Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
File: V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft (raw, json)
Hash identifier: XMlU69p6UW94iPfrvsgLXIjtnEhCgo5PWTXFOI/sQuI=
Subject key identifier: 55:1D:89:85:D0:C3:DD:D0:52:07:3B:5C:0A:74:85:33:83:CB:DD:39
Authority key identifier: 57:DB:14:3C:17:FB:05:19:44:42:6A:79:F2:43:34:C2:5C:DB:C2:34
Certificate issuer: /CN=57db143c17fb051944426a79f24334c25cdbc234
Certificate serial: 019A533FA1639CB514AC2C855F97BFA809E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
Manifest number: 01E4
Signing time: Wed 05 Nov 2025 09:01:10 +0000
Manifest this update: Wed 05 Nov 2025 09:01:10 +0000
Manifest next update: Thu 06 Nov 2025 09:01:10 +0000
Files and hashes: 1: LGPCXsstqIHfBFoiMfK-mbsBUjw.roa (hash: 7stOVhfnEQBs17GDG+FcbDZCYanm4iM/V5R3N/Vll+k=)
2: V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl (hash: zlkZTCWHySZYsQNNn/iNm/eqyPEu7nggIMkr4ox8ws8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:a1:63:9c:b5:14:ac:2c:85:5f:97:bf:a8:09:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57db143c17fb051944426a79f24334c25cdbc234
Validity
Not Before: Nov 5 09:01:10 2025 GMT
Not After : Nov 6 09:01:10 2025 GMT
Subject: CN=551d8985d0c3ddd052073b5c0a74853383cbdd39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fa:45:ef:3a:3f:bc:97:04:9f:2e:46:aa:5f:
41:8d:59:9a:50:bb:a5:50:01:61:67:d5:88:65:b1:
cd:71:f6:d6:43:71:8b:a8:72:83:49:66:bd:82:8e:
cd:51:a3:b5:dd:d8:64:02:db:56:f2:21:0c:d9:03:
de:0b:b5:e1:6d:ad:94:ff:bd:59:40:87:44:18:b6:
b7:2b:ec:a2:9b:d7:01:88:0c:71:00:8a:3f:89:0f:
46:2d:4c:9a:c6:8a:21:83:7b:8b:ac:aa:7e:41:4b:
c8:b3:7c:80:0c:99:60:53:3b:c7:6d:76:e7:bc:2f:
a9:5f:37:38:35:69:23:20:42:b7:8f:8e:f8:7d:9d:
3d:a5:88:e1:4b:54:3d:e5:4f:e1:98:af:ab:c9:1f:
7a:61:06:62:84:f1:88:28:37:0a:ad:fd:3d:57:28:
bf:f6:54:35:1a:62:7e:2a:2e:31:d0:b4:78:4b:fb:
93:24:eb:86:50:0c:bb:9b:0f:0c:7c:b0:a2:db:4a:
a0:28:a9:13:52:6b:49:cb:ca:79:0d:5e:62:83:0c:
d8:7c:0a:53:e9:f2:23:3a:31:a9:b8:4d:b0:3b:67:
4a:90:0b:83:25:fe:c5:86:4b:2b:96:5e:11:c1:b6:
45:e9:07:05:5e:8f:96:ea:88:7a:f9:7d:a6:fd:23:
35:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1D:89:85:D0:C3:DD:D0:52:07:3B:5C:0A:74:85:33:83:CB:DD:39
X509v3 Authority Key Identifier:
keyid:57:DB:14:3C:17:FB:05:19:44:42:6A:79:F2:43:34:C2:5C:DB:C2:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:6b:71:d3:df:5e:ec:5d:2f:b7:6f:48:5a:03:88:ed:bf:80:
12:24:71:43:7e:30:09:81:13:a7:8b:b3:08:64:d3:cf:4b:43:
e9:ee:b7:79:3c:bb:da:a9:87:05:ff:15:47:95:ab:4e:58:4e:
2f:5b:f9:10:e9:f8:51:86:cd:9c:1b:ee:2a:25:4b:4f:9d:78:
46:94:79:7f:fd:9a:d9:51:0a:cc:c9:ca:7b:af:d7:10:cf:4c:
e9:5f:8b:55:23:22:db:61:05:5c:f8:09:73:5c:51:65:f7:a4:
3b:49:22:69:cb:22:ce:b7:e6:57:40:75:d3:c5:58:13:d0:05:
a9:ed:b1:42:ce:c5:0d:fd:09:0a:03:44:77:e9:73:2f:34:46:
94:42:a6:a0:d8:b8:bf:3b:b5:60:6d:a9:57:89:3b:65:28:d7:
26:0b:bd:28:bf:11:88:e2:04:d2:45:01:6b:3f:c3:55:27:0a:
a7:e1:ab:0c:39:dc:8d:ba:6d:b3:97:53:cd:07:ee:c0:24:c0:
76:80:1c:c3:98:c3:13:2f:3b:69:6b:82:d9:d4:e3:c0:d4:4c:
24:45:f9:ff:54:85:cf:4a:a5:bc:f3:09:4a:67:d4:0b:bf:ac:
3e:33:d0:ed:af:cc:07:3b:3e:09:92:50:11:51:b2:18:ce:3b:
cc:06:24:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTP6FjnLUUrCyFX5e/qAnjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZGIxNDNjMTdmYjA1MTk0NDQyNmE3OWYyNDMzNGMyNWNk
YmMyMzQwHhcNMjUxMTA1MDkwMTEwWhcNMjUxMTA2MDkwMTEwWjAzMTEwLwYDVQQD
Eyg1NTFkODk4NWQwYzNkZGQwNTIwNzNiNWMwYTc0ODUzMzgzY2JkZDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivpF7zo/vJcEny5Gql9BjVmaULul
UAFhZ9WIZbHNcfbWQ3GLqHKDSWa9go7NUaO13dhkAttW8iEM2QPeC7Xhba2U/71Z
QIdEGLa3K+yim9cBiAxxAIo/iQ9GLUyaxoohg3uLrKp+QUvIs3yADJlgUzvHbXbn
vC+pXzc4NWkjIEK3j474fZ09pYjhS1Q95U/hmK+ryR96YQZihPGIKDcKrf09Vyi/
9lQ1GmJ+Ki4x0LR4S/uTJOuGUAy7mw8MfLCi20qgKKkTUmtJy8p5DV5igwzYfApT
6fIjOjGpuE2wO2dKkAuDJf7Fhksrll4RwbZF6QcFXo+W6oh6+X2m/SM1EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUdiYXQw93QUgc7XAp0hTODy905MB8GA1UdIwQY
MBaAFFfbFDwX+wUZREJqefJDNMJc28I0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjlzVVBCZjdCUmxFUW1wNThrTTB3bHpid2pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85MDEzODAtZjgyMS00NDNhLTliZjIt
YmRhNGY4ZWIxYWQ5LzEvVjlzVVBCZjdCUmxFUW1wNThrTTB3bHpid2pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy85MDEzODAtZjgyMS00NDNhLTliZjItYmRhNGY4ZWIxYWQ5
LzEvVjlzVVBCZjdCUmxFUW1wNThrTTB3bHpid2pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOWtx099e
7F0vt29IWgOI7b+AEiRxQ34wCYETp4uzCGTTz0tD6e63eTy72qmHBf8VR5WrTlhO
L1v5EOn4UYbNnBvuKiVLT514RpR5f/2a2VEKzMnKe6/XEM9M6V+LVSMi22EFXPgJ
c1xRZfekO0kiacsizrfmV0B108VYE9AFqe2xQs7FDf0JCgNEd+lzLzRGlEKmoNi4
vzu1YG2pV4k7ZSjXJgu9KL8RiOIE0kUBaz/DVScKp+GrDDncjbpts5dTzQfuwCTA
doAcw5jDEy87aWuC2dTjwNRMJEX5/1SFz0qlvPMJSmfUC7+sPjPQ7a/MBzs+CZJQ
EVGyGM47zAYkig==
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:24:50 2025 by rpki-client