Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft
File: cFo7sRdTjbbbnFz9WnlL899pfCc.mft (raw, json)
Hash identifier: O9w8bxy0M+BN0a+ep0Fako3ERcP7NDV9oIOKWCjBFnk=
Subject key identifier: 99:E0:60:F0:54:0D:1C:B4:D9:25:FF:FA:AE:38:5A:D9:F5:69:5D:0B
Authority key identifier: 70:5A:3B:B1:17:53:8D:B6:DB:9C:5C:FD:5A:79:4B:F3:DF:69:7C:27
Certificate issuer: /CN=705a3bb117538db6db9c5cfd5a794bf3df697c27
Certificate serial: 019A71B9080896DAD25A493C1CA6ACC9EDB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 07:02:22 +0000
Manifest this update: Tue 11 Nov 2025 07:02:22 +0000
Manifest next update: Wed 12 Nov 2025 07:02:22 +0000
Files and hashes: 1: cFo7sRdTjbbbnFz9WnlL899pfCc.crl (hash: lIeFBINEKFuiyMOZsmOWnYvedlZR+UzXzMcWUmux0nw=)
2: wL6tLZZKC26B362dOxei9VMeWYo.roa (hash: cyglEBGINCGd1/IgiI+VhGd2UBRJLqq47Yds0263110=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:08:08:96:da:d2:5a:49:3c:1c:a6:ac:c9:ed:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705a3bb117538db6db9c5cfd5a794bf3df697c27
Validity
Not Before: Nov 11 07:02:22 2025 GMT
Not After : Nov 12 07:02:22 2025 GMT
Subject: CN=99e060f0540d1cb4d925fffaae385ad9f5695d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:31:1b:5c:fe:40:b7:a9:3f:5d:d5:58:2e:96:
eb:84:9f:a5:8e:dc:e3:ca:02:5f:9f:61:a7:0d:11:
04:4c:0b:3f:a3:79:78:b4:8b:42:b5:09:17:4c:4a:
70:be:53:d1:bf:2d:b4:bd:ad:1f:b3:da:df:94:47:
87:de:49:3e:cf:50:39:02:85:f3:89:ba:95:6b:4c:
6f:4d:80:c7:94:14:d5:2f:92:50:04:c4:47:f6:1d:
87:06:b9:46:2e:16:7c:e8:42:db:08:2c:86:78:bc:
ce:e3:61:22:98:72:ef:5d:d4:14:c3:8d:25:8f:79:
7b:08:ca:99:e2:22:1a:44:8c:7c:d8:92:09:3c:b8:
2a:3b:42:3f:48:04:c7:72:d0:3c:fe:4f:34:d1:2c:
92:bb:e6:a2:a7:7c:7e:47:ba:d7:f9:24:90:ad:f3:
cf:68:a3:92:16:8a:a7:16:fa:37:d6:75:eb:2b:d2:
64:03:81:99:fe:a5:a2:ae:ee:18:69:52:a5:13:0c:
a9:8d:33:73:47:03:96:70:97:55:1f:c1:a4:9a:1a:
43:e6:23:4f:27:1a:75:b3:b0:da:5b:e9:45:c4:87:
92:19:00:65:4e:e6:38:c2:c8:6a:c2:63:c3:e8:ba:
fc:ab:e2:76:e9:a0:d2:a2:6c:54:90:58:f4:98:17:
40:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E0:60:F0:54:0D:1C:B4:D9:25:FF:FA:AE:38:5A:D9:F5:69:5D:0B
X509v3 Authority Key Identifier:
keyid:70:5A:3B:B1:17:53:8D:B6:DB:9C:5C:FD:5A:79:4B:F3:DF:69:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:c0:50:cb:20:7a:6d:71:48:7c:7c:9c:a4:5e:0d:58:a2:53:
ac:5f:52:68:63:d3:ca:bd:64:58:92:61:d2:ec:76:54:52:fc:
29:13:45:70:2d:d4:66:92:de:b3:e4:96:1d:e4:39:65:d0:e7:
2a:6e:70:bd:8a:b0:ea:9c:35:40:08:18:19:df:23:ea:04:19:
60:ab:52:ce:e8:1d:90:01:56:a0:67:f3:c6:03:4f:36:53:41:
16:c0:5b:8b:e5:04:12:3f:bb:d4:c4:d3:43:8c:df:94:f4:d4:
40:7d:3b:63:d7:aa:9d:80:6b:6f:29:4e:4e:1f:0a:3b:d2:9a:
e5:e5:c9:0c:d1:45:90:21:1f:64:f1:f6:94:4a:af:c6:ce:27:
4c:26:94:dc:a7:d6:1a:2a:29:05:7e:72:a9:b2:c9:5c:57:96:
70:60:c2:c8:b0:e1:a2:cc:73:71:29:95:7a:15:32:af:59:ce:
35:20:c7:52:f3:20:15:7f:73:3c:1f:d9:4e:a6:76:5f:7d:36:
d2:11:15:a0:ba:67:7c:23:79:f3:ef:f5:b9:75:f9:5b:ab:f0:
55:fd:39:0e:c0:de:27:68:b9:47:95:e6:b7:18:ba:ec:b5:3a:
90:e3:99:b6:4b:f2:84:a8:c7:66:b8:3f:df:91:d4:c2:ae:51:
6a:9a:20:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuQgIltrSWkk8HKasye2zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNWEzYmIxMTc1MzhkYjZkYjljNWNmZDVhNzk0YmYzZGY2
OTdjMjcwHhcNMjUxMTExMDcwMjIyWhcNMjUxMTEyMDcwMjIyWjAzMTEwLwYDVQQD
Eyg5OWUwNjBmMDU0MGQxY2I0ZDkyNWZmZmFhZTM4NWFkOWY1Njk1ZDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszEbXP5At6k/XdVYLpbrhJ+ljtzj
ygJfn2GnDREETAs/o3l4tItCtQkXTEpwvlPRvy20va0fs9rflEeH3kk+z1A5AoXz
ibqVa0xvTYDHlBTVL5JQBMRH9h2HBrlGLhZ86ELbCCyGeLzO42EimHLvXdQUw40l
j3l7CMqZ4iIaRIx82JIJPLgqO0I/SATHctA8/k800SySu+aip3x+R7rX+SSQrfPP
aKOSFoqnFvo31nXrK9JkA4GZ/qWiru4YaVKlEwypjTNzRwOWcJdVH8GkmhpD5iNP
Jxp1s7DaW+lFxIeSGQBlTuY4wshqwmPD6Lr8q+J26aDSomxUkFj0mBdASwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJngYPBUDRy02SX/+q44Wtn1aV0LMB8GA1UdIwQY
MBaAFHBaO7EXU42225xc/Vp5S/PfaXwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0ZvN3NSZFRqYmJibkZ6OVdubEw4OTlwZkNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zZjdhYjgtNmIzOS00MzYyLWEyN2Ut
Nzc2NjAzNzFhMWVjLzEvY0ZvN3NSZFRqYmJibkZ6OVdubEw4OTlwZkNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8zZjdhYjgtNmIzOS00MzYyLWEyN2UtNzc2NjAzNzFhMWVj
LzEvY0ZvN3NSZFRqYmJibkZ6OVdubEw4OTlwZkNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAusBQyyB6
bXFIfHycpF4NWKJTrF9SaGPTyr1kWJJh0ux2VFL8KRNFcC3UZpLes+SWHeQ5ZdDn
Km5wvYqw6pw1QAgYGd8j6gQZYKtSzugdkAFWoGfzxgNPNlNBFsBbi+UEEj+71MTT
Q4zflPTUQH07Y9eqnYBrbylOTh8KO9Ka5eXJDNFFkCEfZPH2lEqvxs4nTCaU3KfW
GiopBX5yqbLJXFeWcGDCyLDhosxzcSmVehUyr1nONSDHUvMgFX9zPB/ZTqZ2X302
0hEVoLpnfCN58+/1uXX5W6vwVf05DsDeJ2i5R5Xmtxi67LU6kOOZtkvyhKjHZrg/
35HUwq5Rapogbw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:07 2025 by rpki-client