Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
File: 9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft (raw, json)
Hash identifier: 9ns1qr+o//XVDMuhZ2WlTGbrdlTVfDh2C7V924V7lkA=
Subject key identifier: 86:EB:F4:F7:A4:EB:D1:63:77:D3:AC:36:8C:94:59:4B:F7:55:C4:4C
Authority key identifier: F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
Certificate issuer: /CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Certificate serial: 019A4E4FC82C9C7975BD7EF5EDE7FC2A31C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
Manifest number: 171D
Signing time: Tue 04 Nov 2025 10:00:42 +0000
Manifest this update: Tue 04 Nov 2025 10:00:42 +0000
Manifest next update: Wed 05 Nov 2025 10:00:42 +0000
Files and hashes: 1: 9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl (hash: eezNxVXEB0JogD4ynV2wQEo0uJoCeZZgr7A9kXJl0WM=)
2: VThOfYn2yicDk7nCFvApHsO86Wg.roa (hash: mej7dGpuagdDYe3wWlS5P2O07cvlpo15DDfF6tOHiTI=)
3: tTfX1pe5RTBDA8rpWDL9o3SrrsQ.roa (hash: 0Boop2PPC+Kquo+edf/AvMEIcfKlqZO/IjiPFQIbjyo=)
4: uOIlSnTF6fTtDAo-t67l55RoI68.roa (hash: dB5cropfobX2xCE84HM5iEAEEedSs1cybSdhKv0KvQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:c8:2c:9c:79:75:bd:7e:f5:ed:e7:fc:2a:31:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Validity
Not Before: Nov 4 10:00:42 2025 GMT
Not After : Nov 5 10:00:42 2025 GMT
Subject: CN=86ebf4f7a4ebd16377d3ac368c94594bf755c44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:08:52:29:86:bc:c3:23:dd:eb:59:5c:de:fb:
1b:74:57:6e:a9:48:fe:48:03:51:bd:8f:e4:09:ff:
21:39:28:0f:d4:1b:7f:5d:28:5d:63:f8:7f:ec:7b:
79:f5:c0:a2:78:38:59:6d:25:b4:f9:31:88:03:7d:
97:d5:3b:cf:89:97:20:66:e0:25:78:06:a0:a1:ea:
6e:41:37:03:f2:c6:1d:bd:db:ee:e7:4e:4c:01:04:
7b:24:4f:62:8a:f5:18:72:3e:a5:3a:b4:eb:00:4c:
16:48:24:3e:18:74:3d:d7:52:23:b5:e3:62:41:de:
1e:3d:d5:be:63:48:9d:31:b3:ca:43:eb:fb:f7:5f:
f7:c0:e9:65:0a:14:3b:18:cc:38:e8:bd:44:e6:ed:
79:4e:36:bf:e4:22:06:c7:0d:3b:fe:b9:47:bd:e2:
b3:94:bb:db:16:b4:c8:e4:2b:ac:7d:2f:b9:76:aa:
1d:37:2f:8f:b4:dd:16:dc:49:d0:60:3d:68:e0:85:
82:d4:07:9f:f9:ae:67:65:b1:8c:15:d0:db:a1:5b:
0f:d2:75:2c:9a:34:87:6f:26:ce:b2:86:c0:e4:73:
06:02:fa:99:93:1d:81:0f:37:74:e8:6e:f6:58:d1:
41:ee:f6:c1:24:6f:59:63:a8:6d:e8:b4:61:db:7e:
08:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EB:F4:F7:A4:EB:D1:63:77:D3:AC:36:8C:94:59:4B:F7:55:C4:4C
X509v3 Authority Key Identifier:
keyid:F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:42:0b:fb:65:b0:48:f3:15:7b:72:2e:a0:b8:08:59:29:37:
79:9d:77:af:92:fc:59:ed:d2:a3:97:8d:f4:fe:b8:a6:0b:69:
aa:42:a3:1e:41:79:a3:5a:70:0b:d0:c0:05:33:ed:0e:e5:87:
fa:06:82:46:c9:45:aa:cb:a7:48:c5:3b:e2:58:0d:b8:d0:1b:
c2:c5:30:84:c6:12:3b:67:15:34:94:3b:aa:45:d2:81:b1:76:
ca:62:0b:97:db:1e:97:90:d8:bf:8f:ed:2c:b2:70:a5:a1:3e:
77:2a:cd:57:15:d5:f9:af:5c:a4:1f:13:4f:0b:09:2f:1f:56:
3b:cd:53:dd:d1:29:cd:be:ef:e5:db:d3:34:18:83:74:4b:e8:
f8:21:3c:60:1c:56:14:13:d5:bc:ff:41:a4:ba:8d:83:f2:d0:
cc:fe:6b:d4:ab:10:6c:13:02:c1:4f:2c:17:97:5b:79:ff:40:
cd:6f:9a:84:29:cc:ad:db:7b:ff:47:5f:68:69:c5:a1:48:76:
50:4a:28:b8:f7:16:c5:9a:c8:d6:26:12:80:08:26:10:f3:7c:
52:05:50:12:32:41:49:f7:32:f5:8d:f5:19:ba:56:7d:11:64:
b4:15:59:6a:45:13:ff:fb:fb:2e:d9:62:50:0a:e7:69:e0:10:
66:57:f3:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT8gsnHl1vX717ef8KjHJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NzFiYmYxZDNkM2MwZWZlMzZkZTExMDM5MmJlMGM3YWM0
NDdhODQwHhcNMjUxMTA0MTAwMDQyWhcNMjUxMTA1MTAwMDQyWjAzMTEwLwYDVQQD
Eyg4NmViZjRmN2E0ZWJkMTYzNzdkM2FjMzY4Yzk0NTk0YmY3NTVjNDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QhSKYa8wyPd61lc3vsbdFduqUj+
SANRvY/kCf8hOSgP1Bt/XShdY/h/7Ht59cCieDhZbSW0+TGIA32X1TvPiZcgZuAl
eAagoepuQTcD8sYdvdvu505MAQR7JE9iivUYcj6lOrTrAEwWSCQ+GHQ911IjteNi
Qd4ePdW+Y0idMbPKQ+v791/3wOllChQ7GMw46L1E5u15Tja/5CIGxw07/rlHveKz
lLvbFrTI5CusfS+5dqodNy+PtN0W3EnQYD1o4IWC1Aef+a5nZbGMFdDboVsP0nUs
mjSHbybOsobA5HMGAvqZkx2BDzd06G72WNFB7vbBJG9ZY6ht6LRh234IdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbr9Pek69Fjd9OsNoyUWUv3VcRMMB8GA1UdIwQY
MBaAFPVxu/HT08Dv423hEDkr4MesRHqEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVhHNzhkUFR3T19qYmVFUU9Tdmd4NnhFZW9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi82ODMwM2YtZThiMC00ZmUwLTk2YjYt
YTk2NTdlYjFmOGQ3LzEvOVhHNzhkUFR3T19qYmVFUU9Tdmd4NnhFZW9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi82ODMwM2YtZThiMC00ZmUwLTk2YjYtYTk2NTdlYjFmOGQ3
LzEvOVhHNzhkUFR3T19qYmVFUU9Tdmd4NnhFZW9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn0IL+2Ww
SPMVe3IuoLgIWSk3eZ13r5L8We3So5eN9P64pgtpqkKjHkF5o1pwC9DABTPtDuWH
+gaCRslFqsunSMU74lgNuNAbwsUwhMYSO2cVNJQ7qkXSgbF2ymILl9sel5DYv4/t
LLJwpaE+dyrNVxXV+a9cpB8TTwsJLx9WO81T3dEpzb7v5dvTNBiDdEvo+CE8YBxW
FBPVvP9BpLqNg/LQzP5r1KsQbBMCwU8sF5dbef9AzW+ahCnMrdt7/0dfaGnFoUh2
UEoouPcWxZrI1iYSgAgmEPN8UgVQEjJBSfcy9Y31GbpWfRFktBVZakUT//v7Ltli
UArnaeAQZlfz7g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:31 2025 by rpki-client