Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
File: 9XIyXS0hl0ZpxIj566pru5LNX-0.mft (raw, json)
Hash identifier: M3wfxx1CfvGDdQrpzlrod0phoD7DIdhxeCCSLhyBdS4=
Subject key identifier: 5F:F7:C2:C2:04:75:56:AB:C1:4A:FA:F1:92:B1:4B:94:AF:DD:4B:8B
Authority key identifier: F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
Certificate issuer: /CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Certificate serial: 019923A00B44BEFD021B6EE0F54A2DA0D571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 10:01:54 +0000
Manifest this update: Sun 07 Sep 2025 10:01:54 +0000
Manifest next update: Mon 08 Sep 2025 10:01:54 +0000
Files and hashes: 1: 9XIyXS0hl0ZpxIj566pru5LNX-0.crl (hash: N8kWareiZ32aVnRdxEU34nWSqK65tNPE6JoQ0hTujJg=)
2: cBAS0GUhF4mz2fqaOHRlVgN3CFs.roa (hash: Lp1yFkf1vOWXjEEeUSdOv9NCeGF4SfR636ANc/ZvdMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:0b:44:be:fd:02:1b:6e:e0:f5:4a:2d:a0:d5:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Validity
Not Before: Sep 7 10:01:54 2025 GMT
Not After : Sep 8 10:01:54 2025 GMT
Subject: CN=5ff7c2c2047556abc14afaf192b14b94afdd4b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b5:8b:f9:72:0c:da:5d:64:8e:80:40:36:73:
71:13:c9:2f:c1:09:33:49:75:61:fb:e1:c2:0c:0f:
0b:19:8e:5e:a5:4f:0b:9e:83:cc:01:02:23:0b:96:
18:b3:58:f7:29:b1:4b:93:83:51:eb:f9:55:e1:ee:
3f:e9:7f:cc:e8:58:ae:0d:de:eb:0b:31:df:d5:9d:
85:23:4c:3d:91:18:04:de:cf:5d:be:ee:44:7d:f2:
6f:37:ca:df:c3:b8:77:0f:5d:6f:d1:e8:63:aa:ac:
3e:42:54:47:ca:e6:07:96:94:bf:e6:2e:e2:9a:53:
9b:46:b2:6f:80:23:66:f2:54:fd:df:7c:35:45:43:
4c:f0:d6:3d:8e:4e:ac:5f:da:69:4d:10:a0:21:69:
19:6e:20:2b:d5:4c:06:b4:eb:22:84:32:32:1d:7b:
f5:5e:00:f2:f2:b6:66:22:2f:70:5a:b4:db:36:29:
b0:8d:c1:cb:bd:05:3d:26:39:d5:b5:24:2c:f6:80:
0b:9f:be:ad:92:ff:b7:fd:d9:80:0b:bd:e0:bd:5a:
9d:39:57:03:4e:58:99:58:c2:11:f2:c8:5a:1e:7a:
fa:79:66:79:7c:89:48:15:eb:92:9e:d0:ba:5d:ac:
bb:0d:17:04:28:92:d7:82:ac:be:89:d0:80:cf:d1:
10:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F7:C2:C2:04:75:56:AB:C1:4A:FA:F1:92:B1:4B:94:AF:DD:4B:8B
X509v3 Authority Key Identifier:
keyid:F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:48:6f:76:20:1c:f6:4b:ee:fb:15:e8:19:b0:0f:e7:5f:77:
46:2e:79:ed:7d:cc:5c:23:7a:59:0a:e6:41:c9:e7:f9:82:6a:
23:b6:f7:9f:92:28:2f:4a:ba:f0:fe:7e:ee:73:ad:0e:7b:f3:
af:e6:f5:1e:d2:c8:4a:8b:2a:6b:ab:5c:5f:f1:6e:55:2f:b6:
29:80:29:7c:df:3d:b8:d3:86:1f:b9:74:6d:5c:93:c6:0f:12:
b7:2f:a4:6a:14:89:54:ef:e6:52:c8:38:9f:a6:b1:ce:9e:15:
f2:32:06:d0:6f:6f:29:7f:d3:d3:4f:f9:b0:46:41:86:02:53:
4b:41:34:95:79:95:aa:b6:99:ea:09:83:ef:b6:09:42:e5:a6:
4c:c0:58:3a:11:31:9b:56:de:a3:74:2d:b6:6f:91:bf:ba:8c:
03:90:66:0e:37:c8:45:3b:6f:10:e3:49:21:f1:7d:72:f6:90:
fb:12:22:d2:bc:0e:a3:dd:57:43:44:62:e2:ba:7c:d0:0c:29:
ef:df:c3:6d:29:60:0f:bb:bf:89:f8:9b:51:1d:f5:f4:3e:0b:
38:9c:b8:2a:a7:8a:71:30:8b:51:54:f8:7d:3d:a2:5c:e2:9d:
f4:9a:0c:d6:62:7d:73:f1:7b:6b:61:ec:11:03:6e:88:b3:c1:
22:dd:16:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoAtEvv0CG27g9UotoNVxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NzIzMjVkMmQyMTk3NDY2OWM0ODhmOWViYWE2YmJiOTJj
ZDVmZWQwHhcNMjUwOTA3MTAwMTU0WhcNMjUwOTA4MTAwMTU0WjAzMTEwLwYDVQQD
Eyg1ZmY3YzJjMjA0NzU1NmFiYzE0YWZhZjE5MmIxNGI5NGFmZGQ0YjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrWL+XIM2l1kjoBANnNxE8kvwQkz
SXVh++HCDA8LGY5epU8LnoPMAQIjC5YYs1j3KbFLk4NR6/lV4e4/6X/M6FiuDd7r
CzHf1Z2FI0w9kRgE3s9dvu5EffJvN8rfw7h3D11v0ehjqqw+QlRHyuYHlpS/5i7i
mlObRrJvgCNm8lT933w1RUNM8NY9jk6sX9ppTRCgIWkZbiAr1UwGtOsihDIyHXv1
XgDy8rZmIi9wWrTbNimwjcHLvQU9JjnVtSQs9oALn76tkv+3/dmAC73gvVqdOVcD
TliZWMIR8shaHnr6eWZ5fIlIFeuSntC6Xay7DRcEKJLXgqy+idCAz9EQSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/3wsIEdVarwUr68ZKxS5Sv3UuLMB8GA1UdIwQY
MBaAFPVyMl0tIZdGacSI+euqa7uSzV/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVhJeVhTMGhsMFpweElqNTY2cHJ1NUxOWC0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hYzAzODUtMjA5MC00NzA0LThlMDEt
M2U2MmU5ZTc4OTA2LzEvOVhJeVhTMGhsMFpweElqNTY2cHJ1NUxOWC0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9hYzAzODUtMjA5MC00NzA0LThlMDEtM2U2MmU5ZTc4OTA2
LzEvOVhJeVhTMGhsMFpweElqNTY2cHJ1NUxOWC0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABkhvdiAc
9kvu+xXoGbAP5193Ri557X3MXCN6WQrmQcnn+YJqI7b3n5IoL0q68P5+7nOtDnvz
r+b1HtLISosqa6tcX/FuVS+2KYApfN89uNOGH7l0bVyTxg8Sty+kahSJVO/mUsg4
n6axzp4V8jIG0G9vKX/T00/5sEZBhgJTS0E0lXmVqraZ6gmD77YJQuWmTMBYOhEx
m1beo3Qttm+Rv7qMA5BmDjfIRTtvEONJIfF9cvaQ+xIi0rwOo91XQ0Ri4rp80Awp
79/DbSlgD7u/ifibUR319D4LOJy4KqeKcTCLUVT4fT2iXOKd9JoM1mJ9c/F7a2Hs
EQNuiLPBIt0WFQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:29 2025 by rpki-client