Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
File: V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft (raw, json)
Hash identifier: GfsilHFx4EEmRPdc1+22TsQiYctgAQhXb8zHUPoFFAU=
Subject key identifier: 8C:3B:90:A5:9E:A5:8C:36:C9:41:EA:BF:E4:5B:CF:73:B2:8C:14:02
Authority key identifier: 57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
Certificate issuer: /CN=578d854bd2bee242a82fb83922d149bccf19ed02
Certificate serial: 0198D583B358AF3076C082CEBB9E158E000D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 06:00:34 +0000
Manifest this update: Sat 23 Aug 2025 06:00:34 +0000
Manifest next update: Sun 24 Aug 2025 06:00:34 +0000
Files and hashes: 1: NhjTM3dOPnMsLQ7ebQq_0aK61EU.roa (hash: pDZlPFnX9elEIPNsw2D7ajm33IBeKqhaDpBvumlLRQw=)
2: O9m05o_UDIKemPeCfI7Sc16B69Y.roa (hash: yXqGk5sjcirZhyM4OHBNZEpEXcAXLb0N0cHRwAFg1zo=)
3: V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl (hash: FM+avtG4B9CwCFhxi1AxlMX73mwkfV/az1HaG5w6hpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:b3:58:af:30:76:c0:82:ce:bb:9e:15:8e:00:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578d854bd2bee242a82fb83922d149bccf19ed02
Validity
Not Before: Aug 23 06:00:34 2025 GMT
Not After : Aug 24 06:00:34 2025 GMT
Subject: CN=8c3b90a59ea58c36c941eabfe45bcf73b28c1402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7d:63:c4:2e:d9:a1:1f:3b:bd:ba:33:78:e9:
a5:11:f2:c4:42:3a:3f:c7:0e:6b:8c:1e:d7:f2:b0:
32:80:44:2f:e3:96:1b:f1:f1:7b:39:52:02:19:08:
ab:22:19:46:04:dc:84:98:69:f6:26:4b:49:99:c9:
df:04:13:b0:89:87:42:5d:3c:03:f2:ba:be:93:6a:
08:77:b3:27:3b:22:21:97:5d:92:bb:c6:73:77:f5:
cc:7d:e9:b1:9e:a8:04:91:c1:74:50:34:68:88:76:
e2:8e:37:62:a4:01:cf:b6:6d:7e:e3:ac:aa:b6:e8:
c1:3b:62:95:02:5d:ad:c3:f4:72:9c:bd:f3:0f:9d:
5b:8e:78:da:2f:a8:ea:40:70:3a:2b:6f:45:1a:49:
d2:b6:79:bf:bb:f7:c6:7c:b8:82:f8:75:3d:4d:cf:
cf:2b:51:8f:7e:9b:7e:6b:b8:e3:d9:c9:c1:88:ac:
1f:7c:60:44:42:fa:c2:84:38:04:9c:8b:d2:ce:0f:
d6:b6:17:f5:df:6d:18:06:b0:23:c5:6d:77:bc:2a:
ed:f0:ab:85:84:49:4d:5a:66:c8:88:e4:ca:35:b4:
66:45:ea:15:db:e5:b3:fa:65:ef:f4:34:fc:54:4a:
c6:7c:0c:41:64:18:a8:6f:fb:d7:d8:8b:9a:64:06:
04:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3B:90:A5:9E:A5:8C:36:C9:41:EA:BF:E4:5B:CF:73:B2:8C:14:02
X509v3 Authority Key Identifier:
keyid:57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:7b:c3:ec:0d:13:25:08:c2:f5:7d:d1:d7:a7:0d:3a:12:5b:
74:7d:70:a9:e8:bb:a2:3e:85:5e:0a:18:98:09:68:40:78:92:
11:67:75:11:e8:d4:ba:85:e1:87:71:e4:36:54:a3:1c:ab:ca:
fd:0e:f2:c7:4e:c9:08:ba:26:f4:6f:13:97:03:c0:f1:1e:f8:
c5:dd:fa:65:56:d6:65:16:bd:59:7b:e7:c0:c5:f9:9b:95:ec:
fa:1b:b5:2b:50:dc:8a:49:59:24:82:fb:cb:f2:4f:77:67:a2:
c3:94:c4:7d:cc:08:a1:65:a8:0c:8c:bb:6c:10:17:89:35:50:
d1:b5:20:39:ae:59:22:b3:cb:0a:7b:fc:6c:d2:d1:7f:d3:e5:
65:e5:3d:91:6e:53:75:01:5c:4a:2d:12:75:fa:87:79:1a:ee:
e0:dd:7e:bc:05:26:b0:b0:3e:59:12:b0:c8:5e:fa:f3:5e:71:
d1:d4:0b:52:d0:41:94:d7:07:9d:89:dc:eb:74:02:9a:d4:b4:
ce:3e:12:74:0b:b7:c1:99:79:d1:8e:22:92:e7:10:73:79:40:
49:31:f2:ee:d6:37:5b:46:5b:6e:f6:15:09:dc:c0:95:88:d8:
40:6b:21:da:40:b7:43:43:59:89:8f:ac:a8:35:db:f5:32:7c:
f0:89:0c:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg7NYrzB2wILOu54VjgANMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OGQ4NTRiZDJiZWUyNDJhODJmYjgzOTIyZDE0OWJjY2Yx
OWVkMDIwHhcNMjUwODIzMDYwMDM0WhcNMjUwODI0MDYwMDM0WjAzMTEwLwYDVQQD
Eyg4YzNiOTBhNTllYTU4YzM2Yzk0MWVhYmZlNDViY2Y3M2IyOGMxNDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoH1jxC7ZoR87vbozeOmlEfLEQjo/
xw5rjB7X8rAygEQv45Yb8fF7OVICGQirIhlGBNyEmGn2JktJmcnfBBOwiYdCXTwD
8rq+k2oId7MnOyIhl12Su8Zzd/XMfemxnqgEkcF0UDRoiHbijjdipAHPtm1+46yq
tujBO2KVAl2tw/RynL3zD51bjnjaL6jqQHA6K29FGknStnm/u/fGfLiC+HU9Tc/P
K1GPfpt+a7jj2cnBiKwffGBEQvrChDgEnIvSzg/Wthf1320YBrAjxW13vCrt8KuF
hElNWmbIiOTKNbRmReoV2+Wz+mXv9DT8VErGfAxBZBiob/vX2IuaZAYEywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIw7kKWepYw2yUHqv+Rbz3OyjBQCMB8GA1UdIwQY
MBaAFFeNhUvSvuJCqC+4OSLRSbzPGe0CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjQyRlM5Sy00a0tvTDdnNUl0Rkp2TThaN1FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xMjhiYzYtZjZmZi00YzkwLThiNWEt
MWFiNWY1Mzk5ZDNhLzEvVjQyRlM5Sy00a0tvTDdnNUl0Rkp2TThaN1FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8xMjhiYzYtZjZmZi00YzkwLThiNWEtMWFiNWY1Mzk5ZDNh
LzEvVjQyRlM5Sy00a0tvTDdnNUl0Rkp2TThaN1FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT3vD7A0T
JQjC9X3R16cNOhJbdH1wqei7oj6FXgoYmAloQHiSEWd1EejUuoXhh3HkNlSjHKvK
/Q7yx07JCLom9G8TlwPA8R74xd36ZVbWZRa9WXvnwMX5m5Xs+hu1K1DciklZJIL7
y/JPd2eiw5TEfcwIoWWoDIy7bBAXiTVQ0bUgOa5ZIrPLCnv8bNLRf9PlZeU9kW5T
dQFcSi0SdfqHeRru4N1+vAUmsLA+WRKwyF76815x0dQLUtBBlNcHnYnc63QCmtS0
zj4SdAu3wZl50Y4ikucQc3lASTHy7tY3W0ZbbvYVCdzAlYjYQGsh2kC3Q0NZiY+s
qDXb9TJ88IkMxQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:55 2025 by rpki-client