Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
File: V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft (raw, json)
Hash identifier: jurFreh5CZ+Sr3QlmrmK6uoh3c3UhdmFgEAdr5wFGVU=
Subject key identifier: D1:74:2C:A9:23:8E:C0:6E:FA:A1:1F:58:53:2C:4C:EF:AC:86:84:CE
Authority key identifier: 57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
Certificate issuer: /CN=578d854bd2bee242a82fb83922d149bccf19ed02
Certificate serial: 019A5006EFFA81C2EA623576E57B930D33BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 18:00:23 +0000
Manifest this update: Tue 04 Nov 2025 18:00:23 +0000
Manifest next update: Wed 05 Nov 2025 18:00:23 +0000
Files and hashes: 1: NhjTM3dOPnMsLQ7ebQq_0aK61EU.roa (hash: pDZlPFnX9elEIPNsw2D7ajm33IBeKqhaDpBvumlLRQw=)
2: O9m05o_UDIKemPeCfI7Sc16B69Y.roa (hash: yXqGk5sjcirZhyM4OHBNZEpEXcAXLb0N0cHRwAFg1zo=)
3: V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl (hash: C7dZTsHMeYKXQnq+PBXNpIioMV4n5RzgtIkUXFkBit8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:ef:fa:81:c2:ea:62:35:76:e5:7b:93:0d:33:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578d854bd2bee242a82fb83922d149bccf19ed02
Validity
Not Before: Nov 4 18:00:23 2025 GMT
Not After : Nov 5 18:00:23 2025 GMT
Subject: CN=d1742ca9238ec06efaa11f58532c4cefac8684ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:44:84:e8:ff:4e:5b:ac:36:34:34:cc:e2:ac:
91:71:bd:b0:43:de:c6:1e:1f:a8:bb:59:87:5e:e1:
4e:75:8d:ea:00:02:47:3e:a6:d4:5c:cd:3e:f8:f3:
b5:c3:d0:e4:c8:b2:1e:7d:d8:b2:ba:66:10:20:b6:
b8:bf:77:46:9b:96:cd:49:32:a1:95:4a:bb:ea:4c:
b5:66:57:55:98:22:c9:30:d8:b6:05:9e:cb:89:5b:
84:52:68:35:36:6d:06:a2:53:ea:45:f9:b3:e5:97:
ad:b7:88:d3:c5:44:72:a7:c8:4b:14:50:64:dc:d7:
a4:b1:2c:29:00:c0:19:12:d7:58:13:a6:3e:69:1e:
a2:53:c4:8a:53:7c:fb:34:b6:19:be:ed:77:3c:7e:
67:04:9a:0c:04:10:db:ec:86:e6:31:a1:ae:fb:4e:
f7:94:c2:18:b6:f8:a5:dc:64:eb:8e:0d:23:1f:d3:
f2:c6:d9:c4:92:cb:8c:0d:7e:9a:6d:38:c6:09:aa:
44:ff:47:87:c0:6d:07:33:26:9c:9d:6c:35:21:23:
8c:03:81:db:7c:45:b8:f3:56:a1:e8:c1:d5:8b:bf:
d4:4e:db:af:0a:f7:5d:98:5c:2e:85:8d:e0:8d:ee:
b3:47:68:48:d5:c6:c8:83:fd:b1:31:6b:36:9f:f7:
d7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:74:2C:A9:23:8E:C0:6E:FA:A1:1F:58:53:2C:4C:EF:AC:86:84:CE
X509v3 Authority Key Identifier:
keyid:57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:94:cb:62:e2:31:4b:cf:1a:9c:26:35:18:62:45:96:7f:2b:
89:f1:1b:84:1b:fa:92:aa:73:4b:78:d9:87:5a:c6:d1:7a:05:
87:92:33:04:0c:89:9a:92:bd:68:da:8a:cb:be:17:10:1b:f9:
86:91:cf:0d:b1:81:4f:47:bd:b1:5f:b4:ef:4a:3e:a6:2c:6c:
40:e8:cf:86:e2:23:e8:44:b5:85:c3:87:87:0b:5b:0e:cd:2f:
b1:90:6f:73:ed:79:a7:e2:71:ae:ee:67:c0:be:19:80:8f:61:
72:f0:47:67:48:c5:9b:65:b9:32:b3:ef:80:03:76:a5:46:ac:
43:02:95:59:a5:c1:66:61:fc:66:e4:3a:50:fb:d0:24:9d:1c:
50:9a:95:4a:be:6c:89:ee:c9:a7:3f:a6:45:46:50:d7:4e:31:
c0:a7:4f:a5:a8:49:67:e5:76:9f:ce:30:c2:41:3f:7d:b1:1e:
10:2d:c5:c1:71:f5:63:92:a3:7a:4a:e8:8f:36:f1:94:55:43:
09:3b:02:61:9b:76:c7:28:67:d8:d1:2b:77:5c:8f:da:d9:cc:
5b:24:c2:14:a8:3d:9e:a1:76:13:32:99:69:e5:9d:21:f8:5e:
f0:4d:a1:76:a9:7a:66:5c:75:85:9b:55:10:80:92:c0:47:21:
b0:8c:69:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQBu/6gcLqYjV25XuTDTO/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OGQ4NTRiZDJiZWUyNDJhODJmYjgzOTIyZDE0OWJjY2Yx
OWVkMDIwHhcNMjUxMTA0MTgwMDIzWhcNMjUxMTA1MTgwMDIzWjAzMTEwLwYDVQQD
EyhkMTc0MmNhOTIzOGVjMDZlZmFhMTFmNTg1MzJjNGNlZmFjODY4NGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoESE6P9OW6w2NDTM4qyRcb2wQ97G
Hh+ou1mHXuFOdY3qAAJHPqbUXM0++PO1w9DkyLIefdiyumYQILa4v3dGm5bNSTKh
lUq76ky1ZldVmCLJMNi2BZ7LiVuEUmg1Nm0GolPqRfmz5Zett4jTxURyp8hLFFBk
3NeksSwpAMAZEtdYE6Y+aR6iU8SKU3z7NLYZvu13PH5nBJoMBBDb7IbmMaGu+073
lMIYtvil3GTrjg0jH9PyxtnEksuMDX6abTjGCapE/0eHwG0HMyacnWw1ISOMA4Hb
fEW481ah6MHVi7/UTtuvCvddmFwuhY3gje6zR2hI1cbIg/2xMWs2n/fXswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNF0LKkjjsBu+qEfWFMsTO+shoTOMB8GA1UdIwQY
MBaAFFeNhUvSvuJCqC+4OSLRSbzPGe0CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjQyRlM5Sy00a0tvTDdnNUl0Rkp2TThaN1FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xMjhiYzYtZjZmZi00YzkwLThiNWEt
MWFiNWY1Mzk5ZDNhLzEvVjQyRlM5Sy00a0tvTDdnNUl0Rkp2TThaN1FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8xMjhiYzYtZjZmZi00YzkwLThiNWEtMWFiNWY1Mzk5ZDNh
LzEvVjQyRlM5Sy00a0tvTDdnNUl0Rkp2TThaN1FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL5TLYuIx
S88anCY1GGJFln8rifEbhBv6kqpzS3jZh1rG0XoFh5IzBAyJmpK9aNqKy74XEBv5
hpHPDbGBT0e9sV+070o+pixsQOjPhuIj6ES1hcOHhwtbDs0vsZBvc+15p+Jxru5n
wL4ZgI9hcvBHZ0jFm2W5MrPvgAN2pUasQwKVWaXBZmH8ZuQ6UPvQJJ0cUJqVSr5s
ie7Jpz+mRUZQ104xwKdPpahJZ+V2n84wwkE/fbEeEC3FwXH1Y5KjekrojzbxlFVD
CTsCYZt2xyhn2NErd1yP2tnMWyTCFKg9nqF2EzKZaeWdIfhe8E2hdql6Zlx1hZtV
EICSwEchsIxpgQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:42:15 2025 by rpki-client