Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
File: 9krUXSK1888ucc4KwBB0t80hrFc.mft (raw, json)
Hash identifier: ayBfRjOIJKe0A7S1DaeXc5h4Rfziyi4LeJrt3n5PxdM=
Subject key identifier: FE:7B:7A:36:66:07:24:54:5D:EE:52:A1:4D:21:FE:BB:42:2C:36:91
Authority key identifier: F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
Certificate issuer: /CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Certificate serial: 019A0748E070ACAAE23CDB5DE527E5A55B1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
Manifest number: 1597
Signing time: Tue 21 Oct 2025 15:00:07 +0000
Manifest this update: Tue 21 Oct 2025 15:00:07 +0000
Manifest next update: Wed 22 Oct 2025 15:00:07 +0000
Files and hashes: 1: 9krUXSK1888ucc4KwBB0t80hrFc.crl (hash: ewoFKw/sojj924gv1J6caMDlxYbTGhwupaFM3yGmMRY=)
2: mgSfpYYXhzx-YzhWkHnATXB2kdM.roa (hash: jRZKuHYyv7qD4dtktC7M7U3X1Ig58/uIyWzJPwsvUJw=)
3: rNfq-FdDmBkThN1vTMRNxR08DZE.roa (hash: W7X3TtRWNC36QWPCWtaayZ46NgLlqWMrgmB/Yk/phsc=)
4: rnFKFHUDJ2VK_n3nnMWQgvu93Us.roa (hash: ddxwbWDe9h7jTPjb6zGryBRSU7cXly9K/marvCxyA4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:48:e0:70:ac:aa:e2:3c:db:5d:e5:27:e5:a5:5b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Validity
Not Before: Oct 21 15:00:07 2025 GMT
Not After : Oct 22 15:00:07 2025 GMT
Subject: CN=fe7b7a36660724545dee52a14d21febb422c3691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e2:9b:02:f4:e9:c0:0e:97:54:9e:06:2c:b0:
b3:49:64:57:44:d9:ed:4c:e7:1c:c1:33:b4:9d:87:
c5:6f:42:01:a9:33:cf:83:17:6c:91:bb:6c:cc:c9:
76:20:af:25:56:bf:1e:f6:8f:ef:b8:98:49:69:d6:
32:62:fe:9f:5f:52:7d:24:a7:e7:a3:67:76:ed:80:
ac:5d:d1:aa:40:4d:bd:dc:90:f4:6c:a9:f5:e0:d9:
16:3e:df:d8:a0:0b:83:11:14:32:c6:b0:3a:d1:52:
36:5a:c0:90:3a:e0:d5:ab:b5:3f:ef:0b:4e:11:d0:
f1:e0:8e:e3:10:21:88:ca:a0:65:e3:8e:91:ab:99:
e3:71:e2:6c:13:b2:bc:70:64:20:cd:17:b0:c7:dc:
aa:ad:e5:75:40:ee:48:98:e5:e1:c1:d5:83:50:3e:
17:e0:16:6d:2e:58:af:e7:05:fd:24:68:4a:b0:be:
33:32:eb:22:ec:dc:eb:93:5f:f7:5e:35:0c:f1:43:
78:3f:f7:b5:59:8d:e0:ac:df:a0:c9:e7:58:dd:20:
45:22:42:be:29:06:05:d3:43:4a:a1:14:69:e3:08:
51:df:14:7d:f0:81:a8:92:40:fd:14:e0:b4:64:9d:
5d:86:29:53:ee:50:51:d1:ae:a9:e2:fa:6d:24:a3:
67:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7B:7A:36:66:07:24:54:5D:EE:52:A1:4D:21:FE:BB:42:2C:36:91
X509v3 Authority Key Identifier:
keyid:F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e4:89:21:4a:15:97:52:a0:e8:4e:57:02:39:20:22:f9:81:
67:34:ad:96:87:42:0d:76:94:cc:87:b7:67:ae:e0:c6:fb:fc:
b2:81:6e:12:d5:a6:82:fb:b1:86:f9:45:01:cf:e3:cb:4d:a1:
00:25:8c:67:27:3f:8c:8e:88:0f:a5:14:b5:e9:70:e3:2d:e7:
50:80:9c:66:13:52:76:7c:f1:e8:01:47:9d:2d:7b:8e:0e:d9:
e1:f5:83:14:7d:e8:90:88:83:68:94:b3:c4:c6:9a:28:e7:63:
2c:b5:e3:b4:dc:ac:42:3d:7c:13:0c:fd:9e:d3:4f:d3:ec:87:
38:c4:09:dd:b2:04:3a:ce:97:18:b2:7a:c9:29:69:67:7c:c9:
ab:1f:8e:ad:da:73:6c:6d:0d:58:20:b2:3f:ed:5b:8b:ab:15:
25:2d:f6:60:f1:79:f6:de:7b:59:b9:6e:51:d8:9a:1f:80:9d:
69:d4:bd:d0:f0:d4:ac:53:69:ae:81:6e:c5:47:d4:bb:bb:d6:
53:fc:1c:52:5c:c3:c3:65:68:c9:c0:53:cf:c5:59:71:03:3c:
97:27:77:99:45:64:02:4c:c1:fe:d3:97:8c:5a:4e:7c:ea:e3:
e5:a3:6e:6c:4c:bb:4e:dd:11:35:3d:3c:d0:05:a2:6a:dd:a6:
04:2b:1e:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoHSOBwrKriPNtd5SflpVseMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NGFkNDVkMjJiNWYzY2YyZTcxY2UwYWMwMTA3NGI3Y2Qy
MWFjNTcwHhcNMjUxMDIxMTUwMDA3WhcNMjUxMDIyMTUwMDA3WjAzMTEwLwYDVQQD
EyhmZTdiN2EzNjY2MDcyNDU0NWRlZTUyYTE0ZDIxZmViYjQyMmMzNjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOKbAvTpwA6XVJ4GLLCzSWRXRNnt
TOccwTO0nYfFb0IBqTPPgxdskbtszMl2IK8lVr8e9o/vuJhJadYyYv6fX1J9JKfn
o2d27YCsXdGqQE293JD0bKn14NkWPt/YoAuDERQyxrA60VI2WsCQOuDVq7U/7wtO
EdDx4I7jECGIyqBl446Rq5njceJsE7K8cGQgzRewx9yqreV1QO5ImOXhwdWDUD4X
4BZtLliv5wX9JGhKsL4zMusi7Nzrk1/3XjUM8UN4P/e1WY3grN+gyedY3SBFIkK+
KQYF00NKoRRp4whR3xR98IGokkD9FOC0ZJ1dhilT7lBR0a6p4vptJKNndQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP57ejZmByRUXe5SoU0h/rtCLDaRMB8GA1UdIwQY
MBaAFPZK1F0itfPPLnHOCsAQdLfNIaxXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWtyVVhTSzE4ODh1Y2M0S3dCQjB0ODBockZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9lZTNiODQtMjdkNy00ZGM3LThmM2Qt
Njk5YjIzNGZjNzhjLzEvOWtyVVhTSzE4ODh1Y2M0S3dCQjB0ODBockZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9lZTNiODQtMjdkNy00ZGM3LThmM2QtNjk5YjIzNGZjNzhj
LzEvOWtyVVhTSzE4ODh1Y2M0S3dCQjB0ODBockZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANuSJIUoV
l1Kg6E5XAjkgIvmBZzStlodCDXaUzIe3Z67gxvv8soFuEtWmgvuxhvlFAc/jy02h
ACWMZyc/jI6ID6UUtelw4y3nUICcZhNSdnzx6AFHnS17jg7Z4fWDFH3okIiDaJSz
xMaaKOdjLLXjtNysQj18Ewz9ntNP0+yHOMQJ3bIEOs6XGLJ6ySlpZ3zJqx+Ordpz
bG0NWCCyP+1bi6sVJS32YPF59t57WbluUdiaH4CdadS90PDUrFNproFuxUfUu7vW
U/wcUlzDw2VoycBTz8VZcQM8lyd3mUVkAkzB/tOXjFpOfOrj5aNubEy7Tt0RNT08
0AWiat2mBCseUA==
-----END CERTIFICATE-----
Generated at Tue Oct 21 18:17:29 2025 by rpki-client