Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
File: 9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft (raw, json)
Hash identifier: Ao6sbBaePbYXNmzb3Rss0GALGw0F+qqd+xTlYBkOqrM=
Subject key identifier: E1:F9:C2:87:10:FA:6B:79:FC:A0:39:00:59:C6:E0:18:25:EA:CC:D9
Authority key identifier: F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13
Certificate issuer: /CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
Certificate serial: 019A541AB27A8821FB6E25FBD8A262277A1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
Manifest number: 1713
Signing time: Wed 05 Nov 2025 13:00:26 +0000
Manifest this update: Wed 05 Nov 2025 13:00:26 +0000
Manifest next update: Thu 06 Nov 2025 13:00:26 +0000
Files and hashes: 1: 9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl (hash: 6kZ1oY2W04UhBg0QPM1z8te+K5XKoTPxieY5Vkh+34k=)
2: CisyPBICFzRGOCGtK3vxthiuGEs.roa (hash: 23mIhFxKDvJAL2KMAVi2LJugT4q2VWIVs7Cdef8DgOI=)
3: FkuC_69RdWLx1Y0srRO2lTt2Qn8.roa (hash: V2QfXGuoABf0nSRm/Oq1C+rnj29jR40BHTTOPTu5Dlw=)
4: XT0-w6dqifmy2ffwrG4-p0z6yak.roa (hash: qA90Am+RQnnMQJCKqDmSo8CLarebFr+1kMjhOvQOjTU=)
5: qoE5vRhVOR8bmi1fj4V8xsxJVVU.roa (hash: OxgWBiFLszYpiPd1r9svRtI7919M0gEvC+i3wC1jk18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:b2:7a:88:21:fb:6e:25:fb:d8:a2:62:27:7a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
Validity
Not Before: Nov 5 13:00:26 2025 GMT
Not After : Nov 6 13:00:26 2025 GMT
Subject: CN=e1f9c28710fa6b79fca0390059c6e01825eaccd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:67:de:d2:f9:07:26:58:7e:dd:3f:e8:d9:db:
a9:e3:ad:91:e2:f8:51:6c:dd:86:00:80:0f:64:2c:
c8:c3:cd:e3:58:79:16:1b:0f:22:7e:a2:0b:d3:84:
34:bc:4f:a2:69:55:8e:9f:b7:23:05:21:8d:86:50:
e7:5b:8a:95:a1:4e:c4:8d:a9:19:b1:1e:78:79:c9:
bb:c8:19:54:9d:ee:c1:35:b3:fd:7c:3e:ab:88:e1:
04:48:1d:37:fd:6d:c5:2d:13:0e:3f:4b:d5:a3:a0:
f2:91:60:c7:d7:66:8b:ad:04:48:72:a0:81:0a:77:
2c:9d:15:3e:d6:2c:15:cc:22:98:db:16:f6:e8:d5:
73:f0:b9:22:7f:0d:5c:a4:7c:74:b7:92:4a:ab:dd:
d1:c1:ca:25:fe:cc:9e:fe:aa:f4:7e:f3:0f:b5:93:
4b:98:53:bf:17:56:af:1e:33:ce:55:09:6c:cd:af:
c0:7d:26:b1:e9:65:18:f8:73:d9:83:d8:7f:d1:d4:
4f:02:85:4e:eb:89:75:a3:83:0f:e1:13:fb:9b:bf:
67:ca:70:90:3d:cf:ff:02:a5:f5:f4:5f:b1:bb:9c:
64:1a:c2:66:b9:f7:54:2f:13:77:c8:5c:fe:d5:fb:
a7:be:55:51:f8:5e:0b:25:a1:74:57:4f:a4:c9:bd:
d1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F9:C2:87:10:FA:6B:79:FC:A0:39:00:59:C6:E0:18:25:EA:CC:D9
X509v3 Authority Key Identifier:
keyid:F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:55:f9:38:12:a0:f5:6e:e7:17:f5:35:a7:e6:a8:a6:f3:c9:
f0:1e:67:e3:d2:e7:9f:5d:af:01:91:33:4b:d5:39:64:58:7f:
ce:be:2d:17:23:b8:63:de:28:0e:95:4a:4d:04:86:87:61:62:
df:64:36:b4:94:9b:9f:75:d2:85:69:e5:37:50:d6:8f:8f:25:
a9:88:e2:03:f5:4c:68:7e:d8:7a:79:f2:9d:8e:0a:a4:e8:a9:
1a:c7:40:d1:2c:b1:fd:22:71:4b:12:81:29:19:ec:45:fc:17:
f4:34:a3:7d:7b:a1:f3:ed:15:39:c3:61:3d:1b:af:78:d0:bb:
bb:f3:15:9b:85:76:a5:74:6b:8a:bc:7e:7a:65:a9:a0:38:00:
21:3e:73:22:e6:28:6f:73:66:13:f5:d9:02:6c:cf:80:6d:6d:
65:c1:5e:57:c4:7c:83:19:74:84:c4:ab:dc:fe:fc:4e:81:ed:
62:f0:9a:3d:f1:3b:57:c3:c3:2d:5a:e5:ca:cd:04:e2:9c:09:
d7:0d:34:3c:51:8e:b1:6c:f0:9e:e0:dc:25:78:31:6f:35:3a:
79:42:8e:45:30:f2:cd:13:8d:79:cd:30:1d:df:c6:cb:fe:b3:
05:d7:77:b2:66:2d:d0:88:5f:c4:f3:67:6d:ea:45:aa:53:86:
3c:40:0b:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUGrJ6iCH7biX72KJiJ3oeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MGJhZTYwOTcwYTJkZmM4NmRkNjA3YzViOTE1YWQ1YzUz
NGI0MTMwHhcNMjUxMTA1MTMwMDI2WhcNMjUxMTA2MTMwMDI2WjAzMTEwLwYDVQQD
EyhlMWY5YzI4NzEwZmE2Yjc5ZmNhMDM5MDA1OWM2ZTAxODI1ZWFjY2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWfe0vkHJlh+3T/o2dup462R4vhR
bN2GAIAPZCzIw83jWHkWGw8ifqIL04Q0vE+iaVWOn7cjBSGNhlDnW4qVoU7EjakZ
sR54ecm7yBlUne7BNbP9fD6riOEESB03/W3FLRMOP0vVo6DykWDH12aLrQRIcqCB
CncsnRU+1iwVzCKY2xb26NVz8Lkifw1cpHx0t5JKq93Rwcol/sye/qr0fvMPtZNL
mFO/F1avHjPOVQlsza/AfSax6WUY+HPZg9h/0dRPAoVO64l1o4MP4RP7m79nynCQ
Pc//AqX19F+xu5xkGsJmufdULxN3yFz+1funvlVR+F4LJaF0V0+kyb3RmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOH5wocQ+mt5/KA5AFnG4Bgl6szZMB8GA1UdIwQY
MBaAFPULrmCXCi38ht1gfFuRWtXFNLQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVF1dVlKY0tMZnlHM1dCOFc1RmExY1UwdEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9mNzFkY2ItOWU5Mi00NGU3LWIwNDIt
MzY2NTA2N2RiMjU2LzEvOVF1dVlKY0tMZnlHM1dCOFc1RmExY1UwdEJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9mNzFkY2ItOWU5Mi00NGU3LWIwNDItMzY2NTA2N2RiMjU2
LzEvOVF1dVlKY0tMZnlHM1dCOFc1RmExY1UwdEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALlX5OBKg
9W7nF/U1p+aopvPJ8B5n49Lnn12vAZEzS9U5ZFh/zr4tFyO4Y94oDpVKTQSGh2Fi
32Q2tJSbn3XShWnlN1DWj48lqYjiA/VMaH7YennynY4KpOipGsdA0Syx/SJxSxKB
KRnsRfwX9DSjfXuh8+0VOcNhPRuveNC7u/MVm4V2pXRrirx+emWpoDgAIT5zIuYo
b3NmE/XZAmzPgG1tZcFeV8R8gxl0hMSr3P78ToHtYvCaPfE7V8PDLVrlys0E4pwJ
1w00PFGOsWzwnuDcJXgxbzU6eUKORTDyzRONec0wHd/Gy/6zBdd3smYt0IhfxPNn
bepFqlOGPEALEQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:51:24 2025 by rpki-client