Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
File: 9fqTbNBbJl9g8zNAqMY952gvw18.mft (raw, json)
Hash identifier: mBVCYYSDoJ0U3e8280FaMYwHP6meDeKxaDCObcR4AYk=
Subject key identifier: 2F:53:30:4F:C2:CC:1F:88:88:D9:C6:3F:C9:4D:76:77:47:6D:50:99
Authority key identifier: F5:FA:93:6C:D0:5B:26:5F:60:F3:33:40:A8:C6:3D:E7:68:2F:C3:5F
Certificate issuer: /CN=f5fa936cd05b265f60f33340a8c63de7682fc35f
Certificate serial: 019A7112A37E207C8E6FC00F75B9D3635BB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
Manifest number: 070C
Signing time: Tue 11 Nov 2025 04:00:38 +0000
Manifest this update: Tue 11 Nov 2025 04:00:38 +0000
Manifest next update: Wed 12 Nov 2025 04:00:38 +0000
Files and hashes: 1: 9fqTbNBbJl9g8zNAqMY952gvw18.crl (hash: 1YtWqgEBp78sY458R7GUNzP1INDmBGyPq3ZVrdrpnZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:a3:7e:20:7c:8e:6f:c0:0f:75:b9:d3:63:5b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fa936cd05b265f60f33340a8c63de7682fc35f
Validity
Not Before: Nov 11 04:00:38 2025 GMT
Not After : Nov 12 04:00:38 2025 GMT
Subject: CN=2f53304fc2cc1f8888d9c63fc94d7677476d5099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c5:9f:a0:60:6b:4e:3f:9d:ba:59:f0:4a:8b:
a3:57:1f:89:ab:59:bd:44:5a:e7:02:0f:68:a0:a1:
01:8c:e3:5c:19:ad:d1:c1:04:63:7b:e4:69:2e:b5:
8c:77:35:ff:23:df:b3:d4:ea:1c:87:07:38:76:c8:
62:21:9c:02:16:8f:f9:ab:a0:8d:13:0c:50:5f:ab:
60:67:1d:db:f2:95:16:94:13:db:06:17:b7:77:45:
77:35:16:84:e5:5e:b5:d2:ba:33:82:aa:e2:dd:91:
27:89:52:8d:51:86:f4:b3:40:f1:43:02:2c:7a:9e:
ca:f4:7e:f5:57:77:0b:a2:8a:a4:8a:25:07:83:56:
90:64:14:ec:cc:a3:d8:d1:fe:8f:4b:98:53:78:38:
af:f6:e4:6a:6f:23:54:f6:9e:0c:67:1d:ef:b1:07:
f1:8c:d7:49:ee:1a:e0:94:9b:e9:38:3c:9d:dd:00:
ca:dc:c0:e5:76:06:e6:d2:5f:95:83:f4:ac:49:01:
6c:ce:24:72:24:b4:35:45:41:a5:e1:5c:df:62:79:
df:9a:6e:66:d0:dc:03:db:b8:57:e3:cf:bf:65:f2:
09:04:e8:8e:2a:9d:b4:c1:86:06:dc:17:c5:cb:59:
2a:7d:3d:ee:0b:64:1e:95:d4:a1:0e:1a:4e:19:a7:
78:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:53:30:4F:C2:CC:1F:88:88:D9:C6:3F:C9:4D:76:77:47:6D:50:99
X509v3 Authority Key Identifier:
keyid:F5:FA:93:6C:D0:5B:26:5F:60:F3:33:40:A8:C6:3D:E7:68:2F:C3:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:46:c1:18:d6:b1:69:08:d0:29:3d:95:63:4a:bb:26:c2:44:
90:a3:5f:64:56:e5:16:c4:ff:35:9a:b5:ef:df:38:5f:5a:74:
35:94:c9:fc:aa:cd:c2:86:32:1e:9f:31:bb:41:6f:81:ad:88:
6b:d5:10:56:d7:e3:34:74:8b:32:b2:19:20:63:b0:b0:b7:e4:
da:df:eb:8a:5a:07:2b:eb:c5:20:cb:33:ac:c2:c3:ac:30:1a:
76:a6:ec:d6:6a:50:cb:ff:34:e2:e8:ce:9c:66:a7:06:25:ec:
7e:ef:eb:4c:ee:c9:00:db:5f:81:47:d6:e8:87:ae:eb:31:b2:
be:6f:de:29:9e:a3:2e:73:cb:4b:f1:3a:59:1a:e6:15:96:54:
28:7e:e5:94:44:eb:ed:95:99:fb:fc:e3:a3:19:af:2a:92:6e:
df:80:60:39:52:1e:24:f7:29:b1:7c:2b:49:3f:d1:21:fa:fa:
88:f7:75:62:97:7a:22:53:17:82:d5:9d:c4:a3:3e:c5:78:be:
b8:52:05:53:6b:54:aa:4e:03:d3:d5:f9:79:1a:9d:be:ba:36:
b1:20:f2:a3:4c:4b:9f:05:01:74:cc:7f:77:de:5f:d6:82:63:
d1:40:e3:fb:e7:79:2a:66:9e:17:0d:1a:1a:4c:cf:c7:2e:62:
d5:d4:24:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEqN+IHyOb8APdbnTY1u3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZmE5MzZjZDA1YjI2NWY2MGYzMzM0MGE4YzYzZGU3Njgy
ZmMzNWYwHhcNMjUxMTExMDQwMDM4WhcNMjUxMTEyMDQwMDM4WjAzMTEwLwYDVQQD
EygyZjUzMzA0ZmMyY2MxZjg4ODhkOWM2M2ZjOTRkNzY3NzQ3NmQ1MDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMWfoGBrTj+dulnwSoujVx+Jq1m9
RFrnAg9ooKEBjONcGa3RwQRje+RpLrWMdzX/I9+z1Oochwc4dshiIZwCFo/5q6CN
EwxQX6tgZx3b8pUWlBPbBhe3d0V3NRaE5V610rozgqri3ZEniVKNUYb0s0DxQwIs
ep7K9H71V3cLooqkiiUHg1aQZBTszKPY0f6PS5hTeDiv9uRqbyNU9p4MZx3vsQfx
jNdJ7hrglJvpODyd3QDK3MDldgbm0l+Vg/SsSQFsziRyJLQ1RUGl4VzfYnnfmm5m
0NwD27hX48+/ZfIJBOiOKp20wYYG3BfFy1kqfT3uC2QeldShDhpOGad4IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9TME/CzB+IiNnGP8lNdndHbVCZMB8GA1UdIwQY
MBaAFPX6k2zQWyZfYPMzQKjGPedoL8NfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWZxVGJOQmJKbDlnOHpOQXFNWTk1Mmd2dzE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC82ZTc2NzAtNjMxZC00Nzg3LWFlZGEt
ZjE1ODZmYmRlODFhLzEvOWZxVGJOQmJKbDlnOHpOQXFNWTk1Mmd2dzE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC82ZTc2NzAtNjMxZC00Nzg3LWFlZGEtZjE1ODZmYmRlODFh
LzEvOWZxVGJOQmJKbDlnOHpOQXFNWTk1Mmd2dzE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEUbBGNax
aQjQKT2VY0q7JsJEkKNfZFblFsT/NZq17984X1p0NZTJ/KrNwoYyHp8xu0Fvga2I
a9UQVtfjNHSLMrIZIGOwsLfk2t/riloHK+vFIMszrMLDrDAadqbs1mpQy/804ujO
nGanBiXsfu/rTO7JANtfgUfW6Ieu6zGyvm/eKZ6jLnPLS/E6WRrmFZZUKH7llETr
7ZWZ+/zjoxmvKpJu34BgOVIeJPcpsXwrST/RIfr6iPd1Ypd6IlMXgtWdxKM+xXi+
uFIFU2tUqk4D09X5eRqdvro2sSDyo0xLnwUBdMx/d95f1oJj0UDj++d5KmaeFw0a
GkzPxy5i1dQkig==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:31 2025 by rpki-client