Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
File: v9gcqQzFIkWGr-urHHixeQJo1cE.mft (raw, json)
Hash identifier: fU4qXO8T3k7msEdhhoWJ+hCJvM3GNmPpdrdK1kK7+Qw=
Subject key identifier: E7:CA:DF:CF:B6:EB:7A:CF:F8:4D:5F:5D:88:12:B7:7B:BF:E3:85:32
Authority key identifier: BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
Certificate issuer: /CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Certificate serial: 019A4C615B9553B5E945D11507CBEB61A92A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 01:00:39 +0000
Manifest this update: Tue 04 Nov 2025 01:00:39 +0000
Manifest next update: Wed 05 Nov 2025 01:00:39 +0000
Files and hashes: 1: 9UunLY0e7RvMMeMDRjD3u7_pf2Y.roa (hash: 7lRPIrPRKCCE3BPTd9dDNpxXDgXsPWg+ml+ju6JbueA=)
2: ncR4oR_y2D6exGXXU4466Dj_Hq0.roa (hash: QHWP1FBTjP+R0Pof3RRPjusJf04L/sCOEBJrDKRdhZ4=)
3: rOoYFHKRe7ghGBjkeruHV6kIlyA.roa (hash: elXY8PrAbFgsd98hRj7mkOX8iG0smL3sFgAD/6xBNtE=)
4: v9gcqQzFIkWGr-urHHixeQJo1cE.crl (hash: gu/7UocXR8HclmodR3c82m8JlF7YMyWoJkA2i3NPSfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:5b:95:53:b5:e9:45:d1:15:07:cb:eb:61:a9:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Validity
Not Before: Nov 4 01:00:39 2025 GMT
Not After : Nov 5 01:00:39 2025 GMT
Subject: CN=e7cadfcfb6eb7acff84d5f5d8812b77bbfe38532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6f:fb:fd:16:f3:13:8b:e8:f0:6b:31:ee:0d:
bd:10:3a:9d:e1:2d:b2:20:e3:6c:9d:c1:30:ce:49:
07:2e:ac:34:7b:c5:6a:b1:17:0d:a2:64:40:f9:f5:
c9:47:bc:3e:ff:33:ec:cc:9f:93:bd:df:b4:0f:78:
c2:ed:be:18:44:05:56:b2:a8:8d:11:f9:25:80:da:
f2:76:6d:52:e3:92:cd:a5:7e:3f:43:de:25:71:5d:
b4:ce:ca:ea:6a:47:b8:9f:ba:b9:b3:72:e8:dc:12:
e3:09:e2:80:80:df:fb:cb:a0:d2:49:1c:1d:35:0a:
b9:4b:01:6a:24:89:34:12:6f:cc:91:cf:ac:e3:f8:
0f:ad:15:33:0f:8a:2c:fc:89:50:18:61:11:7c:cf:
8d:b9:9b:dd:22:b9:b7:9c:d4:9b:84:41:9f:4e:1e:
5b:39:47:53:68:9d:d4:c8:6a:b1:e3:4b:ff:42:79:
6a:4e:24:82:01:85:27:1e:54:f9:a4:f4:fe:f6:f0:
2a:7f:df:7c:c0:b5:a3:e2:7f:82:28:26:96:02:b2:
89:9d:24:18:24:54:17:d7:e5:28:7a:c7:42:af:99:
18:c4:f4:6b:39:ee:60:4c:54:c9:a0:15:85:a1:9c:
f8:ac:ff:81:04:e5:4b:a8:03:2d:84:26:2a:34:d1:
ed:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CA:DF:CF:B6:EB:7A:CF:F8:4D:5F:5D:88:12:B7:7B:BF:E3:85:32
X509v3 Authority Key Identifier:
keyid:BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:09:7b:0e:1c:f2:42:7e:02:09:a8:e6:d4:b9:41:e4:82:32:
3d:85:45:a4:6b:4c:d9:9f:f2:38:4d:f0:1e:96:d8:92:70:d2:
11:42:59:54:0d:87:49:ac:2e:6e:8c:d2:ed:8d:62:20:f3:c7:
20:9e:ba:a8:7f:c5:77:db:18:9e:87:23:a0:29:68:29:6b:06:
59:ed:71:ad:b1:0d:e6:16:be:4d:84:f2:f8:c8:a4:91:1c:a2:
30:09:28:7e:31:ba:9d:a0:a2:64:95:97:4a:87:17:37:77:30:
24:12:67:89:be:d2:91:66:36:cc:3b:02:17:ee:e3:91:7c:be:
e6:52:82:7e:e2:0f:6d:8b:be:33:9f:ad:4b:b7:cd:09:a8:4c:
f3:4f:2d:26:43:33:60:f3:6d:cc:f6:9c:6f:cf:44:90:7b:f6:
ab:d2:48:54:c6:bb:06:75:55:95:c7:3e:d8:f8:35:ac:41:f0:
7a:e2:46:34:3e:df:11:e8:72:cb:94:0e:8d:18:8e:6f:72:a9:
9c:1e:95:89:03:85:44:84:a2:3e:11:e2:cc:aa:c8:25:77:e8:
5d:e8:a5:90:33:e1:58:ae:cf:f4:ad:e8:24:12:00:32:0a:b3:
5a:cd:ae:59:83:cc:0a:42:bc:6f:f5:80:9f:c4:d2:40:f2:7a:
e1:41:12:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpMYVuVU7XpRdEVB8vrYakqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZDgxY2E5MGNjNTIyNDU4NmFmZWJhYjFjNzhiMTc5MDI2
OGQ1YzEwHhcNMjUxMTA0MDEwMDM5WhcNMjUxMTA1MDEwMDM5WjAzMTEwLwYDVQQD
EyhlN2NhZGZjZmI2ZWI3YWNmZjg0ZDVmNWQ4ODEyYjc3YmJmZTM4NTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW/7/RbzE4vo8Gsx7g29EDqd4S2y
IONsncEwzkkHLqw0e8VqsRcNomRA+fXJR7w+/zPszJ+Tvd+0D3jC7b4YRAVWsqiN
EfklgNrydm1S45LNpX4/Q94lcV20zsrqake4n7q5s3Lo3BLjCeKAgN/7y6DSSRwd
NQq5SwFqJIk0Em/Mkc+s4/gPrRUzD4os/IlQGGERfM+NuZvdIrm3nNSbhEGfTh5b
OUdTaJ3UyGqx40v/QnlqTiSCAYUnHlT5pPT+9vAqf998wLWj4n+CKCaWArKJnSQY
JFQX1+UoesdCr5kYxPRrOe5gTFTJoBWFoZz4rP+BBOVLqAMthCYqNNHtwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOfK38+263rP+E1fXYgSt3u/44UyMB8GA1UdIwQY
MBaAFL/YHKkMxSJFhq/rqxx4sXkCaNXBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjlnY3FRekZJa1dHci11ckhIaXhlUUpvMWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8yNWE1OWMtYzJmYy00ZmQ0LTk2Zjct
ODRhZGNiZjVhYzU1LzEvdjlnY3FRekZJa1dHci11ckhIaXhlUUpvMWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8yNWE1OWMtYzJmYy00ZmQ0LTk2ZjctODRhZGNiZjVhYzU1
LzEvdjlnY3FRekZJa1dHci11ckhIaXhlUUpvMWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApwl7Dhzy
Qn4CCajm1LlB5IIyPYVFpGtM2Z/yOE3wHpbYknDSEUJZVA2HSawubozS7Y1iIPPH
IJ66qH/Fd9sYnocjoCloKWsGWe1xrbEN5ha+TYTy+MikkRyiMAkofjG6naCiZJWX
SocXN3cwJBJnib7SkWY2zDsCF+7jkXy+5lKCfuIPbYu+M5+tS7fNCahM808tJkMz
YPNtzPacb89EkHv2q9JIVMa7BnVVlcc+2Pg1rEHweuJGND7fEehyy5QOjRiOb3Kp
nB6ViQOFRISiPhHizKrIJXfoXeilkDPhWK7P9K3oJBIAMgqzWs2uWYPMCkK8b/WA
n8TSQPJ64UESig==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:05:18 2025 by rpki-client