Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
File: 9WdppC5EJm8Dfss5DUEV_r44YaQ.mft (raw, json)
Hash identifier: Svzykz9Nyq2LjcpR0cOTziuCHQybKrFnXasQ0h7Hp/I=
Subject key identifier: 61:A1:0E:88:13:3A:0C:6D:E0:46:71:DA:EC:C5:59:66:B1:05:56:F1
Authority key identifier: F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
Certificate issuer: /CN=f56769a42e44266f037ecb390d4115febe3861a4
Certificate serial: 019A4F2B6266C8859F7146D08AC67F626EA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
Manifest number: 16A0
Signing time: Tue 04 Nov 2025 14:00:34 +0000
Manifest this update: Tue 04 Nov 2025 14:00:34 +0000
Manifest next update: Wed 05 Nov 2025 14:00:34 +0000
Files and hashes: 1: 6wW68rpEYT5imOHdAJC8iqYgH-8.roa (hash: 2OyXhc87+DnhsUi/Ak2VDrIMxn2fa0IaWGuzCLcLykQ=)
2: 9WdppC5EJm8Dfss5DUEV_r44YaQ.crl (hash: TrmY0fP9QjBHh9KY2f4yQqucrG57GHh5KhD0fpWXbSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:62:66:c8:85:9f:71:46:d0:8a:c6:7f:62:6e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56769a42e44266f037ecb390d4115febe3861a4
Validity
Not Before: Nov 4 14:00:34 2025 GMT
Not After : Nov 5 14:00:34 2025 GMT
Subject: CN=61a10e88133a0c6de04671daecc55966b10556f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f8:01:50:ac:e7:c8:ee:78:91:ab:5b:f9:99:
fe:31:f9:e7:3c:50:21:46:36:25:f0:1f:a4:a3:e9:
4a:a8:93:b7:92:ca:1a:ee:77:15:10:08:b9:f6:0e:
09:24:36:fa:d8:e2:db:28:6e:6d:aa:ef:f3:f3:bb:
4f:ea:50:c5:ae:6f:82:96:5c:d9:dc:f6:64:ed:ca:
1d:6b:4b:1e:9e:dd:95:83:12:10:9c:82:14:4c:b6:
a3:a0:18:e1:67:6d:8a:d3:e0:d1:0c:cf:ff:ab:1a:
ac:f8:e7:a3:8a:f0:fb:44:9d:8a:af:2d:88:a0:ac:
6a:d7:7d:a1:55:e3:4e:64:15:6d:6d:f7:b1:06:2c:
29:e5:91:ab:fb:a6:34:af:fc:64:ff:c4:df:49:d3:
27:b2:40:83:20:0e:b9:bc:d5:1a:99:ee:e7:50:09:
a3:57:03:28:65:c7:ab:b8:21:ee:94:56:80:2b:fd:
69:1f:e0:4a:e8:94:7f:8e:9f:8b:61:3c:a4:19:27:
b2:6b:2d:99:0f:25:e8:f9:1c:a7:0d:a7:41:2e:54:
29:9b:e4:66:76:98:83:5e:ad:0b:56:5f:0a:8a:c0:
df:4b:a2:8e:9e:94:fd:07:b2:9f:a6:b2:50:e0:5d:
b1:7f:e4:d4:4b:24:56:f9:0f:c5:67:77:e1:0a:dd:
44:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A1:0E:88:13:3A:0C:6D:E0:46:71:DA:EC:C5:59:66:B1:05:56:F1
X509v3 Authority Key Identifier:
keyid:F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d2:14:65:81:c4:a6:02:ae:30:17:9a:76:65:76:16:99:b0:
bc:ce:09:ea:f5:66:a8:4a:c7:88:d0:0c:4c:73:7e:74:57:1e:
d2:f1:a2:d3:61:ea:3b:90:21:52:0d:ad:c7:f6:8c:a3:e9:7e:
30:a7:1a:4c:32:b3:eb:36:8b:a6:ac:82:31:0a:7b:27:ad:a6:
db:ab:83:22:ae:c7:98:69:f5:c8:09:1d:fe:91:29:8c:91:38:
f0:41:4e:9d:6d:be:f6:63:5d:c4:96:16:24:33:fd:fe:40:8b:
66:54:c7:59:f3:5a:72:72:e2:96:d0:ec:1d:27:40:f8:a2:e2:
9f:f1:e1:0e:94:67:a9:d3:c4:ab:53:87:54:a9:f3:8b:31:cc:
9b:9d:ce:45:2e:b0:61:b7:81:a3:17:95:9c:52:76:e8:00:76:
80:dd:f0:9c:8d:b8:fa:b8:f2:1c:16:ff:cc:a7:1d:b7:22:70:
ad:09:75:0e:fd:e9:c1:99:78:9d:5c:db:50:bb:c1:f1:07:e1:
42:81:bf:74:72:06:27:7a:c8:2b:7d:df:47:e0:21:3e:60:54:
6d:bc:11:95:a2:39:6e:37:0c:1e:61:58:f4:00:58:f0:c1:85:
61:f7:0f:e2:15:1f:f3:7a:cb:fe:53:d0:fb:c9:c0:35:1c:f6:
ce:02:aa:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPK2JmyIWfcUbQisZ/Ym6jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1Njc2OWE0MmU0NDI2NmYwMzdlY2IzOTBkNDExNWZlYmUz
ODYxYTQwHhcNMjUxMTA0MTQwMDM0WhcNMjUxMTA1MTQwMDM0WjAzMTEwLwYDVQQD
Eyg2MWExMGU4ODEzM2EwYzZkZTA0NjcxZGFlY2M1NTk2NmIxMDU1NmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPgBUKznyO54katb+Zn+MfnnPFAh
RjYl8B+ko+lKqJO3ksoa7ncVEAi59g4JJDb62OLbKG5tqu/z87tP6lDFrm+CllzZ
3PZk7coda0sent2VgxIQnIIUTLajoBjhZ22K0+DRDM//qxqs+OejivD7RJ2Kry2I
oKxq132hVeNOZBVtbfexBiwp5ZGr+6Y0r/xk/8TfSdMnskCDIA65vNUame7nUAmj
VwMoZceruCHulFaAK/1pH+BK6JR/jp+LYTykGSeyay2ZDyXo+RynDadBLlQpm+Rm
dpiDXq0LVl8KisDfS6KOnpT9B7KfprJQ4F2xf+TUSyRW+Q/FZ3fhCt1E9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGhDogTOgxt4EZx2uzFWWaxBVbxMB8GA1UdIwQY
MBaAFPVnaaQuRCZvA37LOQ1BFf6+OGGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVdkcHBDNUVKbThEZnNzNURVRVZfcjQ0WWFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMWQyZmQtNGRiZC00MzYyLWFjN2It
N2EzZmZiMDBiNzE2LzEvOVdkcHBDNUVKbThEZnNzNURVRVZfcjQ0WWFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hMWQyZmQtNGRiZC00MzYyLWFjN2ItN2EzZmZiMDBiNzE2
LzEvOVdkcHBDNUVKbThEZnNzNURVRVZfcjQ0WWFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWtIUZYHE
pgKuMBeadmV2FpmwvM4J6vVmqErHiNAMTHN+dFce0vGi02HqO5AhUg2tx/aMo+l+
MKcaTDKz6zaLpqyCMQp7J62m26uDIq7HmGn1yAkd/pEpjJE48EFOnW2+9mNdxJYW
JDP9/kCLZlTHWfNacnLiltDsHSdA+KLin/HhDpRnqdPEq1OHVKnzizHMm53ORS6w
YbeBoxeVnFJ26AB2gN3wnI24+rjyHBb/zKcdtyJwrQl1Dv3pwZl4nVzbULvB8Qfh
QoG/dHIGJ3rIK33fR+AhPmBUbbwRlaI5bjcMHmFY9ABY8MGFYfcP4hUf83rL/lPQ
+8nANRz2zgKqdw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:53:57 2025 by rpki-client