Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
File: C9StlfF_OXIHo_wNGG8pE98465M.mft (raw, json)
Hash identifier: hs+1imxYqgtQzhr11PqNHolx44wOEIOYrFyeCvARGe0=
Subject key identifier: 79:4B:60:DD:53:F9:BC:1F:39:DC:8D:EE:2E:09:6C:CB:83:96:2B:1E
Authority key identifier: 0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
Certificate issuer: /CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Certificate serial: 019A2666D8F97FBCC342AAFBD51D26CCCAFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
Manifest number: 1409
Signing time: Mon 27 Oct 2025 16:01:05 +0000
Manifest this update: Mon 27 Oct 2025 16:01:05 +0000
Manifest next update: Tue 28 Oct 2025 16:01:05 +0000
Files and hashes: 1: 1tUtdPntOZo4oZY0gj-5-iL3XLM.roa (hash: qzUzuRDUtz2FZx8A/P+rSyUpdTrCQoQOZBqqm3OS2Vc=)
2: C9StlfF_OXIHo_wNGG8pE98465M.crl (hash: nHleTjgw0Mjn1nP6DNITc5qrsTP3Swe7Rsg567JwKUg=)
3: r0fYtM8vJLJuud_1zoCTV08hICU.roa (hash: N3MrpQwzFuxLwGpoLCDJQ7HCyHzM8rSnUBKZzdYMHOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:66:d8:f9:7f:bc:c3:42:aa:fb:d5:1d:26:cc:ca:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Validity
Not Before: Oct 27 16:01:05 2025 GMT
Not After : Oct 28 16:01:05 2025 GMT
Subject: CN=794b60dd53f9bc1f39dc8dee2e096ccb83962b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:39:0e:da:f4:26:78:9f:04:2b:68:6b:76:
0a:a7:a5:36:ef:0b:a0:b0:22:8c:1c:d5:92:a0:2f:
25:5a:62:9b:13:48:9d:6e:8c:c9:79:f5:87:f5:da:
13:61:de:1d:1a:83:b4:5e:c7:17:c5:43:13:b7:e3:
9c:3e:c6:10:15:9d:28:c1:3a:d2:a8:05:0d:59:97:
41:33:2a:af:33:9d:af:b9:9f:7d:e3:c4:b1:8c:5e:
8e:b6:7e:85:09:38:63:0e:8b:40:15:c9:a1:83:d8:
b6:7d:c9:1e:19:54:c1:07:7a:bb:97:a5:fb:48:fb:
e9:32:76:2a:20:56:eb:0c:ea:ec:64:01:d5:82:fe:
96:4c:c6:0a:ae:f5:d2:69:92:a9:57:81:62:a3:22:
84:78:5b:af:6e:d3:7f:85:1f:05:50:0c:cc:02:49:
be:aa:0a:92:f2:a8:9b:e1:e7:b3:00:ae:43:e9:49:
2f:5d:90:3e:b9:20:b5:53:be:5d:45:ae:81:8c:1b:
a5:d9:f5:d9:46:15:04:c1:b4:56:27:7f:48:0d:cb:
dc:ea:f4:42:3b:0e:2b:8e:ed:5e:79:5b:3a:28:56:
55:27:ea:61:b1:c3:74:0f:98:a9:8f:5d:94:7a:86:
2d:82:f6:ac:08:06:b5:f8:3c:d4:54:e4:1b:6c:20:
e5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4B:60:DD:53:F9:BC:1F:39:DC:8D:EE:2E:09:6C:CB:83:96:2B:1E
X509v3 Authority Key Identifier:
keyid:0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:90:c4:cf:a1:7f:8e:d3:a2:aa:2d:40:6d:6d:67:a6:10:e6:
86:ea:91:b5:39:84:28:38:bd:22:d2:28:09:07:1f:b6:a4:c5:
8f:66:55:0f:7b:5b:00:31:35:94:e7:b4:c8:00:4e:6a:34:69:
ed:19:aa:37:a8:06:3c:fe:61:a6:6c:01:9e:0d:df:d3:e6:3f:
cf:db:aa:87:a2:8f:22:af:87:bf:11:9d:9b:d7:c3:dd:fd:60:
fb:76:1c:b8:eb:7c:fd:35:09:3a:d2:91:97:cc:f7:8e:fc:39:
e3:6a:05:3b:ac:1f:e2:95:19:98:1b:56:d9:21:c3:24:6b:df:
30:79:84:3f:7a:55:e7:7f:4e:61:6f:26:57:8e:f5:8e:55:db:
7a:a1:1d:f4:b7:3c:c4:a4:a8:68:1f:b8:47:ff:00:b7:63:81:
6b:b3:94:b5:8f:bd:1f:4b:23:99:4b:2d:d9:7a:79:f4:20:fb:
cd:36:69:c2:c3:6c:98:98:76:ef:1d:98:75:b0:8d:10:0e:31:
0e:18:20:af:94:57:93:23:3b:32:95:ce:7d:f0:53:4c:70:69:
9d:8d:7d:73:9e:07:42:df:98:b4:4e:ae:3f:2c:f8:ad:d9:57:
c6:d8:c3:45:90:a5:c2:c6:91:04:a7:53:09:26:37:43:88:36:
03:07:c4:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZomZtj5f7zDQqr71R0mzMr6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZDRhZDk1ZjE3ZjM5NzIwN2EzZmMwZDE4NmYyOTEzZGYz
OGViOTMwHhcNMjUxMDI3MTYwMTA1WhcNMjUxMDI4MTYwMTA1WjAzMTEwLwYDVQQD
Eyg3OTRiNjBkZDUzZjliYzFmMzlkYzhkZWUyZTA5NmNjYjgzOTYyYjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoQ5Dtr0JnifBCtoa3YKp6U27wug
sCKMHNWSoC8lWmKbE0idbozJefWH9doTYd4dGoO0XscXxUMTt+OcPsYQFZ0owTrS
qAUNWZdBMyqvM52vuZ9948SxjF6Otn6FCThjDotAFcmhg9i2fckeGVTBB3q7l6X7
SPvpMnYqIFbrDOrsZAHVgv6WTMYKrvXSaZKpV4FioyKEeFuvbtN/hR8FUAzMAkm+
qgqS8qib4eezAK5D6UkvXZA+uSC1U75dRa6BjBul2fXZRhUEwbRWJ39IDcvc6vRC
Ow4rju1eeVs6KFZVJ+phscN0D5ipj12UeoYtgvasCAa1+DzUVOQbbCDlTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlLYN1T+bwfOdyN7i4JbMuDliseMB8GA1UdIwQY
MBaAFAvUrZXxfzlyB6P8DRhvKRPfOOuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzlTdGxmRl9PWElIb193TkdHOHBFOTg0NjVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83NmQwODItYWMzMi00NzM4LTk5ZTYt
YjJmNjA4NjM2OGM3LzEvQzlTdGxmRl9PWElIb193TkdHOHBFOTg0NjVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83NmQwODItYWMzMi00NzM4LTk5ZTYtYjJmNjA4NjM2OGM3
LzEvQzlTdGxmRl9PWElIb193TkdHOHBFOTg0NjVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAJDEz6F/
jtOiqi1AbW1nphDmhuqRtTmEKDi9ItIoCQcftqTFj2ZVD3tbADE1lOe0yABOajRp
7RmqN6gGPP5hpmwBng3f0+Y/z9uqh6KPIq+HvxGdm9fD3f1g+3YcuOt8/TUJOtKR
l8z3jvw542oFO6wf4pUZmBtW2SHDJGvfMHmEP3pV539OYW8mV471jlXbeqEd9Lc8
xKSoaB+4R/8At2OBa7OUtY+9H0sjmUst2Xp59CD7zTZpwsNsmJh27x2YdbCNEA4x
Dhggr5RXkyM7MpXOffBTTHBpnY19c54HQt+YtE6uPyz4rdlXxtjDRZClwsaRBKdT
CSY3Q4g2AwfEMw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 20:37:36 2025 by rpki-client