Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
File: m7S5jjWbTJLDEYP790kjjmtvCMI.mft (raw, json)
Hash identifier: kUSSWAEVJH3QMOX94HdgGZSkxTiYniOjLxJI4nv4Szs=
Subject key identifier: D7:C0:71:1D:C9:A2:D1:E9:FC:22:DD:8F:8A:13:26:12:67:C9:03:A8
Authority key identifier: 9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
Certificate issuer: /CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Certificate serial: 019A71EEF79F45BF906AD0ECE06D3933FA85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 08:01:17 +0000
Manifest this update: Tue 11 Nov 2025 08:01:17 +0000
Manifest next update: Wed 12 Nov 2025 08:01:17 +0000
Files and hashes: 1: VxhJQDKCdmlccpU7wsiJAEzzTtc.roa (hash: b9Rf82tWGBx56csRc2DtObsZNSgJoQBwhj0rE/YxDoo=)
2: m7S5jjWbTJLDEYP790kjjmtvCMI.crl (hash: OD/UtqjmOgGnCdGVTwDz6pRs+Uc8EqajXP7/H7BnFcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f7:9f:45:bf:90:6a:d0:ec:e0:6d:39:33:fa:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Validity
Not Before: Nov 11 08:01:17 2025 GMT
Not After : Nov 12 08:01:17 2025 GMT
Subject: CN=d7c0711dc9a2d1e9fc22dd8f8a13261267c903a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:52:46:36:09:17:06:33:7e:9c:59:6e:8a:c1:
5c:b4:16:d2:bf:9e:b6:d5:10:97:e4:c1:04:53:74:
aa:0d:d7:22:2d:85:19:83:48:9f:25:c0:e5:97:d0:
77:b8:0f:4d:93:51:35:54:51:a4:a0:fb:16:52:0b:
7c:02:2c:57:97:83:93:a8:70:15:8b:68:82:5c:d3:
6b:0e:50:d6:61:cc:df:6f:5e:d4:46:3d:c8:50:36:
aa:a5:77:cd:04:a2:4a:27:c3:bc:81:c5:6a:34:dc:
46:e5:a4:ce:c2:34:c3:0a:8a:d9:fa:76:a4:fb:cd:
39:2f:99:61:c6:8a:6b:ba:af:cf:33:44:b9:8d:98:
c9:4d:7a:9f:07:63:1d:16:ac:51:e3:20:1e:62:10:
99:ce:a8:6c:49:ce:65:8c:45:0a:c7:a0:61:79:99:
0f:dd:6c:0e:ce:b1:16:7e:cb:a0:39:b8:15:fc:8c:
97:84:0c:8d:bd:b9:51:ac:42:56:be:a8:f3:44:26:
3c:67:cf:f5:8b:28:18:69:37:91:e0:f3:84:0b:30:
60:b4:41:da:d7:4a:0e:b5:e6:07:ba:86:de:c4:23:
41:69:ef:b1:c0:ec:39:57:7c:b4:8b:9e:11:89:70:
84:cc:6f:1c:b4:74:ea:88:fc:b3:09:5c:9d:e0:37:
05:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C0:71:1D:C9:A2:D1:E9:FC:22:DD:8F:8A:13:26:12:67:C9:03:A8
X509v3 Authority Key Identifier:
keyid:9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:1b:5e:dd:e7:89:75:08:cb:fa:3c:e2:e3:66:c1:97:f8:dd:
02:57:e8:a9:62:ca:44:e1:82:3d:21:5f:2d:51:83:55:cf:a1:
6d:5d:67:29:04:97:36:92:b3:8d:51:2c:ac:eb:86:f3:0d:cb:
15:0b:61:4c:70:db:3b:4a:d6:e5:ee:8d:c4:ad:09:34:04:73:
cc:b4:74:ba:85:5f:39:29:3b:61:e5:2c:79:90:b9:96:df:06:
fe:43:68:81:6b:1b:50:9e:10:9a:37:19:e0:8e:9e:b4:52:78:
b4:bf:40:a1:84:29:54:86:c2:f1:51:99:54:b6:ce:28:c8:11:
9f:68:2d:d3:e7:a9:e5:73:16:ed:5b:63:d4:5f:d1:86:5f:6d:
64:f4:fa:4f:a1:06:ba:76:f7:cd:4f:83:fb:29:25:5d:80:26:
71:9a:06:1d:57:97:c4:b3:4a:f3:92:e9:8a:a9:95:20:3e:5a:
4f:36:18:de:bf:a4:49:19:23:9b:19:51:f9:99:ea:81:04:f5:
a2:61:64:5b:93:8e:66:e4:eb:49:1b:4d:c3:83:4b:2b:23:ec:
bb:cb:0d:42:8d:62:83:5f:d3:7c:7e:50:3a:17:c2:ec:69:6a:
72:f1:b0:ba:49:5a:84:13:94:a4:e4:90:cc:e1:e5:ec:c1:7c:
9d:64:06:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7vefRb+QatDs4G05M/qFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYjRiOThlMzU5YjRjOTJjMzExODNmYmY3NDkyMzhlNmI2
ZjA4YzIwHhcNMjUxMTExMDgwMTE3WhcNMjUxMTEyMDgwMTE3WjAzMTEwLwYDVQQD
EyhkN2MwNzExZGM5YTJkMWU5ZmMyMmRkOGY4YTEzMjYxMjY3YzkwM2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VJGNgkXBjN+nFluisFctBbSv562
1RCX5MEEU3SqDdciLYUZg0ifJcDll9B3uA9Nk1E1VFGkoPsWUgt8AixXl4OTqHAV
i2iCXNNrDlDWYczfb17URj3IUDaqpXfNBKJKJ8O8gcVqNNxG5aTOwjTDCorZ+nak
+805L5lhxopruq/PM0S5jZjJTXqfB2MdFqxR4yAeYhCZzqhsSc5ljEUKx6BheZkP
3WwOzrEWfsugObgV/IyXhAyNvblRrEJWvqjzRCY8Z8/1iygYaTeR4POECzBgtEHa
10oOteYHuobexCNBae+xwOw5V3y0i54RiXCEzG8ctHTqiPyzCVyd4DcFfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfAcR3JotHp/CLdj4oTJhJnyQOoMB8GA1UdIwQY
MBaAFJu0uY41m0ySwxGD+/dJI45rbwjCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jOWQ0YmItMzEzNS00YTljLWIzNzEt
YmIwZDA0YTI3NzI3LzEvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9jOWQ0YmItMzEzNS00YTljLWIzNzEtYmIwZDA0YTI3NzI3
LzEvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjRte3eeJ
dQjL+jzi42bBl/jdAlfoqWLKROGCPSFfLVGDVc+hbV1nKQSXNpKzjVEsrOuG8w3L
FQthTHDbO0rW5e6NxK0JNARzzLR0uoVfOSk7YeUseZC5lt8G/kNogWsbUJ4QmjcZ
4I6etFJ4tL9AoYQpVIbC8VGZVLbOKMgRn2gt0+ep5XMW7Vtj1F/Rhl9tZPT6T6EG
unb3zU+D+yklXYAmcZoGHVeXxLNK85LpiqmVID5aTzYY3r+kSRkjmxlR+ZnqgQT1
omFkW5OOZuTrSRtNw4NLKyPsu8sNQo1ig1/TfH5QOhfC7GlqcvGwuklahBOUpOSQ
zOHl7MF8nWQGUg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:47:52 2025 by rpki-client