Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
File: 9q7W1c5BV5fBKF9-9v0EPGRm594.mft (raw, json)
Hash identifier: bMqcUxZ6QWlIiO1dxHUQGyKdghXvo9KRjnqA4Ci7TTc=
Subject key identifier: 4C:B3:AF:AC:1D:ED:81:AB:7D:7D:59:1F:1D:58:98:5F:30:60:DF:68
Authority key identifier: F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE
Certificate issuer: /CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de
Certificate serial: 019A4EF4B8E2929ADC7E3C3C7CA3C2803180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
Manifest number: 0C01
Signing time: Tue 04 Nov 2025 13:00:52 +0000
Manifest this update: Tue 04 Nov 2025 13:00:52 +0000
Manifest next update: Wed 05 Nov 2025 13:00:52 +0000
Files and hashes: 1: 9q7W1c5BV5fBKF9-9v0EPGRm594.crl (hash: BeB+FiEREm80M5vB3bx6J2sUwo1Q9CEoFudJ5QQLdvs=)
2: ziQt4Au1b87EcX3IQE4F3MWkDm8.roa (hash: KUoOZI3FZormf07wPCHQ5jctubRO3hNmnfHFtLKB4fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:b8:e2:92:9a:dc:7e:3c:3c:7c:a3:c2:80:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de
Validity
Not Before: Nov 4 13:00:52 2025 GMT
Not After : Nov 5 13:00:52 2025 GMT
Subject: CN=4cb3afac1ded81ab7d7d591f1d58985f3060df68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c9:e0:b7:3f:0b:6e:75:c9:a3:b6:cf:99:3f:
06:fe:79:2b:5c:ad:4c:2f:b6:d1:59:19:ba:26:3e:
9d:18:8c:8e:e0:e0:47:e8:d9:56:71:31:71:b1:fb:
d6:34:49:4e:7a:5d:26:dc:e7:f5:b7:2e:52:c3:e4:
9b:3a:6d:38:5b:07:f0:13:32:11:8f:f8:4d:3b:6b:
42:82:2f:f3:0e:70:fc:9d:b7:3d:84:72:6b:83:72:
57:d5:95:2b:d4:56:3d:59:50:d4:13:c9:de:a2:80:
76:45:56:8c:17:8d:9c:28:65:a9:9f:34:4e:cf:e3:
ec:de:62:2e:a1:49:d5:a2:d6:18:f4:69:33:16:5a:
de:55:35:fe:28:45:bd:8f:be:3f:ce:06:ab:11:17:
86:d2:35:86:ea:bb:40:17:04:ca:8d:19:7e:e0:18:
e0:c4:f3:64:32:d7:05:32:2e:ff:46:4f:3c:59:9f:
41:66:33:2f:9a:15:72:b2:67:41:65:3a:2c:4d:b4:
17:34:21:81:9a:85:1d:5b:7c:37:33:90:ae:8f:31:
22:4b:ef:37:7b:96:6c:92:9e:1c:40:2b:83:82:36:
9c:17:fc:08:85:3a:b5:37:d3:1c:54:98:b6:0b:4f:
71:e0:72:f3:ad:bc:32:19:80:73:cf:01:69:7b:c7:
0b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B3:AF:AC:1D:ED:81:AB:7D:7D:59:1F:1D:58:98:5F:30:60:DF:68
X509v3 Authority Key Identifier:
keyid:F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:df:97:9f:80:41:ca:92:12:ca:38:0a:00:b7:22:c5:69:15:
f6:cb:52:9e:1a:92:83:91:2f:b6:64:99:3b:36:8e:25:49:ee:
b9:f6:94:72:d3:d4:89:67:64:9a:f2:4c:a8:37:4f:99:b0:0e:
e0:47:7d:7d:4b:af:7e:ca:dd:82:20:99:6d:dc:b4:46:d0:86:
35:5e:58:58:de:63:1f:d8:fa:b8:4e:c8:4c:41:45:d8:13:9c:
0f:90:07:bc:84:9a:d3:b5:d2:c9:ea:ae:73:b3:4a:9b:45:29:
88:d8:3d:4a:74:f8:13:68:bc:27:15:48:d7:dc:bb:a3:d8:ce:
19:79:10:74:c7:2c:3f:37:60:92:3c:ab:a2:59:b7:6d:c3:95:
db:f7:6b:e2:64:60:60:2d:b0:17:36:d8:21:85:1e:c6:02:c6:
d0:37:fc:0d:ef:1d:c6:0b:3f:3f:58:5a:f0:b2:36:0d:97:18:
57:e1:20:8e:a3:ea:a7:e8:f2:43:52:29:57:1f:37:30:dc:40:
37:f0:67:74:8a:ac:57:4b:56:79:82:08:81:09:27:9a:84:d5:
82:31:51:f0:9e:54:42:0a:23:b4:f2:bb:20:c3:2b:6c:41:70:
0f:f0:a8:cf:f6:f3:f8:92:ce:f2:cd:d0:ee:26:a7:9d:ed:5a:
e4:47:a7:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9Ljikprcfjw8fKPCgDGAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YWVkNmQ1Y2U0MTU3OTdjMTI4NWY3ZWY2ZmQwNDNjNjQ2
NmU3ZGUwHhcNMjUxMTA0MTMwMDUyWhcNMjUxMTA1MTMwMDUyWjAzMTEwLwYDVQQD
Eyg0Y2IzYWZhYzFkZWQ4MWFiN2Q3ZDU5MWYxZDU4OTg1ZjMwNjBkZjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMngtz8LbnXJo7bPmT8G/nkrXK1M
L7bRWRm6Jj6dGIyO4OBH6NlWcTFxsfvWNElOel0m3Of1ty5Sw+SbOm04WwfwEzIR
j/hNO2tCgi/zDnD8nbc9hHJrg3JX1ZUr1FY9WVDUE8neooB2RVaMF42cKGWpnzRO
z+Ps3mIuoUnVotYY9GkzFlreVTX+KEW9j74/zgarEReG0jWG6rtAFwTKjRl+4Bjg
xPNkMtcFMi7/Rk88WZ9BZjMvmhVysmdBZTosTbQXNCGBmoUdW3w3M5CujzEiS+83
e5Zskp4cQCuDgjacF/wIhTq1N9McVJi2C09x4HLzrbwyGYBzzwFpe8cL4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyzr6wd7YGrfX1ZHx1YmF8wYN9oMB8GA1UdIwQY
MBaAFPau1tXOQVeXwShffvb9BDxkZufeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXE3VzFjNUJWNWZCS0Y5LTl2MEVQR1JtNTk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83ZmE5ZWQtYjA4Ny00MGNkLWEwMTYt
ZDk1N2I4YzU0Yzk0LzEvOXE3VzFjNUJWNWZCS0Y5LTl2MEVQR1JtNTk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC83ZmE5ZWQtYjA4Ny00MGNkLWEwMTYtZDk1N2I4YzU0Yzk0
LzEvOXE3VzFjNUJWNWZCS0Y5LTl2MEVQR1JtNTk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVN+Xn4BB
ypISyjgKALcixWkV9stSnhqSg5EvtmSZOzaOJUnuufaUctPUiWdkmvJMqDdPmbAO
4Ed9fUuvfsrdgiCZbdy0RtCGNV5YWN5jH9j6uE7ITEFF2BOcD5AHvISa07XSyequ
c7NKm0UpiNg9SnT4E2i8JxVI19y7o9jOGXkQdMcsPzdgkjyrolm3bcOV2/dr4mRg
YC2wFzbYIYUexgLG0Df8De8dxgs/P1ha8LI2DZcYV+EgjqPqp+jyQ1IpVx83MNxA
N/BndIqsV0tWeYIIgQknmoTVgjFR8J5UQgojtPK7IMMrbEFwD/Coz/bz+JLO8s3Q
7ianne1a5Eenqg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:17 2025 by rpki-client