Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.mft
File: V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.mft (raw, json)
Hash identifier: yl/BC9unLIz65zX3EvM/aosNZNQOJVjQlMnBnA0g8Fc=
Subject key identifier: 64:0D:76:8C:12:98:92:B7:3C:18:33:19:DC:0B:43:5E:A7:62:89:D6
Authority key identifier: 57:C0:BD:9F:83:31:EA:84:38:FD:2A:2F:67:1B:71:AF:4A:2D:EC:17
Certificate issuer: /CN=57c0bd9f8331ea8438fd2a2f671b71af4a2dec17
Certificate serial: 019A4E187D6AAB103246C3E6EFBE32C0519C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.mft
Manifest number: 0869
Signing time: Tue 04 Nov 2025 09:00:18 +0000
Manifest this update: Tue 04 Nov 2025 09:00:18 +0000
Manifest next update: Wed 05 Nov 2025 09:00:18 +0000
Files and hashes: 1: 0MC1362R9lRRGpq84ZgFyJggIsA.roa (hash: 2oe5jKK2VDNOSC6ja+1wPu+cY+lyRN63lTJAf4/SoR0=)
2: V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.crl (hash: cXeLdkNG6vc67NPNfAndxbrL99O9lr9Vx1EOmIEsyl0=)
3: hxG-StCBPxemsj2qpKGT4GGzhQk.roa (hash: MYz1XQtFxhUeNPc3mCJTjKjV6pO6a8sxO3y4ixSgakg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:7d:6a:ab:10:32:46:c3:e6:ef:be:32:c0:51:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c0bd9f8331ea8438fd2a2f671b71af4a2dec17
Validity
Not Before: Nov 4 09:00:18 2025 GMT
Not After : Nov 5 09:00:18 2025 GMT
Subject: CN=640d768c129892b73c183319dc0b435ea76289d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:24:d2:79:01:d9:07:36:bb:09:43:d8:37:40:
e8:dd:88:98:03:d4:f4:91:8b:c1:18:70:96:79:3d:
38:10:62:7e:9e:3e:10:a3:cc:88:5b:77:4f:74:a6:
9a:3f:51:6c:a5:78:ff:2e:6f:6f:47:d1:c2:21:75:
24:12:78:90:80:05:9f:38:9f:47:e3:b4:ec:a5:14:
1e:69:1c:3a:5c:8c:93:ad:76:77:03:0b:f2:89:6e:
83:c6:24:1f:8b:00:bf:07:90:67:e1:53:0e:9b:72:
c8:e2:00:90:a7:2e:81:ea:7f:86:6f:6f:e8:54:f8:
c9:39:79:4b:1b:35:45:de:54:9b:b4:2d:bc:af:cc:
b0:e6:35:5f:7b:9e:b0:1c:8b:18:f8:a1:64:8b:8c:
f6:13:5c:08:1b:66:c7:88:72:95:5b:67:e3:ed:a6:
d3:b8:29:6a:e7:79:e4:21:67:eb:20:74:cd:37:cf:
9a:1c:e6:e9:6a:41:bb:12:39:d2:b3:aa:31:b6:0c:
45:75:00:93:43:d7:1a:2b:fc:e8:48:08:73:cf:3c:
a2:ab:73:34:bc:59:00:0d:ea:91:ce:b9:d5:4f:ad:
3d:51:1a:0a:e7:82:62:46:5a:17:38:dc:2f:6e:58:
a3:de:aa:e9:c2:f2:f0:ef:7b:f4:4c:61:cb:49:80:
18:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0D:76:8C:12:98:92:B7:3C:18:33:19:DC:0B:43:5E:A7:62:89:D6
X509v3 Authority Key Identifier:
keyid:57:C0:BD:9F:83:31:EA:84:38:FD:2A:2F:67:1B:71:AF:4A:2D:EC:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:4e:a2:9f:86:bf:03:da:4e:2c:d8:43:23:32:25:b7:e3:47:
bf:b3:52:b4:2c:e0:4e:ad:8f:55:b2:fd:76:51:df:67:84:eb:
8c:db:ac:d1:af:34:e8:30:1b:f5:4f:04:5f:48:7b:81:ce:cc:
7d:52:59:ac:76:ee:59:80:38:15:c5:46:e3:5c:bd:8b:39:27:
08:9e:b9:eb:3b:f7:95:06:fc:60:0e:cf:d3:5c:5c:8a:1f:31:
39:ec:2b:24:0f:66:b1:99:eb:ad:07:40:d9:de:9b:c0:38:e4:
17:88:0d:64:37:9e:42:dc:16:26:a5:b1:1a:60:ec:0e:0e:cf:
6d:c9:df:d6:ed:6f:a6:a5:a8:c0:ae:d8:1c:7e:ad:b3:cc:ab:
35:ea:41:30:19:ea:e9:8c:6c:96:9c:5c:b0:55:69:ec:42:7c:
b8:6e:ad:60:f1:92:2d:1b:34:ab:a4:16:6a:50:a6:da:70:f2:
ba:f1:c1:5d:26:ab:c5:2b:71:cf:e4:58:e5:fa:99:f0:19:54:
16:24:07:46:43:df:42:cd:52:fe:ae:25:62:6d:78:8e:d5:99:
a4:57:87:b8:ef:67:d7:d2:1d:8d:b4:0d:05:81:f3:94:5e:bc:
0e:a0:00:85:ee:32:2c:ab:25:9a:22:95:97:28:14:1d:13:41:
1e:fb:f5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:08 2025 by rpki-client