Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
File: i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft (raw, json)
Hash identifier: 5ykA1FdSDcr/gl5ZfunnESNxXnXTaSOzgHjMJnzjehc=
Subject key identifier: FD:38:6A:6F:C0:02:80:04:93:E4:D3:11:11:76:0C:7B:24:81:A2:C8
Authority key identifier: 8B:DC:53:CC:22:63:F6:FD:EA:17:0D:32:82:A2:0B:8E:71:60:73:86
Certificate issuer: /CN=8bdc53cc2263f6fdea170d3282a20b8e71607386
Certificate serial: 019A7293E2FA2EA1E529E4A075FFA2336E3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 11:01:25 +0000
Manifest this update: Tue 11 Nov 2025 11:01:25 +0000
Manifest next update: Wed 12 Nov 2025 11:01:25 +0000
Files and hashes: 1: i9xTzCJj9v3qFw0ygqILjnFgc4Y.crl (hash: CK3/Uf0LiR9mxH714D73FMGIrrdHOzekreFktPOdnZc=)
2: rZl7il51Qi4Gx_nmvEJg-3TLGKk.roa (hash: IPdBuWhuBJNo3ThX3cWTYn6XuZdtQY1uz610IBEtgfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:e2:fa:2e:a1:e5:29:e4:a0:75:ff:a2:33:6e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdc53cc2263f6fdea170d3282a20b8e71607386
Validity
Not Before: Nov 11 11:01:25 2025 GMT
Not After : Nov 12 11:01:25 2025 GMT
Subject: CN=fd386a6fc002800493e4d31111760c7b2481a2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:65:ea:ff:2b:f8:bb:c7:4b:be:c4:a0:62:2e:
92:26:59:ec:d7:db:57:ed:41:9e:1c:e4:65:5a:19:
0f:13:6a:fc:83:f3:a3:6d:d0:e6:89:f8:33:d3:c2:
5d:60:fd:0a:cc:0c:b4:16:5b:51:74:b8:9b:15:b2:
16:23:f7:3a:c7:88:3b:91:42:6d:7f:10:25:a7:70:
7f:e6:d2:bf:6f:bc:af:cd:bd:3a:5e:5b:0b:a4:68:
14:c9:2f:fe:cd:ce:17:0a:36:ce:a5:c4:7a:c7:31:
17:2d:0b:0d:9c:77:64:90:46:db:ec:ca:d1:8e:63:
32:30:d7:89:ce:4c:be:77:2e:4e:88:20:d6:38:41:
da:2e:32:ba:f5:ea:c8:d0:dd:59:40:b2:bf:55:d7:
f6:4d:c7:9d:61:4e:46:e5:59:5c:dd:c4:69:61:2e:
0f:37:bf:bf:41:4c:bc:56:92:db:e1:0e:9c:7d:57:
98:74:7e:b3:a8:9c:d3:98:8e:db:22:d7:87:f2:f3:
0d:db:05:e8:eb:02:62:5a:90:2e:f8:1b:a4:55:b9:
f4:1c:91:03:f3:d1:79:6c:ce:43:3d:d9:4d:e6:da:
e7:23:2b:43:dc:88:2f:0e:d3:e7:d5:50:d4:a2:7d:
54:87:92:69:5c:b1:9e:f9:0c:47:47:c0:55:e9:43:
3a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:38:6A:6F:C0:02:80:04:93:E4:D3:11:11:76:0C:7B:24:81:A2:C8
X509v3 Authority Key Identifier:
keyid:8B:DC:53:CC:22:63:F6:FD:EA:17:0D:32:82:A2:0B:8E:71:60:73:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:00:93:f7:86:76:19:0c:1c:29:65:04:b5:3a:fb:69:ac:65:
bd:a0:19:3c:5c:f9:d6:69:ba:d2:05:61:91:64:12:56:d9:35:
56:e8:7a:fc:72:d9:4c:fc:40:9e:bc:99:42:f2:01:e5:07:60:
53:5f:4d:0c:92:15:36:1b:54:19:b4:9a:e1:41:0a:fa:aa:07:
be:25:c1:16:4a:c5:01:d1:49:38:4b:c3:95:11:79:3b:48:64:
17:a7:4f:c0:23:d8:91:cb:26:22:e7:1a:29:dc:28:00:09:08:
52:a3:c3:96:05:0d:a1:99:51:c6:85:55:d2:e2:f7:50:ba:25:
a6:77:d9:e7:b9:20:1b:a2:f2:4f:e5:52:63:bf:1a:74:21:2c:
67:9d:a3:22:67:20:52:5c:32:5c:d3:0e:7e:ca:b1:79:76:40:
b3:b5:1b:56:06:2f:52:4e:65:cb:06:80:c2:77:56:1d:c9:52:
f3:fa:30:ea:e9:64:ff:f2:a2:01:24:2b:d6:c5:c0:8b:9d:9b:
47:dc:f1:e7:21:89:a5:8a:32:6c:39:15:0b:db:99:5b:23:bb:
ac:61:c8:9b:70:7c:d7:fc:d9:38:3e:61:89:f8:d7:d5:66:15:
9e:a2:aa:dc:60:aa:bf:1a:5d:b0:e5:cc:84:e1:75:41:15:41:
1a:a5:d5:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk+L6LqHlKeSgdf+iM24/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZGM1M2NjMjI2M2Y2ZmRlYTE3MGQzMjgyYTIwYjhlNzE2
MDczODYwHhcNMjUxMTExMTEwMTI1WhcNMjUxMTEyMTEwMTI1WjAzMTEwLwYDVQQD
EyhmZDM4NmE2ZmMwMDI4MDA0OTNlNGQzMTExMTc2MGM3YjI0ODFhMmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmXq/yv4u8dLvsSgYi6SJlns19tX
7UGeHORlWhkPE2r8g/OjbdDmifgz08JdYP0KzAy0FltRdLibFbIWI/c6x4g7kUJt
fxAlp3B/5tK/b7yvzb06XlsLpGgUyS/+zc4XCjbOpcR6xzEXLQsNnHdkkEbb7MrR
jmMyMNeJzky+dy5OiCDWOEHaLjK69erI0N1ZQLK/Vdf2TcedYU5G5Vlc3cRpYS4P
N7+/QUy8VpLb4Q6cfVeYdH6zqJzTmI7bIteH8vMN2wXo6wJiWpAu+BukVbn0HJED
89F5bM5DPdlN5trnIytD3IgvDtPn1VDUon1Uh5JpXLGe+QxHR8BV6UM6rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP04am/AAoAEk+TTERF2DHskgaLIMB8GA1UdIwQY
MBaAFIvcU8wiY/b96hcNMoKiC45xYHOGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTl4VHpDSmo5djNxRncweWdxSUxqbkZnYzRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yMzc0MmYtMWQ3MC00ZjMxLWE5Y2Et
N2FjYjIxYmE3NzNmLzEvaTl4VHpDSmo5djNxRncweWdxSUxqbkZnYzRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8yMzc0MmYtMWQ3MC00ZjMxLWE5Y2EtN2FjYjIxYmE3NzNm
LzEvaTl4VHpDSmo5djNxRncweWdxSUxqbkZnYzRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWACT94Z2
GQwcKWUEtTr7aaxlvaAZPFz51mm60gVhkWQSVtk1Vuh6/HLZTPxAnryZQvIB5Qdg
U19NDJIVNhtUGbSa4UEK+qoHviXBFkrFAdFJOEvDlRF5O0hkF6dPwCPYkcsmIuca
KdwoAAkIUqPDlgUNoZlRxoVV0uL3ULolpnfZ57kgG6LyT+VSY78adCEsZ52jImcg
UlwyXNMOfsqxeXZAs7UbVgYvUk5lywaAwndWHclS8/ow6ulk//KiASQr1sXAi52b
R9zx5yGJpYoybDkVC9uZWyO7rGHIm3B81/zZOD5hifjX1WYVnqKq3GCqvxpdsOXM
hOF1QRVBGqXVqw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:20 2025 by rpki-client