Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
File: v124EbXV0FvsN-6dCaTsUu7tGtU.mft (raw, json)
Hash identifier: 35vXhpPV63fzw7tNct6TnFPkoRmoxWWLBIDVXnD/Zvk=
Subject key identifier: A7:F8:70:F8:0F:84:29:93:7D:4B:CD:5B:30:08:8B:29:1D:6B:A7:5D
Authority key identifier: BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5
Certificate issuer: /CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
Certificate serial: 019A4D73E78ED0FE9DC7B5052AFB6019BFBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 06:00:32 +0000
Manifest this update: Tue 04 Nov 2025 06:00:32 +0000
Manifest next update: Wed 05 Nov 2025 06:00:32 +0000
Files and hashes: 1: A_KgM3k4qAAXzoVtcLMaFcFNNK4.roa (hash: VJ7GutYO65TbDd04dxHRMtfL/mkpQAyG9g/RbTdBVFk=)
2: Bykp6D8a0g7RWzF0-TM8Q9QUeZg.roa (hash: XX0zq9iYFmQVsbLlV9Gh1YQJWKy0izeVfRSjEDzptNY=)
3: aEL4xFOQmRYrZwG3M_bcJt5uI7g.roa (hash: zEPp0rusbaxj35njsL+K6xMWps6ctYOjx+pWxAGHdKg=)
4: leblj7LAsmNQvo4mPAk6nZp18TI.roa (hash: BN8Nv/xxMQaspAlU30+6jiR1kkLgITKVXHRbqi9/XpE=)
5: v124EbXV0FvsN-6dCaTsUu7tGtU.crl (hash: mlfAlQMtiSEshiQklaftC1Jjr+r2az/+3g/tgLoxMnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:e7:8e:d0:fe:9d:c7:b5:05:2a:fb:60:19:bf:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
Validity
Not Before: Nov 4 06:00:32 2025 GMT
Not After : Nov 5 06:00:32 2025 GMT
Subject: CN=a7f870f80f8429937d4bcd5b30088b291d6ba75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4e:f7:89:42:f7:d4:e2:a4:99:b3:30:76:3b:
4f:3b:05:d6:8d:56:93:07:ed:2b:f6:80:6b:83:9b:
14:55:9c:18:90:34:d2:2d:a7:d4:80:ac:65:0c:f7:
b6:32:fe:2b:48:d0:b2:a0:e5:c5:e0:43:95:90:ec:
92:74:0d:1d:0f:31:d1:e7:28:b3:fe:c6:8d:43:62:
a1:03:fd:db:45:c0:b5:ec:9a:7b:6b:23:6a:eb:a9:
be:5a:3b:e8:88:82:35:c4:f9:e9:a2:b4:f6:51:71:
a1:35:af:5c:5b:20:a8:9d:62:7b:15:73:2b:bc:5a:
54:53:eb:da:ee:f6:0f:21:6b:c7:80:c3:85:be:e4:
ec:8a:78:31:a3:50:3c:87:4a:8f:30:c9:22:4c:c7:
50:fd:c5:e6:d4:e6:29:e1:a9:d0:d2:dc:43:69:4e:
a9:25:f8:b2:64:25:98:04:55:75:44:ed:ab:00:aa:
de:29:6a:99:b6:c9:f4:6e:43:fa:66:15:ae:ce:bc:
0a:e1:4a:a7:47:76:23:ed:ff:1d:6f:96:bb:42:26:
bb:2d:75:b5:cb:94:4d:19:96:2d:0d:d4:9a:8b:5b:
98:8e:50:a8:00:7f:8d:94:af:53:0c:a4:d1:68:af:
84:10:24:66:41:70:fc:0a:70:28:61:7a:01:e2:3e:
e1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F8:70:F8:0F:84:29:93:7D:4B:CD:5B:30:08:8B:29:1D:6B:A7:5D
X509v3 Authority Key Identifier:
keyid:BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d7:f2:49:a4:32:c9:19:97:d5:1e:65:28:5f:cf:c2:84:67:
83:95:56:39:50:a2:db:6c:23:7c:c4:82:c5:7b:34:98:3b:ca:
7d:db:46:3d:76:d8:05:11:c7:1b:35:91:ef:19:bd:a8:0b:11:
ae:69:35:fc:af:5b:13:ad:59:60:4d:02:3a:94:dd:73:30:d9:
94:ad:a8:c6:16:7d:a6:d3:a2:d8:2d:63:e9:d0:7f:a2:1a:f8:
b3:c9:ad:d1:96:bf:5c:d4:c9:88:1b:c9:f4:41:d9:c1:ad:cf:
19:19:63:a9:6f:f1:40:a1:1d:80:6d:fa:ad:b6:58:32:f6:ae:
34:c3:36:6c:5f:7b:2f:7f:59:17:3f:2e:94:41:03:3b:8a:ea:
6f:77:0c:32:f7:5b:b6:26:73:27:23:11:78:5c:db:54:c9:a9:
0d:e5:43:de:86:dd:c8:eb:86:c8:c9:70:c9:76:de:b3:6d:14:
89:05:15:d8:78:e7:87:46:5e:a1:fd:1d:6e:bf:b7:09:ad:2d:
2f:2a:74:d0:48:d7:fa:21:7a:50:55:67:64:80:02:db:55:f8:
ec:25:93:2a:e1:0f:6a:b3:cd:60:b9:a9:3a:4d:67:80:44:42:
50:e6:c0:70:ed:52:13:69:fc:b9:83:d2:a2:c1:69:19:a0:0e:
09:12:92:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc+eO0P6dx7UFKvtgGb+/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNWRiODExYjVkNWQwNWJlYzM3ZWU5ZDA5YTRlYzUyZWVl
ZDFhZDUwHhcNMjUxMTA0MDYwMDMyWhcNMjUxMTA1MDYwMDMyWjAzMTEwLwYDVQQD
EyhhN2Y4NzBmODBmODQyOTkzN2Q0YmNkNWIzMDA4OGIyOTFkNmJhNzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0U73iUL31OKkmbMwdjtPOwXWjVaT
B+0r9oBrg5sUVZwYkDTSLafUgKxlDPe2Mv4rSNCyoOXF4EOVkOySdA0dDzHR5yiz
/saNQ2KhA/3bRcC17Jp7ayNq66m+WjvoiII1xPnporT2UXGhNa9cWyConWJ7FXMr
vFpUU+va7vYPIWvHgMOFvuTsingxo1A8h0qPMMkiTMdQ/cXm1OYp4anQ0txDaU6p
JfiyZCWYBFV1RO2rAKreKWqZtsn0bkP6ZhWuzrwK4UqnR3Yj7f8db5a7Qia7LXW1
y5RNGZYtDdSai1uYjlCoAH+NlK9TDKTRaK+EECRmQXD8CnAoYXoB4j7hJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKf4cPgPhCmTfUvNWzAIiykda6ddMB8GA1UdIwQY
MBaAFL9duBG11dBb7DfunQmk7FLu7RrVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjEyNEViWFYwRnZzTi02ZENhVHNVdTd0R3RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zMGY1ZTAtYTA0Zi00OTkzLTk4M2Mt
NzE1ZjA5ODE3MzQxLzEvdjEyNEViWFYwRnZzTi02ZENhVHNVdTd0R3RVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8zMGY1ZTAtYTA0Zi00OTkzLTk4M2MtNzE1ZjA5ODE3MzQx
LzEvdjEyNEViWFYwRnZzTi02ZENhVHNVdTd0R3RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdfySaQy
yRmX1R5lKF/PwoRng5VWOVCi22wjfMSCxXs0mDvKfdtGPXbYBRHHGzWR7xm9qAsR
rmk1/K9bE61ZYE0COpTdczDZlK2oxhZ9ptOi2C1j6dB/ohr4s8mt0Za/XNTJiBvJ
9EHZwa3PGRljqW/xQKEdgG36rbZYMvauNMM2bF97L39ZFz8ulEEDO4rqb3cMMvdb
tiZzJyMReFzbVMmpDeVD3obdyOuGyMlwyXbes20UiQUV2Hjnh0Zeof0dbr+3Ca0t
Lyp00EjX+iF6UFVnZIAC21X47CWTKuEParPNYLmpOk1ngERCUObAcO1SE2n8uYPS
osFpGaAOCRKSmg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:46 2025 by rpki-client