Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft
File: v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft (raw, json)
Hash identifier: O3zV5rMLlB2ZrKAWrwnidhZPtvUrSOnyWGGHh3bnRxk=
Subject key identifier: 69:6A:46:E2:72:20:7F:EA:D3:31:BA:2E:54:75:3F:8B:FD:2D:FA:E7
Authority key identifier: BF:D7:BB:FC:C2:B8:FA:B6:6A:58:1B:82:27:CA:0A:C8:17:FA:14:6B
Certificate issuer: /CN=bfd7bbfcc2b8fab66a581b8227ca0ac817fa146b
Certificate serial: 019A711340A3ABF58052E896A3CE9369B4B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft
Manifest number: 1015
Signing time: Tue 11 Nov 2025 04:01:18 +0000
Manifest this update: Tue 11 Nov 2025 04:01:18 +0000
Manifest next update: Wed 12 Nov 2025 04:01:18 +0000
Files and hashes: 1: XFCoTFAZ3KfAR1P_1a3xaKLIipA.roa (hash: tHkTVZ0U3L5FGmSNyvjm8iSt+fIxv8Im36qIEB/UGXo=)
2: v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl (hash: 1VSFiINvd84TJV33GJ2wbpiAtIktMxjzoZlDbtoD4J4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:40:a3:ab:f5:80:52:e8:96:a3:ce:93:69:b4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd7bbfcc2b8fab66a581b8227ca0ac817fa146b
Validity
Not Before: Nov 11 04:01:18 2025 GMT
Not After : Nov 12 04:01:18 2025 GMT
Subject: CN=696a46e272207fead331ba2e54753f8bfd2dfae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c5:9d:81:47:60:05:81:f4:67:44:2f:c5:84:
af:0c:94:05:00:1c:31:a4:d3:16:8c:b3:5c:b5:67:
fc:9b:75:08:13:ac:ff:e4:01:f7:37:a0:a5:07:7d:
6c:69:1b:7b:9b:2e:da:76:fb:d2:86:d8:35:73:2b:
99:49:a0:67:d9:74:d3:be:ac:8b:e7:de:31:22:b2:
1e:44:33:ba:61:91:b3:54:28:c3:ca:73:b7:36:7a:
0f:be:8b:85:7e:5e:92:8d:b5:85:fd:84:0a:8c:60:
8f:7f:2f:b5:7f:76:1f:c9:dd:44:63:ca:dd:c7:6f:
24:11:2f:d6:ef:46:2b:01:47:94:58:71:c4:55:54:
f7:eb:2b:0c:1f:5d:dc:0a:50:0c:d8:07:70:5e:6d:
3a:78:0f:11:fd:20:71:ae:fd:76:64:f6:ab:10:e4:
89:13:61:f0:23:5b:dd:64:07:75:78:59:88:a9:4a:
c3:e4:b8:06:f9:e9:e3:51:67:9f:c6:d2:48:4d:a4:
91:03:e6:03:ee:be:2d:25:65:ac:2f:cb:db:dd:3d:
86:f9:3e:9f:1e:e7:60:2d:f6:3f:eb:9b:a8:06:8e:
26:43:5a:3d:7a:60:2a:37:5c:3d:c9:10:1f:08:b3:
30:88:6c:bd:ad:68:e2:e0:ff:df:e1:d5:41:25:94:
1f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6A:46:E2:72:20:7F:EA:D3:31:BA:2E:54:75:3F:8B:FD:2D:FA:E7
X509v3 Authority Key Identifier:
keyid:BF:D7:BB:FC:C2:B8:FA:B6:6A:58:1B:82:27:CA:0A:C8:17:FA:14:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:62:b0:6b:40:bd:de:95:30:1d:2a:14:4d:51:a2:72:9a:c2:
48:6d:aa:6d:0a:ac:04:8e:24:8e:10:16:d3:57:61:f8:c3:82:
c8:d5:8b:56:56:f2:85:c5:5f:ce:99:82:11:ba:ce:c1:89:ad:
e6:cd:32:3c:34:85:f9:b6:eb:ee:9e:61:d5:39:cc:70:f4:8b:
5e:43:84:62:03:c0:dc:90:e9:28:46:9c:39:62:39:35:49:76:
52:df:10:08:cc:81:3c:27:ca:7a:44:f5:31:b4:5a:4d:8b:8d:
e8:8c:15:90:f2:bd:d1:ef:70:d6:68:41:a4:31:91:01:19:72:
ef:50:f2:36:80:d4:a9:31:2c:65:d7:31:fa:ad:f1:37:02:4c:
53:fa:f5:ef:4f:3d:bc:e6:b1:b9:1b:28:b0:76:7c:49:b1:0c:
85:d1:8a:ea:7a:96:90:74:0e:0c:85:a4:3e:89:80:95:6e:4a:
b8:17:1c:20:7b:52:a9:78:6d:fb:5a:ce:4d:c2:36:6e:38:56:
03:5f:0d:32:18:48:32:b1:0a:32:b8:65:e2:8b:73:44:cc:67:
03:79:80:84:28:71:32:48:47:00:8e:da:cd:2b:ef:f2:73:65:
58:df:c5:20:c1:1d:19:45:fb:fb:bc:97:7c:50:b3:b9:99:35:
e5:ef:ed:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxE0Cjq/WAUuiWo86TabSxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZDdiYmZjYzJiOGZhYjY2YTU4MWI4MjI3Y2EwYWM4MTdm
YTE0NmIwHhcNMjUxMTExMDQwMTE4WhcNMjUxMTEyMDQwMTE4WjAzMTEwLwYDVQQD
Eyg2OTZhNDZlMjcyMjA3ZmVhZDMzMWJhMmU1NDc1M2Y4YmZkMmRmYWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8WdgUdgBYH0Z0QvxYSvDJQFABwx
pNMWjLNctWf8m3UIE6z/5AH3N6ClB31saRt7my7advvShtg1cyuZSaBn2XTTvqyL
594xIrIeRDO6YZGzVCjDynO3NnoPvouFfl6SjbWF/YQKjGCPfy+1f3Yfyd1EY8rd
x28kES/W70YrAUeUWHHEVVT36ysMH13cClAM2AdwXm06eA8R/SBxrv12ZParEOSJ
E2HwI1vdZAd1eFmIqUrD5LgG+enjUWefxtJITaSRA+YD7r4tJWWsL8vb3T2G+T6f
HudgLfY/65uoBo4mQ1o9emAqN1w9yRAfCLMwiGy9rWji4P/f4dVBJZQf/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGlqRuJyIH/q0zG6LlR1P4v9LfrnMB8GA1UdIwQY
MBaAFL/Xu/zCuPq2algbgifKCsgX+hRrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjllN19NSzQtclpxV0J1Q0o4b0t5QmY2RkdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS84MmZiMDUtNjFlNi00MzM1LWIxNjct
MzZhZWQ4N2UzMzg4LzEvdjllN19NSzQtclpxV0J1Q0o4b0t5QmY2RkdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS84MmZiMDUtNjFlNi00MzM1LWIxNjctMzZhZWQ4N2UzMzg4
LzEvdjllN19NSzQtclpxV0J1Q0o4b0t5QmY2RkdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMGKwa0C9
3pUwHSoUTVGicprCSG2qbQqsBI4kjhAW01dh+MOCyNWLVlbyhcVfzpmCEbrOwYmt
5s0yPDSF+bbr7p5h1TnMcPSLXkOEYgPA3JDpKEacOWI5NUl2Ut8QCMyBPCfKekT1
MbRaTYuN6IwVkPK90e9w1mhBpDGRARly71DyNoDUqTEsZdcx+q3xNwJMU/r17089
vOaxuRsosHZ8SbEMhdGK6nqWkHQODIWkPomAlW5KuBccIHtSqXht+1rOTcI2bjhW
A18NMhhIMrEKMrhl4otzRMxnA3mAhChxMkhHAI7azSvv8nNlWN/FIMEdGUX7+7yX
fFCzuZk15e/tZQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:03 2025 by rpki-client