Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
File: 9yR1sGTeionxUD6u_H1yrczzihY.mft (raw, json)
Hash identifier: 6UwuvVxSG3UyDNk52PLqXkGjUayd5iLy82WBbgiFUGk=
Subject key identifier: 1B:A8:7D:F7:76:8C:16:C0:B8:46:DD:7D:1B:5D:46:1A:0D:D3:50:7F
Authority key identifier: F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16
Certificate issuer: /CN=f72475b064de8a89f1503eaefc7d72adccf38a16
Certificate serial: 019A4E4FF644AA8C1B53D0DBBFC9BA8C0133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
Manifest number: 1708
Signing time: Tue 04 Nov 2025 10:00:54 +0000
Manifest this update: Tue 04 Nov 2025 10:00:54 +0000
Manifest next update: Wed 05 Nov 2025 10:00:54 +0000
Files and hashes: 1: 9yR1sGTeionxUD6u_H1yrczzihY.crl (hash: 940VTz8HQjbNdcXraonDGW63fFYT4EvDEDSCg93c6Pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:f6:44:aa:8c:1b:53:d0:db:bf:c9:ba:8c:01:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f72475b064de8a89f1503eaefc7d72adccf38a16
Validity
Not Before: Nov 4 10:00:54 2025 GMT
Not After : Nov 5 10:00:54 2025 GMT
Subject: CN=1ba87df7768c16c0b846dd7d1b5d461a0dd3507f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:96:d3:f8:64:f9:60:33:d7:b3:9d:4b:02:78:
11:63:bd:d5:19:01:e6:24:4b:6f:45:c4:44:35:0d:
de:b6:d6:3d:34:a9:79:5f:d7:16:7e:95:25:7c:c7:
61:19:a6:ec:51:86:15:f8:7d:bf:63:0f:0e:f7:3a:
da:0f:ea:e1:77:2d:d8:7b:15:e9:5b:68:8f:e6:f3:
65:25:b7:64:16:32:03:ba:6b:b6:e8:a2:92:a0:a0:
41:61:70:43:58:4b:ad:ef:c4:a0:58:10:f8:84:26:
41:73:0e:d0:a4:21:d0:7d:12:58:a7:1a:77:4b:a2:
d5:79:4f:81:3c:8c:b8:1c:28:df:b4:95:32:c5:af:
8f:d0:0b:2d:8f:05:40:3a:52:a5:1e:4d:e2:a1:ee:
5e:de:80:aa:0c:fe:a9:10:6d:3e:14:58:f0:d1:32:
36:db:00:d5:91:59:0e:f9:2f:42:2a:3a:39:10:44:
f3:fd:11:f4:56:92:87:8c:50:09:f6:c8:bd:d6:e9:
e1:8c:f7:ef:88:96:25:73:08:c6:6c:de:72:16:b5:
24:ee:ce:99:b2:67:a1:4a:08:0e:51:e2:f1:b3:06:
0b:38:2b:cf:ad:ac:bd:59:2e:0c:4a:e8:20:18:4c:
75:73:99:35:99:5b:8d:14:2a:b8:4e:c9:62:d7:aa:
cd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A8:7D:F7:76:8C:16:C0:B8:46:DD:7D:1B:5D:46:1A:0D:D3:50:7F
X509v3 Authority Key Identifier:
keyid:F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:79:81:cc:98:6e:d2:c2:c9:5f:d1:5e:8c:94:d9:80:f5:26:
0e:10:80:7f:03:ac:8a:a6:5d:e5:d4:3b:ee:85:06:80:9c:5b:
77:6f:b3:2b:07:58:64:95:2a:eb:e2:e9:00:8b:40:03:25:48:
c3:1b:c7:cb:24:ba:0a:41:27:0b:1f:06:68:e6:6e:a2:25:21:
7c:3e:44:bf:53:e9:88:ff:78:49:a8:3e:28:ca:a1:f5:dc:3e:
2e:aa:1e:1f:28:84:56:6f:2c:1f:ef:d6:29:0f:41:3b:9f:cf:
4a:83:97:11:85:3d:eb:f5:88:e6:31:3b:e4:01:e8:8b:ca:08:
89:4d:1c:b6:9a:04:3f:54:61:94:a5:52:ce:5d:12:0e:0e:59:
ce:34:8e:0a:02:9a:65:66:7e:8d:dc:e7:27:70:bd:fa:b9:76:
1a:98:2b:48:8a:92:b3:fc:10:0e:27:d6:8c:79:84:bf:f3:6f:
f6:44:7d:29:ad:cc:ee:5e:4c:5d:47:01:c6:20:e6:d3:13:18:
cf:63:76:c5:92:fd:e7:1e:65:f2:07:1e:6f:91:c2:04:9f:44:
a4:6a:27:69:a5:8f:bf:49:cf:7b:9b:7e:a5:68:bb:60:23:2d:
03:b7:89:53:9f:d9:57:95:0a:09:22:dd:db:6b:d8:b1:8f:7c:
d3:c4:01:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT/ZEqowbU9Dbv8m6jAEzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MjQ3NWIwNjRkZThhODlmMTUwM2VhZWZjN2Q3MmFkY2Nm
MzhhMTYwHhcNMjUxMTA0MTAwMDU0WhcNMjUxMTA1MTAwMDU0WjAzMTEwLwYDVQQD
EygxYmE4N2RmNzc2OGMxNmMwYjg0NmRkN2QxYjVkNDYxYTBkZDM1MDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZbT+GT5YDPXs51LAngRY73VGQHm
JEtvRcRENQ3ettY9NKl5X9cWfpUlfMdhGabsUYYV+H2/Yw8O9zraD+rhdy3YexXp
W2iP5vNlJbdkFjIDumu26KKSoKBBYXBDWEut78SgWBD4hCZBcw7QpCHQfRJYpxp3
S6LVeU+BPIy4HCjftJUyxa+P0AstjwVAOlKlHk3ioe5e3oCqDP6pEG0+FFjw0TI2
2wDVkVkO+S9CKjo5EETz/RH0VpKHjFAJ9si91unhjPfviJYlcwjGbN5yFrUk7s6Z
smehSggOUeLxswYLOCvPray9WS4MSuggGEx1c5k1mVuNFCq4Tsli16rN5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBuoffd2jBbAuEbdfRtdRhoN01B/MB8GA1UdIwQY
MBaAFPckdbBk3oqJ8VA+rvx9cq3M84oWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXlSMXNHVGVpb254VUQ2dV9IMXlyY3p6aWhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy85MGYzNmUtZDM4Zi00ZWU5LWFjZWIt
MjgzMjBhNWMwNzdiLzEvOXlSMXNHVGVpb254VUQ2dV9IMXlyY3p6aWhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy85MGYzNmUtZDM4Zi00ZWU5LWFjZWItMjgzMjBhNWMwNzdi
LzEvOXlSMXNHVGVpb254VUQ2dV9IMXlyY3p6aWhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgXmBzJhu
0sLJX9FejJTZgPUmDhCAfwOsiqZd5dQ77oUGgJxbd2+zKwdYZJUq6+LpAItAAyVI
wxvHyyS6CkEnCx8GaOZuoiUhfD5Ev1PpiP94Sag+KMqh9dw+LqoeHyiEVm8sH+/W
KQ9BO5/PSoOXEYU96/WI5jE75AHoi8oIiU0ctpoEP1RhlKVSzl0SDg5ZzjSOCgKa
ZWZ+jdznJ3C9+rl2GpgrSIqSs/wQDifWjHmEv/Nv9kR9Ka3M7l5MXUcBxiDm0xMY
z2N2xZL95x5l8gceb5HCBJ9EpGonaaWPv0nPe5t+pWi7YCMtA7eJU5/ZV5UKCSLd
22vYsY9808QBkA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:26 2025 by rpki-client