Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
File: 9EjuY_GdDB8ixvYc5Kgezqu455A.mft (raw, json)
Hash identifier: wRXkFkKOonF9UTZ1uLp0aGYRVIfQTClSSnM5DbhavLc=
Subject key identifier: 4B:EC:49:7F:47:32:94:E2:41:1E:0B:A9:66:F4:FA:28:07:23:E2:22
Authority key identifier: F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
Certificate issuer: /CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Certificate serial: 019A4DE1A1F7F17091B44F0180100041DE57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 08:00:23 +0000
Manifest this update: Tue 04 Nov 2025 08:00:23 +0000
Manifest next update: Wed 05 Nov 2025 08:00:23 +0000
Files and hashes: 1: 9EjuY_GdDB8ixvYc5Kgezqu455A.crl (hash: PbCD3zSSwxdX05mKPsWoJI9ZB9+XKY1EJEPacjZ3jGg=)
2: B9CXmyFJNB3NRKLw7pcYD1T3USA.roa (hash: o1kjShDcQ5C/vUtm9CAhci51t+PYFYlIsERtctgtwmA=)
3: R22iI1mywVUVnDgDeyudtXDFOv8.roa (hash: EJnfxzuCupdtpPIwG2LRwVFupOoF9Zl3laDZ5Fu0Lzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:a1:f7:f1:70:91:b4:4f:01:80:10:00:41:de:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Validity
Not Before: Nov 4 08:00:23 2025 GMT
Not After : Nov 5 08:00:23 2025 GMT
Subject: CN=4bec497f473294e2411e0ba966f4fa280723e222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:e2:f5:88:f0:04:4c:bd:ba:89:1d:c9:7e:
8e:97:d5:3b:7c:e6:f3:19:33:ff:0a:21:2f:93:8a:
23:11:7d:ea:29:e9:b4:d2:08:9d:c0:dc:ab:6f:2d:
1d:60:62:5e:47:7b:71:b4:d2:bd:95:5c:5d:9a:78:
22:b1:07:4a:6d:a5:1b:6b:4f:a1:a1:2c:81:c1:45:
44:25:c1:52:3c:36:3f:b7:95:93:1d:72:5e:f1:75:
b7:ea:8e:13:d0:ee:2b:ac:67:21:b1:68:e9:42:3b:
ed:ad:5f:4a:ee:d0:04:4c:ad:a1:19:f0:52:22:54:
1a:bd:f7:0d:9a:fb:2d:1f:58:26:2c:b6:13:b7:c1:
49:9e:6b:10:b2:72:5c:17:06:9d:97:cb:f5:20:d6:
aa:a5:c1:57:8e:af:4c:d5:c6:70:f4:01:0b:35:98:
32:3c:51:ef:7d:a8:ff:fa:24:17:9e:44:63:4d:23:
df:15:03:9f:35:bb:aa:3e:64:5f:b9:b0:37:66:c6:
7a:5f:fc:54:15:cf:78:c5:1a:9c:95:e0:1e:1b:e1:
74:c5:d7:e1:67:75:92:e5:36:78:86:30:9e:c3:5d:
05:91:a8:62:12:fe:76:bf:3f:f9:21:b3:f0:97:ec:
f3:96:95:5a:05:c2:b2:0a:43:60:2d:a4:2e:0f:84:
8d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EC:49:7F:47:32:94:E2:41:1E:0B:A9:66:F4:FA:28:07:23:E2:22
X509v3 Authority Key Identifier:
keyid:F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:76:8b:13:e3:44:f0:97:75:4e:b3:ce:f4:1c:5b:74:6f:e8:
0d:ac:2a:7c:1c:46:9a:de:d4:e7:38:7a:2c:e9:fe:7c:58:c5:
97:f3:a7:1c:1e:14:00:5b:30:45:f9:10:07:df:32:40:47:16:
ee:f1:cf:b3:fd:83:c9:ee:0f:88:af:d6:9f:7b:8c:84:a4:ac:
ba:a3:84:20:6a:1b:51:ff:1d:6b:8c:db:8e:bb:ab:f7:14:21:
9e:4a:1c:5a:27:e7:ed:c4:72:8f:9f:48:12:dd:a6:82:4d:ca:
9b:6e:da:59:91:f3:59:83:3c:e2:f0:1a:2a:5e:53:84:6f:a9:
51:82:25:2b:3d:d0:76:e4:df:f9:11:cb:ff:df:e4:ca:c1:2e:
c8:e1:6d:b9:33:31:1b:82:09:88:09:ee:65:22:9d:6c:6c:1c:
ef:9e:b4:de:bb:1a:1a:02:6e:53:d0:86:9a:41:ab:54:ad:b2:
17:37:96:6a:c3:cd:7c:70:be:dc:bd:e4:dd:43:98:40:fb:30:
13:91:c2:14:5b:a1:7b:d0:8e:ec:9d:66:45:a9:c5:90:d0:f6:
d6:16:88:2b:ac:a6:17:01:73:83:23:20:0e:06:cd:22:96:96:
93:ba:ba:bb:b5:03:0c:ce:61:67:f3:65:c7:f8:37:e0:47:78:
ec:d4:21:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4aH38XCRtE8BgBAAQd5XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NDhlZTYzZjE5ZDBjMWYyMmM2ZjYxY2U0YTgxZWNlYWJi
OGU3OTAwHhcNMjUxMTA0MDgwMDIzWhcNMjUxMTA1MDgwMDIzWjAzMTEwLwYDVQQD
Eyg0YmVjNDk3ZjQ3MzI5NGUyNDExZTBiYTk2NmY0ZmEyODA3MjNlMjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmbi9YjwBEy9uokdyX6Ol9U7fObz
GTP/CiEvk4ojEX3qKem00gidwNyrby0dYGJeR3txtNK9lVxdmngisQdKbaUba0+h
oSyBwUVEJcFSPDY/t5WTHXJe8XW36o4T0O4rrGchsWjpQjvtrV9K7tAETK2hGfBS
IlQavfcNmvstH1gmLLYTt8FJnmsQsnJcFwadl8v1INaqpcFXjq9M1cZw9AELNZgy
PFHvfaj/+iQXnkRjTSPfFQOfNbuqPmRfubA3ZsZ6X/xUFc94xRqcleAeG+F0xdfh
Z3WS5TZ4hjCew10FkahiEv52vz/5IbPwl+zzlpVaBcKyCkNgLaQuD4SNtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEvsSX9HMpTiQR4LqWb0+igHI+IiMB8GA1UdIwQY
MBaAFPRI7mPxnQwfIsb2HOSoHs6ruOeQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUVqdVlfR2REQjhpeHZZYzVLZ2V6cXU0NTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS82NDAxZTgtODJkZC00ODExLTgwMTEt
NzE5NDAxYmJjYTJlLzEvOUVqdVlfR2REQjhpeHZZYzVLZ2V6cXU0NTVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS82NDAxZTgtODJkZC00ODExLTgwMTEtNzE5NDAxYmJjYTJl
LzEvOUVqdVlfR2REQjhpeHZZYzVLZ2V6cXU0NTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXaLE+NE
8Jd1TrPO9BxbdG/oDawqfBxGmt7U5zh6LOn+fFjFl/OnHB4UAFswRfkQB98yQEcW
7vHPs/2Dye4PiK/Wn3uMhKSsuqOEIGobUf8da4zbjrur9xQhnkocWifn7cRyj59I
Et2mgk3Km27aWZHzWYM84vAaKl5ThG+pUYIlKz3QduTf+RHL/9/kysEuyOFtuTMx
G4IJiAnuZSKdbGwc75603rsaGgJuU9CGmkGrVK2yFzeWasPNfHC+3L3k3UOYQPsw
E5HCFFuhe9CO7J1mRanFkND21haIK6ymFwFzgyMgDgbNIpaWk7q6u7UDDM5hZ/Nl
x/g34Ed47NQhtQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:26 2025 by rpki-client