Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
File: 9WdppC5EJm8Dfss5DUEV_r44YaQ.mft (raw, json)
Hash identifier: oRhxqlZPQjQ9EDMFM1AUTo7jVDP+yZ+PgyjGkt0lD4Q=
Subject key identifier: ED:A8:76:65:B2:61:12:01:36:CB:0B:12:06:FB:47:66:93:CC:3C:8C
Authority key identifier: F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
Certificate issuer: /CN=f56769a42e44266f037ecb390d4115febe3861a4
Certificate serial: 019A56E4D5ED65334657F498478D05268554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
Manifest number: 16A4
Signing time: Thu 06 Nov 2025 02:00:28 +0000
Manifest this update: Thu 06 Nov 2025 02:00:28 +0000
Manifest next update: Fri 07 Nov 2025 02:00:28 +0000
Files and hashes: 1: 6wW68rpEYT5imOHdAJC8iqYgH-8.roa (hash: 2OyXhc87+DnhsUi/Ak2VDrIMxn2fa0IaWGuzCLcLykQ=)
2: 9WdppC5EJm8Dfss5DUEV_r44YaQ.crl (hash: JgM5NDSAG9Wdzs8ccbrn+P9xZoakc/5fP35Du2A60I8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:e4:d5:ed:65:33:46:57:f4:98:47:8d:05:26:85:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56769a42e44266f037ecb390d4115febe3861a4
Validity
Not Before: Nov 6 02:00:28 2025 GMT
Not After : Nov 7 02:00:28 2025 GMT
Subject: CN=eda87665b261120136cb0b1206fb476693cc3c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:83:1a:ca:57:c9:9c:21:ab:61:ae:20:ef:db:
23:e6:59:5c:cd:fd:e9:f9:1d:c5:7d:f1:75:c8:5c:
ec:09:ab:53:ba:3e:4f:66:6a:4b:5f:26:a8:06:fd:
b5:26:93:af:5e:b4:b7:88:ad:ee:0f:5d:9f:6c:e0:
71:77:7b:7c:4d:d7:8e:66:67:30:a7:29:af:25:ea:
e3:07:b2:cb:10:70:67:00:7d:24:13:93:9d:c2:4b:
3c:24:3b:30:d3:98:de:50:e6:9e:95:8c:df:d2:19:
6a:16:f1:61:a6:5c:0a:6c:4c:1f:4b:51:a4:f7:8e:
8f:52:79:99:0d:79:17:f7:c2:9c:67:02:b0:64:d8:
df:a0:4c:e2:93:79:22:91:06:48:d0:ff:1f:2b:e1:
65:84:ed:4c:63:98:59:23:6f:82:c9:b9:2d:00:01:
34:1e:d5:48:5d:52:82:b0:f9:1e:b4:9d:c0:c1:a2:
9a:d8:ce:46:01:5e:36:d0:89:a6:42:7d:47:b4:76:
6f:e8:b7:06:ac:ef:67:87:d9:19:1c:39:be:d3:65:
02:98:7e:a9:21:5c:3c:93:1f:e8:da:fc:6f:c3:04:
47:44:93:ad:0e:a1:e6:39:f7:d2:0a:f3:d8:c5:6a:
7d:d0:1c:5c:38:b5:f6:dd:28:80:ee:be:e8:d6:5d:
12:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A8:76:65:B2:61:12:01:36:CB:0B:12:06:FB:47:66:93:CC:3C:8C
X509v3 Authority Key Identifier:
keyid:F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:82:e5:23:e5:10:a8:f0:ca:ce:43:15:db:de:bf:20:13:8d:
3c:bb:da:3c:ec:85:9f:08:78:34:68:43:b3:59:97:0b:04:4b:
30:92:e9:a7:5c:0a:9c:59:ea:96:03:02:33:4d:a1:07:d6:9c:
91:a3:95:34:07:5f:c9:19:a1:80:f3:35:e8:d6:59:89:b0:86:
0b:d3:b4:c3:db:50:33:56:2e:11:11:e2:57:9a:e4:fe:bd:4e:
0a:29:16:db:23:5e:de:a7:0e:dc:50:d4:c9:ea:7f:53:38:13:
57:7c:bc:de:d5:e6:fb:f8:50:fa:6b:f6:a3:35:b4:51:12:31:
2b:35:fb:5a:fa:62:2a:f5:cd:b1:95:5c:3c:d9:2c:83:0d:94:
6d:9d:0b:bd:6c:ba:63:74:e8:24:eb:e1:2f:e4:64:b8:4c:43:
6c:80:a4:05:1e:98:a4:f8:3a:86:63:9e:6f:51:68:cb:86:97:
0b:d5:41:a4:48:ec:2c:2d:2c:a1:82:96:92:3d:ec:16:1f:e2:
cf:0c:23:4e:5e:b1:16:b8:53:9a:a2:bb:cb:9d:7b:71:71:78:
b3:af:e6:a2:ab:12:43:25:50:0e:70:7c:06:53:2f:75:0c:66:
d7:a8:d8:bd:33:a0:79:f9:9d:1e:b9:95:3a:e6:0c:79:c6:9d:
d8:30:99:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpW5NXtZTNGV/SYR40FJoVUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1Njc2OWE0MmU0NDI2NmYwMzdlY2IzOTBkNDExNWZlYmUz
ODYxYTQwHhcNMjUxMTA2MDIwMDI4WhcNMjUxMTA3MDIwMDI4WjAzMTEwLwYDVQQD
EyhlZGE4NzY2NWIyNjExMjAxMzZjYjBiMTIwNmZiNDc2NjkzY2MzYzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIMaylfJnCGrYa4g79sj5llczf3p
+R3FffF1yFzsCatTuj5PZmpLXyaoBv21JpOvXrS3iK3uD12fbOBxd3t8TdeOZmcw
pymvJerjB7LLEHBnAH0kE5Odwks8JDsw05jeUOaelYzf0hlqFvFhplwKbEwfS1Gk
946PUnmZDXkX98KcZwKwZNjfoEzik3kikQZI0P8fK+FlhO1MY5hZI2+CybktAAE0
HtVIXVKCsPketJ3AwaKa2M5GAV420ImmQn1HtHZv6LcGrO9nh9kZHDm+02UCmH6p
IVw8kx/o2vxvwwRHRJOtDqHmOffSCvPYxWp90BxcOLX23SiA7r7o1l0SAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2odmWyYRIBNssLEgb7R2aTzDyMMB8GA1UdIwQY
MBaAFPVnaaQuRCZvA37LOQ1BFf6+OGGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVdkcHBDNUVKbThEZnNzNURVRVZfcjQ0WWFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMWQyZmQtNGRiZC00MzYyLWFjN2It
N2EzZmZiMDBiNzE2LzEvOVdkcHBDNUVKbThEZnNzNURVRVZfcjQ0WWFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hMWQyZmQtNGRiZC00MzYyLWFjN2ItN2EzZmZiMDBiNzE2
LzEvOVdkcHBDNUVKbThEZnNzNURVRVZfcjQ0WWFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeILlI+UQ
qPDKzkMV296/IBONPLvaPOyFnwh4NGhDs1mXCwRLMJLpp1wKnFnqlgMCM02hB9ac
kaOVNAdfyRmhgPM16NZZibCGC9O0w9tQM1YuERHiV5rk/r1OCikW2yNe3qcO3FDU
yep/UzgTV3y83tXm+/hQ+mv2ozW0URIxKzX7WvpiKvXNsZVcPNksgw2UbZ0LvWy6
Y3ToJOvhL+RkuExDbICkBR6YpPg6hmOeb1Foy4aXC9VBpEjsLC0soYKWkj3sFh/i
zwwjTl6xFrhTmqK7y517cXF4s6/moqsSQyVQDnB8BlMvdQxm16jYvTOgefmdHrmV
OuYMecad2DCZ8g==
-----END CERTIFICATE-----
Generated at Thu Nov 6 10:45:03 2025 by rpki-client