Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
File: ud8VbuGLaVjUMGtjEbSghnY-_2I.mft (raw, json)
Hash identifier: svou4kK5Kz8b1b6bU5iYixksOqK+gtvoEFgLZhT5qBo=
Subject key identifier: 87:B7:94:79:3D:DF:2C:E2:D0:D9:84:E1:31:08:96:C4:88:14:2B:0A
Authority key identifier: B9:DF:15:6E:E1:8B:69:58:D4:30:6B:63:11:B4:A0:86:76:3E:FF:62
Certificate issuer: /CN=b9df156ee18b6958d4306b6311b4a086763eff62
Certificate serial: 019A50E264550707DDB16ABE966611E8C16C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
Manifest number: 131B
Signing time: Tue 04 Nov 2025 22:00:05 +0000
Manifest this update: Tue 04 Nov 2025 22:00:05 +0000
Manifest next update: Wed 05 Nov 2025 22:00:05 +0000
Files and hashes: 1: Rz_g2oWyKG-Vw1QEp2fRKBiV6zs.roa (hash: F5azyHcNhL5q+y/WKX+C217rx2nLkYCoYjrcB90ZhMg=)
2: dO0iAzf59ELGy5YFAfLCImx6CoY.roa (hash: khd3I95oYPZ7Oe9vWseJ5vBlqZ90z8OH3SOmldjOK5o=)
3: ud8VbuGLaVjUMGtjEbSghnY-_2I.crl (hash: 0IxAJACHqshnQcFFrvBFH2MeqiLKtVk6vgmjPKq2a0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:64:55:07:07:dd:b1:6a:be:96:66:11:e8:c1:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9df156ee18b6958d4306b6311b4a086763eff62
Validity
Not Before: Nov 4 22:00:05 2025 GMT
Not After : Nov 5 22:00:05 2025 GMT
Subject: CN=87b794793ddf2ce2d0d984e1310896c488142b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2c:53:d5:d0:5e:69:3e:e7:4c:1a:f5:23:20:
c2:2c:f9:36:94:4b:ef:e3:ba:d3:4b:9b:30:dc:2b:
b5:56:7a:ef:7b:9a:9e:4b:d0:37:6a:52:ae:56:a3:
ad:ea:6e:89:50:b9:4c:91:e1:cb:91:1e:83:81:bf:
fd:28:2b:2a:31:73:e0:82:26:1b:cd:0b:05:89:4c:
b0:a9:ed:a8:cb:70:c5:6d:4d:3e:45:d8:eb:d8:ef:
91:51:aa:bc:ed:29:ef:28:ce:65:23:8b:d0:60:72:
7e:4b:f3:03:a4:89:58:19:f7:86:23:9a:88:69:c3:
4b:22:3e:88:ed:87:0f:eb:99:3c:d8:08:d4:2e:d3:
57:b0:59:51:80:9e:1c:57:62:d9:73:3d:c2:8d:68:
bc:c5:e6:d1:df:bc:c2:67:41:66:69:cd:06:e5:dc:
8c:f8:92:80:4b:a8:af:f4:bf:2c:0b:56:4b:03:5f:
30:cf:50:18:ab:a1:8d:8a:fe:1b:dd:c0:47:7e:9b:
0e:c8:f9:6a:b7:00:26:34:80:14:06:95:e1:dd:fd:
9b:3a:7f:c9:80:08:92:58:83:33:99:33:a9:86:46:
a7:b8:eb:07:b2:6c:32:01:a1:1e:50:1c:3e:02:7c:
ef:2f:2f:f6:46:a5:d5:4d:6e:2d:74:c4:5a:e4:29:
e1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B7:94:79:3D:DF:2C:E2:D0:D9:84:E1:31:08:96:C4:88:14:2B:0A
X509v3 Authority Key Identifier:
keyid:B9:DF:15:6E:E1:8B:69:58:D4:30:6B:63:11:B4:A0:86:76:3E:FF:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:b2:42:17:57:49:f6:ad:fa:30:af:ef:64:07:dc:42:01:dd:
62:12:b3:e4:70:dd:24:5c:57:3a:69:a8:b6:c9:8e:36:c8:ce:
5e:ff:ca:d3:49:0e:af:2f:f2:13:9c:a0:67:a0:bb:27:2c:ac:
b4:05:ea:af:9f:63:a1:2f:94:8f:7f:f0:d3:59:31:0e:02:c0:
a1:8e:c6:1b:ac:3c:f1:e9:06:bd:b8:f1:0f:a5:77:4c:2d:22:
de:a6:f5:b0:ab:8b:8d:da:8b:fe:e7:7c:56:81:e1:8a:ee:2b:
56:bd:34:c2:18:56:60:30:00:20:20:0f:62:a2:e0:8b:99:0c:
05:df:0e:5f:97:2e:5e:02:26:cc:cc:32:fd:fe:b3:bd:e0:0c:
41:d6:99:d8:e5:40:1e:43:f5:30:e3:51:6b:b2:48:98:08:05:
83:a6:69:b1:68:be:bc:c7:9a:3a:09:10:40:9d:b6:79:8e:e5:
a1:0d:a6:b1:00:c5:67:ff:62:ea:b1:f3:39:b9:51:8d:7a:ac:
7c:66:59:4f:0b:13:f0:a9:78:ac:dd:99:fc:60:75:5b:d7:29:
ff:5c:99:41:4c:a0:28:5b:14:56:df:dd:ac:09:73:ea:e5:79:
43:2b:cc:54:b3:0c:2e:16:4f:31:fd:22:48:35:b0:a4:de:35:
e0:a3:8e:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4mRVBwfdsWq+lmYR6MFsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZGYxNTZlZTE4YjY5NThkNDMwNmI2MzExYjRhMDg2NzYz
ZWZmNjIwHhcNMjUxMTA0MjIwMDA1WhcNMjUxMTA1MjIwMDA1WjAzMTEwLwYDVQQD
Eyg4N2I3OTQ3OTNkZGYyY2UyZDBkOTg0ZTEzMTA4OTZjNDg4MTQyYjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySxT1dBeaT7nTBr1IyDCLPk2lEvv
47rTS5sw3Cu1Vnrve5qeS9A3alKuVqOt6m6JULlMkeHLkR6Dgb/9KCsqMXPggiYb
zQsFiUywqe2oy3DFbU0+Rdjr2O+RUaq87SnvKM5lI4vQYHJ+S/MDpIlYGfeGI5qI
acNLIj6I7YcP65k82AjULtNXsFlRgJ4cV2LZcz3CjWi8xebR37zCZ0Fmac0G5dyM
+JKAS6iv9L8sC1ZLA18wz1AYq6GNiv4b3cBHfpsOyPlqtwAmNIAUBpXh3f2bOn/J
gAiSWIMzmTOphkanuOsHsmwyAaEeUBw+AnzvLy/2RqXVTW4tdMRa5CnhlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIe3lHk93yzi0NmE4TEIlsSIFCsKMB8GA1UdIwQY
MBaAFLnfFW7hi2lY1DBrYxG0oIZ2Pv9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWQ4VmJ1R0xhVmpVTUd0akViU2doblktXzJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9kNjQ2MWYtMTdlMy00OTg2LWE1ZjYt
NzJhNGIzYTliYjQ0LzEvdWQ4VmJ1R0xhVmpVTUd0akViU2doblktXzJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9kNjQ2MWYtMTdlMy00OTg2LWE1ZjYtNzJhNGIzYTliYjQ0
LzEvdWQ4VmJ1R0xhVmpVTUd0akViU2doblktXzJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy7JCF1dJ
9q36MK/vZAfcQgHdYhKz5HDdJFxXOmmotsmONsjOXv/K00kOry/yE5ygZ6C7Jyys
tAXqr59joS+Uj3/w01kxDgLAoY7GG6w88ekGvbjxD6V3TC0i3qb1sKuLjdqL/ud8
VoHhiu4rVr00whhWYDAAICAPYqLgi5kMBd8OX5cuXgImzMwy/f6zveAMQdaZ2OVA
HkP1MONRa7JImAgFg6ZpsWi+vMeaOgkQQJ22eY7loQ2msQDFZ/9i6rHzOblRjXqs
fGZZTwsT8Kl4rN2Z/GB1W9cp/1yZQUygKFsUVt/drAlz6uV5QyvMVLMMLhZPMf0i
SDWwpN414KOO2w==
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:31:28 2025 by rpki-client