Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
File: 9yjCKwJQJ1-m63NLoA55D343pVA.mft (raw, json)
Hash identifier: R0rP7LDSLlmT8as1jPqmUWYmPiuqrKMJuO3XLB67/+M=
Subject key identifier: 2E:08:8E:19:9F:AB:CE:D4:54:1C:72:58:DA:E1:0C:8E:8F:3D:1F:AF
Authority key identifier: F7:28:C2:2B:02:50:27:5F:A6:EB:73:4B:A0:0E:79:0F:7E:37:A5:50
Certificate issuer: /CN=f728c22b0250275fa6eb734ba00e790f7e37a550
Certificate serial: 019A4EF50ABB5779783F89845A59645E1BAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
Manifest number: 0A3A
Signing time: Tue 04 Nov 2025 13:01:13 +0000
Manifest this update: Tue 04 Nov 2025 13:01:13 +0000
Manifest next update: Wed 05 Nov 2025 13:01:13 +0000
Files and hashes: 1: 9yjCKwJQJ1-m63NLoA55D343pVA.crl (hash: VRBAX3NN961TwOmSd7GbHkCqX1uorYXSXmZWLI2o5fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:0a:bb:57:79:78:3f:89:84:5a:59:64:5e:1b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f728c22b0250275fa6eb734ba00e790f7e37a550
Validity
Not Before: Nov 4 13:01:13 2025 GMT
Not After : Nov 5 13:01:13 2025 GMT
Subject: CN=2e088e199fabced4541c7258dae10c8e8f3d1faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:09:72:68:01:7a:8a:9a:c1:78:a4:65:fb:a8:
f9:fb:95:54:6e:f7:33:0a:ca:12:b3:22:c5:c9:ce:
56:89:fc:0a:ca:2d:07:5f:99:e1:c1:b4:9b:67:18:
16:43:95:d5:e3:5c:91:24:1b:05:d8:84:4a:32:3e:
80:65:bd:3f:31:22:d9:31:c9:1e:30:b2:b1:93:90:
86:cb:9a:b7:4d:3d:92:a6:b2:6e:32:03:e9:60:f3:
fa:f6:92:79:f7:62:d6:85:0f:05:95:4d:a4:4c:2d:
60:18:e9:19:83:87:1a:4f:5c:8a:f4:a1:60:f1:ed:
01:0b:2e:b9:cc:23:de:da:82:a3:a2:66:ab:26:ea:
3c:4f:6d:8b:21:ab:ea:19:c7:26:c5:e6:a6:7e:95:
de:f7:a5:05:48:a8:2e:e8:51:fd:b1:9b:79:50:f9:
8d:b8:39:11:0e:7c:1e:c0:10:88:4b:05:0b:81:57:
e7:63:73:dc:38:54:3d:62:7b:46:a4:77:0e:56:9f:
c3:86:94:86:8e:59:7c:db:d6:f9:d6:17:aa:4c:20:
ea:88:ab:0c:20:1b:a1:b4:7a:4d:d8:b8:db:35:c5:
bf:2c:94:86:c9:3d:31:24:04:21:94:ff:28:25:40:
f5:a2:e2:fe:d3:f3:c6:79:40:f4:e1:fb:2e:02:ec:
aa:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:08:8E:19:9F:AB:CE:D4:54:1C:72:58:DA:E1:0C:8E:8F:3D:1F:AF
X509v3 Authority Key Identifier:
keyid:F7:28:C2:2B:02:50:27:5F:A6:EB:73:4B:A0:0E:79:0F:7E:37:A5:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:80:9f:b6:68:9d:ce:65:0d:a8:7b:ff:b7:41:e3:0a:44:56:
6a:6d:da:ce:d3:0c:83:62:f8:cf:40:21:5c:d0:d2:60:5e:47:
03:e8:bc:91:95:4f:3c:2c:ac:06:b4:af:6c:3a:35:80:84:bd:
9c:88:86:16:b9:f2:07:7c:c6:d1:38:54:24:4a:28:4e:57:3b:
aa:42:6b:bc:6d:10:8b:cc:30:07:3b:88:2d:f3:8c:be:99:78:
33:50:b0:9d:af:33:bb:a3:8e:fe:b4:8e:e3:4f:e9:26:ab:a3:
b7:58:35:fd:7d:33:56:14:f4:3b:8d:93:4b:e8:6f:9b:ea:53:
73:e4:45:9f:9e:f4:20:58:18:8f:c6:a1:d0:f1:37:1e:9c:03:
f4:c7:7b:c4:a9:2d:1b:3c:42:2a:14:a3:31:88:a6:d2:e7:23:
1e:db:aa:b8:a6:70:10:5a:2f:c9:63:b0:3b:37:c3:01:42:7e:
96:2f:c5:43:e8:54:db:86:b9:ab:67:09:00:9b:05:47:70:1e:
25:67:e3:24:7e:1f:0d:94:b7:c3:e7:17:48:b6:9c:df:30:24:
e6:fe:31:13:04:91:a4:2d:07:22:a4:e4:2d:8e:b1:09:80:bb:
c7:9b:13:13:ba:7f:7e:49:51:9e:66:94:9f:51:94:10:22:ec:
50:ab:ef:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9Qq7V3l4P4mEWllkXhutMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MjhjMjJiMDI1MDI3NWZhNmViNzM0YmEwMGU3OTBmN2Uz
N2E1NTAwHhcNMjUxMTA0MTMwMTEzWhcNMjUxMTA1MTMwMTEzWjAzMTEwLwYDVQQD
EygyZTA4OGUxOTlmYWJjZWQ0NTQxYzcyNThkYWUxMGM4ZThmM2QxZmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QlyaAF6iprBeKRl+6j5+5VUbvcz
CsoSsyLFyc5WifwKyi0HX5nhwbSbZxgWQ5XV41yRJBsF2IRKMj6AZb0/MSLZMcke
MLKxk5CGy5q3TT2SprJuMgPpYPP69pJ592LWhQ8FlU2kTC1gGOkZg4caT1yK9KFg
8e0BCy65zCPe2oKjomarJuo8T22LIavqGccmxeamfpXe96UFSKgu6FH9sZt5UPmN
uDkRDnwewBCISwULgVfnY3PcOFQ9YntGpHcOVp/DhpSGjll829b51heqTCDqiKsM
IBuhtHpN2LjbNcW/LJSGyT0xJAQhlP8oJUD1ouL+0/PGeUD04fsuAuyq2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC4Ijhmfq87UVBxyWNrhDI6PPR+vMB8GA1UdIwQY
MBaAFPcowisCUCdfputzS6AOeQ9+N6VQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXlqQ0t3SlFKMS1tNjNOTG9BNTVEMzQzcFZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9jOTEyZTYtYjM5ZC00MTY4LThjNWYt
MDZmNjRlYjAwNTY2LzEvOXlqQ0t3SlFKMS1tNjNOTG9BNTVEMzQzcFZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9jOTEyZTYtYjM5ZC00MTY4LThjNWYtMDZmNjRlYjAwNTY2
LzEvOXlqQ0t3SlFKMS1tNjNOTG9BNTVEMzQzcFZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgYCftmid
zmUNqHv/t0HjCkRWam3aztMMg2L4z0AhXNDSYF5HA+i8kZVPPCysBrSvbDo1gIS9
nIiGFrnyB3zG0ThUJEooTlc7qkJrvG0Qi8wwBzuILfOMvpl4M1Cwna8zu6OO/rSO
40/pJqujt1g1/X0zVhT0O42TS+hvm+pTc+RFn570IFgYj8ah0PE3HpwD9Md7xKkt
GzxCKhSjMYim0ucjHtuquKZwEFovyWOwOzfDAUJ+li/FQ+hU24a5q2cJAJsFR3Ae
JWfjJH4fDZS3w+cXSLac3zAk5v4xEwSRpC0HIqTkLY6xCYC7x5sTE7p/fklRnmaU
n1GUECLsUKvv1g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:21 2025 by rpki-client