Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft
File: 9r15bwtjNc_hKKXPm5fudoCC7Y0.mft (raw, json)
Hash identifier: CMGVTWvQLbmE7KtTWBSdIYkeyot4b1rCAKgU15A+3aU=
Subject key identifier: 86:F6:46:30:18:90:63:53:72:DB:1B:21:D7:41:A7:D9:20:10:08:5D
Authority key identifier: F6:BD:79:6F:0B:63:35:CF:E1:28:A5:CF:9B:97:EE:76:80:82:ED:8D
Certificate issuer: /CN=f6bd796f0b6335cfe128a5cf9b97ee768082ed8d
Certificate serial: 019A54BFAFEF247109CAA5392F048DA098B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft
Manifest number: 0208
Signing time: Wed 05 Nov 2025 16:00:39 +0000
Manifest this update: Wed 05 Nov 2025 16:00:39 +0000
Manifest next update: Thu 06 Nov 2025 16:00:39 +0000
Files and hashes: 1: 9r15bwtjNc_hKKXPm5fudoCC7Y0.crl (hash: iixvSdw7XgbSPV6sntt749gyDnB1P0UkygM3wv1fimQ=)
2: RIbTLj7txNwoYxh7oe27Ga8iD9g.roa (hash: b58BSl0OG9Cy3uXrPooEMPlzPzUnf3IVg7gnhdmepqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:af:ef:24:71:09:ca:a5:39:2f:04:8d:a0:98:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6bd796f0b6335cfe128a5cf9b97ee768082ed8d
Validity
Not Before: Nov 5 16:00:39 2025 GMT
Not After : Nov 6 16:00:39 2025 GMT
Subject: CN=86f646301890635372db1b21d741a7d92010085d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:88:cd:ad:1b:f7:a8:6e:72:09:ea:24:46:4a:
0c:c9:4b:cf:27:99:c7:52:6e:8d:2c:05:b5:a7:5f:
a7:98:53:5c:4e:17:77:fe:b3:62:26:d9:8b:5a:27:
c1:f8:6e:a2:f0:8d:0b:13:8a:02:85:bc:0f:e1:24:
a7:8f:bb:b8:1e:5a:52:a4:9a:fc:20:bb:73:1d:f7:
29:fd:9c:de:2f:fd:0e:94:21:e9:80:c1:a4:2c:27:
80:19:b2:dc:cd:8c:28:c4:6b:f1:49:73:67:1f:94:
53:09:b5:23:2c:de:1b:8f:07:40:30:69:f5:90:d5:
25:9e:8c:9d:2c:7f:7d:ba:1e:b9:17:3a:a3:86:8d:
2d:82:2c:9f:28:3f:d7:c8:88:6c:70:c4:fa:90:f4:
b8:d2:7c:fa:ea:50:84:dd:32:f0:13:c3:7c:51:96:
d6:39:6f:9b:e1:b5:e0:7e:e8:31:e2:29:ed:4d:40:
6a:ed:03:29:f9:b2:00:36:31:d3:3c:b1:13:c6:4d:
15:d6:59:e5:bd:97:0f:5e:56:4d:d6:79:18:bc:1d:
f1:81:65:ca:19:0e:86:a3:21:b2:95:a1:a0:1e:05:
63:91:aa:fc:24:e7:d8:0c:dd:99:f1:04:97:77:4a:
86:eb:26:0d:d9:6b:b3:ad:b8:e8:e9:ba:9d:d4:37:
eb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F6:46:30:18:90:63:53:72:DB:1B:21:D7:41:A7:D9:20:10:08:5D
X509v3 Authority Key Identifier:
keyid:F6:BD:79:6F:0B:63:35:CF:E1:28:A5:CF:9B:97:EE:76:80:82:ED:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:16:b3:97:ab:38:96:03:bb:5b:ac:1d:e0:77:9c:b6:b2:35:
11:07:44:f5:8f:90:f4:70:47:e9:fe:3c:9c:25:6b:7a:ff:d2:
c2:69:17:14:19:d2:21:84:fc:cb:1e:50:b2:a2:b0:1b:f3:35:
63:60:38:3a:17:4b:54:c3:86:ed:0a:93:03:46:37:e3:e0:01:
76:ce:20:a6:ee:02:cd:ce:3e:80:1e:3d:04:6a:b0:22:ce:24:
ac:98:fb:2e:19:2f:cf:5c:df:93:6b:36:e4:6c:a8:c3:3b:04:
b6:07:fd:fa:ce:76:25:2e:91:5c:eb:5e:16:49:e1:58:66:1d:
7e:93:7c:ef:9d:c4:d4:2e:2c:59:69:f9:e5:cf:6f:90:c9:d1:
83:30:95:6e:40:bb:40:45:f3:27:6a:a5:a0:55:4c:2c:8d:96:
55:51:30:df:24:40:03:ea:3a:93:4b:12:2f:5a:ad:c9:9a:e5:
9d:f7:db:5c:12:99:38:4f:1d:93:5d:e6:f3:2c:3d:a6:3a:a2:
32:18:4e:c8:61:e0:78:84:95:d7:27:0a:59:ad:b2:2f:5f:66:
89:a3:2a:06:cb:aa:ca:5f:ce:28:46:c5:db:07:25:b5:3c:e1:
1f:e1:db:3b:04:5a:69:04:2a:e4:6c:88:d5:64:5f:33:0f:23:
fb:3a:0e:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUv6/vJHEJyqU5LwSNoJi2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YmQ3OTZmMGI2MzM1Y2ZlMTI4YTVjZjliOTdlZTc2ODA4
MmVkOGQwHhcNMjUxMTA1MTYwMDM5WhcNMjUxMTA2MTYwMDM5WjAzMTEwLwYDVQQD
Eyg4NmY2NDYzMDE4OTA2MzUzNzJkYjFiMjFkNzQxYTdkOTIwMTAwODVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14jNrRv3qG5yCeokRkoMyUvPJ5nH
Um6NLAW1p1+nmFNcThd3/rNiJtmLWifB+G6i8I0LE4oChbwP4SSnj7u4HlpSpJr8
ILtzHfcp/ZzeL/0OlCHpgMGkLCeAGbLczYwoxGvxSXNnH5RTCbUjLN4bjwdAMGn1
kNUlnoydLH99uh65Fzqjho0tgiyfKD/XyIhscMT6kPS40nz66lCE3TLwE8N8UZbW
OW+b4bXgfugx4intTUBq7QMp+bIANjHTPLETxk0V1lnlvZcPXlZN1nkYvB3xgWXK
GQ6GoyGylaGgHgVjkar8JOfYDN2Z8QSXd0qG6yYN2Wuzrbjo6bqd1DfrXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIb2RjAYkGNTctsbIddBp9kgEAhdMB8GA1UdIwQY
MBaAFPa9eW8LYzXP4Silz5uX7naAgu2NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXIxNWJ3dGpOY19oS0tYUG01ZnVkb0NDN1kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9lMmM4MjEtNmQwMC00NzcwLWFmMmEt
M2VlN2M3MmUwMWViLzEvOXIxNWJ3dGpOY19oS0tYUG01ZnVkb0NDN1kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9lMmM4MjEtNmQwMC00NzcwLWFmMmEtM2VlN2M3MmUwMWVi
LzEvOXIxNWJ3dGpOY19oS0tYUG01ZnVkb0NDN1kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMRazl6s4
lgO7W6wd4HectrI1EQdE9Y+Q9HBH6f48nCVrev/SwmkXFBnSIYT8yx5QsqKwG/M1
Y2A4OhdLVMOG7QqTA0Y34+ABds4gpu4Czc4+gB49BGqwIs4krJj7Lhkvz1zfk2s2
5GyowzsEtgf9+s52JS6RXOteFknhWGYdfpN8753E1C4sWWn55c9vkMnRgzCVbkC7
QEXzJ2qloFVMLI2WVVEw3yRAA+o6k0sSL1qtyZrlnffbXBKZOE8dk13m8yw9pjqi
MhhOyGHgeISV1ycKWa2yL19miaMqBsuqyl/OKEbF2wcltTzhH+HbOwRaaQQq5GyI
1WRfMw8j+zoOKg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:13:52 2025 by rpki-client