Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
File: vAB4on8QAyY8TFYbAlB2by9Sbn0.mft (raw, json)
Hash identifier: I15Q2FGBMVa5feNtHI8R48KtJ7qYBNMGZfvTAyEJqXE=
Subject key identifier: 19:6F:AD:28:98:E4:25:F2:33:06:3C:9C:6B:55:22:C9:AC:88:22:6A
Authority key identifier: BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
Certificate issuer: /CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Certificate serial: 019A00DA6498439A71243823C419679D2D37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
Manifest number: 0483
Signing time: Mon 20 Oct 2025 09:01:43 +0000
Manifest this update: Mon 20 Oct 2025 09:01:43 +0000
Manifest next update: Tue 21 Oct 2025 09:01:43 +0000
Files and hashes: 1: U8RX6_Xhgd2rniYJPgiw5XhDM14.roa (hash: 2r/ZPIhIP4vgQHcp4lEFNmYb4WZmbuMJWG8eyE6HlfQ=)
2: vAB4on8QAyY8TFYbAlB2by9Sbn0.crl (hash: wLGZul3YDm7i+LF5wmS0oUtGoSXCQClpxbBn8Z9gmZw=)
3: vAZxSJwcgiBcI_82IoG7w0HDsHY.roa (hash: p3exCfpQFtu6+djLck5m9Ak9SIsL/faxVMijWb66KP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:64:98:43:9a:71:24:38:23:c4:19:67:9d:2d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Validity
Not Before: Oct 20 09:01:43 2025 GMT
Not After : Oct 21 09:01:43 2025 GMT
Subject: CN=196fad2898e425f233063c9c6b5522c9ac88226a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:37:04:b5:46:3a:3b:7b:a1:7b:16:49:18:46:
f6:99:67:84:10:3a:8f:b7:8d:3d:62:0f:b9:8d:bf:
3d:2c:bd:4a:5a:bc:22:82:e3:0f:46:d9:58:56:6c:
0b:f6:a3:5c:45:26:74:0d:0e:1e:63:05:e0:32:1d:
3c:bf:7c:24:7e:57:74:8c:3c:c6:62:52:e4:de:9d:
17:1e:0c:4c:d9:98:72:9b:0a:e5:4a:59:6c:52:5e:
75:d6:b3:5b:f4:1d:4f:97:02:76:62:b8:c4:ac:52:
46:26:45:fa:8d:99:5c:31:82:26:c4:a4:c4:45:8f:
e7:4f:7b:10:dd:20:47:6c:2e:e7:33:25:ef:a2:fc:
35:76:97:7a:45:3a:94:4c:90:80:ca:ac:b5:9c:78:
0f:f5:d5:91:07:78:3b:69:a9:f5:a5:ae:f5:52:f9:
09:51:c9:2b:7d:c8:80:56:0d:52:0a:4f:0c:df:36:
47:e1:e1:f3:a8:d7:86:35:91:98:24:61:4d:25:61:
30:b8:73:92:f4:42:f9:71:8c:23:ef:f1:9c:36:c5:
0c:60:ec:1c:1b:90:fd:b3:33:d0:8f:b8:e0:1d:34:
44:74:89:a7:61:71:6b:d7:51:26:f2:c2:6a:1b:d9:
a2:bd:e2:82:7b:a1:a7:db:dd:33:bc:b9:72:53:f4:
37:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6F:AD:28:98:E4:25:F2:33:06:3C:9C:6B:55:22:C9:AC:88:22:6A
X509v3 Authority Key Identifier:
keyid:BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:fb:65:c7:0a:0f:0f:84:33:a5:97:cb:0e:93:a1:f0:f8:3d:
e2:b5:0c:dd:2e:f5:0e:82:8e:cb:73:b6:a5:ec:d5:28:6c:90:
26:3e:4e:83:ee:b5:92:b4:3e:f7:a0:7f:a5:2e:c8:e2:15:84:
bb:3f:fb:56:aa:26:81:cc:84:90:c3:8f:ac:56:23:8e:10:29:
59:a1:72:11:1b:00:03:2d:52:a2:71:ca:17:58:cd:8a:7f:43:
31:f9:46:d1:ea:78:bd:94:cd:ad:9a:2e:e6:74:28:e1:1c:e5:
1f:5d:15:a0:9c:fb:50:71:fa:37:3f:ac:50:52:db:5d:e7:cd:
ef:39:7e:34:bc:00:fa:fb:e0:da:af:33:b9:ab:ac:de:21:27:
d0:51:13:0e:12:45:d9:42:fb:fe:f1:ae:30:c7:1b:9b:52:89:
39:07:34:09:60:e4:a9:00:b8:e0:73:a9:93:a1:34:c1:24:79:
2e:9f:37:41:07:06:1b:8a:a7:a1:b1:79:6a:92:e7:56:b2:c7:
c3:8b:d9:a1:00:50:7e:06:8f:06:08:7c:d4:e2:eb:50:ea:40:
93:2c:2e:fa:2b:35:3e:86:02:7c:4f:96:f2:40:2b:15:3b:f5:
ca:d6:e0:cb:69:80:55:52:1b:ba:66:f2:50:a4:09:c8:ea:03:
10:42:dd:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoA2mSYQ5pxJDgjxBlnnS03MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMDA3OGEyN2YxMDAzMjYzYzRjNTYxYjAyNTA3NjZmMmY1
MjZlN2QwHhcNMjUxMDIwMDkwMTQzWhcNMjUxMDIxMDkwMTQzWjAzMTEwLwYDVQQD
EygxOTZmYWQyODk4ZTQyNWYyMzMwNjNjOWM2YjU1MjJjOWFjODgyMjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzcEtUY6O3uhexZJGEb2mWeEEDqP
t409Yg+5jb89LL1KWrwiguMPRtlYVmwL9qNcRSZ0DQ4eYwXgMh08v3wkfld0jDzG
YlLk3p0XHgxM2ZhymwrlSllsUl511rNb9B1PlwJ2YrjErFJGJkX6jZlcMYImxKTE
RY/nT3sQ3SBHbC7nMyXvovw1dpd6RTqUTJCAyqy1nHgP9dWRB3g7aan1pa71UvkJ
UckrfciAVg1SCk8M3zZH4eHzqNeGNZGYJGFNJWEwuHOS9EL5cYwj7/GcNsUMYOwc
G5D9szPQj7jgHTREdImnYXFr11Em8sJqG9miveKCe6Gn290zvLlyU/Q3WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBlvrSiY5CXyMwY8nGtVIsmsiCJqMB8GA1UdIwQY
MBaAFLwAeKJ/EAMmPExWGwJQdm8vUm59MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkFCNG9uOFFBeVk4VEZZYkFsQjJieTlTYm4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9jMTViYTctZDgyZi00ZGRhLTkwM2Mt
YzE0YWFjNDFhMWMyLzEvdkFCNG9uOFFBeVk4VEZZYkFsQjJieTlTYm4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9jMTViYTctZDgyZi00ZGRhLTkwM2MtYzE0YWFjNDFhMWMy
LzEvdkFCNG9uOFFBeVk4VEZZYkFsQjJieTlTYm4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIPtlxwoP
D4QzpZfLDpOh8Pg94rUM3S71DoKOy3O2pezVKGyQJj5Og+61krQ+96B/pS7I4hWE
uz/7VqomgcyEkMOPrFYjjhApWaFyERsAAy1SonHKF1jNin9DMflG0ep4vZTNrZou
5nQo4RzlH10VoJz7UHH6Nz+sUFLbXefN7zl+NLwA+vvg2q8zuaus3iEn0FETDhJF
2UL7/vGuMMcbm1KJOQc0CWDkqQC44HOpk6E0wSR5Lp83QQcGG4qnobF5apLnVrLH
w4vZoQBQfgaPBgh81OLrUOpAkywu+is1PoYCfE+W8kArFTv1ytbgy2mAVVIbumby
UKQJyOoDEELd4g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:08:39 2025 by rpki-client