Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
File: 9n7U99NVdSgcF2yuPdy9QMxcHdY.mft (raw, json)
Hash identifier: jP79Vdudi1wKkdcUGrhwPHynunUh4+R+6811Bs+2mlk=
Subject key identifier: A6:C0:96:4D:23:9A:52:BC:21:A7:F8:43:F0:86:37:0C:FC:B7:1E:A6
Authority key identifier: F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6
Certificate issuer: /CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
Certificate serial: 019A70DC0624A584A9E6A3D26CCFE9E73934
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 03:00:58 +0000
Manifest this update: Tue 11 Nov 2025 03:00:58 +0000
Manifest next update: Wed 12 Nov 2025 03:00:58 +0000
Files and hashes: 1: 88-pt2hIN1dTOb7W_yyIcsyIKos.roa (hash: rXxfNXMHY0jcVNFeL7a/dvDj6ZDtDB0GLjdB35wLnIg=)
2: 9n7U99NVdSgcF2yuPdy9QMxcHdY.crl (hash: PDlkr+OUuSR6lJ/va8p1FATr0FuXw3jhUqttKCsEC4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:06:24:a5:84:a9:e6:a3:d2:6c:cf:e9:e7:39:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
Validity
Not Before: Nov 11 03:00:58 2025 GMT
Not After : Nov 12 03:00:58 2025 GMT
Subject: CN=a6c0964d239a52bc21a7f843f086370cfcb71ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:19:13:0c:bc:93:fa:33:22:85:3a:ca:f5:d6:
e3:af:1c:84:30:b4:3b:0a:33:42:46:2f:94:97:1b:
6c:c7:22:1c:09:3e:10:4e:cd:d2:39:4d:f5:ac:84:
87:2d:83:bf:88:99:82:f2:8a:7e:90:bf:3f:73:19:
eb:0e:f6:25:a8:c4:29:39:42:bd:4a:a4:cf:63:6a:
50:18:5d:d9:32:bc:78:08:4b:0a:8d:3a:82:1c:4a:
a6:0e:bc:9e:1e:a7:30:be:cb:6f:fe:6a:0d:47:96:
e6:00:d5:d0:c8:35:2d:c9:64:83:d6:62:07:e8:8e:
72:5b:fa:3c:81:d3:e0:83:d8:2b:48:ca:ba:ca:6e:
2c:e5:a2:43:93:b6:5c:f9:68:b6:45:90:25:fc:b2:
d7:c4:1d:e7:e9:cd:8f:36:dd:a1:2a:d0:d3:e3:73:
b9:80:ab:4b:ed:dd:47:94:bd:6e:bf:34:d9:0e:f1:
79:de:fc:27:89:61:3d:40:0f:05:57:51:c9:14:07:
90:ad:f3:3c:dc:c9:aa:01:aa:ae:70:5a:c7:de:d6:
7f:54:45:85:24:ec:ea:ab:e5:b0:5e:ba:34:0c:36:
2d:0f:c5:2a:f0:39:e4:11:26:da:0e:6a:17:4d:cd:
6a:40:44:5f:66:7c:d2:d3:1f:32:37:b8:c9:a5:40:
ac:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C0:96:4D:23:9A:52:BC:21:A7:F8:43:F0:86:37:0C:FC:B7:1E:A6
X509v3 Authority Key Identifier:
keyid:F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:81:ea:e2:88:f2:29:f8:72:8f:49:86:53:34:37:fe:13:c5:
00:56:d1:ab:16:75:93:ec:ee:2c:96:0b:02:34:ba:ce:da:09:
a0:fb:60:da:eb:90:e7:0c:45:ec:c0:66:65:ec:4e:0d:96:8f:
86:59:4d:12:a7:60:37:1d:1d:ed:12:4f:54:cd:bf:34:97:37:
62:8e:04:fc:b2:42:2e:a8:aa:80:75:09:fd:bf:db:21:ef:82:
cc:e6:be:2d:aa:50:06:85:45:1a:43:64:e7:ee:f0:8c:ef:fe:
53:95:23:30:38:cf:b9:67:6f:0b:cd:2a:7b:a3:af:1e:95:5b:
42:e3:28:ee:1c:33:86:72:bc:b0:b5:bb:c4:52:8d:f7:83:c3:
d5:5f:79:0f:6e:51:fe:0a:a2:4f:79:8b:a7:09:d1:f4:3f:52:
c2:81:6d:1a:d6:3a:9c:4e:4e:a3:0f:8d:7c:34:fe:f9:b4:6d:
62:5a:3b:d7:9e:bd:a4:4d:54:ee:45:cd:bb:2a:d3:cd:df:ff:
70:c2:75:a9:d7:34:5e:72:92:c1:9d:4a:81:8f:75:07:77:0c:
c0:67:b9:aa:bc:eb:87:c4:85:42:ba:d1:82:31:dd:44:c8:0d:
1b:d2:7f:59:43:fd:ad:59:a2:cc:71:2c:83:77:48:72:ca:83:
0b:b7:03:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3AYkpYSp5qPSbM/p5zk0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2N2VkNGY3ZDM1NTc1MjgxYzE3NmNhZTNkZGNiZDQwY2M1
YzFkZDYwHhcNMjUxMTExMDMwMDU4WhcNMjUxMTEyMDMwMDU4WjAzMTEwLwYDVQQD
EyhhNmMwOTY0ZDIzOWE1MmJjMjFhN2Y4NDNmMDg2MzcwY2ZjYjcxZWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BkTDLyT+jMihTrK9dbjrxyEMLQ7
CjNCRi+UlxtsxyIcCT4QTs3SOU31rISHLYO/iJmC8op+kL8/cxnrDvYlqMQpOUK9
SqTPY2pQGF3ZMrx4CEsKjTqCHEqmDryeHqcwvstv/moNR5bmANXQyDUtyWSD1mIH
6I5yW/o8gdPgg9grSMq6ym4s5aJDk7Zc+Wi2RZAl/LLXxB3n6c2PNt2hKtDT43O5
gKtL7d1HlL1uvzTZDvF53vwniWE9QA8FV1HJFAeQrfM83MmqAaqucFrH3tZ/VEWF
JOzqq+WwXro0DDYtD8Uq8DnkESbaDmoXTc1qQERfZnzS0x8yN7jJpUCsXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbAlk0jmlK8Iaf4Q/CGNwz8tx6mMB8GA1UdIwQY
MBaAFPZ+1PfTVXUoHBdsrj3cvUDMXB3WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW43VTk5TlZkU2djRjJ5dVBkeTlRTXhjSGRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9iNjJlNzctMzU3YS00YWFkLWJiMjct
ZjQ0ODVhZWQ3NDI5LzEvOW43VTk5TlZkU2djRjJ5dVBkeTlRTXhjSGRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9iNjJlNzctMzU3YS00YWFkLWJiMjctZjQ0ODVhZWQ3NDI5
LzEvOW43VTk5TlZkU2djRjJ5dVBkeTlRTXhjSGRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuYHq4ojy
Kfhyj0mGUzQ3/hPFAFbRqxZ1k+zuLJYLAjS6ztoJoPtg2uuQ5wxF7MBmZexODZaP
hllNEqdgNx0d7RJPVM2/NJc3Yo4E/LJCLqiqgHUJ/b/bIe+CzOa+LapQBoVFGkNk
5+7wjO/+U5UjMDjPuWdvC80qe6OvHpVbQuMo7hwzhnK8sLW7xFKN94PD1V95D25R
/gqiT3mLpwnR9D9SwoFtGtY6nE5Oow+NfDT++bRtYlo71569pE1U7kXNuyrTzd//
cMJ1qdc0XnKSwZ1KgY91B3cMwGe5qrzrh8SFQrrRgjHdRMgNG9J/WUP9rVmizHEs
g3dIcsqDC7cDhw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:53 2025 by rpki-client