Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft
File: RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft (raw, json)
Hash identifier: 7T0FHsgOKuSI7TsfjhmGL5uZK8bsBIJzPlb/5Za+Anw=
Subject key identifier: 84:BC:A2:5D:8A:3A:A7:9D:5A:C0:80:32:7F:42:BC:92:C3:A3:42:AB
Authority key identifier: 44:F5:6E:CD:3F:4B:1D:6E:8D:66:9E:AD:0E:03:3F:DA:F0:BE:4F:40
Certificate issuer: /CN=44f56ecd3f4b1d6e8d669ead0e033fdaf0be4f40
Certificate serial: 019A4E18A9344B1740577088487931017657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPVuzT9LHW6NZp6tDgM_2vC-T0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft
Manifest number: 1278
Signing time: Tue 04 Nov 2025 09:00:30 +0000
Manifest this update: Tue 04 Nov 2025 09:00:30 +0000
Manifest next update: Wed 05 Nov 2025 09:00:30 +0000
Files and hashes: 1: Gnl9wgih5bkZTu9f-EBtmWB57aI.roa (hash: zbDguLxZjG7MAjNEZMNb7jOZjg/zzl6iQmvjqk6cIOM=)
2: RPVuzT9LHW6NZp6tDgM_2vC-T0A.crl (hash: QcMUlwWxdXBpCbDMhPvPudjzheK5TzZSowZS9a5Y1k0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPVuzT9LHW6NZp6tDgM_2vC-T0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:a9:34:4b:17:40:57:70:88:48:79:31:01:76:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f56ecd3f4b1d6e8d669ead0e033fdaf0be4f40
Validity
Not Before: Nov 4 09:00:30 2025 GMT
Not After : Nov 5 09:00:30 2025 GMT
Subject: CN=84bca25d8a3aa79d5ac080327f42bc92c3a342ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fb:13:0b:80:e1:9e:1c:e5:d0:9d:62:30:bb:
06:ba:9e:56:ad:68:e2:d0:0b:6e:0b:16:fc:12:46:
fa:18:ce:68:af:92:99:32:e4:1a:44:c0:36:10:fa:
4f:7a:21:17:70:8d:ca:f5:24:95:42:3c:3f:73:06:
24:fc:8e:28:9f:6d:27:eb:0b:8d:37:be:4d:4a:da:
d5:25:95:df:f0:06:3e:75:d0:30:35:45:97:27:fb:
88:64:c6:9b:fc:b7:90:93:56:81:4b:69:46:c5:b5:
88:11:37:e9:2d:0b:c2:d8:28:ae:33:1a:58:61:14:
1a:21:55:de:45:c6:b0:2b:21:ec:da:92:13:18:db:
e5:e2:91:82:aa:2f:c4:03:4f:fd:96:5c:ac:13:6a:
f1:a3:2a:30:a4:45:a7:87:c1:10:d3:be:c6:64:d6:
78:ec:af:a9:08:4f:88:27:9b:29:7e:97:85:19:fa:
ba:8f:64:4b:a6:f4:c2:a9:11:7c:56:c3:07:a0:5b:
b6:87:34:9f:4b:a6:2e:c7:8a:fd:53:36:1c:c3:e2:
7b:1f:e5:f3:93:b4:73:a2:c1:e9:b0:74:59:88:af:
91:0d:8b:ba:31:75:0f:48:16:96:ea:ab:c5:59:14:
55:2e:5f:08:ec:3b:d9:3e:a4:2e:5a:92:98:0d:8c:
c5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BC:A2:5D:8A:3A:A7:9D:5A:C0:80:32:7F:42:BC:92:C3:A3:42:AB
X509v3 Authority Key Identifier:
keyid:44:F5:6E:CD:3F:4B:1D:6E:8D:66:9E:AD:0E:03:3F:DA:F0:BE:4F:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPVuzT9LHW6NZp6tDgM_2vC-T0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a1:71:0e:69:1c:c4:c8:34:cd:a4:e5:b6:32:e1:cf:9f:fe:
18:cd:54:09:67:41:f6:1a:e2:f4:21:61:6a:41:ce:95:00:a4:
b2:66:8f:2b:48:d9:3f:f6:ab:a8:3a:d7:ff:75:d5:27:70:29:
0a:e9:0e:3b:e7:38:30:b9:d1:b6:ae:03:89:8d:a9:d0:1a:f3:
15:40:4a:a5:62:07:d3:7a:8c:28:56:29:a2:b5:41:16:bd:ad:
ff:07:27:d9:1d:85:87:74:8a:a6:1d:a2:ce:89:6c:f9:48:a1:
9a:f6:5d:11:1b:8d:ef:99:16:15:58:36:ac:c4:ed:6a:88:11:
e3:06:9b:97:04:70:84:11:a1:91:9a:76:e5:f8:75:2c:a5:78:
74:a4:57:34:78:cf:8d:48:61:93:bb:04:9b:af:c2:ed:71:53:
a7:6a:17:8e:83:6d:3a:54:f9:fe:b0:ef:c0:93:1d:67:9d:5d:
8d:d5:82:54:b0:00:bd:45:04:ab:11:94:2a:07:27:cb:5d:75:
d5:01:e5:61:96:84:8a:8a:5d:24:08:50:ee:cc:b0:9c:dd:c6:
f7:6a:03:12:22:37:0c:b7:a4:a7:14:a8:53:bc:5d:14:7d:ed:
35:d9:5c:6a:a3:83:5c:50:13:24:06:f8:db:4b:91:3f:b2:8e:
c6:a8:93:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGKk0SxdAV3CISHkxAXZXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZjU2ZWNkM2Y0YjFkNmU4ZDY2OWVhZDBlMDMzZmRhZjBi
ZTRmNDAwHhcNMjUxMTA0MDkwMDMwWhcNMjUxMTA1MDkwMDMwWjAzMTEwLwYDVQQD
Eyg4NGJjYTI1ZDhhM2FhNzlkNWFjMDgwMzI3ZjQyYmM5MmMzYTM0MmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvsTC4Dhnhzl0J1iMLsGup5WrWji
0AtuCxb8Ekb6GM5or5KZMuQaRMA2EPpPeiEXcI3K9SSVQjw/cwYk/I4on20n6wuN
N75NStrVJZXf8AY+ddAwNUWXJ/uIZMab/LeQk1aBS2lGxbWIETfpLQvC2CiuMxpY
YRQaIVXeRcawKyHs2pITGNvl4pGCqi/EA0/9llysE2rxoyowpEWnh8EQ077GZNZ4
7K+pCE+IJ5spfpeFGfq6j2RLpvTCqRF8VsMHoFu2hzSfS6Yux4r9UzYcw+J7H+Xz
k7RzosHpsHRZiK+RDYu6MXUPSBaW6qvFWRRVLl8I7DvZPqQuWpKYDYzFSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIS8ol2KOqedWsCAMn9CvJLDo0KrMB8GA1UdIwQY
MBaAFET1bs0/Sx1ujWaerQ4DP9rwvk9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlBWdXpUOUxIVzZOWnA2dERnTV8ydkMtVDBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8wZTAxZGUtY2RlMy00NDdmLWI1ZGMt
MDM2MzU0YTJjMjJmLzEvUlBWdXpUOUxIVzZOWnA2dERnTV8ydkMtVDBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8wZTAxZGUtY2RlMy00NDdmLWI1ZGMtMDM2MzU0YTJjMjJm
LzEvUlBWdXpUOUxIVzZOWnA2dERnTV8ydkMtVDBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJaFxDmkc
xMg0zaTltjLhz5/+GM1UCWdB9hri9CFhakHOlQCksmaPK0jZP/arqDrX/3XVJ3Ap
CukOO+c4MLnRtq4DiY2p0BrzFUBKpWIH03qMKFYporVBFr2t/wcn2R2Fh3SKph2i
zols+UihmvZdERuN75kWFVg2rMTtaogR4wablwRwhBGhkZp25fh1LKV4dKRXNHjP
jUhhk7sEm6/C7XFTp2oXjoNtOlT5/rDvwJMdZ51djdWCVLAAvUUEqxGUKgcny111
1QHlYZaEiopdJAhQ7sywnN3G92oDEiI3DLekpxSoU7xdFH3tNdlcaqODXFATJAb4
20uRP7KOxqiTPg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:15:01 2025 by rpki-client