Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.mft
File: 9rG5O-fUO4bWT4tLljvJFWJfI_I.mft (raw, json)
Hash identifier: wN3G7qs1C0LtPSWoumh71GK9LRg19Lrc5dzcaxJhm68=
Subject key identifier: CE:3B:DB:22:AD:65:6E:C4:5C:74:6D:52:5C:10:DE:42:FB:86:A0:2E
Authority key identifier: F6:B1:B9:3B:E7:D4:3B:86:D6:4F:8B:4B:96:3B:C9:15:62:5F:23:F2
Certificate issuer: /CN=f6b1b93be7d43b86d64f8b4b963bc915625f23f2
Certificate serial: 019A4EF538DB82BFC53A36C7F186B489F60A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rG5O-fUO4bWT4tLljvJFWJfI_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.mft
Manifest number: 039E
Signing time: Tue 04 Nov 2025 13:01:24 +0000
Manifest this update: Tue 04 Nov 2025 13:01:24 +0000
Manifest next update: Wed 05 Nov 2025 13:01:24 +0000
Files and hashes: 1: 9rG5O-fUO4bWT4tLljvJFWJfI_I.crl (hash: qmKmabN24ePdRXvfYwvhG4aHemz5dsWY/JSApmuVWIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rG5O-fUO4bWT4tLljvJFWJfI_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:38:db:82:bf:c5:3a:36:c7:f1:86:b4:89:f6:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b1b93be7d43b86d64f8b4b963bc915625f23f2
Validity
Not Before: Nov 4 13:01:24 2025 GMT
Not After : Nov 5 13:01:24 2025 GMT
Subject: CN=ce3bdb22ad656ec45c746d525c10de42fb86a02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:be:4c:26:62:17:b9:0e:21:0a:85:f9:a9:46:
57:64:89:a5:d0:27:18:ca:65:43:64:62:8d:c8:bc:
f4:90:50:c0:1b:e7:dc:0d:2a:04:47:3b:32:dc:f6:
84:2a:ce:14:13:d7:e9:dc:79:ea:95:be:f5:80:e5:
9c:ed:3e:35:c5:1f:90:a2:f3:c6:03:4e:51:b8:9a:
6b:76:7b:5e:22:ff:3c:08:d8:68:67:f1:c8:17:ab:
ba:c2:94:cb:b4:d1:50:bd:3a:54:79:8a:82:30:9e:
d7:55:38:12:1c:87:ef:93:a5:fe:de:05:d2:08:c8:
c4:9d:ff:79:a6:36:b5:ee:5a:2c:ee:3c:17:15:e3:
80:2d:82:38:92:09:c8:01:d8:0e:58:aa:41:99:0e:
16:1c:d2:28:1f:4d:b4:21:76:2e:a0:1a:78:f9:c4:
22:bc:ac:6b:fb:0e:85:16:ac:fb:a3:e5:0a:44:c1:
e2:bf:d8:e9:19:03:44:e2:1f:fa:f8:41:5e:12:9c:
3f:e4:86:75:5b:02:44:9b:6c:98:03:08:72:ab:e0:
8a:c5:e4:91:20:6e:1f:3d:e2:06:68:fc:3f:c6:fe:
e7:52:88:99:57:81:8c:c1:d6:09:af:a6:42:47:02:
f2:b5:82:d1:69:6a:c8:f4:7d:77:a1:f7:17:c1:b7:
9e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3B:DB:22:AD:65:6E:C4:5C:74:6D:52:5C:10:DE:42:FB:86:A0:2E
X509v3 Authority Key Identifier:
keyid:F6:B1:B9:3B:E7:D4:3B:86:D6:4F:8B:4B:96:3B:C9:15:62:5F:23:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rG5O-fUO4bWT4tLljvJFWJfI_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:88:6f:0c:b4:50:93:da:6c:28:7b:c9:19:ca:8e:ed:72:ca:
e4:6a:1a:f1:29:6f:12:73:8b:1a:f4:62:69:12:23:96:4d:3f:
a3:33:78:d9:9b:30:2b:14:a8:00:a2:27:c4:11:79:f6:69:95:
25:09:37:6a:67:33:78:aa:d6:3b:49:db:8b:98:f7:07:3c:e7:
b9:9a:16:ab:82:a7:78:7e:39:41:5a:f2:66:0d:2e:63:d5:8a:
b4:ba:a6:2a:84:93:9b:9d:e9:6b:5a:f5:28:1a:3e:d0:ac:06:
3f:66:6a:2c:fe:39:a4:f9:ec:08:4a:08:5a:94:29:b8:a2:15:
33:15:fe:ec:66:3d:8a:7e:56:68:a7:99:4f:bc:f2:c6:e6:94:
ae:a1:03:a7:e0:29:92:57:15:72:fe:97:b7:a3:60:4b:e9:09:
64:ac:3c:9b:56:e1:7c:cd:21:d1:db:95:08:5e:a9:13:c3:c6:
2a:b9:f4:df:07:71:eb:7a:e4:84:2f:be:22:d2:80:fa:65:0f:
bc:3f:56:85:4f:6f:94:ab:1b:ce:a5:70:c4:b0:06:8d:96:3f:
e7:b5:89:ee:69:ce:02:3d:f0:0a:35:98:b2:a2:45:6d:5a:b5:
1c:6e:2a:7b:a4:66:2d:64:7d:2f:fb:f6:13:f0:65:b2:fd:cb:
8d:a4:55:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9Tjbgr/FOjbH8Ya0ifYKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YjFiOTNiZTdkNDNiODZkNjRmOGI0Yjk2M2JjOTE1NjI1
ZjIzZjIwHhcNMjUxMTA0MTMwMTI0WhcNMjUxMTA1MTMwMTI0WjAzMTEwLwYDVQQD
EyhjZTNiZGIyMmFkNjU2ZWM0NWM3NDZkNTI1YzEwZGU0MmZiODZhMDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyb5MJmIXuQ4hCoX5qUZXZIml0CcY
ymVDZGKNyLz0kFDAG+fcDSoERzsy3PaEKs4UE9fp3Hnqlb71gOWc7T41xR+QovPG
A05RuJprdnteIv88CNhoZ/HIF6u6wpTLtNFQvTpUeYqCMJ7XVTgSHIfvk6X+3gXS
CMjEnf95pja17los7jwXFeOALYI4kgnIAdgOWKpBmQ4WHNIoH020IXYuoBp4+cQi
vKxr+w6FFqz7o+UKRMHiv9jpGQNE4h/6+EFeEpw/5IZ1WwJEm2yYAwhyq+CKxeSR
IG4fPeIGaPw/xv7nUoiZV4GMwdYJr6ZCRwLytYLRaWrI9H13ofcXwbeexwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM472yKtZW7EXHRtUlwQ3kL7hqAuMB8GA1UdIwQY
MBaAFPaxuTvn1DuG1k+LS5Y7yRViXyPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXJHNU8tZlVPNGJXVDR0TGxqdkpGV0pmSV9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iNzI5Y2MtNzU0ZS00YWVhLTg1ZjIt
MGFjMmNkM2ZlMDA4LzEvOXJHNU8tZlVPNGJXVDR0TGxqdkpGV0pmSV9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9iNzI5Y2MtNzU0ZS00YWVhLTg1ZjItMGFjMmNkM2ZlMDA4
LzEvOXJHNU8tZlVPNGJXVDR0TGxqdkpGV0pmSV9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWohvDLRQ
k9psKHvJGcqO7XLK5Goa8SlvEnOLGvRiaRIjlk0/ozN42ZswKxSoAKInxBF59mmV
JQk3amczeKrWO0nbi5j3BzznuZoWq4KneH45QVryZg0uY9WKtLqmKoSTm53pa1r1
KBo+0KwGP2ZqLP45pPnsCEoIWpQpuKIVMxX+7GY9in5WaKeZT7zyxuaUrqEDp+Ap
klcVcv6Xt6NgS+kJZKw8m1bhfM0h0duVCF6pE8PGKrn03wdx63rkhC++ItKA+mUP
vD9WhU9vlKsbzqVwxLAGjZY/57WJ7mnOAj3wCjWYsqJFbVq1HG4qe6RmLWR9L/v2
E/Blsv3LjaRVRw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:57:17 2025 by rpki-client