Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
File: V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft (raw, json)
Hash identifier: ZM8tG0fU/J789Uq1Qvv3uaAB8q3Nsw8U0Nte/o33h4Y=
Subject key identifier: 45:8C:8C:76:17:78:EC:01:39:0D:D2:14:52:2F:3C:91:8D:9C:C0:C2
Authority key identifier: 57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
Certificate issuer: /CN=578d854bd2bee242a82fb83922d149bccf19ed02
Certificate serial: 019A00D9F1AC09ED3D5C46C6F2E1ABF0A855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
Manifest number: 16E9
Signing time: Mon 20 Oct 2025 09:01:14 +0000
Manifest this update: Mon 20 Oct 2025 09:01:14 +0000
Manifest next update: Tue 21 Oct 2025 09:01:14 +0000
Files and hashes: 1: NhjTM3dOPnMsLQ7ebQq_0aK61EU.roa (hash: pDZlPFnX9elEIPNsw2D7ajm33IBeKqhaDpBvumlLRQw=)
2: O9m05o_UDIKemPeCfI7Sc16B69Y.roa (hash: yXqGk5sjcirZhyM4OHBNZEpEXcAXLb0N0cHRwAFg1zo=)
3: V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl (hash: 2nVb5GdcDxuzqoX/g5kamrj3X9w44vziuQD44vcVc6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:d9:f1:ac:09:ed:3d:5c:46:c6:f2:e1:ab:f0:a8:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578d854bd2bee242a82fb83922d149bccf19ed02
Validity
Not Before: Oct 20 09:01:14 2025 GMT
Not After : Oct 21 09:01:14 2025 GMT
Subject: CN=458c8c761778ec01390dd214522f3c918d9cc0c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:de:c9:7b:b1:a8:f5:87:62:4b:bf:82:30:f9:
2e:ee:b5:18:ba:4c:5b:0b:f6:c3:d4:b3:e0:ad:24:
2f:5a:03:af:9f:65:dc:0f:23:6b:08:14:8f:3f:51:
cc:ad:a2:27:7a:56:bb:f4:c1:ed:49:75:ee:db:e5:
f5:0d:9d:cf:f4:9c:2d:6a:6a:74:e6:d8:16:2f:d3:
c2:00:8d:7b:2d:37:fc:3c:65:83:f4:70:93:a5:f8:
38:ed:48:bb:fd:74:c9:af:f0:6c:d2:3b:d0:db:88:
df:dd:4e:c7:ad:28:a0:9e:f9:2c:58:05:36:87:64:
30:98:c8:9f:96:3c:a7:92:e0:90:86:50:cb:88:ae:
c1:9d:df:9b:4d:2c:a1:43:86:6c:88:17:d6:5b:4c:
21:9e:42:22:43:5d:19:b1:18:e2:53:51:99:60:ac:
c5:ea:77:78:f0:74:f3:5c:22:6f:52:ee:4c:30:6b:
e1:98:35:7d:e1:a3:ab:c9:c0:84:57:1b:b1:30:89:
88:fb:5c:83:5c:bf:94:ff:e6:85:4f:34:e5:f0:cf:
02:35:6b:b3:20:8c:e8:e6:69:5a:48:f6:ae:8a:ad:
2f:7b:17:de:47:49:07:76:26:0f:e3:4d:bb:74:88:
9b:b2:c6:17:74:87:8d:53:0d:4a:fc:6b:41:91:5d:
d8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8C:8C:76:17:78:EC:01:39:0D:D2:14:52:2F:3C:91:8D:9C:C0:C2
X509v3 Authority Key Identifier:
keyid:57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a5:ac:80:ef:fb:93:07:7c:e1:7d:2e:63:4a:75:73:0b:6f:
ec:09:15:b8:2a:d7:5d:6a:d0:38:37:c5:9d:4e:15:10:e0:72:
a8:b0:18:47:45:0e:3c:e3:75:9c:f6:58:eb:81:18:91:f2:07:
59:a9:52:51:5e:b6:ec:80:e5:b6:5a:cb:4a:a4:ef:ab:a2:3d:
6d:ad:ac:02:ff:e3:6e:80:c6:d1:b3:af:fe:bb:b0:22:ed:6e:
bb:26:dd:54:a2:58:a3:b6:de:17:58:a8:7b:fd:63:c5:3a:c4:
6a:df:d9:9e:d0:5f:b5:09:e6:e9:e0:65:29:67:f6:22:06:da:
46:74:6d:dc:2e:ec:aa:0c:a0:e3:37:6e:fb:8b:90:d4:73:29:
d2:c0:dd:a4:06:62:cc:fe:87:e7:3c:a1:9c:74:61:71:08:6f:
3b:20:2d:7e:18:e4:f2:fb:b9:a8:33:66:07:d4:da:52:3c:41:
26:d8:20:12:e3:52:30:3d:17:ec:7c:35:76:01:90:f5:a6:1c:
fc:dd:b1:af:9b:f9:55:8a:e7:c8:21:03:6b:e9:bb:dc:0a:cc:
d6:fc:23:be:b1:87:79:c5:cc:f9:7c:8f:75:55:b0:10:3d:a7:
82:a7:b4:ac:c1:b2:2e:7c:41:50:27:8d:d7:8d:0c:62:69:4d:
df:6b:11:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:41:14 2025 by rpki-client