Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft
File: v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft (raw, json)
Hash identifier: aibiA/QeMOja1jS4xAIJQQcFG1z28zMdYC3ORnbz+Es=
Subject key identifier: 59:EA:05:96:C5:E6:A9:01:54:25:AA:AA:BD:3C:86:61:6B:C3:A6:DF
Authority key identifier: BF:D7:BB:FC:C2:B8:FA:B6:6A:58:1B:82:27:CA:0A:C8:17:FA:14:6B
Certificate issuer: /CN=bfd7bbfcc2b8fab66a581b8227ca0ac817fa146b
Certificate serial: 019A4E4FC310E4F45A745E0F905349EDF5DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft
Manifest number: 1003
Signing time: Tue 04 Nov 2025 10:00:41 +0000
Manifest this update: Tue 04 Nov 2025 10:00:41 +0000
Manifest next update: Wed 05 Nov 2025 10:00:41 +0000
Files and hashes: 1: XFCoTFAZ3KfAR1P_1a3xaKLIipA.roa (hash: tHkTVZ0U3L5FGmSNyvjm8iSt+fIxv8Im36qIEB/UGXo=)
2: v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl (hash: 7O0wtiXE8QD7rmNM6kcJI6MLADbTyXtUHSJ9bzbds04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:c3:10:e4:f4:5a:74:5e:0f:90:53:49:ed:f5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd7bbfcc2b8fab66a581b8227ca0ac817fa146b
Validity
Not Before: Nov 4 10:00:41 2025 GMT
Not After : Nov 5 10:00:41 2025 GMT
Subject: CN=59ea0596c5e6a9015425aaaabd3c86616bc3a6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bf:d0:1e:20:3c:49:7e:7b:4d:e9:7a:53:85:
d5:c4:3c:f4:64:a8:2e:38:29:9e:fb:5e:40:82:c0:
f7:0f:16:a2:d8:62:f5:aa:7e:e4:7f:42:08:08:2d:
e6:83:41:cf:28:06:5d:f4:ee:5f:4d:80:24:4e:20:
7d:e0:10:b0:9a:d1:69:c5:6f:78:5c:dd:56:b7:d1:
25:ae:21:58:b6:53:45:50:b2:3d:f7:48:11:82:54:
94:0e:9e:7f:c5:77:c7:0e:0d:37:3b:e9:7d:f7:6f:
c0:2b:e6:d9:aa:36:49:47:0a:2a:84:09:fd:8a:80:
36:ca:7c:f3:80:ff:d0:fa:78:94:ce:34:5f:70:02:
ba:29:46:1f:04:cf:18:8a:98:4f:56:71:a0:91:bf:
c1:e1:93:17:47:ff:5b:66:37:73:e5:cf:83:be:32:
56:d8:40:90:57:12:17:36:75:ac:35:73:b0:ba:9f:
62:a4:93:a8:c9:4a:9e:66:e0:ec:51:21:3c:d8:d6:
8a:80:18:ac:44:0d:16:6b:cf:df:4d:0c:29:b2:ef:
33:cb:5c:c0:78:d2:70:1f:db:98:f7:97:e0:f1:a1:
42:1a:52:2b:2b:1b:22:64:c8:16:9c:ba:64:21:4f:
36:de:b3:16:eb:d5:c7:99:dc:74:e8:38:4a:7f:6a:
7b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:EA:05:96:C5:E6:A9:01:54:25:AA:AA:BD:3C:86:61:6B:C3:A6:DF
X509v3 Authority Key Identifier:
keyid:BF:D7:BB:FC:C2:B8:FA:B6:6A:58:1B:82:27:CA:0A:C8:17:FA:14:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:be:80:81:3a:24:dc:fc:b3:28:a4:8f:a9:37:bb:b3:ed:68:
05:f6:bf:5f:80:28:bb:a1:cf:5c:74:86:40:54:52:4c:f2:00:
61:e2:c5:75:c7:a6:95:5a:27:2d:c0:a0:d0:d8:15:93:87:86:
d3:15:7e:d3:9f:c2:b9:b0:8a:51:b2:7d:db:c5:82:0f:89:1b:
e5:3b:08:9d:ec:f7:56:8c:77:7f:bd:24:de:54:59:90:d0:d9:
75:f0:43:ba:1d:ef:5f:3e:eb:a7:a6:fa:4a:1c:eb:8c:78:6e:
38:fa:02:c8:65:fe:22:50:42:fb:5c:f1:9c:dc:aa:3f:3b:41:
bb:ff:5e:a8:d4:a9:a0:34:52:9c:8f:8b:05:eb:c1:db:d9:cd:
01:12:00:e8:d2:db:d2:79:b5:5c:cc:dd:b8:47:cb:ba:f8:94:
6d:90:59:2b:f7:37:ae:90:77:9a:ae:9a:f5:3d:53:6b:fe:e9:
7b:2a:c6:50:a4:cd:9e:91:90:61:80:d1:a0:43:3e:57:30:85:
17:b1:bd:31:63:d1:84:e0:ef:04:b8:90:a1:c5:c2:06:e4:35:
54:68:40:48:cd:e2:44:80:68:da:82:19:9d:c4:c3:af:a1:bb:
b6:39:e4:1b:94:72:64:9e:24:7e:c4:e3:95:4e:7c:83:c1:f6:
a6:7e:b2:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT8MQ5PRadF4PkFNJ7fXdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZDdiYmZjYzJiOGZhYjY2YTU4MWI4MjI3Y2EwYWM4MTdm
YTE0NmIwHhcNMjUxMTA0MTAwMDQxWhcNMjUxMTA1MTAwMDQxWjAzMTEwLwYDVQQD
Eyg1OWVhMDU5NmM1ZTZhOTAxNTQyNWFhYWFiZDNjODY2MTZiYzNhNmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr/QHiA8SX57Tel6U4XVxDz0ZKgu
OCme+15AgsD3Dxai2GL1qn7kf0IICC3mg0HPKAZd9O5fTYAkTiB94BCwmtFpxW94
XN1Wt9ElriFYtlNFULI990gRglSUDp5/xXfHDg03O+l992/AK+bZqjZJRwoqhAn9
ioA2ynzzgP/Q+niUzjRfcAK6KUYfBM8YiphPVnGgkb/B4ZMXR/9bZjdz5c+DvjJW
2ECQVxIXNnWsNXOwup9ipJOoyUqeZuDsUSE82NaKgBisRA0Wa8/fTQwpsu8zy1zA
eNJwH9uY95fg8aFCGlIrKxsiZMgWnLpkIU823rMW69XHmdx06DhKf2p71wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnqBZbF5qkBVCWqqr08hmFrw6bfMB8GA1UdIwQY
MBaAFL/Xu/zCuPq2algbgifKCsgX+hRrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjllN19NSzQtclpxV0J1Q0o4b0t5QmY2RkdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS84MmZiMDUtNjFlNi00MzM1LWIxNjct
MzZhZWQ4N2UzMzg4LzEvdjllN19NSzQtclpxV0J1Q0o4b0t5QmY2RkdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS84MmZiMDUtNjFlNi00MzM1LWIxNjctMzZhZWQ4N2UzMzg4
LzEvdjllN19NSzQtclpxV0J1Q0o4b0t5QmY2RkdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOL6AgTok
3PyzKKSPqTe7s+1oBfa/X4Aou6HPXHSGQFRSTPIAYeLFdcemlVonLcCg0NgVk4eG
0xV+05/CubCKUbJ928WCD4kb5TsInez3Vox3f70k3lRZkNDZdfBDuh3vXz7rp6b6
ShzrjHhuOPoCyGX+IlBC+1zxnNyqPztBu/9eqNSpoDRSnI+LBevB29nNARIA6NLb
0nm1XMzduEfLuviUbZBZK/c3rpB3mq6a9T1Ta/7peyrGUKTNnpGQYYDRoEM+VzCF
F7G9MWPRhODvBLiQocXCBuQ1VGhASM3iRIBo2oIZncTDr6G7tjnkG5RyZJ4kfsTj
lU58g8H2pn6ywQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:29 2025 by rpki-client