Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.mft
File: V8H-gINkZ0mBatP6ZAmDRfth6fU.mft (raw, json)
Hash identifier: nprW4q3kyoxkuGXx3SUm0U1dPL3pKhnhf2MoXN/o99s=
Subject key identifier: FA:E0:8A:48:29:F4:5D:7F:59:98:4A:33:30:98:5D:91:3F:A9:0E:D9
Authority key identifier: 57:C1:FE:80:83:64:67:49:81:6A:D3:FA:64:09:83:45:FB:61:E9:F5
Certificate issuer: /CN=57c1fe8083646749816ad3fa64098345fb61e9f5
Certificate serial: 019A4F61E36E3FE913A73C31214F871EDAFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8H-gINkZ0mBatP6ZAmDRfth6fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 15:00:06 +0000
Manifest this update: Tue 04 Nov 2025 15:00:06 +0000
Manifest next update: Wed 05 Nov 2025 15:00:06 +0000
Files and hashes: 1: DtG9QHgbh6DEslt8mTDXVaxdqQ4.roa (hash: FeW6iqctyQqjdDbIjMhTvYTHZA4p9G/jqf5MmgvmOo4=)
2: V8H-gINkZ0mBatP6ZAmDRfth6fU.crl (hash: v67kncun1jLTNwcsIvoMzm9o1pGHfzYn9G4e89/LxUg=)
3: VtwjP8CmtTeLWVW9N6o-K_qnKwA.roa (hash: HsIDoGOSVnTIqa9qpiTR9Xg//0nmdy2yaZaBVdQZxQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8H-gINkZ0mBatP6ZAmDRfth6fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:e3:6e:3f:e9:13:a7:3c:31:21:4f:87:1e:da:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c1fe8083646749816ad3fa64098345fb61e9f5
Validity
Not Before: Nov 4 15:00:06 2025 GMT
Not After : Nov 5 15:00:06 2025 GMT
Subject: CN=fae08a4829f45d7f59984a3330985d913fa90ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:b5:4f:6a:ac:9c:e4:f3:be:8f:f1:17:ae:
44:bc:db:07:3f:07:1f:ab:a6:58:37:a5:cd:70:50:
85:89:d3:dd:bc:58:11:28:ad:cd:20:06:dd:fa:c8:
7f:61:07:ba:6e:95:97:bb:0e:00:fc:fa:5e:74:f7:
49:57:04:d8:cf:1a:55:dc:67:73:39:d1:46:59:42:
f0:e7:eb:f7:f9:54:e4:4b:3d:d9:e8:00:44:63:11:
b4:c0:47:30:04:b2:32:26:c4:70:62:8a:26:fb:79:
d9:e3:2e:9d:4e:13:8d:3c:72:72:86:ce:15:25:22:
08:b8:87:29:31:3e:46:7f:7c:9b:bc:b3:e4:cb:69:
82:8e:bf:2f:80:cb:ea:79:a5:e2:ef:8d:00:d5:0b:
01:32:2a:ae:29:f6:fe:cf:4f:0a:77:6a:57:16:f7:
b8:01:22:7c:6e:35:28:e6:77:b2:a1:77:d8:a9:c6:
a7:c3:0b:ea:d7:30:fc:f8:68:0e:d2:3b:51:e3:07:
31:70:1a:5e:7d:6c:39:73:4d:42:cd:dd:e3:ed:5f:
89:2a:51:77:59:18:0e:6a:da:d6:00:39:7e:9b:ac:
c0:7f:52:bf:86:cd:28:5b:f9:79:05:c7:79:8b:fc:
d1:38:05:94:74:73:54:a9:57:37:f6:bc:31:3a:21:
2f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E0:8A:48:29:F4:5D:7F:59:98:4A:33:30:98:5D:91:3F:A9:0E:D9
X509v3 Authority Key Identifier:
keyid:57:C1:FE:80:83:64:67:49:81:6A:D3:FA:64:09:83:45:FB:61:E9:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8H-gINkZ0mBatP6ZAmDRfth6fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c3:eb:00:f0:8c:1b:69:b3:3d:be:b1:a3:5f:56:61:5b:1c:
42:11:70:0f:c4:1e:17:43:65:e0:27:07:9f:45:7a:aa:c2:3b:
47:f4:6c:d4:1d:10:a3:86:2e:59:7f:6b:99:8e:a2:55:38:56:
4f:b7:43:ee:11:ac:33:05:93:18:76:88:30:b3:b6:d3:7a:50:
59:19:bf:f3:a5:fb:d8:3a:8f:4a:a1:f2:42:e5:d7:51:b8:35:
ca:91:a7:8a:54:3b:07:cc:c1:b1:5d:f3:7c:7d:6d:ad:b2:38:
0c:b8:b3:3e:e1:4b:bc:b3:e7:45:ca:3d:51:79:64:f2:cb:76:
d5:fc:27:b1:6b:ef:50:e2:d2:c0:84:46:b2:d4:9a:e6:2d:ce:
96:73:35:81:e6:48:8d:c7:b5:1b:f2:d4:de:7f:70:b8:0b:d4:
67:83:84:a4:c7:c0:fe:f2:bf:98:9f:d4:0c:cb:7f:f0:e4:4c:
1e:d4:86:db:70:52:51:a0:99:cd:be:3e:4f:e4:68:99:30:c1:
96:5f:b8:1a:77:85:1b:f3:2e:0e:e3:ca:7c:91:e8:67:68:b1:
b5:3e:f3:87:c0:e6:75:32:4b:c9:b8:96:c8:a5:8f:cf:3d:c4:
3b:dc:b1:02:82:13:7e:f1:5f:3d:b3:64:94:e3:ff:93:99:4d:
0a:a2:d1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:39 2025 by rpki-client