Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
File: 9yjCKwJQJ1-m63NLoA55D343pVA.mft (raw, json)
Hash identifier: z+2YgjyRsE6Py9KMj/gZANtcqqgI5eZghIdRE3wkYyA=
Subject key identifier: 5B:D5:AB:99:6D:6C:89:BF:5F:E8:4A:6B:8E:06:E2:E9:A0:DD:54:8A
Authority key identifier: F7:28:C2:2B:02:50:27:5F:A6:EB:73:4B:A0:0E:79:0F:7E:37:A5:50
Certificate issuer: /CN=f728c22b0250275fa6eb734ba00e790f7e37a550
Certificate serial: 019A71B90BA217215F7376438E1D7EE2E3E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
Manifest number: 0A4C
Signing time: Tue 11 Nov 2025 07:02:23 +0000
Manifest this update: Tue 11 Nov 2025 07:02:23 +0000
Manifest next update: Wed 12 Nov 2025 07:02:23 +0000
Files and hashes: 1: 9yjCKwJQJ1-m63NLoA55D343pVA.crl (hash: gXPVMCgUSYpkLE0ir/0SimQPPb7eSOJl0Eenkr3Njg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:0b:a2:17:21:5f:73:76:43:8e:1d:7e:e2:e3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f728c22b0250275fa6eb734ba00e790f7e37a550
Validity
Not Before: Nov 11 07:02:23 2025 GMT
Not After : Nov 12 07:02:23 2025 GMT
Subject: CN=5bd5ab996d6c89bf5fe84a6b8e06e2e9a0dd548a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a5:10:16:b3:10:3c:8d:12:b9:2d:2d:1d:75:
87:b1:f3:2c:b2:bb:d0:96:68:c9:02:c9:28:18:e5:
d6:81:41:34:7d:9f:46:f3:1e:d0:2c:57:e1:e5:92:
a2:d5:d7:17:7f:95:c0:51:ba:9e:dc:32:5c:cc:de:
02:8e:b6:01:06:88:09:8a:16:d4:a1:56:dc:ff:aa:
1a:16:17:ee:07:3a:58:7f:f9:6e:8f:ae:b4:cd:6f:
15:a8:2b:62:8a:71:4a:30:5a:08:02:34:1f:7f:51:
de:80:56:a2:6c:86:96:52:83:cb:9f:71:d5:c4:31:
7e:b7:e9:4b:65:44:4a:71:dc:78:9d:f2:23:9e:48:
a2:57:4f:83:02:c0:14:e9:23:65:21:00:29:4f:a6:
08:c9:9f:3b:6f:55:41:b4:86:28:63:78:b8:ee:61:
1c:c1:69:2f:a7:45:d8:2b:bf:2b:6a:09:76:c0:9f:
ec:6e:46:91:59:0a:7d:6c:e6:f8:64:46:10:ab:99:
1f:1b:cd:c5:8c:09:4c:30:81:49:d9:30:b5:df:b6:
9a:3d:fc:b7:15:4a:4e:5b:c1:a4:7d:79:b5:4d:7a:
41:77:dc:70:60:20:9d:a6:5e:27:f5:da:f2:7c:d3:
cb:04:5f:e1:db:5b:78:f7:74:78:63:85:f3:78:2f:
af:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D5:AB:99:6D:6C:89:BF:5F:E8:4A:6B:8E:06:E2:E9:A0:DD:54:8A
X509v3 Authority Key Identifier:
keyid:F7:28:C2:2B:02:50:27:5F:A6:EB:73:4B:A0:0E:79:0F:7E:37:A5:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:87:63:1d:81:a8:a1:26:31:77:01:40:66:a2:15:42:83:ad:
09:0e:a0:8b:1e:49:c2:c0:b4:8c:4e:08:d8:90:19:ae:06:8a:
00:53:1e:66:8c:38:69:01:26:0d:e2:99:d6:4b:62:c8:19:2e:
20:5a:a0:c3:d6:8c:14:7a:8d:23:4a:84:24:a3:d1:5f:dc:78:
d8:76:b6:70:70:ca:e1:df:72:19:1b:15:cc:96:95:da:d8:cc:
14:1f:93:bd:b7:39:23:81:ae:0f:d4:39:42:13:1c:5f:e3:ea:
3a:0a:93:37:46:13:d8:8a:02:b8:f1:74:85:33:75:cc:b4:02:
8c:ae:99:c8:05:6d:00:42:da:de:26:70:fc:b8:5e:de:6a:51:
c2:13:cd:08:53:b4:45:7c:c9:45:6f:c2:5b:4c:c0:98:95:eb:
57:3b:40:80:64:26:db:08:33:19:bb:5a:80:59:02:3f:16:27:
3f:9c:b8:40:eb:73:11:3c:89:d8:2a:2c:72:7a:7a:fc:62:db:
1c:70:40:03:61:a7:98:82:fb:d3:d7:32:85:b5:73:52:dc:98:
e7:7f:14:5a:3f:46:ed:a9:b6:e4:05:02:0a:b9:97:c4:36:70:
61:d0:56:39:02:a1:a1:84:a2:0a:cb:dc:0a:76:03:99:5f:dd:
3e:e7:cf:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuQuiFyFfc3ZDjh1+4uPhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MjhjMjJiMDI1MDI3NWZhNmViNzM0YmEwMGU3OTBmN2Uz
N2E1NTAwHhcNMjUxMTExMDcwMjIzWhcNMjUxMTEyMDcwMjIzWjAzMTEwLwYDVQQD
Eyg1YmQ1YWI5OTZkNmM4OWJmNWZlODRhNmI4ZTA2ZTJlOWEwZGQ1NDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqUQFrMQPI0SuS0tHXWHsfMssrvQ
lmjJAskoGOXWgUE0fZ9G8x7QLFfh5ZKi1dcXf5XAUbqe3DJczN4CjrYBBogJihbU
oVbc/6oaFhfuBzpYf/luj660zW8VqCtiinFKMFoIAjQff1HegFaibIaWUoPLn3HV
xDF+t+lLZURKcdx4nfIjnkiiV0+DAsAU6SNlIQApT6YIyZ87b1VBtIYoY3i47mEc
wWkvp0XYK78ragl2wJ/sbkaRWQp9bOb4ZEYQq5kfG83FjAlMMIFJ2TC137aaPfy3
FUpOW8GkfXm1TXpBd9xwYCCdpl4n9dryfNPLBF/h21t493R4Y4XzeC+vPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvVq5ltbIm/X+hKa44G4umg3VSKMB8GA1UdIwQY
MBaAFPcowisCUCdfputzS6AOeQ9+N6VQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXlqQ0t3SlFKMS1tNjNOTG9BNTVEMzQzcFZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9jOTEyZTYtYjM5ZC00MTY4LThjNWYt
MDZmNjRlYjAwNTY2LzEvOXlqQ0t3SlFKMS1tNjNOTG9BNTVEMzQzcFZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9jOTEyZTYtYjM5ZC00MTY4LThjNWYtMDZmNjRlYjAwNTY2
LzEvOXlqQ0t3SlFKMS1tNjNOTG9BNTVEMzQzcFZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArYdjHYGo
oSYxdwFAZqIVQoOtCQ6gix5JwsC0jE4I2JAZrgaKAFMeZow4aQEmDeKZ1ktiyBku
IFqgw9aMFHqNI0qEJKPRX9x42Ha2cHDK4d9yGRsVzJaV2tjMFB+Tvbc5I4GuD9Q5
QhMcX+PqOgqTN0YT2IoCuPF0hTN1zLQCjK6ZyAVtAELa3iZw/Lhe3mpRwhPNCFO0
RXzJRW/CW0zAmJXrVztAgGQm2wgzGbtagFkCPxYnP5y4QOtzETyJ2Coscnp6/GLb
HHBAA2GnmIL709cyhbVzUtyY538UWj9G7am25AUCCrmXxDZwYdBWOQKhoYSiCsvc
CnYDmV/dPufPDw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:15:31 2025 by rpki-client