Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
File: ex9VfuJjyzWaGeos1_oOjJE563Y.mft (raw, json)
Hash identifier: pzHSITGFfh1qaapsE86Mh3iMUH+xV0n7I4QHmsSecnE=
Subject key identifier: 92:78:1A:36:8B:F4:AF:FD:1D:A8:19:4E:78:E6:1E:9F:B3:D2:7C:C6
Authority key identifier: 7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76
Certificate issuer: /CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76
Certificate serial: 019A5119781BD0F039801770167B6CCAD20D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
Manifest number: 1714
Signing time: Tue 04 Nov 2025 23:00:14 +0000
Manifest this update: Tue 04 Nov 2025 23:00:14 +0000
Manifest next update: Wed 05 Nov 2025 23:00:14 +0000
Files and hashes: 1: 6Sxszx8NiFM_JbWUMjBDeEvUps8.roa (hash: 8MVKcBrtv6jJ845AEcn3hP00h2PQrFrI39BtX0LnXv4=)
2: Ha78yg7qqGZ0v8W1DWmHUAWoLSA.roa (hash: mO1w4kIt1AKbmRPhw4OwRAWPyk0O9BdOZhhOqd4nLR0=)
3: ex9VfuJjyzWaGeos1_oOjJE563Y.crl (hash: NXIlutJYL26P2rKCMHxNnMQ8lr9hnzGngUpslxAKoEE=)
4: xVoWPteOkysGzMqfxgi3XvQDa0c.roa (hash: y5AR4qkIxHvuU7VtfK3TX7mIOGmTaWSa06ypi+bML3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:78:1b:d0:f0:39:80:17:70:16:7b:6c:ca:d2:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76
Validity
Not Before: Nov 4 23:00:14 2025 GMT
Not After : Nov 5 23:00:14 2025 GMT
Subject: CN=92781a368bf4affd1da8194e78e61e9fb3d27cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c9:ab:ee:1f:24:92:36:3c:89:6f:0b:2c:3a:
83:b6:29:92:3d:af:36:55:ef:50:4b:4b:ea:b5:4e:
08:e5:90:77:2d:6d:8c:e0:8a:80:cf:22:98:e5:90:
4a:12:97:22:a2:46:11:f3:76:f5:11:50:3c:39:a9:
98:28:9e:b5:bd:0f:c9:bb:a4:8e:c4:73:5f:a4:05:
03:f4:37:e0:85:6f:87:c9:e3:49:a7:54:8a:d0:b1:
3f:b6:a0:2e:96:2f:dd:ad:68:33:9d:85:f1:fc:e1:
4c:d4:02:d0:46:66:35:34:a0:d6:39:1e:0a:63:8d:
d6:3a:38:a2:19:53:78:4a:4b:43:92:c4:52:0e:27:
3f:41:3b:7b:d9:5f:b8:b8:5f:12:01:2c:71:5b:ff:
81:71:73:93:2b:96:64:8b:f5:f4:0d:f8:e9:41:3b:
ee:b6:d0:40:0e:f8:89:39:52:f1:8e:47:69:25:b5:
06:77:a8:9c:79:d2:f9:f9:29:70:68:4a:6a:b6:e8:
7a:e1:c5:f8:27:fd:77:fd:e5:c5:db:11:0a:ed:fe:
11:b2:60:1f:77:6a:44:28:0d:f3:8b:7b:1f:60:e0:
99:10:e9:e5:71:f3:2d:2a:3f:f3:c5:6a:29:12:03:
cc:1e:93:22:09:ba:53:82:1a:da:9c:84:bf:39:49:
7f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:78:1A:36:8B:F4:AF:FD:1D:A8:19:4E:78:E6:1E:9F:B3:D2:7C:C6
X509v3 Authority Key Identifier:
keyid:7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:b9:70:02:7b:29:9e:9e:0f:fd:6f:9b:45:de:77:02:23:b2:
9e:72:d4:0c:5a:17:1b:79:76:a5:87:e6:15:52:96:33:4a:c9:
24:43:f9:f0:3a:08:cb:b5:b8:7e:88:c9:36:e1:a1:14:04:58:
8e:f0:4f:ea:ce:a3:d8:18:c8:67:bb:ac:88:98:f8:a3:c5:ea:
c6:83:52:49:db:7e:fe:1d:cd:51:fb:68:61:90:97:ea:78:9f:
9e:4c:c2:30:a1:ab:8c:32:5f:b8:a6:09:dd:e6:07:4c:d7:6c:
e4:03:3f:92:74:35:c1:82:82:db:8c:28:28:22:21:ee:53:e0:
00:ef:f4:f3:71:9b:fd:ed:92:2a:b5:fb:6d:ed:42:e8:e9:00:
d1:69:14:d5:f8:6e:b5:71:3e:39:4e:b8:69:08:2f:d5:d3:88:
37:c1:ac:c9:35:80:29:0f:1d:e0:71:00:7e:ec:09:f0:f4:ff:
75:64:22:74:d9:a3:fc:76:98:a3:c9:b0:b3:86:a2:8b:ba:e8:
29:a1:cd:4c:a8:74:f1:a3:91:98:21:fa:e6:ec:e8:8f:f3:e0:
9b:4f:e0:eb:f5:a6:f9:92:48:5d:e0:b9:7e:91:71:7d:89:0f:
df:99:45:90:62:3a:cb:fe:28:da:5e:49:03:b3:7d:04:94:ec:
97:2c:b6:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRGXgb0PA5gBdwFntsytINMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMWY1NTdlZTI2M2NiMzU5YTE5ZWEyY2Q3ZmEwZThjOTEz
OWViNzYwHhcNMjUxMTA0MjMwMDE0WhcNMjUxMTA1MjMwMDE0WjAzMTEwLwYDVQQD
Eyg5Mjc4MWEzNjhiZjRhZmZkMWRhODE5NGU3OGU2MWU5ZmIzZDI3Y2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcmr7h8kkjY8iW8LLDqDtimSPa82
Ve9QS0vqtU4I5ZB3LW2M4IqAzyKY5ZBKEpciokYR83b1EVA8OamYKJ61vQ/Ju6SO
xHNfpAUD9DfghW+HyeNJp1SK0LE/tqAuli/drWgznYXx/OFM1ALQRmY1NKDWOR4K
Y43WOjiiGVN4SktDksRSDic/QTt72V+4uF8SASxxW/+BcXOTK5Zki/X0DfjpQTvu
ttBADviJOVLxjkdpJbUGd6icedL5+SlwaEpqtuh64cX4J/13/eXF2xEK7f4RsmAf
d2pEKA3zi3sfYOCZEOnlcfMtKj/zxWopEgPMHpMiCbpTghranIS/OUl/XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJ4GjaL9K/9HagZTnjmHp+z0nzGMB8GA1UdIwQY
MBaAFHsfVX7iY8s1mhnqLNf6DoyROet2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXg5VmZ1Smp5eldhR2VvczFfb09qSkU1NjNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85MzZkOTgtNzAxOS00MDFmLTllMmEt
M2UzNjYwZGExM2E0LzEvZXg5VmZ1Smp5eldhR2VvczFfb09qSkU1NjNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy85MzZkOTgtNzAxOS00MDFmLTllMmEtM2UzNjYwZGExM2E0
LzEvZXg5VmZ1Smp5eldhR2VvczFfb09qSkU1NjNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuLlwAnsp
np4P/W+bRd53AiOynnLUDFoXG3l2pYfmFVKWM0rJJEP58DoIy7W4fojJNuGhFARY
jvBP6s6j2BjIZ7usiJj4o8XqxoNSSdt+/h3NUftoYZCX6nifnkzCMKGrjDJfuKYJ
3eYHTNds5AM/knQ1wYKC24woKCIh7lPgAO/083Gb/e2SKrX7be1C6OkA0WkU1fhu
tXE+OU64aQgv1dOIN8GsyTWAKQ8d4HEAfuwJ8PT/dWQidNmj/HaYo8mws4aii7ro
KaHNTKh08aORmCH65uzoj/Pgm0/g6/Wm+ZJIXeC5fpFxfYkP35lFkGI6y/4o2l5J
A7N9BJTslyy22g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:37:24 2025 by rpki-client