Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.mft
File: 9rG5O-fUO4bWT4tLljvJFWJfI_I.mft (raw, json)
Hash identifier: 91ZU06K7Ru0M0+DQTS24pifNe7/BBOVzyP14sIUMyOM=
Subject key identifier: EE:07:66:86:DD:A9:43:1B:F8:6A:E3:8F:64:A9:05:50:E9:11:71:FE
Authority key identifier: F6:B1:B9:3B:E7:D4:3B:86:D6:4F:8B:4B:96:3B:C9:15:62:5F:23:F2
Certificate issuer: /CN=f6b1b93be7d43b86d64f8b4b963bc915625f23f2
Certificate serial: 019A71B8660BDCE26069E265E9B3CC97EBD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rG5O-fUO4bWT4tLljvJFWJfI_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.mft
Manifest number: 03B0
Signing time: Tue 11 Nov 2025 07:01:41 +0000
Manifest this update: Tue 11 Nov 2025 07:01:41 +0000
Manifest next update: Wed 12 Nov 2025 07:01:41 +0000
Files and hashes: 1: 9rG5O-fUO4bWT4tLljvJFWJfI_I.crl (hash: 7qzEBZ/iouNWjvstT4r0Kf5HfH5UG6gEiCOvd31CSuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rG5O-fUO4bWT4tLljvJFWJfI_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:66:0b:dc:e2:60:69:e2:65:e9:b3:cc:97:eb:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b1b93be7d43b86d64f8b4b963bc915625f23f2
Validity
Not Before: Nov 11 07:01:41 2025 GMT
Not After : Nov 12 07:01:41 2025 GMT
Subject: CN=ee076686dda9431bf86ae38f64a90550e91171fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e6:0e:14:ae:61:57:da:5b:fe:ed:5b:09:91:
28:00:84:84:dc:6b:a0:f8:7a:09:dc:d6:70:74:0c:
fa:81:af:a1:e7:7d:0b:7c:4b:57:13:a8:fe:29:3c:
47:88:68:67:6d:2b:d7:55:c9:1e:54:5c:c8:6b:20:
28:0f:0f:7e:f8:2e:02:49:d9:43:23:40:34:8d:42:
b3:19:78:50:8f:dc:ca:4a:1e:d3:f4:ce:41:51:56:
1b:c8:b3:a9:0a:93:38:09:f1:db:cb:a2:65:77:d3:
8a:7b:26:74:b7:61:8d:85:65:39:27:75:96:6d:ec:
4b:b8:b4:12:01:3d:4e:c4:c5:95:25:0e:11:8d:17:
6e:38:fb:49:88:9d:e4:85:db:8b:3b:d5:a1:1f:69:
6a:83:7b:31:39:f1:b0:a9:65:81:42:df:a4:73:d0:
39:03:65:ec:fd:6c:60:5b:cf:81:5a:db:c0:aa:ec:
01:e9:e7:20:fb:bb:57:8d:4f:c8:4b:52:1b:6a:17:
07:6a:75:a9:1a:4a:4e:82:dc:8d:2a:86:0d:7b:25:
83:c9:99:61:11:f7:b0:a4:f2:6c:a7:a5:d2:da:87:
30:7e:d5:fc:e1:44:cb:4e:1b:9d:9a:78:59:b3:d0:
8f:de:7b:48:5f:a8:f1:11:c1:28:fa:80:54:d2:56:
7d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:07:66:86:DD:A9:43:1B:F8:6A:E3:8F:64:A9:05:50:E9:11:71:FE
X509v3 Authority Key Identifier:
keyid:F6:B1:B9:3B:E7:D4:3B:86:D6:4F:8B:4B:96:3B:C9:15:62:5F:23:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rG5O-fUO4bWT4tLljvJFWJfI_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:64:f2:c9:ef:93:8e:ad:f8:d3:fd:20:4f:c1:70:7d:23:1f:
b8:b2:11:1c:ca:ed:14:38:ef:cd:3e:16:d8:c5:fd:27:82:5b:
37:19:92:64:03:f7:6a:54:92:a6:13:f4:81:51:da:64:12:aa:
d2:1e:d7:14:da:76:a5:66:69:95:75:0d:59:68:41:c3:fc:3c:
23:f0:39:e9:5c:56:32:f9:b3:ce:e7:1f:f9:b4:af:70:e3:cd:
35:6a:fe:47:7d:20:d1:b5:1e:83:52:2b:5d:09:77:68:d8:0b:
ad:3d:cd:6b:d9:29:fb:d3:4e:c7:26:f7:b6:40:b8:c5:d7:64:
ea:9d:90:70:76:69:74:fc:a7:d1:08:71:4d:1b:70:cb:06:ec:
b0:e2:83:eb:84:9a:b0:e4:1b:a0:a1:1e:e4:ee:ce:f3:e3:4e:
4c:9f:a8:c1:27:e4:d3:83:f2:27:ec:cf:0f:43:06:c8:e8:d3:
3a:59:fc:0c:af:ef:31:19:a3:78:29:bf:d5:01:61:55:3e:23:
5d:86:b7:2e:a6:d1:a5:64:39:56:3d:72:b9:85:ab:e5:a7:09:
22:e4:37:d1:a8:08:bb:03:5f:02:93:38:1d:e8:38:24:c7:e8:
ec:d5:0b:f5:29:62:9d:ff:c0:fd:ba:03:7a:74:8c:6a:87:ff:
55:74:7e:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuGYL3OJgaeJl6bPMl+vQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YjFiOTNiZTdkNDNiODZkNjRmOGI0Yjk2M2JjOTE1NjI1
ZjIzZjIwHhcNMjUxMTExMDcwMTQxWhcNMjUxMTEyMDcwMTQxWjAzMTEwLwYDVQQD
EyhlZTA3NjY4NmRkYTk0MzFiZjg2YWUzOGY2NGE5MDU1MGU5MTE3MWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+YOFK5hV9pb/u1bCZEoAISE3Gug
+HoJ3NZwdAz6ga+h530LfEtXE6j+KTxHiGhnbSvXVckeVFzIayAoDw9++C4CSdlD
I0A0jUKzGXhQj9zKSh7T9M5BUVYbyLOpCpM4CfHby6Jld9OKeyZ0t2GNhWU5J3WW
bexLuLQSAT1OxMWVJQ4RjRduOPtJiJ3khduLO9WhH2lqg3sxOfGwqWWBQt+kc9A5
A2Xs/WxgW8+BWtvAquwB6ecg+7tXjU/IS1IbahcHanWpGkpOgtyNKoYNeyWDyZlh
EfewpPJsp6XS2ocwftX84UTLThudmnhZs9CP3ntIX6jxEcEo+oBU0lZ9GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4HZobdqUMb+Grjj2SpBVDpEXH+MB8GA1UdIwQY
MBaAFPaxuTvn1DuG1k+LS5Y7yRViXyPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXJHNU8tZlVPNGJXVDR0TGxqdkpGV0pmSV9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iNzI5Y2MtNzU0ZS00YWVhLTg1ZjIt
MGFjMmNkM2ZlMDA4LzEvOXJHNU8tZlVPNGJXVDR0TGxqdkpGV0pmSV9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9iNzI5Y2MtNzU0ZS00YWVhLTg1ZjItMGFjMmNkM2ZlMDA4
LzEvOXJHNU8tZlVPNGJXVDR0TGxqdkpGV0pmSV9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmGTyye+T
jq340/0gT8FwfSMfuLIRHMrtFDjvzT4W2MX9J4JbNxmSZAP3alSSphP0gVHaZBKq
0h7XFNp2pWZplXUNWWhBw/w8I/A56VxWMvmzzucf+bSvcOPNNWr+R30g0bUeg1Ir
XQl3aNgLrT3Na9kp+9NOxyb3tkC4xddk6p2QcHZpdPyn0QhxTRtwywbssOKD64Sa
sOQboKEe5O7O8+NOTJ+owSfk04PyJ+zPD0MGyOjTOln8DK/vMRmjeCm/1QFhVT4j
XYa3LqbRpWQ5Vj1yuYWr5acJIuQ30agIuwNfApM4Heg4JMfo7NUL9Slinf/A/boD
enSMaof/VXR+VA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:18 2025 by rpki-client