Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
File: 9LdppT3YY1LTRA8iK9-QfPCcLbo.mft (raw, json)
Hash identifier: ORe7m3I8FOmyQWTQ7HzaMVeN1Fz3OfveBWDAIlSdeqQ=
Subject key identifier: AF:91:A6:B6:31:6C:A5:E2:C3:0A:5F:23:40:77:3C:B0:A9:A0:12:BF
Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
Certificate issuer: /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Certificate serial: 019A52638358F7BAF465EE7A19FC65C34EE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
Manifest number: 172A
Signing time: Wed 05 Nov 2025 05:00:44 +0000
Manifest this update: Wed 05 Nov 2025 05:00:44 +0000
Manifest next update: Thu 06 Nov 2025 05:00:44 +0000
Files and hashes: 1: 07X0hen1-KbW9Uhkt7xjA-PCLGU.roa (hash: 8+QD86bIku1q5HIr9iB6Xu8OCMzU+b8rQ15QGWkM/rs=)
2: 9LdppT3YY1LTRA8iK9-QfPCcLbo.crl (hash: I3O5P6pDhI12irH+2S/ZMtE+WtASrX+b67I7cnI08D8=)
3: Ue3VZrB8a4EG4I_RXK87Uw3OtZs.roa (hash: UZno3qoAs6BNi7dyZDbKw3CxcQ+pse82BKcQlZP0pfM=)
4: XljC5T-tfn8kyp8IckkuxduArlE.roa (hash: GpetnE8RGdPeAs90fgd9VHf6P54N2jU+6iw/T8HuxAQ=)
5: azUb986KPmjNBXNI1GEnnjHJfR8.roa (hash: 0Eh3zrlfIiIGJgQrMOsGTA9FYjfTizw8KSjWE+UgRQA=)
6: gcGX0RK_gzGDW3EhLuEc_DmOeRw.roa (hash: eZFbzavcThmBCXfK06842GFdBQ3cFnn53xBoz77IdHs=)
7: urbklb_tMgWulJwput0Uvsn9CsE.roa (hash: WllQD7vTFpOMjfn+nif/0eXgJY9cIhU7nttx45/fv5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:83:58:f7:ba:f4:65:ee:7a:19:fc:65:c3:4e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Validity
Not Before: Nov 5 05:00:44 2025 GMT
Not After : Nov 6 05:00:44 2025 GMT
Subject: CN=af91a6b6316ca5e2c30a5f2340773cb0a9a012bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:64:cd:67:24:20:76:d0:2b:f3:0e:74:f8:e7:
93:c5:a0:94:3e:52:c1:d6:39:1b:8b:3a:73:f4:97:
2c:35:5c:c9:20:a2:55:34:0d:10:40:d6:04:7b:92:
d5:9f:8c:ee:13:57:2e:d9:14:8c:9b:03:c8:53:37:
fd:20:81:65:43:31:8c:f0:8e:ad:56:cb:8b:1c:a2:
8f:d6:0c:33:c2:71:24:61:17:5f:f6:e3:4c:fb:68:
1b:cb:8f:4f:31:38:72:de:c6:7f:34:8d:6e:dc:97:
e5:cc:9f:80:ba:2c:89:05:a2:4f:4c:b0:56:a7:e6:
52:03:13:a9:19:20:4f:29:8d:ce:31:bf:3b:2b:64:
11:26:1a:68:1b:0f:bb:bc:8b:85:1e:5e:b5:03:6d:
04:a1:4a:08:fa:ac:11:68:f0:ff:fb:7e:9c:6f:99:
0a:e5:31:a4:56:59:82:a2:74:c1:fb:c8:47:0d:4f:
9c:80:57:fe:7a:d9:00:e4:c5:e0:fc:4a:41:31:49:
c1:a8:fc:26:c7:b8:b8:bf:df:95:06:d0:b1:dd:75:
34:8a:d9:29:11:f7:93:ed:26:72:93:d3:af:98:97:
03:34:69:bd:a5:5d:ce:68:b9:73:39:d2:81:b3:64:
5d:48:f6:c3:96:5b:96:c3:87:87:a4:f8:f3:da:6b:
ea:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:91:A6:B6:31:6C:A5:E2:C3:0A:5F:23:40:77:3C:B0:A9:A0:12:BF
X509v3 Authority Key Identifier:
keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:41:d2:ec:20:31:a1:ed:ba:2c:bb:f7:f5:3d:95:cc:15:52:
d8:4b:fc:f3:b8:46:d0:bd:7a:f8:b7:d8:c0:a0:72:c3:ea:23:
54:80:b4:21:ea:2a:6a:4a:db:17:15:dc:41:c1:f4:00:98:19:
ed:01:21:db:dc:5f:e3:59:66:01:f7:05:d5:7d:26:4c:1b:71:
9c:78:e8:7d:57:61:ae:2b:6c:95:23:53:ad:99:ef:51:3a:e2:
02:c3:9d:71:44:0a:00:e4:74:c4:ea:d2:fb:af:70:06:0f:53:
fc:47:60:cb:db:e2:39:19:d6:26:a9:d8:15:e9:3a:b1:9a:e9:
2a:77:b9:d9:a0:f7:3b:1d:f6:2e:22:bd:0a:42:04:89:99:61:
81:e1:78:d0:d6:73:21:ee:76:1e:15:e3:20:61:2f:02:5f:d2:
7e:74:89:e1:f0:31:24:98:9a:49:c4:b3:b5:2c:d5:b1:14:05:
6b:91:89:6c:a9:81:df:d1:71:cc:f7:34:8b:70:37:ae:4e:2d:
66:bf:65:63:f2:4d:2a:c1:0f:61:e3:22:32:95:6e:1b:46:96:
8e:e5:95:68:5c:28:f1:9b:04:48:a4:6c:3d:14:dc:6d:cc:9d:
77:98:8e:c2:36:35:73:87:aa:b9:45:6b:ca:d2:94:2b:17:48:
d4:72:6e:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSY4NY97r0Ze56Gfxlw07gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0Yjc2OWE1M2RkODYzNTJkMzQ0MGYyMjJiZGY5MDdjZjA5
YzJkYmEwHhcNMjUxMTA1MDUwMDQ0WhcNMjUxMTA2MDUwMDQ0WjAzMTEwLwYDVQQD
EyhhZjkxYTZiNjMxNmNhNWUyYzMwYTVmMjM0MDc3M2NiMGE5YTAxMmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGTNZyQgdtAr8w50+OeTxaCUPlLB
1jkbizpz9JcsNVzJIKJVNA0QQNYEe5LVn4zuE1cu2RSMmwPIUzf9IIFlQzGM8I6t
VsuLHKKP1gwzwnEkYRdf9uNM+2gby49PMThy3sZ/NI1u3JflzJ+AuiyJBaJPTLBW
p+ZSAxOpGSBPKY3OMb87K2QRJhpoGw+7vIuFHl61A20EoUoI+qwRaPD/+36cb5kK
5TGkVlmConTB+8hHDU+cgFf+etkA5MXg/EpBMUnBqPwmx7i4v9+VBtCx3XU0itkp
EfeT7SZyk9OvmJcDNGm9pV3OaLlzOdKBs2RdSPbDlluWw4eHpPjz2mvqZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+RprYxbKXiwwpfI0B3PLCpoBK/MB8GA1UdIwQY
MBaAFPS3aaU92GNS00QPIivfkHzwnC26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMt
ZDdjMzZjMjdjMDg3LzEvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMtZDdjMzZjMjdjMDg3
LzEvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp0HS7CAx
oe26LLv39T2VzBVS2Ev887hG0L16+LfYwKByw+ojVIC0IeoqakrbFxXcQcH0AJgZ
7QEh29xf41lmAfcF1X0mTBtxnHjofVdhritslSNTrZnvUTriAsOdcUQKAOR0xOrS
+69wBg9T/Edgy9viORnWJqnYFek6sZrpKne52aD3Ox32LiK9CkIEiZlhgeF40NZz
Ie52HhXjIGEvAl/SfnSJ4fAxJJiaScSztSzVsRQFa5GJbKmB39FxzPc0i3A3rk4t
Zr9lY/JNKsEPYeMiMpVuG0aWjuWVaFwo8ZsESKRsPRTcbcydd5iOwjY1c4equUVr
ytKUKxdI1HJupA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:46:51 2025 by rpki-client