Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
File: dVSsTH9FHFu5OC-81G1wxMD53lY.mft (raw, json)
Hash identifier: v6+csvR+jsiBBlk5+fRxygKm3shVsu+Uj4XdX4XSxU8=
Subject key identifier: 30:D4:A5:47:D3:94:4A:F5:C1:D2:63:BF:1B:CE:46:61:0A:08:51:CC
Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Certificate serial: 0199FCC6AFF8D3F1937BD95FC14F70A3FCAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
Manifest number: 16F2
Signing time: Sun 19 Oct 2025 14:01:43 +0000
Manifest this update: Sun 19 Oct 2025 14:01:43 +0000
Manifest next update: Mon 20 Oct 2025 14:01:43 +0000
Files and hashes: 1: 54dHE0jadLwCWG8zkr-DJUOEEaw.roa (hash: oNDnO3daYus3xELeZDv1QShW9ceHJLAT7TByuVM8qlM=)
2: G5C1ZqYlTLCRRxbHStMwHe3D7Ns.roa (hash: LpFTYAOw4TDfnjUrddNXOWvBHb296+OG0h5PcCYbZJE=)
3: PvzW1LilVgkSMjr-1-Yzvm-wGUI.roa (hash: lkTDUiRzb2/fpHpIX7XQuDSWI0FVDd2991z/UDnMP84=)
4: _udyEbevQeyPMsntui78RQRmYXo.roa (hash: 8RRyytezjUw6YTel2ifQgoEKUcJPXqM6Y67HGaLLOtA=)
5: dVSsTH9FHFu5OC-81G1wxMD53lY.crl (hash: D/btSUJdV7EiCEQ69KYvSt6T9fMez5c5Pn5yVynj/wQ=)
6: d_QjM08NyWxu6Tcwa6Z9vaHDI6E.roa (hash: 2UiuRNdprh1vh3n/JUuIuP4pSF4iJgcL2G0BqHfLcb8=)
7: gu5dao22fJp9scPActSQNTp8QK4.roa (hash: SFp8Pdfj96YgeaI0ilX+9ls8kY++x5GaLl2llXmCJNc=)
8: jwpY6rERA_zyIv98bpD7R8nes4o.roa (hash: zhq9elSEk74CwB7NZMhv2D35pQpbRAFiT6FBizp5Yp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:af:f8:d3:f1:93:7b:d9:5f:c1:4f:70:a3:fc:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Validity
Not Before: Oct 19 14:01:43 2025 GMT
Not After : Oct 20 14:01:43 2025 GMT
Subject: CN=30d4a547d3944af5c1d263bf1bce46610a0851cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fa:4b:8d:f4:db:c4:60:c5:04:95:0f:28:2b:
4c:4e:3f:33:b0:b9:23:a0:c4:fe:ab:d8:14:2d:a0:
e8:ed:8b:6f:78:a2:ab:a1:7e:45:cb:af:97:78:1c:
c1:b3:c5:6a:18:7f:1c:8f:8f:06:ba:a1:45:cf:90:
9c:5e:b5:7b:e4:5f:9b:fe:53:de:5b:de:5e:a2:aa:
c8:1f:8d:4d:84:97:dc:56:ff:73:35:76:4c:d2:f7:
07:89:f8:c4:c8:b9:83:cc:81:b3:20:5b:14:28:c5:
61:a2:28:90:4b:99:c4:8e:85:13:c5:48:e4:a9:c1:
c5:85:ce:fd:3a:82:e2:c1:c0:bf:c4:ac:82:e6:71:
19:29:01:fa:a2:be:3c:31:f5:5f:85:5d:80:cc:7c:
ff:6a:c7:e6:fe:87:7b:bf:26:ac:ed:b6:db:65:4d:
9f:62:4b:6f:45:ac:87:9f:fc:6d:15:3d:cf:b3:d5:
05:02:9d:47:4c:1b:1f:2c:46:d7:13:40:c7:8f:0a:
f5:3c:cc:85:c6:0b:bc:b9:24:2f:9c:d5:65:c7:06:
6e:b3:9f:10:90:41:cb:25:fc:f2:92:63:e4:9c:7e:
99:63:30:0d:4f:a1:d3:87:ac:ee:b5:99:49:66:8b:
7c:f7:41:ba:d3:18:31:23:5d:05:f9:e5:44:b9:25:
7a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D4:A5:47:D3:94:4A:F5:C1:D2:63:BF:1B:CE:46:61:0A:08:51:CC
X509v3 Authority Key Identifier:
keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c9:13:f3:fa:f8:cd:31:f8:8b:dc:31:67:a7:02:2f:d4:32:
e7:99:96:58:04:58:66:a7:e6:24:4d:47:35:05:43:74:1f:1a:
7a:45:ed:f7:4f:96:e1:a0:78:34:ce:21:a0:8b:f4:78:4b:21:
4b:02:f9:ee:c8:65:67:99:fe:ea:a1:81:8e:2f:3f:ef:c8:1a:
2f:8e:73:d4:b1:9b:49:e4:85:0a:57:9b:2d:28:f8:24:93:f3:
99:f5:ac:49:ea:c8:77:0f:07:82:8b:5f:00:fd:b6:46:fe:36:
e5:ea:3c:2d:39:00:0b:a4:f2:d1:a9:05:4f:14:2d:6e:6d:37:
5f:74:70:28:9b:57:a9:c8:6c:c7:9b:22:b9:ec:b4:19:b7:57:
cc:1a:c1:1d:a6:df:62:2a:05:96:3d:d8:79:08:63:41:c4:19:
36:82:3c:02:80:0a:db:16:15:27:fa:82:89:d8:14:dc:91:c8:
a0:d9:82:0b:b2:98:03:54:9a:52:ee:c9:05:cf:32:58:7d:e4:
f4:70:17:80:9a:3f:aa:78:10:57:8f:a2:3a:d3:25:9b:46:6f:
7b:8c:65:71:93:c6:d2:18:4a:25:4a:d0:0c:89:10:0a:8a:d9:
7e:95:e9:bc:5b:89:64:97:f0:de:fa:d1:ef:52:07:16:c1:36:
e3:d0:fb:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xq/40/GTe9lfwU9wo/ytMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NTRhYzRjN2Y0NTFjNWJiOTM4MmZiY2Q0NmQ3MGM0YzBm
OWRlNTYwHhcNMjUxMDE5MTQwMTQzWhcNMjUxMDIwMTQwMTQzWjAzMTEwLwYDVQQD
EygzMGQ0YTU0N2QzOTQ0YWY1YzFkMjYzYmYxYmNlNDY2MTBhMDg1MWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfpLjfTbxGDFBJUPKCtMTj8zsLkj
oMT+q9gULaDo7YtveKKroX5Fy6+XeBzBs8VqGH8cj48GuqFFz5CcXrV75F+b/lPe
W95eoqrIH41NhJfcVv9zNXZM0vcHifjEyLmDzIGzIFsUKMVhoiiQS5nEjoUTxUjk
qcHFhc79OoLiwcC/xKyC5nEZKQH6or48MfVfhV2AzHz/asfm/od7vyas7bbbZU2f
YktvRayHn/xtFT3Ps9UFAp1HTBsfLEbXE0DHjwr1PMyFxgu8uSQvnNVlxwZus58Q
kEHLJfzykmPknH6ZYzANT6HTh6zutZlJZot890G60xgxI10F+eVEuSV6awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDDUpUfTlEr1wdJjvxvORmEKCFHMMB8GA1UdIwQY
MBaAFHVUrEx/RRxbuTgvvNRtcMTA+d5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4Mjgt
ZDkzMzdkYjM5ZDFmLzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4MjgtZDkzMzdkYjM5ZDFm
LzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqskT8/r4
zTH4i9wxZ6cCL9Qy55mWWARYZqfmJE1HNQVDdB8aekXt90+W4aB4NM4hoIv0eEsh
SwL57shlZ5n+6qGBji8/78gaL45z1LGbSeSFClebLSj4JJPzmfWsSerIdw8Hgotf
AP22Rv425eo8LTkAC6Ty0akFTxQtbm03X3RwKJtXqchsx5siuey0GbdXzBrBHabf
YioFlj3YeQhjQcQZNoI8AoAK2xYVJ/qCidgU3JHIoNmCC7KYA1SaUu7JBc8yWH3k
9HAXgJo/qngQV4+iOtMlm0Zve4xlcZPG0hhKJUrQDIkQCorZfpXpvFuJZJfw3vrR
71IHFsE249D7VA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:45 2025 by rpki-client