Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
File: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft (raw, json)
Hash identifier: +FlsKFyW3mZyLGce5otKe4yeBnqDQa2MO52NqeDjSJM=
Subject key identifier: 5B:92:99:66:35:09:EF:C9:22:54:3C:A1:A8:F5:11:5F:CD:B1:E6:6B
Authority key identifier: F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
Certificate issuer: /CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Certificate serial: 019A50E30837874BAFC63583A43CD40C59AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
Manifest number: 169D
Signing time: Tue 04 Nov 2025 22:00:47 +0000
Manifest this update: Tue 04 Nov 2025 22:00:47 +0000
Manifest next update: Wed 05 Nov 2025 22:00:47 +0000
Files and hashes: 1: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl (hash: KHKXDyhOLG+fiEGpd3I0OxmYwKS6JO/STmbkuvbOw+A=)
2: opYZOi4k9YDcS_3foMnJJa-4gCI.roa (hash: VbpgC06Lnc7NWswjuIad3/ZduRJ+GtOZh31gorgG7Xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:08:37:87:4b:af:c6:35:83:a4:3c:d4:0c:59:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Validity
Not Before: Nov 4 22:00:47 2025 GMT
Not After : Nov 5 22:00:47 2025 GMT
Subject: CN=5b9299663509efc922543ca1a8f5115fcdb1e66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9d:fc:a3:19:dc:d8:92:04:bd:2b:eb:a0:2e:
1f:68:5e:64:31:7f:f4:a2:9e:2f:41:2c:30:55:7c:
5e:f0:46:d5:83:d9:d9:b0:36:56:86:f4:5b:dc:34:
1b:07:20:5d:16:96:53:91:4a:44:9e:87:f0:48:43:
39:94:03:fb:0f:90:b7:7c:04:49:7c:d0:fd:40:62:
8d:da:9d:8c:1b:b9:1d:5e:06:d5:6a:e0:1f:c6:9c:
1f:5a:4a:df:a4:1c:2a:b5:c3:35:0c:e1:22:31:e8:
a8:ca:18:c8:ff:01:5c:e6:4f:16:dd:32:32:97:e4:
07:7b:cc:a7:c9:d1:91:b2:da:f3:e1:e7:cf:67:8e:
65:79:21:78:4c:f8:fa:6a:17:4d:cf:ee:74:80:ea:
07:5c:7a:7c:92:b4:7f:66:20:f2:81:03:f5:a0:e5:
6a:12:07:e1:c6:a7:2c:b0:47:69:8a:d6:eb:9b:c6:
97:57:d8:d7:e3:14:f4:d8:3c:90:20:cf:30:53:30:
23:52:de:33:ef:67:32:36:6e:69:06:0f:2c:d3:b8:
2a:bd:2b:33:dd:a0:e3:e4:62:b7:63:fb:d0:52:96:
ee:aa:b8:42:e7:82:a9:3e:bf:99:f8:5f:d6:40:e8:
90:34:08:fa:92:b7:ef:a4:d1:de:dc:ca:93:ed:0e:
66:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:92:99:66:35:09:EF:C9:22:54:3C:A1:A8:F5:11:5F:CD:B1:E6:6B
X509v3 Authority Key Identifier:
keyid:F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:e1:3b:2e:de:4b:8f:0e:ec:2b:ea:95:8c:83:9e:ef:77:f0:
63:78:0d:66:28:d2:7f:ff:aa:6e:d8:85:76:0d:23:1a:72:2d:
3e:d2:dd:7e:78:d5:f0:fd:cb:94:28:f2:39:26:aa:17:0b:c6:
06:70:64:dd:b0:d1:1c:16:c9:0e:0b:85:ca:b0:6a:ba:53:df:
c7:c9:2c:4d:6f:43:98:9d:46:f6:d8:0d:fa:c6:73:d3:5a:f9:
61:1a:ac:c3:93:72:74:2a:ca:0e:a7:c9:ce:1a:84:4d:09:bc:
91:ef:71:92:f3:4e:2e:14:b9:37:84:8e:fd:29:13:9b:b5:15:
43:20:85:3a:7c:21:a2:f9:b4:72:ff:27:3c:ca:b3:ca:a5:f2:
fd:02:7d:d9:52:47:f7:9f:b0:ed:ce:c2:28:28:81:22:ac:d3:
a6:b1:b5:5f:91:e1:7b:41:e4:9c:e8:94:71:a4:08:b0:f2:88:
e1:04:e0:10:8d:b0:a6:2e:d3:3c:36:97:79:04:d2:02:b2:86:
7f:a6:96:f0:a7:34:1e:42:18:70:b3:27:b6:65:7e:4c:f5:aa:
ed:20:af:5d:58:60:bf:0f:b8:9f:33:af:8c:45:c3:6a:2d:57:
b2:f5:6b:fd:7e:d2:ce:39:6f:ab:42:5f:24:96:89:01:5a:e1:
17:34:2b:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4wg3h0uvxjWDpDzUDFmtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZjQzMGQwODA1ZjQyZmZhM2JjZDBjMGI3YzU1MDgwNTEx
NzkyM2EwHhcNMjUxMTA0MjIwMDQ3WhcNMjUxMTA1MjIwMDQ3WjAzMTEwLwYDVQQD
Eyg1YjkyOTk2NjM1MDllZmM5MjI1NDNjYTFhOGY1MTE1ZmNkYjFlNjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJ38oxnc2JIEvSvroC4faF5kMX/0
op4vQSwwVXxe8EbVg9nZsDZWhvRb3DQbByBdFpZTkUpEnofwSEM5lAP7D5C3fARJ
fND9QGKN2p2MG7kdXgbVauAfxpwfWkrfpBwqtcM1DOEiMeioyhjI/wFc5k8W3TIy
l+QHe8ynydGRstrz4efPZ45leSF4TPj6ahdNz+50gOoHXHp8krR/ZiDygQP1oOVq
EgfhxqcssEdpitbrm8aXV9jX4xT02DyQIM8wUzAjUt4z72cyNm5pBg8s07gqvSsz
3aDj5GK3Y/vQUpbuqrhC54KpPr+Z+F/WQOiQNAj6krfvpNHe3MqT7Q5mnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuSmWY1Ce/JIlQ8oaj1EV/NseZrMB8GA1UdIwQY
MBaAFPT0MNCAX0L/o7zQwLfFUIBRF5I6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8yOGJkMTMtOGEzYi00NTUwLTk3MDAt
ZjBmOTNjY2EyNDc5LzEvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8yOGJkMTMtOGEzYi00NTUwLTk3MDAtZjBmOTNjY2EyNDc5
LzEvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyOE7Lt5L
jw7sK+qVjIOe73fwY3gNZijSf/+qbtiFdg0jGnItPtLdfnjV8P3LlCjyOSaqFwvG
BnBk3bDRHBbJDguFyrBqulPfx8ksTW9DmJ1G9tgN+sZz01r5YRqsw5NydCrKDqfJ
zhqETQm8ke9xkvNOLhS5N4SO/SkTm7UVQyCFOnwhovm0cv8nPMqzyqXy/QJ92VJH
95+w7c7CKCiBIqzTprG1X5Hhe0HknOiUcaQIsPKI4QTgEI2wpi7TPDaXeQTSArKG
f6aW8Kc0HkIYcLMntmV+TPWq7SCvXVhgvw+4nzOvjEXDai1XsvVr/X7Szjlvq0Jf
JJaJAVrhFzQrkg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:44:07 2025 by rpki-client