Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
File: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft (raw, json)
Hash identifier: Cd4dW1IacD9HJQ+V5rc/tMM368+JkIUt0c7jPmIYTu4=
Subject key identifier: 08:77:28:48:34:A4:20:27:24:04:EE:C7:6A:D7:6F:BE:3A:B2:9F:07
Authority key identifier: F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
Certificate issuer: /CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Certificate serial: 019A4F2B1C7D12951413600D5DA9EA381DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 14:00:16 +0000
Manifest this update: Tue 04 Nov 2025 14:00:16 +0000
Manifest next update: Wed 05 Nov 2025 14:00:16 +0000
Files and hashes: 1: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl (hash: 9Mu4VdGbpvPn4uMJjz0GAwNrOZ6yzgtsyVqy30Du/wM=)
2: WMejWLM-fXx9J5hQgJ4TNGxlL40.roa (hash: 9oO47gALmpiotO1VgFePsYnaYk2I9wrq424pEV3SiMU=)
3: n5VL-9G7-YZixQJP-BPKVSDqpR4.roa (hash: t+3M+svFb4/LG8WrDBM3x4yGiPVd0ez6gYqaJNLI3Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:1c:7d:12:95:14:13:60:0d:5d:a9:ea:38:1d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Validity
Not Before: Nov 4 14:00:16 2025 GMT
Not After : Nov 5 14:00:16 2025 GMT
Subject: CN=0877284834a420272404eec76ad76fbe3ab29f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:96:cb:90:4c:97:1d:2a:5d:bb:fb:69:76:e3:
c4:ca:97:e9:83:b5:72:53:4d:28:3d:4e:86:b5:2a:
7c:a8:ac:30:b1:da:83:2c:59:0a:0b:4d:87:97:bf:
57:43:30:7a:d6:27:a1:8c:a1:b5:1e:e4:09:2b:b0:
76:d0:c5:ec:78:82:cd:1f:e7:01:a2:27:f9:ff:9f:
de:2a:a7:d7:77:eb:7e:de:22:6e:90:7a:60:18:c7:
ca:d2:d0:73:13:84:57:e0:a9:94:68:bf:5c:54:7d:
5f:07:97:fe:6d:c9:41:16:94:2f:a5:c2:15:52:f4:
88:ae:be:70:b1:7c:54:29:4a:c1:ab:e6:49:b0:bb:
b7:a8:f4:cc:c7:72:fd:f9:b9:43:77:d4:b6:6c:0c:
8a:4d:b5:c4:fa:02:65:2b:4b:9e:67:c2:a9:84:b9:
3e:96:b0:ae:f8:79:d3:cf:59:26:cb:a4:13:5e:c5:
b2:ab:7f:6b:81:93:ab:a8:0d:19:19:fa:f8:bd:63:
c4:56:53:95:93:6d:81:f4:7e:63:11:cd:41:4f:3b:
f0:5a:95:7f:38:70:93:08:4b:f2:41:d0:aa:8b:af:
c9:c9:fe:41:44:c2:f0:ae:76:f9:a1:0b:f2:a7:1c:
90:ea:da:88:55:3b:2e:8e:e3:6b:32:7d:af:50:64:
76:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:77:28:48:34:A4:20:27:24:04:EE:C7:6A:D7:6F:BE:3A:B2:9F:07
X509v3 Authority Key Identifier:
keyid:F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:47:19:4d:5d:cf:d1:e2:c6:ea:58:27:03:71:80:50:18:c9:
92:74:e7:53:50:69:91:08:f0:a3:c0:3c:91:20:4e:f5:79:ed:
d3:51:8a:f7:0b:30:64:39:0a:e6:3e:22:a8:2e:4d:54:57:59:
65:51:ca:53:59:c3:cc:1c:74:03:ca:5d:0c:61:b5:91:2d:fd:
08:78:b1:6c:8a:0e:71:c5:15:0e:70:4b:65:d9:16:bd:d3:14:
f5:b4:9d:3c:45:f4:6e:ad:05:96:f3:96:ee:4f:04:87:27:ac:
ab:16:d3:1e:3a:19:40:84:e8:c2:7b:a6:89:28:6e:46:01:1a:
c8:be:89:08:97:ad:52:e1:23:9f:bc:75:f0:17:c5:c4:12:02:
10:26:30:b1:7a:02:16:80:b2:85:b7:1c:a4:a2:72:49:e2:5e:
03:34:06:98:8f:dc:41:66:49:0f:2b:64:32:d8:67:73:3e:9f:
05:3a:32:68:f6:a1:88:6b:35:42:be:a3:a2:42:2c:50:70:0c:
60:93:1b:c5:ee:74:fb:0c:a1:9f:f5:4f:8f:bf:80:46:56:f6:
0d:9f:bc:52:f3:22:f3:42:70:3b:bb:91:11:8e:c2:3e:1b:f0:
11:63:c1:b6:5d:38:22:47:31:ad:9a:1a:23:6e:a2:92:81:fd:
29:4e:84:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPKxx9EpUUE2ANXanqOB3xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MmIwODRmOWI5Yzk4Y2ZkOTA0MTBiODMwNWNjNmNiNDZk
Y2NlZDgwHhcNMjUxMTA0MTQwMDE2WhcNMjUxMTA1MTQwMDE2WjAzMTEwLwYDVQQD
EygwODc3Mjg0ODM0YTQyMDI3MjQwNGVlYzc2YWQ3NmZiZTNhYjI5ZjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZbLkEyXHSpdu/tpduPEypfpg7Vy
U00oPU6GtSp8qKwwsdqDLFkKC02Hl79XQzB61iehjKG1HuQJK7B20MXseILNH+cB
oif5/5/eKqfXd+t+3iJukHpgGMfK0tBzE4RX4KmUaL9cVH1fB5f+bclBFpQvpcIV
UvSIrr5wsXxUKUrBq+ZJsLu3qPTMx3L9+blDd9S2bAyKTbXE+gJlK0ueZ8KphLk+
lrCu+HnTz1kmy6QTXsWyq39rgZOrqA0ZGfr4vWPEVlOVk22B9H5jEc1BTzvwWpV/
OHCTCEvyQdCqi6/Jyf5BRMLwrnb5oQvypxyQ6tqIVTsujuNrMn2vUGR29QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAh3KEg0pCAnJATux2rXb746sp8HMB8GA1UdIwQY
MBaAFPQrCE+bnJjP2QQQuDBcxstG3M7YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUNzSVQ1dWNtTV9aQkJDNE1Gekd5MGJjenRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mOTQ5YTUtODRhYy00NTlkLWI5YTAt
NmE5Y2Q5NDIwMmZmLzEvOUNzSVQ1dWNtTV9aQkJDNE1Gekd5MGJjenRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9mOTQ5YTUtODRhYy00NTlkLWI5YTAtNmE5Y2Q5NDIwMmZm
LzEvOUNzSVQ1dWNtTV9aQkJDNE1Gekd5MGJjenRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB0cZTV3P
0eLG6lgnA3GAUBjJknTnU1BpkQjwo8A8kSBO9Xnt01GK9wswZDkK5j4iqC5NVFdZ
ZVHKU1nDzBx0A8pdDGG1kS39CHixbIoOccUVDnBLZdkWvdMU9bSdPEX0bq0FlvOW
7k8EhyesqxbTHjoZQITownumiShuRgEayL6JCJetUuEjn7x18BfFxBICECYwsXoC
FoCyhbccpKJySeJeAzQGmI/cQWZJDytkMthncz6fBToyaPahiGs1Qr6jokIsUHAM
YJMbxe50+wyhn/VPj7+ARlb2DZ+8UvMi80JwO7uREY7CPhvwEWPBtl04IkcxrZoa
I26ikoH9KU6EmQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:47:07 2025 by rpki-client