Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft
File: V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft (raw, json)
Hash identifier: Qh2DVqdj5aZu9Y9B8xa847H5heB8UWcD1A7NeTrKv4Y=
Subject key identifier: 5F:EE:18:6B:BA:2B:CD:5E:10:0F:28:5C:AA:D8:DA:48:48:BD:6C:E7
Authority key identifier: 57:D0:B8:61:AF:B1:25:B8:BC:13:96:9D:0B:49:73:4C:E8:44:BD:6A
Certificate issuer: /CN=57d0b861afb125b8bc13969d0b49734ce844bd6a
Certificate serial: 019A56AEFAC7D61D2C2103816F89C81F127F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9C4Ya-xJbi8E5adC0lzTOhEvWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft
Manifest number: 0229
Signing time: Thu 06 Nov 2025 01:01:39 +0000
Manifest this update: Thu 06 Nov 2025 01:01:39 +0000
Manifest next update: Fri 07 Nov 2025 01:01:39 +0000
Files and hashes: 1: 1-of8pnTOP0J8yCsHZmocQfT7mIM.roa (hash: 0Lq0vU+tQx9q/SkpzGWQvm0P7tr0nnJgKO8aL6LRtlo=)
2: 1MA9viEbnkqns-jv1uGgSDf_hss.roa (hash: B67bul7AJskFHt7w3WE7vDo8ygcPvZu9TvB+6EzuGlE=)
3: V9C4Ya-xJbi8E5adC0lzTOhEvWo.crl (hash: RPaWQ5sbSVc+qvkzvrToMb60Ik/akgQQvA46NdwXl/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/V9C4Ya-xJbi8E5adC0lzTOhEvWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:ae:fa:c7:d6:1d:2c:21:03:81:6f:89:c8:1f:12:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57d0b861afb125b8bc13969d0b49734ce844bd6a
Validity
Not Before: Nov 6 01:01:39 2025 GMT
Not After : Nov 7 01:01:39 2025 GMT
Subject: CN=5fee186bba2bcd5e100f285caad8da4848bd6ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:96:e0:8d:af:a4:bd:99:27:5b:96:f1:71:b5:
10:fe:ab:9d:66:19:d0:7d:d9:a1:e1:d8:4b:f9:0b:
11:a3:0d:66:0f:a8:b7:8d:19:a9:32:4c:8c:c0:1b:
7e:4f:ad:70:90:cd:91:ab:ad:30:86:1e:67:a7:a2:
8b:18:79:e1:f1:00:1e:dc:3f:c8:55:60:8c:22:f5:
62:8d:46:17:0b:91:64:b4:b9:56:2d:d2:4b:70:2c:
ba:2f:ec:1b:d2:84:c3:cd:6f:96:a9:58:18:53:55:
fa:52:96:62:0a:70:41:3f:6d:80:22:3e:34:ba:c1:
b4:6a:dc:bb:be:91:9a:95:6c:2a:29:1d:4c:89:ab:
35:22:b2:98:7a:99:1b:1f:49:fb:d0:33:fd:85:77:
b0:f3:ec:a3:d4:c7:20:a2:0b:6a:77:59:33:28:35:
04:bd:7a:3a:72:a7:8f:9a:86:d0:6a:8a:36:ce:51:
e8:51:fe:d6:36:fc:56:ed:93:15:57:75:0f:c8:21:
2b:2d:12:ee:e4:e3:b5:03:14:58:7b:5b:f1:46:71:
6d:26:60:f1:e8:2c:f2:87:fd:b2:fc:ef:cb:99:ae:
17:38:f2:a7:82:5a:bf:2b:09:65:51:d0:6a:dc:36:
f8:59:87:2c:2f:b0:da:ea:d1:85:64:4c:75:3a:43:
cc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EE:18:6B:BA:2B:CD:5E:10:0F:28:5C:AA:D8:DA:48:48:BD:6C:E7
X509v3 Authority Key Identifier:
keyid:57:D0:B8:61:AF:B1:25:B8:BC:13:96:9D:0B:49:73:4C:E8:44:BD:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9C4Ya-xJbi8E5adC0lzTOhEvWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:6e:a3:59:33:cc:fb:6c:2a:20:61:c5:6f:6c:4b:31:03:6a:
85:17:f4:92:55:26:0e:3c:75:19:30:3c:6f:0a:ca:fd:40:5c:
b0:2f:5c:da:ce:bc:f4:fd:2d:aa:6c:a0:f4:f4:15:2c:57:2c:
3e:2b:21:21:dd:f1:b1:55:ff:37:b3:6b:52:e3:a1:77:37:28:
a0:c1:34:48:c4:67:ca:0e:90:f8:d6:4a:0f:e9:42:9e:53:33:
d6:54:fa:97:11:bb:10:c6:2f:2c:4a:66:50:58:70:3d:ec:db:
62:cc:56:2b:4f:0f:c2:16:a0:07:37:be:81:44:df:fd:4c:32:
9a:d6:86:c1:6e:1e:26:d0:98:5e:19:e9:a5:29:a2:03:3f:98:
d2:df:6c:64:34:15:ab:fd:57:36:83:74:41:32:65:56:f8:94:
98:60:4e:8f:01:cb:0c:09:43:31:c8:fa:82:48:e1:bb:d2:26:
91:26:46:5d:71:0f:42:4a:a7:ae:df:25:60:8c:b0:e8:4b:ad:
ed:89:c6:c0:db:1b:b4:34:4d:b3:a4:4d:ab:a3:d3:03:44:33:
60:01:14:13:50:66:3e:9a:5a:ee:a0:73:ab:21:2e:be:a5:40:
f1:6e:a6:a9:6f:4a:63:9d:6c:36:8a:e4:a7:ee:e2:18:e4:4c:
62:94:40:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 03:01:24 2025 by rpki-client