Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
File: v85V0V6xGeUtb6_NOXPi9tTyI_I.mft (raw, json)
Hash identifier: wg9h6AFGwEE1AcOoDjBptLWD40Ola93VDa5h4wveZMw=
Subject key identifier: 13:44:85:E4:58:3C:B2:78:21:28:7E:C1:5C:A0:0B:62:D2:11:16:88
Authority key identifier: BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
Certificate issuer: /CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Certificate serial: 019A5187B3F6A39BF779216A7E4D95246D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 01:00:39 +0000
Manifest this update: Wed 05 Nov 2025 01:00:39 +0000
Manifest next update: Thu 06 Nov 2025 01:00:39 +0000
Files and hashes: 1: qMVh3MmBW-5x18q2N1wXFpopTgM.roa (hash: PQtT5tx/edekggmnvi46ZZ9KahB7EPBY+tQD/QXkwJY=)
2: v85V0V6xGeUtb6_NOXPi9tTyI_I.crl (hash: OK5eKj3xXpuLhc+NY+LMtd9hy6iQMGHXD6+PHzjTAxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:b3:f6:a3:9b:f7:79:21:6a:7e:4d:95:24:6d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Validity
Not Before: Nov 5 01:00:39 2025 GMT
Not After : Nov 6 01:00:39 2025 GMT
Subject: CN=134485e4583cb27821287ec15ca00b62d2111688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:80:83:7f:af:83:18:76:e6:4c:b3:bc:ff:26:
e3:b2:58:f2:5e:64:06:4f:41:76:5f:49:39:34:e0:
bb:72:d9:ea:9b:98:5f:ee:09:6e:d8:37:39:9f:2d:
cb:40:97:0f:78:39:8f:8e:53:7a:57:29:84:c7:e5:
30:36:17:06:6a:94:51:40:4d:e0:9e:fe:03:c7:6c:
0c:74:7f:0b:c4:f9:92:fd:e1:b2:f2:30:d3:8f:4b:
f3:e5:6c:85:8f:92:85:64:69:73:7a:1e:ad:7b:7a:
7e:2f:7d:73:f7:ac:b1:a8:63:04:2b:b9:35:68:e8:
6c:d3:15:59:42:6e:46:c1:e6:c9:62:85:05:48:ee:
5c:39:35:bd:1e:fa:a6:fb:a0:62:93:5c:79:0f:af:
d9:eb:8e:80:c2:97:23:f8:ff:93:45:c6:20:91:92:
23:3d:6c:d7:08:1f:a1:6f:8b:d6:8c:d8:e1:32:ae:
d8:53:96:d5:c7:a8:94:6d:e1:7c:67:3d:9f:3f:da:
6c:31:4a:08:78:d0:41:85:51:f7:0d:8c:5f:80:eb:
f6:01:ef:ff:9e:df:e0:57:dc:cb:6a:15:87:e2:88:
37:7f:50:a6:b8:f7:79:e4:b1:3c:dd:7d:2d:c2:84:
e5:cb:41:e9:29:8d:12:3a:73:be:b7:db:58:29:fe:
c0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:44:85:E4:58:3C:B2:78:21:28:7E:C1:5C:A0:0B:62:D2:11:16:88
X509v3 Authority Key Identifier:
keyid:BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:5d:90:21:43:6b:74:d4:c8:e0:2f:06:27:2c:7c:b4:52:37:
56:7f:48:21:6a:33:d9:83:59:5d:5d:e6:e2:7a:f0:da:1f:16:
a5:93:ee:4c:67:e2:63:98:24:91:f8:84:5d:1f:7a:cd:1b:06:
3b:0a:ce:c1:9e:50:64:89:df:63:83:9c:bc:9f:32:5a:f0:0b:
2d:b1:6f:e6:57:4a:d6:91:5e:63:5e:96:13:39:7b:57:7a:27:
21:74:62:de:89:9f:c1:fb:96:88:1e:30:e5:c3:ec:43:20:67:
25:35:fc:fc:9f:d2:c1:80:8f:c2:e3:1d:89:3d:48:36:ee:56:
b4:b0:98:47:18:c8:6a:ea:68:d6:5c:20:82:10:ea:af:d6:d6:
46:62:a7:c1:06:dd:4a:97:48:ec:64:a8:05:7f:2a:52:6e:34:
bd:0d:8a:03:5e:e0:f0:f0:48:ef:9e:79:0d:9f:cb:d9:bd:9f:
a6:1c:4e:7b:65:bd:9c:23:e6:97:cf:e6:16:a7:e2:2a:a3:ad:
79:2f:d0:6a:c2:88:51:cd:8c:df:0b:85:33:49:f5:ee:f1:e4:
33:9f:6a:6b:0e:1a:21:c8:0e:fe:a7:11:57:32:0e:27:c2:0f:
ad:5d:07:64:c7:5b:f2:ef:b1:0c:02:c5:0c:a3:3b:e1:92:b7:
4b:da:e0:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRh7P2o5v3eSFqfk2VJG06MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmY2U1NWQxNWViMTE5ZTUyZDZmYWZjZDM5NzNlMmY2ZDRm
MjIzZjIwHhcNMjUxMTA1MDEwMDM5WhcNMjUxMTA2MDEwMDM5WjAzMTEwLwYDVQQD
EygxMzQ0ODVlNDU4M2NiMjc4MjEyODdlYzE1Y2EwMGI2MmQyMTExNjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4CDf6+DGHbmTLO8/ybjsljyXmQG
T0F2X0k5NOC7ctnqm5hf7glu2Dc5ny3LQJcPeDmPjlN6VymEx+UwNhcGapRRQE3g
nv4Dx2wMdH8LxPmS/eGy8jDTj0vz5WyFj5KFZGlzeh6te3p+L31z96yxqGMEK7k1
aOhs0xVZQm5GwebJYoUFSO5cOTW9Hvqm+6Bik1x5D6/Z646Awpcj+P+TRcYgkZIj
PWzXCB+hb4vWjNjhMq7YU5bVx6iUbeF8Zz2fP9psMUoIeNBBhVH3DYxfgOv2Ae//
nt/gV9zLahWH4og3f1CmuPd55LE83X0twoTly0HpKY0SOnO+t9tYKf7AlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNEheRYPLJ4ISh+wVygC2LSERaIMB8GA1UdIwQY
MBaAFL/OVdFesRnlLW+vzTlz4vbU8iPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjg1VjBWNnhHZVV0YjZfTk9YUGk5dFR5SV9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lY2U1YzctMjE0My00ZGI0LTk4NTct
MDUyY2YwMWQyMDQ4LzEvdjg1VjBWNnhHZVV0YjZfTk9YUGk5dFR5SV9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9lY2U1YzctMjE0My00ZGI0LTk4NTctMDUyY2YwMWQyMDQ4
LzEvdjg1VjBWNnhHZVV0YjZfTk9YUGk5dFR5SV9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfl2QIUNr
dNTI4C8GJyx8tFI3Vn9IIWoz2YNZXV3m4nrw2h8WpZPuTGfiY5gkkfiEXR96zRsG
OwrOwZ5QZInfY4OcvJ8yWvALLbFv5ldK1pFeY16WEzl7V3onIXRi3omfwfuWiB4w
5cPsQyBnJTX8/J/SwYCPwuMdiT1INu5WtLCYRxjIaupo1lwgghDqr9bWRmKnwQbd
SpdI7GSoBX8qUm40vQ2KA17g8PBI7555DZ/L2b2fphxOe2W9nCPml8/mFqfiKqOt
eS/QasKIUc2M3wuFM0n17vHkM59qaw4aIcgO/qcRVzIOJ8IPrV0HZMdb8u+xDALF
DKM74ZK3S9rgNw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:26:43 2025 by rpki-client