Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
File: 9vHFba9wXxLpXUL0d_jgo9hvOZY.mft (raw, json)
Hash identifier: Vs5dkjJ9xIjg67EyaQNz9PZcKCzph1/kN27RdXUVvFU=
Subject key identifier: D4:EA:CE:7C:9A:7B:B4:28:63:1F:80:B7:32:1C:27:CA:58:BF:3C:1B
Authority key identifier: F6:F1:C5:6D:AF:70:5F:12:E9:5D:42:F4:77:F8:E0:A3:D8:6F:39:96
Certificate issuer: /CN=f6f1c56daf705f12e95d42f477f8e0a3d86f3996
Certificate serial: 019A4EF5F6F4B7A20C955C136C7F8EFE61CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:02:13 +0000
Manifest this update: Tue 04 Nov 2025 13:02:13 +0000
Manifest next update: Wed 05 Nov 2025 13:02:13 +0000
Files and hashes: 1: 9vHFba9wXxLpXUL0d_jgo9hvOZY.crl (hash: SHpzqwunFeWNWM0cMc7KHyMdYsC1JzJRyKRiftbPiFo=)
2: Img54cKN_P2HeWXe3kxJunOOT3s.roa (hash: ZYdWRN98ug8vbW7f1puvPVmIzjvPFY5NjRNyBZI+eL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:f6:f4:b7:a2:0c:95:5c:13:6c:7f:8e:fe:61:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6f1c56daf705f12e95d42f477f8e0a3d86f3996
Validity
Not Before: Nov 4 13:02:13 2025 GMT
Not After : Nov 5 13:02:13 2025 GMT
Subject: CN=d4eace7c9a7bb428631f80b7321c27ca58bf3c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:79:13:2d:03:dd:4d:98:76:e9:01:c5:2d:1d:
a3:02:b4:33:69:17:3b:0a:6a:fc:c0:58:18:58:68:
f0:78:cc:08:63:ac:e6:6b:35:b7:65:27:0a:dc:72:
9d:32:9d:0e:9f:3d:00:0f:6c:f4:a3:eb:ea:02:e2:
82:4d:f1:d0:83:4b:a9:5a:a2:3a:94:f6:d7:1c:79:
e6:00:10:47:86:32:4d:97:c0:d3:ed:ae:9f:9a:f6:
b8:23:ca:fb:3e:c6:0e:30:db:16:23:c0:79:63:36:
51:16:ff:c6:bb:7f:4c:c6:89:eb:69:d6:d7:25:89:
a0:7e:04:2a:d8:6a:86:dd:df:d9:44:d3:dd:b9:14:
e5:6f:c0:e8:3e:79:71:48:75:1a:1d:5d:df:55:f4:
99:07:e2:ae:02:79:36:90:45:52:37:93:f4:cc:82:
fe:12:c8:48:81:6c:b6:e9:24:c3:8c:3d:2c:75:af:
2a:e1:9f:a7:77:4d:fe:46:ac:67:91:21:ab:a7:4e:
44:ca:5d:c7:e5:45:e1:58:6f:18:a8:da:23:85:2c:
f1:97:10:bc:19:03:93:3f:3f:c5:db:d5:6f:a2:41:
04:55:fa:03:dc:fc:01:08:ae:54:ad:00:82:9d:92:
bf:14:cf:e7:ba:95:eb:60:4d:13:7e:a7:8c:c5:5c:
24:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:EA:CE:7C:9A:7B:B4:28:63:1F:80:B7:32:1C:27:CA:58:BF:3C:1B
X509v3 Authority Key Identifier:
keyid:F6:F1:C5:6D:AF:70:5F:12:E9:5D:42:F4:77:F8:E0:A3:D8:6F:39:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a0:2c:bf:e2:f6:ce:85:12:5f:5d:8d:61:c8:6c:7e:ab:77:
d7:07:31:32:8c:11:f5:8a:16:e3:43:5e:c8:5e:10:bd:f5:7c:
18:fb:20:d8:c7:d7:a2:fd:7e:d1:12:94:c4:9d:41:55:c7:6e:
ac:8f:82:06:77:bf:14:1c:de:83:0c:1e:bb:7e:c7:6e:fb:d2:
2f:53:25:96:a0:06:f9:0f:0f:78:1a:89:11:c0:aa:a4:d1:eb:
84:ce:fa:27:6f:92:55:a5:18:27:67:f7:0d:3c:42:fc:ba:2e:
07:17:4a:10:eb:13:b8:23:2a:b4:47:8d:60:83:31:9d:e7:b8:
90:79:12:9e:f1:59:de:ec:2a:41:5f:ce:25:0a:d0:bd:8f:6d:
0a:83:b6:95:42:ae:8a:fc:b3:18:7e:02:93:79:81:28:d9:05:
f3:5d:0d:87:98:d7:23:b6:0b:3b:53:d9:25:a5:dd:6b:04:80:
66:f1:81:35:a3:05:83:cc:0a:25:8e:07:c7:7d:67:63:9d:c7:
b0:1c:41:e9:ad:2e:c8:05:00:5c:8d:d5:f3:26:2e:1d:c4:00:
5b:c1:77:03:28:7f:a3:ea:3d:47:cb:dc:16:93:f5:37:ad:46:
80:65:e0:6c:4b:5a:0d:fa:77:be:f6:ef:5f:0b:a4:8a:b3:f7:
09:fe:8a:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9fb0t6IMlVwTbH+O/mHLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ZjFjNTZkYWY3MDVmMTJlOTVkNDJmNDc3ZjhlMGEzZDg2
ZjM5OTYwHhcNMjUxMTA0MTMwMjEzWhcNMjUxMTA1MTMwMjEzWjAzMTEwLwYDVQQD
EyhkNGVhY2U3YzlhN2JiNDI4NjMxZjgwYjczMjFjMjdjYTU4YmYzYzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HkTLQPdTZh26QHFLR2jArQzaRc7
Cmr8wFgYWGjweMwIY6zmazW3ZScK3HKdMp0Onz0AD2z0o+vqAuKCTfHQg0upWqI6
lPbXHHnmABBHhjJNl8DT7a6fmva4I8r7PsYOMNsWI8B5YzZRFv/Gu39MxonradbX
JYmgfgQq2GqG3d/ZRNPduRTlb8DoPnlxSHUaHV3fVfSZB+KuAnk2kEVSN5P0zIL+
EshIgWy26STDjD0sda8q4Z+nd03+RqxnkSGrp05Eyl3H5UXhWG8YqNojhSzxlxC8
GQOTPz/F29VvokEEVfoD3PwBCK5UrQCCnZK/FM/nupXrYE0TfqeMxVwkAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTqznyae7QoYx+AtzIcJ8pYvzwbMB8GA1UdIwQY
MBaAFPbxxW2vcF8S6V1C9Hf44KPYbzmWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXZIRmJhOXdYeExwWFVMMGRfamdvOWh2T1pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9jMjBhZDUtZmRmYy00NDU4LTg1YjEt
YmZhY2JiMWExNzdkLzEvOXZIRmJhOXdYeExwWFVMMGRfamdvOWh2T1pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9jMjBhZDUtZmRmYy00NDU4LTg1YjEtYmZhY2JiMWExNzdk
LzEvOXZIRmJhOXdYeExwWFVMMGRfamdvOWh2T1pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFqAsv+L2
zoUSX12NYchsfqt31wcxMowR9YoW40NeyF4QvfV8GPsg2MfXov1+0RKUxJ1BVcdu
rI+CBne/FBzegwweu37HbvvSL1MllqAG+Q8PeBqJEcCqpNHrhM76J2+SVaUYJ2f3
DTxC/LouBxdKEOsTuCMqtEeNYIMxnee4kHkSnvFZ3uwqQV/OJQrQvY9tCoO2lUKu
ivyzGH4Ck3mBKNkF810Nh5jXI7YLO1PZJaXdawSAZvGBNaMFg8wKJY4Hx31nY53H
sBxB6a0uyAUAXI3V8yYuHcQAW8F3Ayh/o+o9R8vcFpP1N61GgGXgbEtaDfp3vvbv
XwukirP3Cf6Kgw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:28:16 2025 by rpki-client