Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft
File: V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft (raw, json)
Hash identifier: mwiNq21WavhhXy9ilbxIga72HsgvsEzzOAEPO7cCL0E=
Subject key identifier: 79:11:07:AB:C1:29:87:2F:7F:14:02:3A:F0:2F:C4:45:BD:27:B2:40
Authority key identifier: 57:D0:B8:61:AF:B1:25:B8:BC:13:96:9D:0B:49:73:4C:E8:44:BD:6A
Certificate issuer: /CN=57d0b861afb125b8bc13969d0b49734ce844bd6a
Certificate serial: 0199FDDA5FFFE38319D9D74709FA8F632EE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9C4Ya-xJbi8E5adC0lzTOhEvWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft
Manifest number: 01FB
Signing time: Sun 19 Oct 2025 19:02:50 +0000
Manifest this update: Sun 19 Oct 2025 19:02:50 +0000
Manifest next update: Mon 20 Oct 2025 19:02:50 +0000
Files and hashes: 1: 1-of8pnTOP0J8yCsHZmocQfT7mIM.roa (hash: 0Lq0vU+tQx9q/SkpzGWQvm0P7tr0nnJgKO8aL6LRtlo=)
2: 1MA9viEbnkqns-jv1uGgSDf_hss.roa (hash: B67bul7AJskFHt7w3WE7vDo8ygcPvZu9TvB+6EzuGlE=)
3: V9C4Ya-xJbi8E5adC0lzTOhEvWo.crl (hash: vF4T6/S4SUv7DJV3E7ss4wW775/PIH0qD3p0G3ooDQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/V9C4Ya-xJbi8E5adC0lzTOhEvWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:5f:ff:e3:83:19:d9:d7:47:09:fa:8f:63:2e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57d0b861afb125b8bc13969d0b49734ce844bd6a
Validity
Not Before: Oct 19 19:02:50 2025 GMT
Not After : Oct 20 19:02:50 2025 GMT
Subject: CN=791107abc129872f7f14023af02fc445bd27b240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e3:18:8f:2f:18:d2:b7:dc:29:28:d3:e1:39:
01:b0:0a:22:36:ce:84:24:bb:44:86:b1:6b:e2:bb:
28:e4:cb:b5:55:b9:72:67:0b:8e:76:9a:91:58:47:
24:4f:13:33:94:9a:71:e2:f0:02:bf:e3:10:79:24:
18:7a:60:75:f8:69:4f:dd:70:e2:86:bc:14:c2:de:
4f:48:00:0a:59:ff:90:09:65:50:96:af:f4:cc:b1:
90:96:74:ea:59:a3:a5:76:de:eb:7d:b4:82:32:9a:
50:c8:af:b1:e8:1b:70:10:c3:d9:6d:08:1c:56:9a:
1e:04:11:5d:33:79:e1:83:e9:7a:24:24:f3:4e:c1:
6c:64:30:bb:a5:f7:7e:10:a5:82:d7:1b:3e:9d:3e:
2c:d1:10:8e:da:15:7a:80:b8:84:73:c2:70:c9:25:
c3:54:7a:03:61:82:4e:5d:f8:fb:21:06:be:3d:6d:
f2:b5:71:db:c2:4b:cc:85:ac:61:3e:06:a5:ec:ed:
e6:3f:f6:21:1e:89:2d:ff:7b:9c:e3:de:55:60:5d:
3e:f5:19:c9:77:f9:b3:27:10:5d:ef:f2:64:db:95:
c4:1a:95:25:21:71:8b:7c:b1:28:f3:dc:f9:4d:90:
f5:c8:9f:8e:d5:7e:16:15:c5:97:39:dd:d5:cf:68:
8c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:11:07:AB:C1:29:87:2F:7F:14:02:3A:F0:2F:C4:45:BD:27:B2:40
X509v3 Authority Key Identifier:
keyid:57:D0:B8:61:AF:B1:25:B8:BC:13:96:9D:0B:49:73:4C:E8:44:BD:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9C4Ya-xJbi8E5adC0lzTOhEvWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:06:06:0e:df:8b:93:4a:84:df:40:bd:e0:b1:bc:5d:bb:3c:
6f:6a:3b:23:de:eb:1f:9f:6f:61:9f:85:ba:64:ee:10:5c:95:
23:b7:b2:b6:99:16:6f:03:a2:bd:d5:7b:d2:ae:0c:b7:44:44:
0b:c6:47:1f:c5:18:29:39:3e:ca:e9:d5:8d:9e:66:f4:f4:8f:
b8:4e:c4:46:e3:db:c7:47:ea:36:c3:24:ea:09:69:06:8f:03:
0f:e9:de:54:d1:45:26:9d:92:7a:1d:b1:2b:83:75:90:ce:4d:
4a:2b:59:e6:4a:9e:72:fc:4a:27:70:a1:c4:a1:71:24:b0:30:
90:61:d9:34:07:49:30:2d:f0:94:f6:ce:c6:b2:f0:eb:31:a1:
3a:d9:1a:e8:2e:4d:5e:5b:df:32:6d:af:fa:7d:e0:f4:33:27:
79:d8:66:a3:0d:1d:6c:b5:df:52:ac:a3:25:9e:06:3b:7f:b5:
e6:5c:68:85:7a:b3:95:c9:5d:84:66:34:20:54:10:7b:ba:01:
ee:cf:d4:9d:32:c1:d0:cb:30:64:7b:65:af:60:cc:25:4d:cb:
87:51:8f:4e:ed:08:39:c9:88:1c:44:b8:04:0a:6b:79:62:d0:
93:07:62:9a:3a:a3:90:76:43:74:58:c5:d5:9f:0a:f4:05:a0:
c2:f4:3c:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92l//44MZ2ddHCfqPYy7oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZDBiODYxYWZiMTI1YjhiYzEzOTY5ZDBiNDk3MzRjZTg0
NGJkNmEwHhcNMjUxMDE5MTkwMjUwWhcNMjUxMDIwMTkwMjUwWjAzMTEwLwYDVQQD
Eyg3OTExMDdhYmMxMjk4NzJmN2YxNDAyM2FmMDJmYzQ0NWJkMjdiMjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eMYjy8Y0rfcKSjT4TkBsAoiNs6E
JLtEhrFr4rso5Mu1VblyZwuOdpqRWEckTxMzlJpx4vACv+MQeSQYemB1+GlP3XDi
hrwUwt5PSAAKWf+QCWVQlq/0zLGQlnTqWaOldt7rfbSCMppQyK+x6BtwEMPZbQgc
VpoeBBFdM3nhg+l6JCTzTsFsZDC7pfd+EKWC1xs+nT4s0RCO2hV6gLiEc8JwySXD
VHoDYYJOXfj7IQa+PW3ytXHbwkvMhaxhPgal7O3mP/YhHokt/3uc495VYF0+9RnJ
d/mzJxBd7/Jk25XEGpUlIXGLfLEo89z5TZD1yJ+O1X4WFcWXOd3Vz2iMuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkRB6vBKYcvfxQCOvAvxEW9J7JAMB8GA1UdIwQY
MBaAFFfQuGGvsSW4vBOWnQtJc0zoRL1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjlDNFlhLXhKYmk4RTVhZEMwbHpUT2hFdldvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8wOWVlNjYtNjY3ZS00Y2Q0LWI0ZmEt
Zjg2MmZkZmEzYjkzLzEvVjlDNFlhLXhKYmk4RTVhZEMwbHpUT2hFdldvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8wOWVlNjYtNjY3ZS00Y2Q0LWI0ZmEtZjg2MmZkZmEzYjkz
LzEvVjlDNFlhLXhKYmk4RTVhZEMwbHpUT2hFdldvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYAYGDt+L
k0qE30C94LG8Xbs8b2o7I97rH59vYZ+FumTuEFyVI7eytpkWbwOivdV70q4Mt0RE
C8ZHH8UYKTk+yunVjZ5m9PSPuE7ERuPbx0fqNsMk6glpBo8DD+neVNFFJp2Seh2x
K4N1kM5NSitZ5kqecvxKJ3ChxKFxJLAwkGHZNAdJMC3wlPbOxrLw6zGhOtka6C5N
XlvfMm2v+n3g9DMnedhmow0dbLXfUqyjJZ4GO3+15lxohXqzlcldhGY0IFQQe7oB
7s/UnTLB0MswZHtlr2DMJU3Lh1GPTu0IOcmIHES4BApreWLQkwdimjqjkHZDdFjF
1Z8K9AWgwvQ85g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:36 2025 by rpki-client