Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
File: 9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft (raw, json)
Hash identifier: lnzfzg2lYIaKuxGR+FxqcHpLvV6NDWJuPEGV50dQVpI=
Subject key identifier: D0:54:26:91:66:0D:D7:90:93:C3:BB:7E:2E:41:DD:79:25:4D:E4:34
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 01992BFD5C15010E254644C9F56E0B63E6D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
Manifest number: 1686
Signing time: Tue 09 Sep 2025 01:00:48 +0000
Manifest this update: Tue 09 Sep 2025 01:00:48 +0000
Manifest next update: Wed 10 Sep 2025 01:00:48 +0000
Files and hashes: 1: 3Y6q4SSOfKvMWqt7nkK6iJHZcFg.roa (hash: nQJrfkgs7cckEJG4TEbt+aYboyegrJmZ5zK0surmR+g=)
2: 9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl (hash: EOWFZPjsFTyObH5bBkN4wyytZv0IDAOtZzM4wzZqbng=)
3: CUXMOi0IXV5bW3K4kmJPULsGcio.roa (hash: Mv4bPFdiPdimfDYJhuDWjbrxgg1jJvBn2c229x2l9Yw=)
4: Yd5r_QEQ97UxrSiXvR8HMw_XBtc.roa (hash: 4WQg20bCRgaZBVClPe/ndX9hPwZNZeu+B3wqx3iNyco=)
5: Z4ff2msRKcb6YMtm9rlrjleZxQM.roa (hash: R/U2SPlro8qocLQcB9G60tY7YkY0sJXo2Wic6VrrpPw=)
6: hI_XWMZylrpW0BGfUaAJnKEJmGA.roa (hash: ESQ8FEFlzl4DbPXywzgxAsSvfIAdbE8AOO7tm5PLU1I=)
7: ytVsYJEUm-gh8qZueY3uGM9VYCc.roa (hash: vsoERD1sts9niF8X7mt0u+HpNFQeD0eLoVfGJBvKlMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:fd:5c:15:01:0e:25:46:44:c9:f5:6e:0b:63:e6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Sep 9 01:00:48 2025 GMT
Not After : Sep 10 01:00:48 2025 GMT
Subject: CN=d0542691660dd79093c3bb7e2e41dd79254de434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:0d:00:a0:3a:d2:59:fc:48:6d:22:2d:01:26:
1b:e3:eb:44:4b:a8:26:d7:5c:f9:06:af:f6:5d:9e:
8f:b9:0a:9b:b5:99:ba:51:f8:a8:9a:0d:d1:f2:b8:
7d:69:79:a8:32:80:86:ba:89:5d:fb:86:1d:4a:5b:
56:e1:2e:4d:c8:9e:d0:36:b1:36:d9:54:e1:5b:87:
18:3f:6b:0c:24:f0:01:c9:63:ec:55:8e:d8:1a:da:
7e:61:a6:cf:eb:14:a2:c5:61:5b:ee:73:6a:63:f9:
14:ab:ca:3d:2c:79:72:45:96:e9:f7:83:78:f0:43:
a7:8f:63:5a:44:dd:d5:54:c8:42:55:2d:22:1f:8a:
3e:e0:10:d1:f0:85:97:ef:6c:42:f1:5e:39:71:88:
16:4c:cf:c5:aa:f5:0a:51:d5:6a:a5:e2:5c:7c:44:
9a:65:96:a4:da:f6:3c:cd:65:0e:6f:3e:07:db:9e:
12:b6:72:3f:f5:0c:b6:b1:39:1e:93:58:fd:78:64:
90:9d:0d:99:7f:4f:6e:56:02:6b:e5:ad:57:66:4e:
9d:5f:ba:03:b3:88:f5:33:f5:99:c9:31:4b:09:3c:
fa:e9:b5:37:e7:34:f4:f1:04:9b:30:cd:f7:f6:0a:
4f:b4:83:06:21:10:14:e2:c1:b8:a3:a2:9e:8a:83:
34:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:54:26:91:66:0D:D7:90:93:C3:BB:7E:2E:41:DD:79:25:4D:E4:34
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:bd:0d:b3:f5:38:67:92:a6:39:ae:6f:db:52:36:ae:ce:40:
dd:eb:b6:a0:65:26:ae:c7:9d:d4:57:84:3f:a6:1f:31:62:d9:
91:88:7f:83:ee:34:97:c6:6a:0c:4e:b1:9f:49:46:81:af:77:
43:07:6c:0e:dc:05:af:e7:4d:ce:2c:ea:b2:7c:2a:68:e4:22:
c7:a3:f8:50:1e:4b:63:6f:7d:33:fa:2c:c1:0e:de:b8:da:07:
d4:c8:50:2d:2e:a7:98:53:1c:6b:25:8e:b1:cc:6d:e2:3b:d8:
10:d3:6e:70:5e:79:8e:78:25:d2:aa:12:11:4e:d8:7c:a8:ff:
ed:5b:26:75:87:89:01:5f:7c:f5:91:19:da:f3:df:07:b7:88:
af:05:d4:fc:66:3b:c7:7c:cf:79:2f:79:9e:ae:8e:82:e5:32:
70:e9:2a:36:31:65:26:dd:a1:60:54:99:92:1a:7c:ba:08:21:
c8:d6:9f:6b:ad:55:f1:28:cf:a3:a6:13:98:b3:70:81:de:4a:
d1:8d:99:f0:45:b5:09:98:36:3c:18:5e:60:8d:86:14:eb:88:
fd:27:8e:0e:00:f7:69:24:98:6a:07:e3:41:39:c2:bc:ef:55:
7c:3c:ec:fb:50:38:5e:dd:fd:30:a3:b0:28:3a:f0:8a:5f:19:
41:b4:14:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkr/VwVAQ4lRkTJ9W4LY+bUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2MmVlYjg3OTA4NWM5NDE5NDI5N2RkOWU0Y2QyNDljZDI1
MTY1MTUwHhcNMjUwOTA5MDEwMDQ4WhcNMjUwOTEwMDEwMDQ4WjAzMTEwLwYDVQQD
EyhkMDU0MjY5MTY2MGRkNzkwOTNjM2JiN2UyZTQxZGQ3OTI1NGRlNDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9w0AoDrSWfxIbSItASYb4+tES6gm
11z5Bq/2XZ6PuQqbtZm6Ufiomg3R8rh9aXmoMoCGuold+4YdSltW4S5NyJ7QNrE2
2VThW4cYP2sMJPAByWPsVY7YGtp+YabP6xSixWFb7nNqY/kUq8o9LHlyRZbp94N4
8EOnj2NaRN3VVMhCVS0iH4o+4BDR8IWX72xC8V45cYgWTM/FqvUKUdVqpeJcfESa
ZZak2vY8zWUObz4H254StnI/9Qy2sTkek1j9eGSQnQ2Zf09uVgJr5a1XZk6dX7oD
s4j1M/WZyTFLCTz66bU35zT08QSbMM339gpPtIMGIRAU4sG4o6KeioM0TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBUJpFmDdeQk8O7fi5B3XklTeQ0MB8GA1UdIwQY
MBaAFPYu64eQhclBlCl92eTNJJzSUWUVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWk3cmg1Q0Z5VUdVS1gzWjVNMGtuTkpSWlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS85MWRhOGItMDUwMi00OGRmLTg1MzIt
NWZiZjlhMjliNmUxLzEvOWk3cmg1Q0Z5VUdVS1gzWjVNMGtuTkpSWlJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS85MWRhOGItMDUwMi00OGRmLTg1MzItNWZiZjlhMjliNmUx
LzEvOWk3cmg1Q0Z5VUdVS1gzWjVNMGtuTkpSWlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgb0Ns/U4
Z5KmOa5v21I2rs5A3eu2oGUmrsed1FeEP6YfMWLZkYh/g+40l8ZqDE6xn0lGga93
QwdsDtwFr+dNzizqsnwqaOQix6P4UB5LY299M/oswQ7euNoH1MhQLS6nmFMcayWO
scxt4jvYENNucF55jngl0qoSEU7YfKj/7VsmdYeJAV989ZEZ2vPfB7eIrwXU/GY7
x3zPeS95nq6OguUycOkqNjFlJt2hYFSZkhp8ugghyNafa61V8SjPo6YTmLNwgd5K
0Y2Z8EW1CZg2PBheYI2GFOuI/SeODgD3aSSYagfjQTnCvO9VfDzs+1A4Xt39MKOw
KDrwil8ZQbQUWw==
-----END CERTIFICATE-----
Generated at Tue Sep 9 11:37:27 2025 by rpki-client