Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.mft
File: 9qiFSCQ7bikKBtKaKzcQS3et5vw.mft (raw, json)
Hash identifier: iVK7ySw8B9VgBRzImTmccqT9InLXWk/jVDTHCBaBNBw=
Subject key identifier: 6A:FF:89:8C:12:E5:D8:BA:C0:D5:34:44:B6:24:9C:E7:70:79:EB:98
Authority key identifier: F6:A8:85:48:24:3B:6E:29:0A:06:D2:9A:2B:37:10:4B:77:AD:E6:FC
Certificate issuer: /CN=f6a88548243b6e290a06d29a2b37104b77ade6fc
Certificate serial: 019923A0C247A356E2646DCAF24D5DF85CD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qiFSCQ7bikKBtKaKzcQS3et5vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.mft
Manifest number: 0195
Signing time: Sun 07 Sep 2025 10:02:41 +0000
Manifest this update: Sun 07 Sep 2025 10:02:41 +0000
Manifest next update: Mon 08 Sep 2025 10:02:41 +0000
Files and hashes: 1: 9qiFSCQ7bikKBtKaKzcQS3et5vw.crl (hash: VEdd6lX72zDO06h9tKWJ3FqkdlM24SthjvjHDEdtw4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9qiFSCQ7bikKBtKaKzcQS3et5vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:c2:47:a3:56:e2:64:6d:ca:f2:4d:5d:f8:5c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6a88548243b6e290a06d29a2b37104b77ade6fc
Validity
Not Before: Sep 7 10:02:41 2025 GMT
Not After : Sep 8 10:02:41 2025 GMT
Subject: CN=6aff898c12e5d8bac0d53444b6249ce77079eb98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f1:52:7b:cc:a4:57:a5:46:27:c9:8f:f4:3b:
64:f8:1e:51:02:62:0d:36:b3:68:a0:b1:68:b7:7c:
1a:84:2d:c1:0c:bf:ba:50:f0:bf:43:8e:2e:f8:50:
52:dd:be:0a:1c:22:c8:4a:1b:8b:d4:d0:86:87:9b:
58:8f:45:f9:a7:0f:df:e9:92:6e:78:73:d9:57:c2:
95:f7:ec:a0:f1:0e:d3:64:ee:9d:af:30:ed:be:bc:
38:9b:dd:42:6b:b9:bf:a6:16:f6:b2:05:d4:f6:40:
2c:07:f7:f5:b6:39:1c:a7:b3:84:82:98:6a:02:f8:
88:39:81:92:5f:5f:e6:5e:19:3f:fb:3b:ba:85:37:
05:b6:87:05:1e:0c:43:93:6c:56:20:80:99:05:ba:
89:b8:93:94:83:8f:b6:c8:3f:b9:08:e7:62:38:7a:
de:0e:36:10:6a:22:17:b2:f1:b9:f0:79:c1:cf:21:
27:39:3c:4f:a8:17:5c:30:80:a0:fc:af:3b:18:cc:
be:20:02:b5:0c:2c:8e:1c:d1:e2:6c:68:26:25:f1:
4e:b0:cc:7b:a2:cc:b6:76:cb:1a:54:59:9f:24:f7:
1f:a4:01:60:c5:aa:ab:47:4b:08:69:49:2f:74:69:
6d:9e:5e:8b:b2:33:60:87:dc:7b:0e:15:6a:54:0b:
54:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FF:89:8C:12:E5:D8:BA:C0:D5:34:44:B6:24:9C:E7:70:79:EB:98
X509v3 Authority Key Identifier:
keyid:F6:A8:85:48:24:3B:6E:29:0A:06:D2:9A:2B:37:10:4B:77:AD:E6:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qiFSCQ7bikKBtKaKzcQS3et5vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e9:66:c3:f7:ed:e1:2b:00:b0:b8:74:d6:f3:7e:d2:50:22:
fc:88:46:78:c0:db:2a:dc:9c:0a:c9:aa:57:cb:74:ba:b1:ae:
5c:00:8e:40:f2:da:f0:24:0d:4e:bd:12:cb:07:2c:27:83:ea:
c5:ba:ce:71:5a:52:26:13:32:b2:89:c6:f0:d6:64:72:fa:86:
15:bc:de:06:b4:ce:bb:cd:16:58:c4:ea:ce:21:d3:d6:ab:8f:
31:a2:4e:05:1d:c9:ed:ac:30:17:5f:80:62:b0:98:6b:36:20:
7b:66:7f:05:cd:31:0b:bb:f8:9f:bd:9e:11:41:05:ba:3d:ed:
68:a7:2d:5e:3d:6d:c8:c7:4c:3f:b2:0a:9f:ec:ae:20:74:84:
00:ff:b1:a4:5b:e8:3e:d0:54:43:2c:84:e7:2a:56:96:35:46:
b2:83:a0:67:54:48:00:95:01:58:b3:b9:04:de:05:65:ca:28:
be:70:de:ef:9f:58:6a:3e:97:08:e9:39:a6:a3:1d:ab:67:5f:
34:0f:5a:b6:3c:b5:cb:94:51:5b:9b:26:cf:c5:fc:4d:a1:27:
3e:09:45:53:7d:df:86:bb:84:4e:03:c2:67:88:26:b0:f5:fa:
79:bc:58:5b:96:0f:dd:68:4a:b0:be:f9:4e:2f:b0:87:ad:79:
90:be:9c:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoMJHo1biZG3K8k1d+FzWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YTg4NTQ4MjQzYjZlMjkwYTA2ZDI5YTJiMzcxMDRiNzdh
ZGU2ZmMwHhcNMjUwOTA3MTAwMjQxWhcNMjUwOTA4MTAwMjQxWjAzMTEwLwYDVQQD
Eyg2YWZmODk4YzEyZTVkOGJhYzBkNTM0NDRiNjI0OWNlNzcwNzllYjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfFSe8ykV6VGJ8mP9Dtk+B5RAmIN
NrNooLFot3wahC3BDL+6UPC/Q44u+FBS3b4KHCLIShuL1NCGh5tYj0X5pw/f6ZJu
eHPZV8KV9+yg8Q7TZO6drzDtvrw4m91Ca7m/phb2sgXU9kAsB/f1tjkcp7OEgphq
AviIOYGSX1/mXhk/+zu6hTcFtocFHgxDk2xWIICZBbqJuJOUg4+2yD+5COdiOHre
DjYQaiIXsvG58HnBzyEnOTxPqBdcMICg/K87GMy+IAK1DCyOHNHibGgmJfFOsMx7
osy2dssaVFmfJPcfpAFgxaqrR0sIaUkvdGltnl6LsjNgh9x7DhVqVAtUMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGr/iYwS5di6wNU0RLYknOdweeuYMB8GA1UdIwQY
MBaAFPaohUgkO24pCgbSmis3EEt3reb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXFpRlNDUTdiaWtLQnRLYUt6Y1FTM2V0NXZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hODRkYmEtZDdhMS00MjA5LWEyMGQt
OTRhZDQ4N2YyZTAxLzEvOXFpRlNDUTdiaWtLQnRLYUt6Y1FTM2V0NXZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9hODRkYmEtZDdhMS00MjA5LWEyMGQtOTRhZDQ4N2YyZTAx
LzEvOXFpRlNDUTdiaWtLQnRLYUt6Y1FTM2V0NXZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHelmw/ft
4SsAsLh01vN+0lAi/IhGeMDbKtycCsmqV8t0urGuXACOQPLa8CQNTr0SywcsJ4Pq
xbrOcVpSJhMysonG8NZkcvqGFbzeBrTOu80WWMTqziHT1quPMaJOBR3J7awwF1+A
YrCYazYge2Z/Bc0xC7v4n72eEUEFuj3taKctXj1tyMdMP7IKn+yuIHSEAP+xpFvo
PtBUQyyE5ypWljVGsoOgZ1RIAJUBWLO5BN4FZcoovnDe759Yaj6XCOk5pqMdq2df
NA9atjy1y5RRW5smz8X8TaEnPglFU33fhruETgPCZ4gmsPX6ebxYW5YP3WhKsL75
Ti+wh615kL6cmA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:13 2025 by rpki-client