Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
File: CH9Zw24i0fkDhPQdpgcFrHTXec4.mft (raw, json)
Hash identifier: LcSB0KphD75CNAEPiDtNyCO0Q/OZ4r1cTSrovKISuXM=
Subject key identifier: 83:68:64:D8:B2:89:11:CA:C8:BB:06:FE:EA:3D:C7:8B:5B:88:FD:50
Authority key identifier: 08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE
Certificate issuer: /CN=087f59c36e22d1f90384f41da60705ac74d779ce
Certificate serial: 019A4F6250D413197E87C1C74F24F771C9A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
Manifest number: 0F0C
Signing time: Tue 04 Nov 2025 15:00:34 +0000
Manifest this update: Tue 04 Nov 2025 15:00:34 +0000
Manifest next update: Wed 05 Nov 2025 15:00:34 +0000
Files and hashes: 1: CH9Zw24i0fkDhPQdpgcFrHTXec4.crl (hash: ArxSrq8mQ/Wm9J9Jz7OS/Dfb1Y1JU2MDOBk5F/NlsUg=)
2: giN_6FdawPpa4U_l8L6GI6SQrxU.roa (hash: RqHHQJIozmk50JvefJWS+0ODDB8lkETbKjm2gNuR+7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:50:d4:13:19:7e:87:c1:c7:4f:24:f7:71:c9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087f59c36e22d1f90384f41da60705ac74d779ce
Validity
Not Before: Nov 4 15:00:34 2025 GMT
Not After : Nov 5 15:00:34 2025 GMT
Subject: CN=836864d8b28911cac8bb06feea3dc78b5b88fd50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8a:88:04:60:4e:5a:fd:23:5b:43:eb:cc:7f:
18:7d:5d:73:48:ac:a4:4c:43:9d:8b:8e:01:a0:28:
f0:95:de:b0:f1:1a:65:b9:77:4b:bb:eb:62:5e:99:
03:b9:e1:ab:34:d5:7d:eb:8c:c8:59:97:10:a4:f7:
ea:bb:99:68:70:09:70:41:8b:23:ca:1b:a5:c6:e8:
5c:62:1f:d8:d6:f0:95:42:1e:29:d6:f9:e4:b9:00:
65:5b:35:69:73:6f:c3:a1:0a:27:1b:e1:77:df:57:
3b:a6:b2:0d:ce:cb:78:8f:00:ec:54:a6:39:ea:68:
88:f3:b6:64:a0:63:66:c2:7b:dc:a0:13:68:bb:16:
14:37:38:88:01:d4:03:a4:b9:af:e4:58:af:91:c5:
24:a2:7c:0f:f8:24:90:a8:0a:b9:c1:e2:8a:7a:59:
d2:06:4f:f6:41:cb:96:b1:7d:9c:86:29:76:9f:c0:
55:1e:5d:46:bd:9c:a1:5d:a5:36:cd:b0:59:c4:54:
4f:3a:77:c1:5e:fa:9d:34:0e:af:94:ab:ca:30:f7:
d8:92:eb:86:18:39:06:d6:d7:7f:2e:b7:d1:70:bb:
b7:1d:ea:01:a1:0d:da:2e:0c:0d:30:67:21:4d:62:
f5:ac:98:6b:78:8a:53:6b:d3:38:45:ac:ee:f3:5d:
8c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:68:64:D8:B2:89:11:CA:C8:BB:06:FE:EA:3D:C7:8B:5B:88:FD:50
X509v3 Authority Key Identifier:
keyid:08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c7:21:e9:af:ee:c7:e2:a6:07:70:e2:ab:dd:04:79:a2:26:
85:8c:12:38:17:87:40:71:c1:e3:17:ed:81:8b:a0:76:9c:52:
66:38:1c:24:ee:f8:ba:74:97:08:bb:82:89:5c:6e:bc:77:1b:
ba:05:7a:e5:eb:5c:3f:b3:31:40:17:21:5b:dc:50:d0:bf:23:
ab:d0:a5:30:e7:a5:49:87:e7:dc:b6:26:d9:b3:98:0e:cf:e9:
cb:a2:d1:fd:07:ba:43:03:30:21:4d:5c:7a:28:c4:39:e6:d0:
2c:45:db:1d:7e:68:6d:f8:35:cd:e4:d0:a6:15:71:46:ff:ef:
b0:e7:cb:a7:f4:7c:99:f7:1a:9f:5d:75:c3:89:34:43:b8:d9:
fd:5b:bc:6a:5f:b5:45:b3:ed:47:95:22:ad:24:95:bb:ab:09:
56:48:1d:d5:ce:c8:2b:2c:3e:26:7b:28:e3:c9:1a:03:60:b3:
0c:e3:1c:0c:f7:47:c6:7b:e6:78:a6:89:c1:36:da:37:c8:a8:
4b:92:66:dc:7c:88:3b:f1:cf:89:9a:d8:f9:b5:86:d2:77:a4:
ec:d7:45:5a:5b:ec:b9:e5:f4:15:f4:d8:9a:32:82:77:58:1a:
10:42:8e:cd:05:1a:fe:75:49:12:5b:da:6d:bf:74:b9:1d:8f:
76:40:83:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYlDUExl+h8HHTyT3ccmmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4N2Y1OWMzNmUyMmQxZjkwMzg0ZjQxZGE2MDcwNWFjNzRk
Nzc5Y2UwHhcNMjUxMTA0MTUwMDM0WhcNMjUxMTA1MTUwMDM0WjAzMTEwLwYDVQQD
Eyg4MzY4NjRkOGIyODkxMWNhYzhiYjA2ZmVlYTNkYzc4YjViODhmZDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4qIBGBOWv0jW0PrzH8YfV1zSKyk
TEOdi44BoCjwld6w8RpluXdLu+tiXpkDueGrNNV964zIWZcQpPfqu5locAlwQYsj
yhulxuhcYh/Y1vCVQh4p1vnkuQBlWzVpc2/DoQonG+F331c7prINzst4jwDsVKY5
6miI87ZkoGNmwnvcoBNouxYUNziIAdQDpLmv5FivkcUkonwP+CSQqAq5weKKelnS
Bk/2QcuWsX2chil2n8BVHl1GvZyhXaU2zbBZxFRPOnfBXvqdNA6vlKvKMPfYkuuG
GDkG1td/LrfRcLu3HeoBoQ3aLgwNMGchTWL1rJhreIpTa9M4Razu812M4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINoZNiyiRHKyLsG/uo9x4tbiP1QMB8GA1UdIwQY
MBaAFAh/WcNuItH5A4T0HaYHBax013nOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0g5WncyNGkwZmtEaFBRZHBnY0ZySFRYZWM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNTkzMDItMTZjNy00OTI3LWJjYTgt
YzA0YmUwMjAzN2U4LzEvQ0g5WncyNGkwZmtEaFBRZHBnY0ZySFRYZWM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lNTkzMDItMTZjNy00OTI3LWJjYTgtYzA0YmUwMjAzN2U4
LzEvQ0g5WncyNGkwZmtEaFBRZHBnY0ZySFRYZWM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQsch6a/u
x+KmB3Diq90EeaImhYwSOBeHQHHB4xftgYugdpxSZjgcJO74unSXCLuCiVxuvHcb
ugV65etcP7MxQBchW9xQ0L8jq9ClMOelSYfn3LYm2bOYDs/py6LR/Qe6QwMwIU1c
eijEOebQLEXbHX5obfg1zeTQphVxRv/vsOfLp/R8mfcan111w4k0Q7jZ/Vu8al+1
RbPtR5UirSSVu6sJVkgd1c7IKyw+Jnso48kaA2CzDOMcDPdHxnvmeKaJwTbaN8io
S5Jm3HyIO/HPiZrY+bWG0nek7NdFWlvsueX0FfTYmjKCd1gaEEKOzQUa/nVJElva
bb90uR2PdkCDsg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:08:53 2025 by rpki-client