Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft
File: 9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft (raw, json)
Hash identifier: IjudC67u8K7CnWgLf86Qa6usEK2LSrYVFdPLagby3v4=
Subject key identifier: 90:64:DD:96:AF:31:E6:44:3C:46:8E:1E:DD:6F:C9:64:5E:27:43:24
Authority key identifier: F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F
Certificate issuer: /CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f
Certificate serial: 019A706DF50DA8D453DA7BA4B1174EB2A0B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft
Manifest number: 172A
Signing time: Tue 11 Nov 2025 01:00:45 +0000
Manifest this update: Tue 11 Nov 2025 01:00:45 +0000
Manifest next update: Wed 12 Nov 2025 01:00:45 +0000
Files and hashes: 1: 9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl (hash: INZ3FFJYqz5TmPazByRQ7izXbCd+Tgpro5yX4mYc/Jk=)
2: ZSBBy6W5L8TTtnlSf_uUrt4Z7AI.roa (hash: jFdtASpUm3buRvq9o0f0zIeX/wlw5jgk9wy5omlh1/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6d:f5:0d:a8:d4:53:da:7b:a4:b1:17:4e:b2:a0:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f
Validity
Not Before: Nov 11 01:00:45 2025 GMT
Not After : Nov 12 01:00:45 2025 GMT
Subject: CN=9064dd96af31e6443c468e1edd6fc9645e274324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0c:e4:d9:92:66:ea:90:e8:72:89:b5:f8:10:
56:18:35:90:1e:a0:07:f3:09:3b:49:83:d4:67:96:
12:f9:70:13:d9:69:cb:75:9c:01:8d:2f:5f:a3:bd:
75:94:73:a2:4c:ee:15:e6:43:6e:a9:56:4b:b3:bb:
c6:20:ad:98:7d:b4:36:58:d1:ce:34:48:e6:0d:e2:
8c:57:34:3b:2c:33:20:ae:bd:d3:e1:f7:c7:25:2d:
26:e3:1a:b9:c3:4d:9a:01:3e:15:82:5a:31:e8:2a:
da:e2:8d:1b:29:cf:23:f1:5b:df:2c:32:a3:02:37:
95:92:01:a6:fa:92:e0:ea:29:23:00:85:48:27:c0:
f1:18:3c:2e:af:41:2e:b1:49:22:6f:e1:fb:28:62:
7c:ef:5a:f7:fc:de:ad:43:85:b2:3f:b3:e7:9f:76:
7f:0e:66:15:08:e9:b4:18:cd:11:95:2c:a1:aa:8a:
02:d6:d6:a4:0c:8a:68:9d:84:82:d7:b4:22:65:5f:
ee:0d:c6:ce:ec:3e:bc:c1:78:96:b5:78:37:bd:dd:
ce:4a:d1:30:2b:0c:64:47:97:43:b6:e1:64:bc:05:
87:14:e6:18:b2:cb:b4:d2:67:2f:3f:33:a3:5d:5a:
9f:c8:d8:d2:d6:21:9a:98:61:ca:30:fb:83:47:72:
aa:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:64:DD:96:AF:31:E6:44:3C:46:8E:1E:DD:6F:C9:64:5E:27:43:24
X509v3 Authority Key Identifier:
keyid:F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:bf:90:7f:62:c1:b1:06:f8:50:f7:20:fb:45:3d:04:00:4c:
13:37:73:b9:de:d2:cd:ca:56:b6:9f:fe:3d:68:22:a3:11:95:
93:74:2c:a5:53:65:63:40:e3:97:77:1b:32:0e:3a:d5:86:ac:
48:2a:a6:1f:86:eb:ef:94:90:5b:d2:c1:5a:2d:37:5d:2c:22:
98:a5:e5:96:9a:a9:a7:02:22:82:3a:f8:86:8e:3e:3b:ca:5a:
04:9d:68:df:89:96:7b:15:8b:5b:11:5f:a1:c4:98:22:24:ad:
80:68:93:47:a8:f7:57:33:80:33:c8:c5:f0:35:f3:07:a0:41:
31:58:63:8b:9c:c6:6b:82:d5:9e:31:30:4e:f4:0f:7e:08:61:
23:bc:5c:ba:a1:23:8d:8b:91:00:60:f6:7b:da:0f:e0:a9:d7:
04:c6:23:4a:e6:1c:aa:55:7a:dd:c3:d2:bd:02:2a:ee:a3:35:
0d:c1:2b:34:1a:d0:16:b8:3a:40:e6:ef:e9:50:cb:31:0d:c5:
63:1e:c7:13:0b:88:aa:8d:73:08:10:2e:0f:f1:af:b4:e5:1d:
ed:85:a1:1c:61:f5:30:ab:80:9e:e6:bc:a5:b9:f8:f2:3c:df:
fa:58:fa:ff:e9:69:9f:e8:7c:da:50:ab:04:a8:e0:50:36:b0:
e4:a4:85:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwbfUNqNRT2nuksRdOsqC3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZGFmMGJhMjFlOTAyMDI1OTdlZTQ3ZTA5ZjY4NzdmZTIz
YzJhOWYwHhcNMjUxMTExMDEwMDQ1WhcNMjUxMTEyMDEwMDQ1WjAzMTEwLwYDVQQD
Eyg5MDY0ZGQ5NmFmMzFlNjQ0M2M0NjhlMWVkZDZmYzk2NDVlMjc0MzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAzk2ZJm6pDocom1+BBWGDWQHqAH
8wk7SYPUZ5YS+XAT2WnLdZwBjS9fo711lHOiTO4V5kNuqVZLs7vGIK2YfbQ2WNHO
NEjmDeKMVzQ7LDMgrr3T4ffHJS0m4xq5w02aAT4Vglox6Cra4o0bKc8j8VvfLDKj
AjeVkgGm+pLg6ikjAIVIJ8DxGDwur0EusUkib+H7KGJ871r3/N6tQ4WyP7Pnn3Z/
DmYVCOm0GM0RlSyhqooC1takDIponYSC17QiZV/uDcbO7D68wXiWtXg3vd3OStEw
KwxkR5dDtuFkvAWHFOYYssu00mcvPzOjXVqfyNjS1iGamGHKMPuDR3KqkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJBk3ZavMeZEPEaOHt1vyWReJ0MkMB8GA1UdIwQY
MBaAFPXa8Loh6QICWX7kfgn2h3/iPCqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWRyd3VpSHBBZ0paZnVSLUNmYUhmLUk4S3A4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85MDY4YTUtNzk3OS00ZjhjLWJmODIt
Y2ZlMmE5NjU3YzI2LzEvOWRyd3VpSHBBZ0paZnVSLUNmYUhmLUk4S3A4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS85MDY4YTUtNzk3OS00ZjhjLWJmODItY2ZlMmE5NjU3YzI2
LzEvOWRyd3VpSHBBZ0paZnVSLUNmYUhmLUk4S3A4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjb+Qf2LB
sQb4UPcg+0U9BABMEzdzud7SzcpWtp/+PWgioxGVk3QspVNlY0Djl3cbMg461Yas
SCqmH4br75SQW9LBWi03XSwimKXllpqppwIigjr4ho4+O8paBJ1o34mWexWLWxFf
ocSYIiStgGiTR6j3VzOAM8jF8DXzB6BBMVhji5zGa4LVnjEwTvQPfghhI7xcuqEj
jYuRAGD2e9oP4KnXBMYjSuYcqlV63cPSvQIq7qM1DcErNBrQFrg6QObv6VDLMQ3F
Yx7HEwuIqo1zCBAuD/GvtOUd7YWhHGH1MKuAnua8pbn48jzf+lj6/+lpn+h82lCr
BKjgUDaw5KSFrQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:20 2025 by rpki-client