Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
File: R78v_to4HlSBjfBwUs9n4iJRX4k.mft (raw, json)
Hash identifier: 2SsdrnQEvIVF+feH/MRCQ3R79UIGuOb46HenvhwJGzQ=
Subject key identifier: 6A:E2:AB:2F:8C:00:63:26:F8:C2:5E:82:F5:77:D4:D8:A1:11:27:20
Authority key identifier: 47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
Certificate issuer: /CN=47bf2ffeda381e54818df07052cf67e222515f89
Certificate serial: 0199FCFD79A21E5AC9E3A2D08981DE028EDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
Manifest number: 0A10
Signing time: Sun 19 Oct 2025 15:01:34 +0000
Manifest this update: Sun 19 Oct 2025 15:01:34 +0000
Manifest next update: Mon 20 Oct 2025 15:01:34 +0000
Files and hashes: 1: LAY9sSNA-YJZQYYdnmpTlhxvD2w.roa (hash: sy6paHPwN5kXrSUvaYyd2hN5gZ9nHNvT8Yp+G0CBKsY=)
2: R78v_to4HlSBjfBwUs9n4iJRX4k.crl (hash: Vbv4oWoRtiEsRpwvswSmyu+nl5rLaNNzB+PaulYOOgo=)
3: kXlvgNGT0M_fb_-qmGB3FlkN85w.roa (hash: M89NbGfFWJGuspxS6G3ctJFxvooMQ1EluHCsGyLm9ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:79:a2:1e:5a:c9:e3:a2:d0:89:81:de:02:8e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47bf2ffeda381e54818df07052cf67e222515f89
Validity
Not Before: Oct 19 15:01:34 2025 GMT
Not After : Oct 20 15:01:34 2025 GMT
Subject: CN=6ae2ab2f8c006326f8c25e82f577d4d8a1112720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bf:b8:55:7b:91:80:25:e1:92:88:c9:aa:97:
d9:c7:48:03:f9:ae:34:f6:b4:1d:c6:4e:d7:3c:b6:
76:d7:86:32:ac:24:15:ea:b8:85:22:f5:4b:13:50:
b0:ad:76:a3:83:4a:fa:14:48:5e:e5:74:60:ad:58:
c0:43:84:fb:fb:a8:89:0b:5a:6e:65:23:4d:3e:b8:
0e:2d:00:0b:89:bb:7d:d3:07:a8:24:36:9b:67:97:
c7:69:2e:57:f5:d7:85:1e:64:da:ab:85:80:b4:80:
57:30:8b:fc:58:6a:df:5d:a3:17:48:b1:88:fb:71:
62:d8:36:8f:41:f4:2b:00:86:b1:64:d9:fb:c9:c0:
5b:20:8d:cd:be:0f:33:f6:44:a0:d9:b3:b2:d8:ea:
53:22:39:6c:fc:3e:58:7f:cb:0c:19:cd:71:23:0c:
7a:87:0e:cd:63:cc:b2:cf:fe:8f:7d:95:31:3b:16:
5a:4e:d7:5c:66:ae:9b:d8:56:50:5b:fc:20:e7:88:
e0:23:99:61:e8:92:ed:f8:b5:d1:21:fd:e0:86:3a:
14:dc:cd:99:0f:20:5e:29:29:f3:77:8d:14:d5:32:
79:7e:bf:e3:10:37:1e:af:bd:75:e6:84:99:36:9a:
fd:65:a9:51:87:f2:a4:b6:d2:b4:99:19:3b:92:5f:
da:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E2:AB:2F:8C:00:63:26:F8:C2:5E:82:F5:77:D4:D8:A1:11:27:20
X509v3 Authority Key Identifier:
keyid:47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:fb:6a:05:dc:40:2f:8b:af:bb:16:34:d1:a4:fa:ae:05:ac:
13:98:44:b8:85:7b:d9:69:c6:64:d9:18:24:f9:f5:4b:84:75:
d2:51:43:b2:9f:b8:a2:15:3e:98:3c:ef:34:53:8f:ec:be:14:
3f:73:71:1d:89:45:cb:af:30:18:0b:bb:c1:3b:ba:32:35:21:
0b:6e:c3:6f:f9:9b:c1:b2:1f:42:6c:5a:bf:88:90:b1:ee:25:
be:84:8f:d9:99:01:06:92:42:21:7e:8d:6a:4d:29:ac:f0:09:
63:a4:c7:e4:db:dd:e9:10:8b:79:df:78:5c:1c:a8:96:22:7b:
f8:cb:0a:d1:00:d2:4d:67:3c:1a:4e:16:20:fc:43:15:bf:7e:
10:b4:22:02:96:38:3f:da:e3:ef:c7:41:cf:2a:c0:1e:a9:7a:
83:d5:e8:c6:a0:98:b4:af:0a:aa:f2:d8:72:5a:39:35:74:9c:
c1:f7:f3:fd:bd:f0:bc:0f:2e:3e:9d:58:5d:73:86:6d:58:29:
0e:a1:fd:51:b0:9a:14:d8:7f:aa:d3:72:58:2a:a5:1a:04:ed:
c9:b1:65:69:a0:77:ce:80:6f:9e:f0:f4:c1:01:97:81:be:32:
5c:e7:e9:85:da:98:1a:c1:fb:55:8f:e7:ab:2c:91:89:1f:48:
b5:a4:8d:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/XmiHlrJ46LQiYHeAo7cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YmYyZmZlZGEzODFlNTQ4MThkZjA3MDUyY2Y2N2UyMjI1
MTVmODkwHhcNMjUxMDE5MTUwMTM0WhcNMjUxMDIwMTUwMTM0WjAzMTEwLwYDVQQD
Eyg2YWUyYWIyZjhjMDA2MzI2ZjhjMjVlODJmNTc3ZDRkOGExMTEyNzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApL+4VXuRgCXhkojJqpfZx0gD+a40
9rQdxk7XPLZ214YyrCQV6riFIvVLE1CwrXajg0r6FEhe5XRgrVjAQ4T7+6iJC1pu
ZSNNPrgOLQALibt90weoJDabZ5fHaS5X9deFHmTaq4WAtIBXMIv8WGrfXaMXSLGI
+3Fi2DaPQfQrAIaxZNn7ycBbII3Nvg8z9kSg2bOy2OpTIjls/D5Yf8sMGc1xIwx6
hw7NY8yyz/6PfZUxOxZaTtdcZq6b2FZQW/wg54jgI5lh6JLt+LXRIf3ghjoU3M2Z
DyBeKSnzd40U1TJ5fr/jEDcer7115oSZNpr9ZalRh/KkttK0mRk7kl/anQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGriqy+MAGMm+MJegvV31NihEScgMB8GA1UdIwQY
MBaAFEe/L/7aOB5UgY3wcFLPZ+IiUV+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjc4dl90bzRIbFNCamZCd1VzOW40aUpSWDRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yNDZkMDMtZTA5MC00MzI1LTgyZjEt
MGJkMDk1ZGE3OGVmLzEvUjc4dl90bzRIbFNCamZCd1VzOW40aUpSWDRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8yNDZkMDMtZTA5MC00MzI1LTgyZjEtMGJkMDk1ZGE3OGVm
LzEvUjc4dl90bzRIbFNCamZCd1VzOW40aUpSWDRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbftqBdxA
L4uvuxY00aT6rgWsE5hEuIV72WnGZNkYJPn1S4R10lFDsp+4ohU+mDzvNFOP7L4U
P3NxHYlFy68wGAu7wTu6MjUhC27Db/mbwbIfQmxav4iQse4lvoSP2ZkBBpJCIX6N
ak0prPAJY6TH5Nvd6RCLed94XByoliJ7+MsK0QDSTWc8Gk4WIPxDFb9+ELQiApY4
P9rj78dBzyrAHql6g9XoxqCYtK8KqvLYclo5NXScwffz/b3wvA8uPp1YXXOGbVgp
DqH9UbCaFNh/qtNyWCqlGgTtybFlaaB3zoBvnvD0wQGXgb4yXOfphdqYGsH7VY/n
qyyRiR9ItaSNbg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:54 2025 by rpki-client