCJWWheukwxJCBq70zB2UMNQH495KwZqo4PyL43cZ/Bkt
uc+8hX68PoO0rh2ny4GNFEhamXKLrIDbOTHImJSIGVMgzCm/e5jkd9hpbisg9UFz
m9NI9JI/URev/Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:15 2025 by rpki-client