Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.mft
File: V4BBFS34D25TE0JmPdADEJkFCE8.mft (raw, json)
Hash identifier: NZFIITHR/P7P5EcwlOXuf9ajUWqGDudURZWRqHrBW7g=
Subject key identifier: 3A:87:FC:06:F7:15:77:E5:07:A6:6B:0A:43:F9:60:AA:13:ED:99:02
Authority key identifier: 57:80:41:15:2D:F8:0F:6E:53:13:42:66:3D:D0:03:10:99:05:08:4F
Certificate issuer: /CN=578041152df80f6e531342663dd003109905084f
Certificate serial: 0199FC218F1C7BA8C66844A4DC9FBDE17DCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V4BBFS34D25TE0JmPdADEJkFCE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.mft
Manifest number: 0904
Signing time: Sun 19 Oct 2025 11:01:21 +0000
Manifest this update: Sun 19 Oct 2025 11:01:21 +0000
Manifest next update: Mon 20 Oct 2025 11:01:21 +0000
Files and hashes: 1: RQstJ5Hzf4lSSJD1OevGZxAEWkw.roa (hash: DKmpWhYiScUgITQkVLFk78lbIWZwU/oZxtOXJ3y76t0=)
2: V4BBFS34D25TE0JmPdADEJkFCE8.crl (hash: bKIfNOcGYHyhfb3Lce9M25f2bP3nZKCLBbjMbJbTo+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/V4BBFS34D25TE0JmPdADEJkFCE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:8f:1c:7b:a8:c6:68:44:a4:dc:9f:bd:e1:7d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578041152df80f6e531342663dd003109905084f
Validity
Not Before: Oct 19 11:01:21 2025 GMT
Not After : Oct 20 11:01:21 2025 GMT
Subject: CN=3a87fc06f71577e507a66b0a43f960aa13ed9902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2e:98:90:4c:08:82:4c:51:7d:95:34:99:a7:
28:6e:b6:50:2a:ea:c5:70:fb:9f:0c:12:0a:69:88:
91:62:0a:1a:ba:74:df:43:59:dd:3a:9b:4c:53:56:
8a:b3:88:65:8c:c5:8f:9b:4e:d9:77:b7:52:f0:3f:
fd:96:a9:05:e7:65:30:0d:d9:5f:08:9f:ac:60:db:
3f:da:f6:8b:01:d5:4f:05:bb:f2:b5:c2:18:59:6b:
45:4f:64:64:77:c7:d9:97:25:02:b2:e0:c2:8d:79:
fe:3b:2c:34:e9:66:e3:d0:da:68:1d:46:79:5f:e0:
a6:49:7c:6d:fa:77:fb:90:f8:59:df:65:20:8f:e9:
01:22:8b:24:e6:61:33:c4:73:d3:17:28:83:69:8f:
a3:09:d5:dc:be:71:19:47:b9:88:cc:48:75:99:9d:
1e:3f:df:79:bc:ad:c4:fe:73:aa:02:80:d6:2a:f5:
6d:44:c3:a9:77:ef:1a:a8:04:1b:9e:41:13:2d:1b:
04:96:25:28:70:e8:9a:89:37:66:6f:54:8b:76:60:
ed:9c:05:4e:ae:18:fa:de:14:4d:62:56:16:8d:df:
8b:32:26:b8:59:4a:27:19:71:4d:03:21:10:67:b5:
02:8f:dc:65:51:7e:de:01:82:f4:7b:9e:e6:c0:47:
d9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:87:FC:06:F7:15:77:E5:07:A6:6B:0A:43:F9:60:AA:13:ED:99:02
X509v3 Authority Key Identifier:
keyid:57:80:41:15:2D:F8:0F:6E:53:13:42:66:3D:D0:03:10:99:05:08:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V4BBFS34D25TE0JmPdADEJkFCE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:63:db:8d:fa:92:9a:61:14:e8:40:45:02:92:9a:5b:c1:81:
de:3c:0c:0b:72:dd:d7:93:b9:92:e0:25:29:9f:63:ef:64:47:
63:af:2e:e4:07:76:e5:97:a2:f9:e5:8d:11:57:0b:65:92:d5:
d0:f4:32:76:9b:86:98:6f:b9:8c:1d:35:a2:7a:58:f9:58:dd:
0b:38:2d:d2:b2:e8:5d:3f:f5:e3:ff:9f:e9:4d:98:69:ed:15:
c0:8c:78:eb:f4:16:33:1d:bf:07:fe:82:75:a5:0f:63:ff:67:
d4:61:b6:d6:1c:7d:8b:6f:e8:7d:e6:63:02:7f:0a:66:33:ac:
e6:8c:b6:9a:00:ef:3d:97:eb:01:3d:e3:e1:4b:ca:87:f9:bc:
cb:95:c7:d9:74:87:61:af:fd:a0:b3:2d:d2:a3:ac:be:be:5a:
87:ab:e5:b1:cd:8f:3d:85:82:63:27:27:08:cc:a0:27:28:50:
e6:d2:9c:60:01:e5:4d:a4:41:0e:5b:67:79:68:6b:f7:b7:04:
16:82:db:fe:8d:81:0c:95:3c:b8:7a:1b:c9:78:46:c3:bb:bc:
ae:1b:1e:46:13:b7:49:28:bc:ac:56:2a:c8:b1:ef:5c:bf:01:
0b:4d:f0:96:a2:e9:ef:c0:6d:5d:45:5e:9b:6a:c3:05:8c:c2:
2f:5c:eb:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IY8ce6jGaESk3J+94X3MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ODA0MTE1MmRmODBmNmU1MzEzNDI2NjNkZDAwMzEwOTkw
NTA4NGYwHhcNMjUxMDE5MTEwMTIxWhcNMjUxMDIwMTEwMTIxWjAzMTEwLwYDVQQD
EygzYTg3ZmMwNmY3MTU3N2U1MDdhNjZiMGE0M2Y5NjBhYTEzZWQ5OTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApy6YkEwIgkxRfZU0macobrZQKurF
cPufDBIKaYiRYgoaunTfQ1ndOptMU1aKs4hljMWPm07Zd7dS8D/9lqkF52UwDdlf
CJ+sYNs/2vaLAdVPBbvytcIYWWtFT2Rkd8fZlyUCsuDCjXn+Oyw06Wbj0NpoHUZ5
X+CmSXxt+nf7kPhZ32Ugj+kBIosk5mEzxHPTFyiDaY+jCdXcvnEZR7mIzEh1mZ0e
P995vK3E/nOqAoDWKvVtRMOpd+8aqAQbnkETLRsEliUocOiaiTdmb1SLdmDtnAVO
rhj63hRNYlYWjd+LMia4WUonGXFNAyEQZ7UCj9xlUX7eAYL0e57mwEfZawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqH/Ab3FXflB6ZrCkP5YKoT7ZkCMB8GA1UdIwQY
MBaAFFeAQRUt+A9uUxNCZj3QAxCZBQhPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjRCQkZTMzREMjVURTBKbVBkQURFSmtGQ0U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hZmExZWUtOGQ4MC00ZDVhLWE3Mzkt
YzYxMmE3MGFiYjQyLzEvVjRCQkZTMzREMjVURTBKbVBkQURFSmtGQ0U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hZmExZWUtOGQ4MC00ZDVhLWE3MzktYzYxMmE3MGFiYjQy
LzEvVjRCQkZTMzREMjVURTBKbVBkQURFSmtGQ0U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3WPbjfqS
mmEU6EBFApKaW8GB3jwMC3Ld15O5kuAlKZ9j72RHY68u5Ad25Zei+eWNEVcLZZLV
0PQydpuGmG+5jB01onpY+VjdCzgt0rLoXT/14/+f6U2Yae0VwIx46/QWMx2/B/6C
daUPY/9n1GG21hx9i2/ofeZjAn8KZjOs5oy2mgDvPZfrAT3j4UvKh/m8y5XH2XSH
Ya/9oLMt0qOsvr5ah6vlsc2PPYWCYycnCMygJyhQ5tKcYAHlTaRBDltneWhr97cE
FoLb/o2BDJU8uHobyXhGw7u8rhseRhO3SSi8rFYqyLHvXL8BC03wlqLp78BtXUVe
m2rDBYzCL1zrkg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:18 2025 by rpki-client