Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
File: 9iwrcwAEBoJN-8euOIbreGf47G4.mft (raw, json)
Hash identifier: G0sXCd5AK3lId+nh4KDNFV/ssOAgFPLsKM9/ZQG4Iws=
Subject key identifier: 53:2D:F7:75:34:8E:F4:B1:76:8B:90:54:6C:F7:88:4E:88:31:7E:68
Authority key identifier: F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E
Certificate issuer: /CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
Certificate serial: 019A725C3EDB6DF72CFB6172B40873CDC1AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 10:00:39 +0000
Manifest this update: Tue 11 Nov 2025 10:00:39 +0000
Manifest next update: Wed 12 Nov 2025 10:00:39 +0000
Files and hashes: 1: 9iwrcwAEBoJN-8euOIbreGf47G4.crl (hash: vff5MGeTdhcrO7YIjcEt/hVVaqNDfzJf3eMD0Iek2V0=)
2: ceDg72YenqK4_dFvq8QBAcGglOc.roa (hash: Zws7AOUBGinLUnjZoVBw7x3JkyX35Jt03arL9swrd5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:3e:db:6d:f7:2c:fb:61:72:b4:08:73:cd:c1:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
Validity
Not Before: Nov 11 10:00:39 2025 GMT
Not After : Nov 12 10:00:39 2025 GMT
Subject: CN=532df775348ef4b1768b90546cf7884e88317e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8b:44:9d:6b:71:9e:95:2e:39:10:9d:3d:12:
d5:c0:e3:d0:f5:ff:8f:a1:9f:42:8a:ce:3f:80:a2:
7a:59:e1:5a:b3:6b:dd:11:72:3a:3f:43:22:a4:28:
02:ca:ff:86:94:f9:69:00:03:64:a9:68:5d:e2:ce:
64:9e:9e:84:72:61:44:a1:ba:45:a7:1f:ab:2d:02:
02:1e:e7:92:38:98:ba:22:ce:4a:75:d2:3e:b4:a6:
c1:25:aa:ee:e4:c3:c2:b0:d9:63:75:d6:35:a0:40:
77:73:01:5e:b5:a5:6c:a5:f0:33:93:9f:c2:d8:91:
c9:f4:43:69:19:19:3d:ac:1e:05:76:8f:0c:5b:b2:
15:36:d1:3c:90:e7:20:7b:ad:2e:20:4b:b3:0c:fa:
c2:c9:11:94:28:8c:f9:78:9c:ba:e9:4f:95:8b:4f:
52:79:e6:86:7a:75:50:2f:67:a0:c6:22:dd:eb:62:
98:4d:a6:e2:21:89:7d:4f:c4:81:bf:44:b6:2d:09:
f2:6e:7b:ba:90:81:dc:f6:07:c1:5a:8d:0c:2e:a0:
bb:06:b8:39:77:4d:b9:43:bc:88:16:06:a7:16:33:
73:d8:8d:d2:ba:4d:54:96:19:46:66:e0:d7:23:3b:
ac:1d:a6:53:b5:58:c6:f7:aa:97:b7:b3:a3:06:ee:
45:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2D:F7:75:34:8E:F4:B1:76:8B:90:54:6C:F7:88:4E:88:31:7E:68
X509v3 Authority Key Identifier:
keyid:F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:1e:f1:01:02:f2:87:f7:8e:cf:f6:4b:2b:a1:6f:d5:c0:54:
93:32:c1:c8:5d:30:4d:a7:16:8a:23:c1:ee:e3:0b:a9:f9:97:
95:e1:b0:bf:4d:50:23:55:e6:80:25:72:cd:97:8b:11:18:d3:
db:91:cd:b7:71:70:24:37:0e:f0:bb:3c:be:53:7d:ac:e5:d0:
90:6c:b8:71:ef:51:f5:7b:a0:de:03:73:2f:db:bf:04:f2:22:
19:2c:d1:90:a2:d2:e8:6c:b7:a8:9c:d9:d1:7e:c8:9f:2d:0e:
6c:e9:12:75:5d:99:84:da:35:b9:03:66:67:ba:12:b8:8b:31:
e7:76:a4:e6:03:2e:24:4b:0a:c3:b3:83:9c:d7:d9:2f:21:00:
87:60:c8:4e:ee:19:ef:17:88:81:83:00:9b:9a:11:23:f5:d0:
bf:e2:58:e4:9b:80:d2:07:b9:33:e9:da:d7:b0:cc:79:1c:e4:
8e:6d:f8:67:ec:66:53:0b:56:f0:4b:9b:e9:85:43:cd:12:d3:
5f:7c:5f:ef:af:da:54:54:54:92:ac:ad:5f:47:5a:37:99:27:
ca:eb:6c:70:19:2a:60:4f:ae:2f:ab:d5:71:7c:9b:97:4a:71:
26:43:fc:f4:49:9f:72:cf:6b:a2:d2:6e:0d:5e:77:15:f2:a6:
00:c5:9b:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXD7bbfcs+2FytAhzzcGrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2MmMyYjczMDAwNDA2ODI0ZGZiYzdhZTM4ODZlYjc4Njdm
OGVjNmUwHhcNMjUxMTExMTAwMDM5WhcNMjUxMTEyMTAwMDM5WjAzMTEwLwYDVQQD
Eyg1MzJkZjc3NTM0OGVmNGIxNzY4YjkwNTQ2Y2Y3ODg0ZTg4MzE3ZTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxotEnWtxnpUuORCdPRLVwOPQ9f+P
oZ9Cis4/gKJ6WeFas2vdEXI6P0MipCgCyv+GlPlpAANkqWhd4s5knp6EcmFEobpF
px+rLQICHueSOJi6Is5KddI+tKbBJaru5MPCsNljddY1oEB3cwFetaVspfAzk5/C
2JHJ9ENpGRk9rB4Fdo8MW7IVNtE8kOcge60uIEuzDPrCyRGUKIz5eJy66U+Vi09S
eeaGenVQL2egxiLd62KYTabiIYl9T8SBv0S2LQnybnu6kIHc9gfBWo0MLqC7Brg5
d025Q7yIFganFjNz2I3Suk1UlhlGZuDXIzusHaZTtVjG96qXt7OjBu5FGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMt93U0jvSxdouQVGz3iE6IMX5oMB8GA1UdIwQY
MBaAFPYsK3MABAaCTfvHrjiG63hn+OxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWl3cmN3QUVCb0pOLThldU9JYnJlR2Y0N0c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82ODI5YWEtMTFhNS00MmU3LTlmOTYt
NTZlYmY4MjlkNmIyLzEvOWl3cmN3QUVCb0pOLThldU9JYnJlR2Y0N0c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS82ODI5YWEtMTFhNS00MmU3LTlmOTYtNTZlYmY4MjlkNmIy
LzEvOWl3cmN3QUVCb0pOLThldU9JYnJlR2Y0N0c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATR7xAQLy
h/eOz/ZLK6Fv1cBUkzLByF0wTacWiiPB7uMLqfmXleGwv01QI1XmgCVyzZeLERjT
25HNt3FwJDcO8Ls8vlN9rOXQkGy4ce9R9Xug3gNzL9u/BPIiGSzRkKLS6Gy3qJzZ
0X7Iny0ObOkSdV2ZhNo1uQNmZ7oSuIsx53ak5gMuJEsKw7ODnNfZLyEAh2DITu4Z
7xeIgYMAm5oRI/XQv+JY5JuA0ge5M+na17DMeRzkjm34Z+xmUwtW8Eub6YVDzRLT
X3xf76/aVFRUkqytX0daN5knyutscBkqYE+uL6vVcXybl0pxJkP89Emfcs9rotJu
DV53FfKmAMWbEw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:24 2025 by rpki-client