Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
File: mVehWqmJPxyRW0SX6_kqijPV5Dk.mft (raw, json)
Hash identifier: ZAUjhdtz0XY8u9+hFYd5I1ODgKZaBhobXnPcFR0gYzY=
Subject key identifier: AC:8B:9E:6A:9B:42:DB:95:4C:A0:0A:32:51:72:49:8A:E8:14:71:A1
Authority key identifier: 99:57:A1:5A:A9:89:3F:1C:91:5B:44:97:EB:F9:2A:8A:33:D5:E4:39
Certificate issuer: /CN=9957a15aa9893f1c915b4497ebf92a8a33d5e439
Certificate serial: 019A51BE1C3F9101CAAF6AAD08807CCC5200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
Manifest number: 0B78
Signing time: Wed 05 Nov 2025 02:00:04 +0000
Manifest this update: Wed 05 Nov 2025 02:00:04 +0000
Manifest next update: Thu 06 Nov 2025 02:00:04 +0000
Files and hashes: 1: WEMws9n6rUTkd5LM4QecvMz8r_U.roa (hash: CZHPbmXmn0MVwHpVyYpkHxFw9h7//57NzIqqFrYWcd8=)
2: mVehWqmJPxyRW0SX6_kqijPV5Dk.crl (hash: 1dgSegM+qxiqZNnsbhW9nEnw5+fnuAd5atBsMSesIfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:1c:3f:91:01:ca:af:6a:ad:08:80:7c:cc:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9957a15aa9893f1c915b4497ebf92a8a33d5e439
Validity
Not Before: Nov 5 02:00:04 2025 GMT
Not After : Nov 6 02:00:04 2025 GMT
Subject: CN=ac8b9e6a9b42db954ca00a325172498ae81471a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:45:69:4a:83:7b:5e:5e:d0:c2:3a:37:70:ec:
59:ef:65:2e:83:93:7b:4c:de:30:38:c8:7a:5b:7f:
65:3c:96:7d:ef:32:67:ac:17:01:6c:88:3f:6b:71:
1a:c5:57:f7:2f:da:ee:74:93:3a:80:16:d9:c6:65:
e1:bb:3b:bf:4c:f2:8d:3d:14:03:04:93:79:0f:45:
43:4a:6c:0b:cc:4e:b1:8c:25:dd:4e:00:52:ad:15:
94:f8:d7:48:00:ea:ea:a1:cf:32:9f:16:bb:37:db:
db:1b:66:16:cc:09:a2:54:45:67:96:58:a9:a8:ff:
0d:90:53:ed:53:35:ce:c4:2e:05:20:74:26:78:86:
69:a0:9c:c7:49:4c:47:fd:99:dc:bf:6c:1e:c7:2f:
f9:dc:92:f5:5a:34:87:18:67:e5:c4:5d:ca:97:8d:
25:5f:8b:db:b7:4d:14:de:ce:49:b0:f8:cb:eb:96:
9b:d8:f7:57:33:ad:0c:40:e0:90:1d:7c:d3:02:c1:
64:17:3e:c8:40:95:fa:e5:dc:35:17:d5:fb:cf:bd:
9c:e4:be:18:79:77:44:24:6c:9c:2f:e3:9f:43:8f:
bb:89:5e:97:d9:78:aa:b7:bf:34:ea:50:2f:a6:18:
c2:d8:b0:41:4e:9f:53:1f:29:65:b9:88:63:4b:e2:
66:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8B:9E:6A:9B:42:DB:95:4C:A0:0A:32:51:72:49:8A:E8:14:71:A1
X509v3 Authority Key Identifier:
keyid:99:57:A1:5A:A9:89:3F:1C:91:5B:44:97:EB:F9:2A:8A:33:D5:E4:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ea:47:fd:85:4c:8f:1b:1b:90:c1:df:89:15:d1:42:93:c1:
f4:86:70:3c:11:51:b2:08:73:32:45:47:31:06:75:d0:ad:96:
19:fb:1e:0e:5f:77:59:eb:0e:9e:96:8f:ac:62:74:68:14:21:
4f:15:ee:a6:12:03:31:74:5f:76:1c:c4:f8:16:10:76:03:e7:
0f:0f:15:7a:5a:bb:05:e9:7e:b9:a3:be:91:80:8f:4d:f6:e1:
6f:bb:cf:19:5a:7c:a6:3e:f2:2f:89:d9:fb:8b:0c:d7:12:97:
3f:22:c1:1d:55:ba:9a:e8:3f:35:68:00:8b:e0:a3:5b:0b:64:
cc:18:2b:12:5c:d4:9f:66:81:a6:51:78:c8:46:d4:09:b1:c2:
38:ad:29:ab:3d:ee:f3:5b:19:ac:c6:6c:79:db:f1:65:e0:d0:
98:a6:7e:41:42:74:64:66:88:79:7a:05:74:52:e5:17:6f:d1:
4c:37:b2:b4:0c:13:15:99:2e:44:04:2f:f0:02:4a:65:77:bf:
51:15:4c:2c:19:af:df:62:5a:cb:b1:38:61:d3:45:aa:76:6e:
ab:e6:4c:ba:3b:85:9d:9c:98:7e:8a:61:77:de:a0:fb:e8:5f:
08:07:cd:08:7b:7f:eb:d7:cf:6d:9f:f8:1a:ca:f2:f8:a9:73:
2b:c7:ee:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRvhw/kQHKr2qtCIB8zFIAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5NTdhMTVhYTk4OTNmMWM5MTViNDQ5N2ViZjkyYThhMzNk
NWU0MzkwHhcNMjUxMTA1MDIwMDA0WhcNMjUxMTA2MDIwMDA0WjAzMTEwLwYDVQQD
EyhhYzhiOWU2YTliNDJkYjk1NGNhMDBhMzI1MTcyNDk4YWU4MTQ3MWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkVpSoN7Xl7Qwjo3cOxZ72Uug5N7
TN4wOMh6W39lPJZ97zJnrBcBbIg/a3EaxVf3L9rudJM6gBbZxmXhuzu/TPKNPRQD
BJN5D0VDSmwLzE6xjCXdTgBSrRWU+NdIAOrqoc8ynxa7N9vbG2YWzAmiVEVnllip
qP8NkFPtUzXOxC4FIHQmeIZpoJzHSUxH/Zncv2wexy/53JL1WjSHGGflxF3Kl40l
X4vbt00U3s5JsPjL65ab2PdXM60MQOCQHXzTAsFkFz7IQJX65dw1F9X7z72c5L4Y
eXdEJGycL+OfQ4+7iV6X2Xiqt7806lAvphjC2LBBTp9THylluYhjS+Jm/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKyLnmqbQtuVTKAKMlFySYroFHGhMB8GA1UdIwQY
MBaAFJlXoVqpiT8ckVtEl+v5Kooz1eQ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVZlaFdxbUpQeHlSVzBTWDZfa3FpalBWNURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85MzllMDAtM2JkOS00MzViLThmOGIt
YmNkZGM0NGIwM2FiLzEvbVZlaFdxbUpQeHlSVzBTWDZfa3FpalBWNURrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi85MzllMDAtM2JkOS00MzViLThmOGItYmNkZGM0NGIwM2Fi
LzEvbVZlaFdxbUpQeHlSVzBTWDZfa3FpalBWNURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlepH/YVM
jxsbkMHfiRXRQpPB9IZwPBFRsghzMkVHMQZ10K2WGfseDl93WesOnpaPrGJ0aBQh
TxXuphIDMXRfdhzE+BYQdgPnDw8Velq7Bel+uaO+kYCPTfbhb7vPGVp8pj7yL4nZ
+4sM1xKXPyLBHVW6mug/NWgAi+CjWwtkzBgrElzUn2aBplF4yEbUCbHCOK0pqz3u
81sZrMZsedvxZeDQmKZ+QUJ0ZGaIeXoFdFLlF2/RTDeytAwTFZkuRAQv8AJKZXe/
URVMLBmv32Jay7E4YdNFqnZuq+ZMujuFnZyYfophd96g++hfCAfNCHt/69fPbZ/4
Gsry+KlzK8fuFQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:54:46 2025 by rpki-client