Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
File: C9fnDABfVWqCVOexKw6z0zFNReI.mft (raw, json)
Hash identifier: 7NfPvD1KgslA83hSOA6DmzhwgOVu8HK/fM6wzAOHxNI=
Subject key identifier: BD:FA:6E:98:45:D6:E5:CF:BA:51:0C:2D:2D:D9:F2:F2:45:7A:77:55
Authority key identifier: 0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
Certificate issuer: /CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Certificate serial: 019A4EF563AA028FCC6D6DD8895738EFCE80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 13:01:35 +0000
Manifest this update: Tue 04 Nov 2025 13:01:35 +0000
Manifest next update: Wed 05 Nov 2025 13:01:35 +0000
Files and hashes: 1: C9fnDABfVWqCVOexKw6z0zFNReI.crl (hash: UwebZ9SFN9n9p6YNuoDzLyUqPxDLUYtLAv+qYoRF+hw=)
2: KALMVhqVFo0O99VrdECDqSH5Z6g.roa (hash: vjDA6l8MH7MrWb72G2c81lHoX5Ci2HwmnVXmzEUbWMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:63:aa:02:8f:cc:6d:6d:d8:89:57:38:ef:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Validity
Not Before: Nov 4 13:01:35 2025 GMT
Not After : Nov 5 13:01:35 2025 GMT
Subject: CN=bdfa6e9845d6e5cfba510c2d2dd9f2f2457a7755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3a:21:5f:9b:52:ae:e7:1f:22:73:6e:6f:9a:
79:0f:58:20:ff:ce:44:dd:2d:36:85:79:a6:d6:33:
f8:c5:de:8a:d2:b8:b0:13:a2:03:52:62:e5:e4:d3:
dc:7f:35:cb:86:53:ca:1b:a8:3a:6a:a4:e4:4a:d2:
0f:ea:66:21:8e:1e:9f:45:20:8e:58:3e:0b:19:48:
9c:83:95:ec:96:fe:46:84:69:af:00:9b:f5:f1:9c:
9c:57:41:2d:ef:ea:a2:0b:e7:34:4f:61:b4:48:22:
66:ea:29:8e:d6:9b:50:9f:44:9c:d0:34:81:2e:e3:
38:8b:7a:74:f1:60:a3:25:d6:c8:30:2b:49:c1:da:
0e:34:23:fc:ae:29:80:7f:78:fa:4b:44:48:6c:8e:
32:48:46:7f:ac:7f:4c:59:2b:c3:e9:fb:11:37:f1:
12:d5:eb:8f:a4:48:5a:5d:86:83:88:bb:c3:d1:9b:
a9:5c:72:eb:2c:43:25:b9:6e:7f:ca:79:c7:fd:69:
1e:54:13:39:77:44:56:f4:9c:f6:b6:b8:ba:61:72:
ea:56:1f:ff:d3:5b:4b:43:11:c1:f6:b9:a5:8b:30:
75:f3:6a:cb:a6:c3:5a:64:3d:3a:1c:fc:90:1a:c0:
11:4f:d2:ef:32:5a:9e:71:9e:f0:41:e5:8d:5f:ac:
8a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FA:6E:98:45:D6:E5:CF:BA:51:0C:2D:2D:D9:F2:F2:45:7A:77:55
X509v3 Authority Key Identifier:
keyid:0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:80:e3:47:43:86:97:b4:83:f9:b9:99:62:86:7e:7f:b8:8e:
0a:3b:fe:10:81:c4:76:ec:e7:1c:ce:ee:b0:87:c8:4e:a2:e5:
4d:e0:2a:37:4c:1e:82:57:ae:cc:37:33:13:c0:9f:f1:f1:31:
21:00:96:b7:d8:b6:a9:37:c1:56:bd:06:f3:8b:d3:0a:81:e0:
67:14:c6:8d:60:71:37:59:78:d1:10:33:4e:c1:86:07:e6:88:
d5:01:0f:92:e9:9c:a4:d7:9d:34:c5:9d:42:31:9b:c9:f3:32:
6f:d4:07:f7:58:59:df:cf:8c:8a:94:9b:e9:2d:9b:37:9b:6f:
d2:2a:66:96:34:3f:42:d0:4e:80:a6:7d:e6:4b:d5:a9:57:2e:
3b:05:eb:9a:a7:77:09:05:ae:1a:63:88:0f:b6:e4:43:45:4f:
1c:f6:c9:83:21:10:52:73:78:5a:1c:94:56:66:94:b5:fd:61:
71:b8:cd:46:b3:46:95:33:c2:1c:0d:bc:4c:0b:a5:27:1c:00:
a1:00:ae:ab:4a:16:66:15:3d:49:a3:be:9a:1d:7d:19:f1:be:
b1:26:56:62:9f:dc:00:1f:23:17:32:5e:e8:6b:dd:ef:4d:6a:
2c:c5:34:3d:be:37:5d:c3:dd:94:3d:62:10:bc:41:36:cc:65:
cf:0c:8b:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9WOqAo/MbW3YiVc4786AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZDdlNzBjMDA1ZjU1NmE4MjU0ZTdiMTJiMGViM2QzMzE0
ZDQ1ZTIwHhcNMjUxMTA0MTMwMTM1WhcNMjUxMTA1MTMwMTM1WjAzMTEwLwYDVQQD
EyhiZGZhNmU5ODQ1ZDZlNWNmYmE1MTBjMmQyZGQ5ZjJmMjQ1N2E3NzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTohX5tSrucfInNub5p5D1gg/85E
3S02hXmm1jP4xd6K0riwE6IDUmLl5NPcfzXLhlPKG6g6aqTkStIP6mYhjh6fRSCO
WD4LGUicg5Xslv5GhGmvAJv18ZycV0Et7+qiC+c0T2G0SCJm6imO1ptQn0Sc0DSB
LuM4i3p08WCjJdbIMCtJwdoONCP8rimAf3j6S0RIbI4ySEZ/rH9MWSvD6fsRN/ES
1euPpEhaXYaDiLvD0ZupXHLrLEMluW5/ynnH/WkeVBM5d0RW9Jz2tri6YXLqVh//
01tLQxHB9rmlizB182rLpsNaZD06HPyQGsART9LvMlqecZ7wQeWNX6yKhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL36bphF1uXPulEMLS3Z8vJFendVMB8GA1UdIwQY
MBaAFAvX5wwAX1VqglTnsSsOs9MxTUXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzlmbkRBQmZWV3FDVk9leEt3NnowekZOUmVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80Y2ZmZWYtOWE5Ny00NTQ2LWJkZGQt
YmIzY2M3Yzk0NGFkLzEvQzlmbkRBQmZWV3FDVk9leEt3NnowekZOUmVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi80Y2ZmZWYtOWE5Ny00NTQ2LWJkZGQtYmIzY2M3Yzk0NGFk
LzEvQzlmbkRBQmZWV3FDVk9leEt3NnowekZOUmVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVIDjR0OG
l7SD+bmZYoZ+f7iOCjv+EIHEduznHM7usIfITqLlTeAqN0wegleuzDczE8Cf8fEx
IQCWt9i2qTfBVr0G84vTCoHgZxTGjWBxN1l40RAzTsGGB+aI1QEPkumcpNedNMWd
QjGbyfMyb9QH91hZ38+MipSb6S2bN5tv0ipmljQ/QtBOgKZ95kvVqVcuOwXrmqd3
CQWuGmOID7bkQ0VPHPbJgyEQUnN4WhyUVmaUtf1hcbjNRrNGlTPCHA28TAulJxwA
oQCuq0oWZhU9SaO+mh19GfG+sSZWYp/cAB8jFzJe6Gvd701qLMU0Pb43XcPdlD1i
ELxBNsxlzwyLhA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:08 2025 by rpki-client