Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
File: C9StlfF_OXIHo_wNGG8pE98465M.mft (raw, json)
Hash identifier: /uUT4UPh7NJrJQGxtzaJI2cbUwh9dpFgdUnolksXtgQ=
Subject key identifier: A9:8B:7A:42:D8:2C:AB:34:35:91:9F:E9:23:55:F8:03:8D:C5:56:4C
Authority key identifier: 0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
Certificate issuer: /CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Certificate serial: 019936EFF0137EAEF495310D6CDFBC0B1594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
Manifest number: 138D
Signing time: Thu 11 Sep 2025 04:01:58 +0000
Manifest this update: Thu 11 Sep 2025 04:01:58 +0000
Manifest next update: Fri 12 Sep 2025 04:01:58 +0000
Files and hashes: 1: 1tUtdPntOZo4oZY0gj-5-iL3XLM.roa (hash: qzUzuRDUtz2FZx8A/P+rSyUpdTrCQoQOZBqqm3OS2Vc=)
2: C9StlfF_OXIHo_wNGG8pE98465M.crl (hash: dn3wAJRCo2sPqM3qTPdApq3Gbpoaum9/RPoEni2po1k=)
3: r0fYtM8vJLJuud_1zoCTV08hICU.roa (hash: N3MrpQwzFuxLwGpoLCDJQ7HCyHzM8rSnUBKZzdYMHOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:ef:f0:13:7e:ae:f4:95:31:0d:6c:df:bc:0b:15:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Validity
Not Before: Sep 11 04:01:58 2025 GMT
Not After : Sep 12 04:01:58 2025 GMT
Subject: CN=a98b7a42d82cab3435919fe92355f8038dc5564c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:91:7f:d4:6f:bd:8c:e0:a0:c7:aa:a8:80:ac:
54:b1:6b:ae:29:8f:e4:e7:0d:57:90:a9:0b:0c:e2:
ad:e9:46:57:9f:c3:e4:34:d3:85:20:49:c0:f7:67:
de:f5:11:ea:bf:4a:97:46:29:79:83:ca:55:4e:91:
03:b5:55:57:a1:39:da:03:67:3d:93:2e:c2:51:28:
39:90:0a:56:33:c2:63:ae:68:fd:d7:6a:b5:7d:75:
eb:6d:6d:7c:9a:e7:89:5f:c5:d0:2a:4b:1f:82:25:
eb:12:3d:54:98:9d:72:30:1f:4e:7b:72:21:1b:c1:
6c:9a:2f:94:37:91:3b:47:ed:c6:79:37:5d:70:56:
f8:99:37:ae:fa:42:b5:23:9e:5b:0d:f4:19:de:76:
1f:3d:aa:71:6f:8f:fb:20:c1:6c:a4:1a:8b:d7:60:
6c:3f:8f:b5:b9:cf:b4:04:6d:68:ef:c0:f6:74:58:
2f:a1:cc:7e:c2:6c:28:a9:37:24:93:75:38:f8:14:
d3:a2:99:c3:41:e5:14:87:c2:1c:23:18:c2:a4:e3:
1f:f4:a8:92:a7:50:f7:d2:d1:10:43:c1:68:16:aa:
68:14:aa:1f:7e:87:68:cc:3f:d4:00:fe:16:91:93:
1b:d4:b4:43:e7:6b:f4:18:d3:b7:ea:cd:7c:13:cf:
4d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8B:7A:42:D8:2C:AB:34:35:91:9F:E9:23:55:F8:03:8D:C5:56:4C
X509v3 Authority Key Identifier:
keyid:0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:ce:f6:78:10:d9:7e:28:24:cc:b6:b1:69:6c:97:cf:22:24:
05:43:bd:3b:51:7e:16:1e:d1:9c:65:7a:b3:35:08:e1:a1:cb:
ab:92:0a:34:4b:27:31:ea:93:f4:67:9d:84:b1:d8:3c:20:0e:
9f:1b:97:9b:fd:f0:a6:bd:d8:49:17:90:61:1b:28:16:3c:fa:
0b:26:59:78:90:26:8b:6e:18:8f:19:6a:4e:b6:42:dc:ab:3d:
06:22:18:79:e8:55:dd:e5:07:95:e5:ba:aa:74:68:56:b9:33:
63:ec:87:17:69:57:d2:82:6b:58:cd:85:b4:1d:49:11:49:d8:
8b:d5:11:79:50:98:90:d5:91:8d:43:a4:bf:d0:b3:eb:03:d4:
00:84:3d:70:e3:5b:cb:24:d0:f6:48:11:01:8b:0d:dc:f3:94:
6e:f2:44:11:cd:8d:67:c0:0c:cc:3a:bb:97:20:ce:03:87:8e:
a6:c0:35:bd:e8:e6:4c:bf:3c:25:1e:05:6b:07:cf:e7:10:fc:
09:29:8f:e9:67:d7:4c:06:ba:b1:f0:25:ac:a3:77:2b:f1:31:
67:4f:ab:57:71:a3:b9:6e:f7:55:c6:31:b7:f5:7f:89:05:0d:
33:49:9f:70:f5:2a:41:e4:6a:e0:81:6c:3b:a1:37:ac:01:a5:
dc:2c:41:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk27/ATfq70lTENbN+8CxWUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZDRhZDk1ZjE3ZjM5NzIwN2EzZmMwZDE4NmYyOTEzZGYz
OGViOTMwHhcNMjUwOTExMDQwMTU4WhcNMjUwOTEyMDQwMTU4WjAzMTEwLwYDVQQD
EyhhOThiN2E0MmQ4MmNhYjM0MzU5MTlmZTkyMzU1ZjgwMzhkYzU1NjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpF/1G+9jOCgx6qogKxUsWuuKY/k
5w1XkKkLDOKt6UZXn8PkNNOFIEnA92fe9RHqv0qXRil5g8pVTpEDtVVXoTnaA2c9
ky7CUSg5kApWM8Jjrmj912q1fXXrbW18mueJX8XQKksfgiXrEj1UmJ1yMB9Oe3Ih
G8Fsmi+UN5E7R+3GeTddcFb4mTeu+kK1I55bDfQZ3nYfPapxb4/7IMFspBqL12Bs
P4+1uc+0BG1o78D2dFgvocx+wmwoqTckk3U4+BTTopnDQeUUh8IcIxjCpOMf9KiS
p1D30tEQQ8FoFqpoFKoffodozD/UAP4WkZMb1LRD52v0GNO36s18E89NkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmLekLYLKs0NZGf6SNV+AONxVZMMB8GA1UdIwQY
MBaAFAvUrZXxfzlyB6P8DRhvKRPfOOuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzlTdGxmRl9PWElIb193TkdHOHBFOTg0NjVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83NmQwODItYWMzMi00NzM4LTk5ZTYt
YjJmNjA4NjM2OGM3LzEvQzlTdGxmRl9PWElIb193TkdHOHBFOTg0NjVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83NmQwODItYWMzMi00NzM4LTk5ZTYtYjJmNjA4NjM2OGM3
LzEvQzlTdGxmRl9PWElIb193TkdHOHBFOTg0NjVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv872eBDZ
figkzLaxaWyXzyIkBUO9O1F+Fh7RnGV6szUI4aHLq5IKNEsnMeqT9GedhLHYPCAO
nxuXm/3wpr3YSReQYRsoFjz6CyZZeJAmi24YjxlqTrZC3Ks9BiIYeehV3eUHleW6
qnRoVrkzY+yHF2lX0oJrWM2FtB1JEUnYi9UReVCYkNWRjUOkv9Cz6wPUAIQ9cONb
yyTQ9kgRAYsN3POUbvJEEc2NZ8AMzDq7lyDOA4eOpsA1vejmTL88JR4FawfP5xD8
CSmP6WfXTAa6sfAlrKN3K/ExZ0+rV3GjuW73VcYxt/V/iQUNM0mfcPUqQeRq4IFs
O6E3rAGl3CxBSQ==
-----END CERTIFICATE-----
Generated at Thu Sep 11 08:59:15 2025 by rpki-client