Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.mft
File: V7u8R7HGflV76rDyxtGL8CbDBuA.mft (raw, json)
Hash identifier: axcVnL/S4Ay/yWbvLhT3Djb49LoMVoaY8sVgWIFcYZE=
Subject key identifier: E6:4E:EC:2A:E8:45:65:C0:1B:A8:F9:3D:9F:AC:63:15:94:E8:D9:07
Authority key identifier: 57:BB:BC:47:B1:C6:7E:55:7B:EA:B0:F2:C6:D1:8B:F0:26:C3:06:E0
Certificate issuer: /CN=57bbbc47b1c67e557beab0f2c6d18bf026c306e0
Certificate serial: 0199FC58500DD49B869347D325DC0E7FF1D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7u8R7HGflV76rDyxtGL8CbDBuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.mft
Manifest number: 06A0
Signing time: Sun 19 Oct 2025 12:01:10 +0000
Manifest this update: Sun 19 Oct 2025 12:01:10 +0000
Manifest next update: Mon 20 Oct 2025 12:01:10 +0000
Files and hashes: 1: IN75Wo0DtghUohhXp1U5nsAv_wI.roa (hash: nJLnAhkfX/7UpoKrRsvnQaA4L9D5o2XedZEPGYHEFLA=)
2: V7u8R7HGflV76rDyxtGL8CbDBuA.crl (hash: RcS/Z0laKgdDJIbqx/+FLsJ1kOLxaHAzMGAo9tnVsBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/V7u8R7HGflV76rDyxtGL8CbDBuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:50:0d:d4:9b:86:93:47:d3:25:dc:0e:7f:f1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57bbbc47b1c67e557beab0f2c6d18bf026c306e0
Validity
Not Before: Oct 19 12:01:10 2025 GMT
Not After : Oct 20 12:01:10 2025 GMT
Subject: CN=e64eec2ae84565c01ba8f93d9fac631594e8d907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:62:22:70:a1:8c:9b:42:91:21:fb:f4:69:a6:
57:46:05:de:76:b5:65:11:02:2d:33:bf:7a:de:67:
a5:ac:c4:d6:3a:1f:35:a7:91:d4:44:63:e8:1a:55:
d8:6f:3c:d5:5f:2b:87:9a:f6:de:dd:3f:c8:39:5e:
63:0f:db:18:24:24:41:b2:36:0d:84:81:19:e4:4e:
7f:0e:65:62:cc:6b:31:fc:a7:84:bd:78:94:9b:0a:
68:92:36:4d:07:7c:e9:57:ab:59:63:12:c5:f2:9f:
e5:16:e3:ed:69:82:ef:4b:42:e1:4f:e7:b4:90:28:
12:b9:92:16:e8:b7:0c:9c:92:ee:3b:73:ff:bc:8f:
5a:28:23:b1:62:42:c0:14:fe:72:2f:f8:72:90:9d:
1e:92:34:5f:ba:68:fb:35:92:8b:b0:5d:b3:10:18:
97:c5:e4:bc:89:d8:a4:06:73:56:b5:b2:20:5e:ff:
8b:2e:cd:44:98:41:4e:a6:f8:57:98:07:a9:07:c1:
ef:22:ae:3e:f1:c5:1c:1b:2a:e6:e6:b9:94:bb:5c:
0f:12:56:b6:4d:2f:cc:2d:5c:06:6f:94:55:f5:8b:
d9:ea:4d:f3:2f:ef:20:78:37:a2:a9:c6:40:73:7b:
74:d7:0a:6a:b7:05:b2:e3:50:fe:4f:a8:8d:3d:50:
15:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4E:EC:2A:E8:45:65:C0:1B:A8:F9:3D:9F:AC:63:15:94:E8:D9:07
X509v3 Authority Key Identifier:
keyid:57:BB:BC:47:B1:C6:7E:55:7B:EA:B0:F2:C6:D1:8B:F0:26:C3:06:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7u8R7HGflV76rDyxtGL8CbDBuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:9e:b1:5a:be:4f:37:23:fa:fc:d1:c6:0f:7a:2f:bc:31:99:
ba:0f:b6:56:23:f6:41:ed:10:f0:de:ac:44:ac:97:42:dc:14:
19:01:37:fb:ae:a2:ee:e6:09:cd:1a:bf:87:eb:f4:50:00:8e:
ef:c5:9f:c1:d9:64:c4:97:c8:55:71:9d:60:b6:1d:50:7f:22:
45:97:0a:e0:cf:18:34:e2:61:c9:e4:f1:63:af:d9:cd:59:a2:
66:e1:54:5e:35:5c:32:3c:d1:4c:f0:4a:fa:63:af:f2:c9:be:
37:c6:62:f5:d4:bd:04:7e:b0:58:3b:a7:f8:58:a2:77:e0:a2:
15:49:67:1f:70:c0:f3:6d:d4:11:9e:c4:0d:32:2b:f8:5e:d6:
c9:40:d9:1c:2d:47:37:68:b6:39:19:64:39:f7:92:de:97:5c:
d4:bb:fd:b2:03:22:62:c2:19:54:39:0f:42:55:ad:5d:e1:bb:
1b:56:8a:5d:10:b8:f1:f3:88:71:1f:30:7e:df:c8:70:4a:81:
4a:55:59:ef:8c:52:13:6f:dd:f4:72:fd:c5:66:3d:87:ea:ef:
c3:7d:40:f8:a8:7f:17:d4:a6:1c:27:ff:c2:47:c6:37:e8:06:
2f:f3:3d:e4:8e:aa:d7:02:8f:21:6e:bd:f4:a6:c8:35:3c:79:
cc:3e:4d:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WFAN1JuGk0fTJdwOf/HQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YmJiYzQ3YjFjNjdlNTU3YmVhYjBmMmM2ZDE4YmYwMjZj
MzA2ZTAwHhcNMjUxMDE5MTIwMTEwWhcNMjUxMDIwMTIwMTEwWjAzMTEwLwYDVQQD
EyhlNjRlZWMyYWU4NDU2NWMwMWJhOGY5M2Q5ZmFjNjMxNTk0ZThkOTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWIicKGMm0KRIfv0aaZXRgXedrVl
EQItM7963melrMTWOh81p5HURGPoGlXYbzzVXyuHmvbe3T/IOV5jD9sYJCRBsjYN
hIEZ5E5/DmVizGsx/KeEvXiUmwpokjZNB3zpV6tZYxLF8p/lFuPtaYLvS0LhT+e0
kCgSuZIW6LcMnJLuO3P/vI9aKCOxYkLAFP5yL/hykJ0ekjRfumj7NZKLsF2zEBiX
xeS8idikBnNWtbIgXv+LLs1EmEFOpvhXmAepB8HvIq4+8cUcGyrm5rmUu1wPEla2
TS/MLVwGb5RV9YvZ6k3zL+8geDeiqcZAc3t01wpqtwWy41D+T6iNPVAVLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZO7CroRWXAG6j5PZ+sYxWU6NkHMB8GA1UdIwQY
MBaAFFe7vEexxn5Ve+qw8sbRi/AmwwbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjd1OFI3SEdmbFY3NnJEeXh0R0w4Q2JEQnVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mZWYxM2QtOGI5OC00NTFkLThlMDEt
YjdiM2FmZmM2ZWM5LzEvVjd1OFI3SEdmbFY3NnJEeXh0R0w4Q2JEQnVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9mZWYxM2QtOGI5OC00NTFkLThlMDEtYjdiM2FmZmM2ZWM5
LzEvVjd1OFI3SEdmbFY3NnJEeXh0R0w4Q2JEQnVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl56xWr5P
NyP6/NHGD3ovvDGZug+2ViP2Qe0Q8N6sRKyXQtwUGQE3+66i7uYJzRq/h+v0UACO
78WfwdlkxJfIVXGdYLYdUH8iRZcK4M8YNOJhyeTxY6/ZzVmiZuFUXjVcMjzRTPBK
+mOv8sm+N8Zi9dS9BH6wWDun+Fiid+CiFUlnH3DA823UEZ7EDTIr+F7WyUDZHC1H
N2i2ORlkOfeS3pdc1Lv9sgMiYsIZVDkPQlWtXeG7G1aKXRC48fOIcR8wft/IcEqB
SlVZ74xSE2/d9HL9xWY9h+rvw31A+Kh/F9SmHCf/wkfGN+gGL/M95I6q1wKPIW69
9KbINTx5zD5NTg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:04:59 2025 by rpki-client