Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.mft
File: V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.mft (raw, json)
Hash identifier: QK6VaCuYtawhpqdiLCgu/Sp6EoK8jpYXz3Od2ZYKcvw=
Subject key identifier: 9B:84:8D:CB:04:AA:E7:2F:22:37:E5:C7:C0:B4:9A:B4:D3:18:0D:65
Authority key identifier: 57:C0:BD:9F:83:31:EA:84:38:FD:2A:2F:67:1B:71:AF:4A:2D:EC:17
Certificate issuer: /CN=57c0bd9f8331ea8438fd2a2f671b71af4a2dec17
Certificate serial: 019A0E5DA81CDFE9CE5C41A88742EBC03847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.mft
Manifest number: 0848
Signing time: Thu 23 Oct 2025 00:00:09 +0000
Manifest this update: Thu 23 Oct 2025 00:00:09 +0000
Manifest next update: Fri 24 Oct 2025 00:00:09 +0000
Files and hashes: 1: 0MC1362R9lRRGpq84ZgFyJggIsA.roa (hash: 2oe5jKK2VDNOSC6ja+1wPu+cY+lyRN63lTJAf4/SoR0=)
2: V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.crl (hash: CUacC0ZjL0wS0bZDG0oeMIhfnDydqXII117i47pSFfM=)
3: hxG-StCBPxemsj2qpKGT4GGzhQk.roa (hash: MYz1XQtFxhUeNPc3mCJTjKjV6pO6a8sxO3y4ixSgakg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0e:5d:a8:1c:df:e9:ce:5c:41:a8:87:42:eb:c0:38:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c0bd9f8331ea8438fd2a2f671b71af4a2dec17
Validity
Not Before: Oct 23 00:00:09 2025 GMT
Not After : Oct 24 00:00:09 2025 GMT
Subject: CN=9b848dcb04aae72f2237e5c7c0b49ab4d3180d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0c:05:0e:93:d9:04:dc:81:5d:2e:0f:c0:dd:
77:f8:7b:06:56:d6:2d:b7:22:62:86:b7:92:5b:ce:
e6:3b:76:c1:60:bc:35:ae:2c:b1:4c:eb:86:40:c3:
7b:34:5a:60:61:3c:f4:cf:7c:2b:8c:26:c7:96:f2:
4b:f2:9c:2c:81:32:f3:42:88:35:57:78:4b:0c:5e:
69:a0:59:6b:39:cd:bb:b9:d9:1a:8c:38:73:01:2d:
b3:8c:40:66:59:e1:79:26:64:e8:9c:fe:bd:57:20:
bf:d5:51:48:c7:f1:83:27:79:62:31:b3:cf:1d:e8:
1d:e0:f6:8a:e5:2e:b3:f1:83:2b:bf:55:ab:94:fd:
f9:1e:c7:4b:b9:f6:2d:4e:24:d1:11:f9:5a:e6:20:
27:fa:fa:1b:b7:c5:51:ed:7a:34:57:22:6a:4e:78:
f4:1c:7b:76:79:c2:ee:df:0b:52:d7:28:a5:69:27:
38:3c:af:28:fa:5d:94:3f:8a:86:14:44:50:c5:91:
c5:03:7d:8c:d5:8c:b2:0f:89:5c:2b:ee:5b:8d:92:
80:9a:ac:ad:f8:a7:85:0d:35:99:98:c0:1d:07:a9:
51:12:81:78:6b:b2:ec:ed:e4:89:51:12:68:a0:b2:
b7:6e:fd:bd:78:aa:dc:2a:d6:de:86:f1:cf:87:e4:
1e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:84:8D:CB:04:AA:E7:2F:22:37:E5:C7:C0:B4:9A:B4:D3:18:0D:65
X509v3 Authority Key Identifier:
keyid:57:C0:BD:9F:83:31:EA:84:38:FD:2A:2F:67:1B:71:AF:4A:2D:EC:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c0:e8:bd:60:ad:3f:ed:a7:8a:1b:43:29:42:b5:d1:3f:e3:
0a:a7:8f:e0:6d:c3:30:93:69:2e:9b:e7:5e:7e:64:7b:2d:c6:
c7:82:03:53:23:78:c2:be:7b:32:ad:02:4b:22:4f:c3:71:bf:
e3:82:ec:53:22:f7:b0:77:de:11:e3:88:98:c1:dc:f6:ae:71:
b4:f1:53:c3:fb:9c:95:0a:e6:1e:af:b8:eb:b8:54:14:cf:c1:
8b:68:3b:c2:02:1e:ef:38:a1:c9:ea:e9:a3:11:70:51:8f:5b:
a0:83:6e:cc:d4:b2:7e:29:d5:0c:35:2d:f7:19:4d:9b:77:61:
da:24:9d:35:bd:47:e3:0e:0f:af:3d:28:8c:f1:5f:8b:f8:5a:
ad:df:a9:88:fd:8c:d2:c1:7e:e1:2c:d6:a4:c4:83:b8:02:0e:
8f:f3:fd:97:df:0b:39:18:09:ca:44:ca:4c:ac:ef:19:3b:4d:
87:78:88:48:79:57:4b:48:15:9c:e1:4f:da:92:77:86:68:81:
7c:78:08:5a:31:0a:96:c7:c2:f0:3a:bf:3c:88:e0:64:02:e3:
12:ec:ef:71:9b:18:31:50:8c:d2:46:ba:7b:c3:3b:08:00:8e:
83:54:2e:0b:2a:27:0f:b0:1f:d4:a0:60:9a:31:ee:13:20:bf:
89:38:21:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoOXagc3+nOXEGoh0LrwDhHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YzBiZDlmODMzMWVhODQzOGZkMmEyZjY3MWI3MWFmNGEy
ZGVjMTcwHhcNMjUxMDIzMDAwMDA5WhcNMjUxMDI0MDAwMDA5WjAzMTEwLwYDVQQD
Eyg5Yjg0OGRjYjA0YWFlNzJmMjIzN2U1YzdjMGI0OWFiNGQzMTgwZDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AwFDpPZBNyBXS4PwN13+HsGVtYt
tyJihreSW87mO3bBYLw1riyxTOuGQMN7NFpgYTz0z3wrjCbHlvJL8pwsgTLzQog1
V3hLDF5poFlrOc27udkajDhzAS2zjEBmWeF5JmTonP69VyC/1VFIx/GDJ3liMbPP
Hegd4PaK5S6z8YMrv1WrlP35HsdLufYtTiTREfla5iAn+vobt8VR7Xo0VyJqTnj0
HHt2ecLu3wtS1yilaSc4PK8o+l2UP4qGFERQxZHFA32M1YyyD4lcK+5bjZKAmqyt
+KeFDTWZmMAdB6lREoF4a7Ls7eSJURJooLK3bv29eKrcKtbehvHPh+Qe+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJuEjcsEqucvIjflx8C0mrTTGA1lMB8GA1UdIwQY
MBaAFFfAvZ+DMeqEOP0qL2cbca9KLewXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhDOW40TXg2b1E0X1Nvdlp4dHhyMG90N0JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kNWU5ZjYtM2Y2ZC00Njk0LTg5Yjgt
YTA5M2QxMDA4NzRjLzEvVjhDOW40TXg2b1E0X1Nvdlp4dHhyMG90N0JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9kNWU5ZjYtM2Y2ZC00Njk0LTg5YjgtYTA5M2QxMDA4NzRj
LzEvVjhDOW40TXg2b1E0X1Nvdlp4dHhyMG90N0JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS8DovWCt
P+2nihtDKUK10T/jCqeP4G3DMJNpLpvnXn5key3Gx4IDUyN4wr57Mq0CSyJPw3G/
44LsUyL3sHfeEeOImMHc9q5xtPFTw/uclQrmHq+467hUFM/Bi2g7wgIe7zihyerp
oxFwUY9boINuzNSyfinVDDUt9xlNm3dh2iSdNb1H4w4Prz0ojPFfi/hard+piP2M
0sF+4SzWpMSDuAIOj/P9l98LORgJykTKTKzvGTtNh3iISHlXS0gVnOFP2pJ3hmiB
fHgIWjEKlsfC8Dq/PIjgZALjEuzvcZsYMVCM0ka6e8M7CACOg1QuCyonD7Af1KBg
mjHuEyC/iTghVg==
-----END CERTIFICATE-----
Generated at Thu Oct 23 07:34:37 2025 by rpki-client