Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
File: acp8FyMtsGNJHPpYUgM2n_vrdu0.mft (raw, json)
Hash identifier: v/YqQlSwoW8Uxi7U84eDv5N7WiX2/Cwcxn4Ld7LwBoU=
Subject key identifier: F9:19:D9:94:F7:A8:46:08:40:21:82:B5:F2:5D:C2:30:49:9A:2F:DD
Authority key identifier: 69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
Certificate issuer: /CN=69ca7c17232db063491cfa585203369ffbeb76ed
Certificate serial: 0199FFFE9341A40FDB1097E1B153D705E3FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 05:01:37 +0000
Manifest this update: Mon 20 Oct 2025 05:01:37 +0000
Manifest next update: Tue 21 Oct 2025 05:01:37 +0000
Files and hashes: 1: RkLlZjAasSrGiOmklIx_O-q25zk.roa (hash: Gwgv1/PPnszGyK+vUndl8BVc2mtdNprpDuh7CKowocQ=)
2: acp8FyMtsGNJHPpYUgM2n_vrdu0.crl (hash: OG42RKWXKa2O+dQ/Wg7VgcymxIQcMs9FJwswqV4gDWo=)
3: iLjCLg8Y0QSYNaQ0b-3HMIIKDDY.roa (hash: KCNb4IsFzC9RfJdx7AFbupcSXkYx7SjrNORvTA5EESA=)
4: jyBvJ0cOfKi9WwiQt60pyraI-oY.roa (hash: y3Y58DOqvcc4jvZsYybVxfvwXagMIIOulZAsS9iNgBc=)
5: s9L9BNwHKJhVemHf55wRw3Mdhbk.roa (hash: beDBJWuacokDomSZPce/uodduuYfGqhfMVgZDVtONCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:93:41:a4:0f:db:10:97:e1:b1:53:d7:05:e3:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69ca7c17232db063491cfa585203369ffbeb76ed
Validity
Not Before: Oct 20 05:01:37 2025 GMT
Not After : Oct 21 05:01:37 2025 GMT
Subject: CN=f919d994f7a84608402182b5f25dc230499a2fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a1:cc:8e:03:81:a8:e5:e5:69:f1:c2:a6:13:
d7:9d:d2:c6:78:37:4e:bc:96:8a:95:fc:75:94:0b:
89:bb:6c:a4:d7:79:7c:6e:13:9a:70:8d:f6:3b:df:
7b:62:24:1b:12:e5:ef:f7:e9:fe:bb:c2:ce:af:bd:
9d:2b:9c:83:72:df:24:00:e2:bf:ad:5c:93:99:68:
91:de:08:35:b4:29:cb:0b:36:2d:29:6d:8f:62:70:
3f:db:b7:29:ef:15:16:89:2f:04:88:eb:39:73:7a:
fa:02:ef:05:17:d5:5f:5e:7b:f2:8b:be:56:fd:c1:
97:bd:8d:fa:ab:bd:70:47:ee:7f:d5:cf:ad:33:71:
ef:b1:86:ac:d3:e7:2b:3a:e3:94:83:94:b1:e0:e6:
20:8e:8e:87:da:49:e9:08:22:21:d6:53:93:23:35:
d3:0c:d8:32:79:90:cc:7c:70:7e:82:3b:b7:9a:dc:
c3:47:06:08:2e:ce:1d:4e:37:72:8e:50:4c:1c:dc:
24:c2:f7:d8:d8:85:0f:90:79:88:99:61:9f:2d:b3:
93:bd:0d:46:48:37:f3:61:e1:dc:d4:53:2b:4d:16:
26:1f:a0:00:fa:71:6d:9e:6f:ba:aa:79:a1:b4:89:
94:a4:ff:f6:9d:b7:12:59:0b:93:33:b1:63:37:59:
72:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:19:D9:94:F7:A8:46:08:40:21:82:B5:F2:5D:C2:30:49:9A:2F:DD
X509v3 Authority Key Identifier:
keyid:69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ad:46:7f:b3:97:c9:94:22:88:7c:82:d4:b8:52:be:f6:96:
8a:cb:71:b9:6f:e4:0b:9a:09:52:ac:c1:73:34:1a:c4:23:4d:
bd:86:06:bb:fe:0d:59:52:d4:2a:ff:72:07:54:dc:94:c8:70:
b2:2a:f1:c6:9e:01:dc:36:8c:dc:17:66:82:02:31:59:28:cf:
70:59:cd:72:1b:3a:bf:71:b8:93:18:e2:81:96:f7:2e:94:83:
f5:59:93:62:be:33:04:16:50:f0:09:d8:ae:74:01:f5:77:58:
5c:6c:8f:11:e6:fb:39:d9:2d:f1:ab:d7:f9:3e:57:48:f7:76:
9e:d5:b9:39:7f:7a:aa:04:59:b7:d3:c6:cc:29:dc:61:e0:6b:
36:38:5a:90:27:2f:18:27:7f:32:72:1e:87:29:b0:ed:3c:1f:
e1:85:d4:9e:46:24:6e:88:b7:df:8c:56:15:42:da:c4:c7:ea:
24:1b:8c:f3:66:ad:bf:e3:d1:28:cf:f7:e1:f2:4e:d8:fe:e3:
66:d5:cf:1c:65:9b:e8:4e:89:8c:45:64:ca:ef:8a:6f:ce:b0:
60:16:54:63:4e:62:ac:54:0e:31:0e:f7:34:7e:ad:76:5a:76:
f4:54:83:c5:90:44:b0:2d:43:89:ed:6f:d5:b9:3f:a2:10:8f:
8c:fe:88:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn//pNBpA/bEJfhsVPXBeP6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5Y2E3YzE3MjMyZGIwNjM0OTFjZmE1ODUyMDMzNjlmZmJl
Yjc2ZWQwHhcNMjUxMDIwMDUwMTM3WhcNMjUxMDIxMDUwMTM3WjAzMTEwLwYDVQQD
EyhmOTE5ZDk5NGY3YTg0NjA4NDAyMTgyYjVmMjVkYzIzMDQ5OWEyZmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaHMjgOBqOXlafHCphPXndLGeDdO
vJaKlfx1lAuJu2yk13l8bhOacI32O997YiQbEuXv9+n+u8LOr72dK5yDct8kAOK/
rVyTmWiR3gg1tCnLCzYtKW2PYnA/27cp7xUWiS8EiOs5c3r6Au8FF9VfXnvyi75W
/cGXvY36q71wR+5/1c+tM3HvsYas0+crOuOUg5Sx4OYgjo6H2knpCCIh1lOTIzXT
DNgyeZDMfHB+gju3mtzDRwYILs4dTjdyjlBMHNwkwvfY2IUPkHmImWGfLbOTvQ1G
SDfzYeHc1FMrTRYmH6AA+nFtnm+6qnmhtImUpP/2nbcSWQuTM7FjN1lyuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkZ2ZT3qEYIQCGCtfJdwjBJmi/dMB8GA1UdIwQY
MBaAFGnKfBcjLbBjSRz6WFIDNp/763btMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iZmI0MjMtZGE2OS00MjY1LTk1ZTUt
ZjQ3YWU3ZGRhZWMwLzEvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9iZmI0MjMtZGE2OS00MjY1LTk1ZTUtZjQ3YWU3ZGRhZWMw
LzEvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO61Gf7OX
yZQiiHyC1LhSvvaWistxuW/kC5oJUqzBczQaxCNNvYYGu/4NWVLUKv9yB1TclMhw
sirxxp4B3DaM3BdmggIxWSjPcFnNchs6v3G4kxjigZb3LpSD9VmTYr4zBBZQ8AnY
rnQB9XdYXGyPEeb7Odkt8avX+T5XSPd2ntW5OX96qgRZt9PGzCncYeBrNjhakCcv
GCd/MnIehymw7Twf4YXUnkYkboi334xWFULaxMfqJBuM82atv+PRKM/34fJO2P7j
ZtXPHGWb6E6JjEVkyu+Kb86wYBZUY05irFQOMQ73NH6tdlp29FSDxZBEsC1Die1v
1bk/ohCPjP6IQw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:52:18 2025 by rpki-client