Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
File: v9gcqQzFIkWGr-urHHixeQJo1cE.mft (raw, json)
Hash identifier: YBOO3+VK0qTeNyZ/JIvcZNl4LdW5VXjP2s+/UqmxZUc=
Subject key identifier: AA:79:73:8C:F8:2A:4E:B4:C2:15:1C:E9:C3:62:1C:AD:CF:25:9F:2A
Authority key identifier: BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
Certificate issuer: /CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Certificate serial: 0199FB45C8C8F876FB23EC873F9DD96FCB1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 07:01:18 +0000
Manifest this update: Sun 19 Oct 2025 07:01:18 +0000
Manifest next update: Mon 20 Oct 2025 07:01:18 +0000
Files and hashes: 1: 9UunLY0e7RvMMeMDRjD3u7_pf2Y.roa (hash: 7lRPIrPRKCCE3BPTd9dDNpxXDgXsPWg+ml+ju6JbueA=)
2: ncR4oR_y2D6exGXXU4466Dj_Hq0.roa (hash: QHWP1FBTjP+R0Pof3RRPjusJf04L/sCOEBJrDKRdhZ4=)
3: rOoYFHKRe7ghGBjkeruHV6kIlyA.roa (hash: elXY8PrAbFgsd98hRj7mkOX8iG0smL3sFgAD/6xBNtE=)
4: v9gcqQzFIkWGr-urHHixeQJo1cE.crl (hash: yBuUD7lAm6QruWlwjp4C9CMVnoBUyL6Kc9qePuRkV1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:c8:c8:f8:76:fb:23:ec:87:3f:9d:d9:6f:cb:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Validity
Not Before: Oct 19 07:01:18 2025 GMT
Not After : Oct 20 07:01:18 2025 GMT
Subject: CN=aa79738cf82a4eb4c2151ce9c3621cadcf259f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1b:5d:64:a3:da:5a:7e:ff:23:db:98:47:79:
38:05:7b:f9:8f:db:56:35:1f:7d:46:5a:c5:34:f8:
8b:6b:fb:78:8a:cd:ea:87:bf:e8:b2:be:04:d2:c0:
43:24:ef:1b:18:73:02:8b:16:b8:df:c1:23:44:22:
7e:bc:37:df:df:3d:51:ad:20:93:1b:52:43:d7:19:
f4:f4:be:cf:2a:4d:6e:69:cd:e2:99:33:46:a6:d6:
96:ab:86:1f:ba:ea:c0:65:68:f6:15:3e:df:08:e8:
6b:f1:36:9c:2c:ea:9c:be:90:88:eb:63:a2:50:b7:
76:f6:44:b8:be:a2:b4:1b:8e:bc:0d:f8:ca:23:c7:
44:99:b7:c0:75:b6:7c:85:23:7d:7e:52:1e:11:1c:
bf:34:6e:0f:05:55:c4:7d:76:d8:e2:21:52:75:c9:
8b:4f:50:9e:18:e2:95:9c:49:77:9f:f1:df:19:70:
bf:2e:55:ca:d3:e3:b4:cf:d6:89:5d:81:2d:4e:09:
b7:d7:08:05:e3:6d:b9:d7:89:fd:9a:84:c1:7d:65:
3b:bb:35:7c:5e:24:e0:de:07:24:e7:e3:1b:6f:2c:
23:f8:bd:4e:b6:8d:2f:f5:a0:6b:18:1d:5d:d0:df:
ba:25:3e:22:a6:c8:e1:38:4e:cc:f3:1e:f2:d2:8c:
b7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:79:73:8C:F8:2A:4E:B4:C2:15:1C:E9:C3:62:1C:AD:CF:25:9F:2A
X509v3 Authority Key Identifier:
keyid:BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:32:d8:51:c6:c6:c5:b2:fb:2b:d0:e7:96:66:a8:36:77:d8:
75:5d:84:8d:1b:37:fe:56:18:a1:87:f1:24:73:fe:02:c1:a2:
19:0b:1a:05:92:af:02:f4:e8:ff:42:4f:49:15:03:7e:ca:de:
24:10:b5:66:ff:4e:aa:0a:61:6b:af:1e:34:f7:90:67:a7:49:
c2:09:d0:0a:51:7b:42:d1:10:97:75:cc:30:93:57:8e:b7:4e:
2f:bd:49:3e:7d:78:f1:60:bc:6e:72:1c:79:1d:68:5c:c8:a0:
3e:08:4b:33:5a:53:8b:c1:d7:42:27:e8:c5:51:4d:e8:2b:ba:
a4:fd:a4:73:17:ad:4c:d5:32:38:42:16:7c:5a:52:2f:83:ed:
b9:0e:e0:e0:bd:9b:d3:45:ad:27:0c:97:5e:45:f6:b9:02:4e:
f4:d1:ea:1d:ed:02:96:83:e9:5a:c7:b6:da:5d:54:a2:61:47:
e1:76:e3:e6:68:ab:5b:b6:fe:79:3c:ed:11:e7:19:d6:2a:3b:
13:8c:2a:d5:98:95:cf:a3:54:2b:b0:28:3c:47:0f:08:9e:06:
e6:c5:4e:25:b4:78:98:69:2a:39:81:2d:23:2e:70:53:43:28:
11:02:1e:34:54:55:87:da:83:52:1c:35:55:72:12:2d:e0:9b:
07:3c:b0:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RcjI+Hb7I+yHP53Zb8sbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZDgxY2E5MGNjNTIyNDU4NmFmZWJhYjFjNzhiMTc5MDI2
OGQ1YzEwHhcNMjUxMDE5MDcwMTE4WhcNMjUxMDIwMDcwMTE4WjAzMTEwLwYDVQQD
EyhhYTc5NzM4Y2Y4MmE0ZWI0YzIxNTFjZTljMzYyMWNhZGNmMjU5ZjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRtdZKPaWn7/I9uYR3k4BXv5j9tW
NR99RlrFNPiLa/t4is3qh7/osr4E0sBDJO8bGHMCixa438EjRCJ+vDff3z1RrSCT
G1JD1xn09L7PKk1uac3imTNGptaWq4YfuurAZWj2FT7fCOhr8TacLOqcvpCI62Oi
ULd29kS4vqK0G468DfjKI8dEmbfAdbZ8hSN9flIeERy/NG4PBVXEfXbY4iFSdcmL
T1CeGOKVnEl3n/HfGXC/LlXK0+O0z9aJXYEtTgm31wgF422514n9moTBfWU7uzV8
XiTg3gck5+Mbbywj+L1Oto0v9aBrGB1d0N+6JT4ipsjhOE7M8x7y0oy3dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKp5c4z4Kk60whUc6cNiHK3PJZ8qMB8GA1UdIwQY
MBaAFL/YHKkMxSJFhq/rqxx4sXkCaNXBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjlnY3FRekZJa1dHci11ckhIaXhlUUpvMWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8yNWE1OWMtYzJmYy00ZmQ0LTk2Zjct
ODRhZGNiZjVhYzU1LzEvdjlnY3FRekZJa1dHci11ckhIaXhlUUpvMWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8yNWE1OWMtYzJmYy00ZmQ0LTk2ZjctODRhZGNiZjVhYzU1
LzEvdjlnY3FRekZJa1dHci11ckhIaXhlUUpvMWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQDLYUcbG
xbL7K9DnlmaoNnfYdV2EjRs3/lYYoYfxJHP+AsGiGQsaBZKvAvTo/0JPSRUDfsre
JBC1Zv9Oqgpha68eNPeQZ6dJwgnQClF7QtEQl3XMMJNXjrdOL71JPn148WC8bnIc
eR1oXMigPghLM1pTi8HXQifoxVFN6Cu6pP2kcxetTNUyOEIWfFpSL4PtuQ7g4L2b
00WtJwyXXkX2uQJO9NHqHe0CloPpWse22l1UomFH4Xbj5mirW7b+eTztEecZ1io7
E4wq1ZiVz6NUK7AoPEcPCJ4G5sVOJbR4mGkqOYEtIy5wU0MoEQIeNFRVh9qDUhw1
VXISLeCbBzywVg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:16 2025 by rpki-client