Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
File: 9poKXR6NVCSOh2Z-mIPJAvF14uc.mft (raw, json)
Hash identifier: /CvpjAs9yPtCP7LjHDbeubRGyEpyYMxwfxQm/sPLfTQ=
Subject key identifier: A3:29:52:EE:7A:B6:3B:AF:1D:BC:84:55:89:2F:CB:D6:65:EE:F2:F0
Authority key identifier: F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
Certificate issuer: /CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Certificate serial: 019A1AD14223D427617183032CABEFA262B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
Manifest number: 16F2
Signing time: Sat 25 Oct 2025 10:01:52 +0000
Manifest this update: Sat 25 Oct 2025 10:01:52 +0000
Manifest next update: Sun 26 Oct 2025 10:01:52 +0000
Files and hashes: 1: 9poKXR6NVCSOh2Z-mIPJAvF14uc.crl (hash: 0JIZosFBloOfroxCmW20vBjzliDjQ/uFK07jJsqgcU4=)
2: HmMkZMs_L5qVhevMb58XTv8ACos.roa (hash: p6Cspm4w36V6nse6CJ6sMJJCGrV41tHwZhdpXbj7GQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:d1:42:23:d4:27:61:71:83:03:2c:ab:ef:a2:62:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Validity
Not Before: Oct 25 10:01:52 2025 GMT
Not After : Oct 26 10:01:52 2025 GMT
Subject: CN=a32952ee7ab63baf1dbc8455892fcbd665eef2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fa:4e:37:0e:bc:e9:ab:96:9f:b8:8b:5e:a8:
0d:e0:c1:4a:f0:73:5a:1e:d7:72:03:3c:25:9e:c6:
6a:d6:c7:9d:c2:f1:c1:c9:8a:5f:f4:bc:5a:87:84:
54:16:a5:f1:dd:2e:ef:85:74:24:1b:f9:18:c3:ed:
85:3c:03:e5:af:be:18:e1:70:51:56:1d:fb:d3:d8:
b0:22:4e:c7:f3:3f:70:c2:9f:7e:5f:a5:43:49:91:
47:75:66:76:b7:a9:b1:d7:29:6a:b4:b0:09:a6:47:
24:dc:96:34:62:d0:9c:87:66:ab:c4:1e:c9:da:4d:
14:3f:4c:e4:81:55:0b:00:57:10:29:f6:07:52:fc:
22:c7:af:4c:fd:d1:5a:59:59:57:45:0d:fd:1c:37:
eb:36:e6:cf:e8:97:a4:8c:cf:ab:1e:7e:6a:ad:ac:
d8:7d:dd:4c:f2:77:fc:40:98:c7:44:fa:4b:e8:4f:
e5:0c:48:df:c7:1a:b8:fe:8b:6e:f6:4e:47:3d:b6:
cf:be:2b:96:fd:2c:48:e5:5a:91:61:66:fe:3f:a5:
ca:a3:d5:9b:f1:28:47:b5:41:2d:05:43:cc:d3:d3:
dc:a2:5e:cf:ed:30:d8:a9:d3:8e:f2:bd:20:f2:d9:
33:0c:76:91:f3:05:a7:22:65:52:e0:df:97:2a:c4:
f2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:29:52:EE:7A:B6:3B:AF:1D:BC:84:55:89:2F:CB:D6:65:EE:F2:F0
X509v3 Authority Key Identifier:
keyid:F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a8:5d:32:be:7b:e2:c2:b2:9a:c1:14:31:3b:bc:11:39:55:
18:83:ae:51:d0:50:10:d9:a8:24:b4:93:83:05:5a:48:81:5e:
55:8d:2e:be:0e:0e:81:f9:3d:53:1d:a9:88:f2:73:a6:d5:04:
ab:f9:67:8f:e8:fe:9b:e6:f2:d6:f3:8b:7b:86:cc:b6:2b:b9:
75:94:d0:07:fe:45:d4:88:e4:86:29:3d:60:bb:41:f8:5a:95:
ed:e9:ef:0b:b6:7c:d6:15:44:71:97:05:cf:da:cd:d5:9c:ec:
6b:6d:08:9f:66:b7:dd:b4:ae:ec:38:db:2c:66:a4:52:c4:aa:
4f:b0:51:62:01:7b:c0:53:04:a3:2e:b4:59:9d:4c:0e:24:56:
f0:24:cf:2a:e1:bc:74:21:f6:cf:80:b3:58:21:27:3f:b8:8a:
23:58:5b:13:80:0b:69:05:83:ec:80:80:6f:38:fc:2e:76:05:
e2:a6:47:0a:2e:e5:c4:75:1b:71:a8:df:0a:b7:67:a9:f8:de:
75:b8:81:68:31:eb:cd:2e:1d:a7:0a:1a:ad:fe:66:54:ec:1b:
b2:cf:74:42:d6:69:32:f8:a9:a3:75:d0:12:68:9d:47:7b:dc:
d9:8a:85:e5:9c:5e:ed:f7:8a:2f:ed:2a:99:89:4d:4b:9f:f7:
f4:6b:84:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoa0UIj1CdhcYMDLKvvomK2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OWEwYTVkMWU4ZDU0MjQ4ZTg3NjY3ZTk4ODNjOTAyZjE3
NWUyZTcwHhcNMjUxMDI1MTAwMTUyWhcNMjUxMDI2MTAwMTUyWjAzMTEwLwYDVQQD
EyhhMzI5NTJlZTdhYjYzYmFmMWRiYzg0NTU4OTJmY2JkNjY1ZWVmMmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfpONw686auWn7iLXqgN4MFK8HNa
HtdyAzwlnsZq1sedwvHByYpf9Lxah4RUFqXx3S7vhXQkG/kYw+2FPAPlr74Y4XBR
Vh3709iwIk7H8z9wwp9+X6VDSZFHdWZ2t6mx1ylqtLAJpkck3JY0YtCch2arxB7J
2k0UP0zkgVULAFcQKfYHUvwix69M/dFaWVlXRQ39HDfrNubP6JekjM+rHn5qrazY
fd1M8nf8QJjHRPpL6E/lDEjfxxq4/otu9k5HPbbPviuW/SxI5VqRYWb+P6XKo9Wb
8ShHtUEtBUPM09Pcol7P7TDYqdOO8r0g8tkzDHaR8wWnImVS4N+XKsTyMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMpUu56tjuvHbyEVYkvy9Zl7vLwMB8GA1UdIwQY
MBaAFPaaCl0ejVQkjodmfpiDyQLxdeLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXBvS1hSNk5WQ1NPaDJaLW1JUEpBdkYxNHVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS85NDQwYTQtMGI0Mi00YTU4LTkwMGEt
ZTk5ZjIyNzcyNjI0LzEvOXBvS1hSNk5WQ1NPaDJaLW1JUEpBdkYxNHVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS85NDQwYTQtMGI0Mi00YTU4LTkwMGEtZTk5ZjIyNzcyNjI0
LzEvOXBvS1hSNk5WQ1NPaDJaLW1JUEpBdkYxNHVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEqhdMr57
4sKymsEUMTu8ETlVGIOuUdBQENmoJLSTgwVaSIFeVY0uvg4Ogfk9Ux2piPJzptUE
q/lnj+j+m+by1vOLe4bMtiu5dZTQB/5F1Ijkhik9YLtB+FqV7envC7Z81hVEcZcF
z9rN1Zzsa20In2a33bSu7DjbLGakUsSqT7BRYgF7wFMEoy60WZ1MDiRW8CTPKuG8
dCH2z4CzWCEnP7iKI1hbE4ALaQWD7ICAbzj8LnYF4qZHCi7lxHUbcajfCrdnqfje
dbiBaDHrzS4dpwoarf5mVOwbss90QtZpMvipo3XQEmidR3vc2YqF5Zxe7feKL+0q
mYlNS5/39GuE4g==
-----END CERTIFICATE-----
Generated at Sat Oct 25 13:33:32 2025 by rpki-client