Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
File: vJ8LmsHVZS89yh7xYjv5mrKWR98.mft (raw, json)
Hash identifier: 0YrM2Qj5T+hxrHy/qiTZQurBAGR6jyIi44m3pqmPPkc=
Subject key identifier: DE:EB:F9:48:6F:11:AD:4E:78:17:50:39:0D:97:55:F7:1E:AD:3C:69
Authority key identifier: BC:9F:0B:9A:C1:D5:65:2F:3D:CA:1E:F1:62:3B:F9:9A:B2:96:47:DF
Certificate issuer: /CN=bc9f0b9ac1d5652f3dca1ef1623bf99ab29647df
Certificate serial: 019A465F1AEA49CEEF20D9F4F5820034FBB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
Manifest number: 170A
Signing time: Sun 02 Nov 2025 21:00:29 +0000
Manifest this update: Sun 02 Nov 2025 21:00:29 +0000
Manifest next update: Mon 03 Nov 2025 21:00:29 +0000
Files and hashes: 1: FrLoQw9Tk2q53G3qePuE3CPqiJw.roa (hash: w3xxWOqtTqCnhtgzBMiz0Hnx9M0t8vYZOEOxsv+EFns=)
2: XuWyQ_h13oHMYelX1eEehMBE4QM.roa (hash: 55GFOmkogCsmTmcypUyvrH3xFalGu40zdpw3o3u8qPY=)
3: vJ8LmsHVZS89yh7xYjv5mrKWR98.crl (hash: lRmVVMJfR8ViIdRipipYF+5b3+DVI+b9p09Y5HKwJJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Nov 2025 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:46:5f:1a:ea:49:ce:ef:20:d9:f4:f5:82:00:34:fb:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9f0b9ac1d5652f3dca1ef1623bf99ab29647df
Validity
Not Before: Nov 2 21:00:29 2025 GMT
Not After : Nov 3 21:00:29 2025 GMT
Subject: CN=deebf9486f11ad4e781750390d9755f71ead3c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cd:d8:95:c4:00:43:f7:8a:f4:91:db:1d:8d:
1e:67:b5:90:7e:00:cc:72:95:ac:7b:67:ab:b9:e0:
4b:df:02:f1:df:9c:a9:61:fb:37:95:fb:b2:dc:bb:
94:d8:57:3d:36:53:d9:c9:94:9c:09:f0:86:b1:3e:
79:57:d8:f3:28:81:cc:d0:8d:26:ce:a8:42:81:90:
e8:7f:69:80:07:48:93:e3:8b:79:0b:07:13:de:cd:
e2:68:ac:52:ab:e9:fd:a4:52:f4:d7:44:1d:d6:11:
3e:5c:be:53:99:21:a7:b5:f7:b2:01:e8:67:35:f0:
a8:64:67:97:93:51:40:39:5e:4f:48:f2:a2:0d:27:
c2:17:31:5b:07:28:51:19:56:34:6b:7c:3f:25:69:
b8:94:e2:81:1c:92:fc:e7:00:9d:a4:57:7b:6c:bd:
41:8b:2b:db:9d:17:94:cb:1e:a0:25:35:14:e0:9a:
eb:20:03:25:26:88:ad:0d:82:81:cc:a9:ea:99:71:
07:d5:7f:71:07:a9:c9:a1:4c:d1:88:db:f9:ff:65:
ee:ba:fa:90:91:b3:fe:f2:2e:57:9b:5e:41:95:4f:
6a:99:46:73:5e:cd:bf:4a:12:be:27:25:70:f2:3c:
24:e1:2f:69:1d:70:e3:71:cb:fb:a5:cb:17:6f:59:
09:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:EB:F9:48:6F:11:AD:4E:78:17:50:39:0D:97:55:F7:1E:AD:3C:69
X509v3 Authority Key Identifier:
keyid:BC:9F:0B:9A:C1:D5:65:2F:3D:CA:1E:F1:62:3B:F9:9A:B2:96:47:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:4a:f9:78:72:f9:7b:93:1f:f6:85:a3:eb:79:45:a4:58:10:
6d:28:7a:5e:f4:dd:d3:29:80:28:ea:f3:5a:34:27:da:14:7c:
7f:79:21:0d:65:9a:50:b9:19:7a:43:d9:aa:11:45:83:51:ce:
36:ad:c7:f5:28:9b:b9:cb:18:88:98:87:55:e3:1d:53:56:c2:
c5:57:7c:ef:6a:be:49:14:d1:c7:f7:2a:73:56:c9:38:c8:56:
6b:e2:ab:b2:70:56:9f:10:cb:be:4f:21:16:a5:58:a4:39:d7:
15:1f:2e:8d:d9:67:c5:e9:66:ba:b4:57:b9:13:2d:8f:54:d5:
7e:5b:86:d5:9c:31:c5:58:38:eb:c7:c4:52:08:70:de:46:8b:
d2:04:90:dc:5b:82:97:64:aa:d7:e9:d4:58:f3:55:18:c0:2e:
6d:26:25:6e:47:a8:a6:41:cf:69:28:23:91:14:be:56:6a:81:
83:ff:28:2d:dd:bc:c1:fd:44:27:71:4f:ce:a8:48:50:e7:4c:
5f:37:6d:4c:08:93:45:a3:66:20:20:f2:d7:f8:ea:f6:e9:66:
18:fc:0c:6f:e4:f0:26:52:0c:4f:2d:1d:79:25:40:b0:c5:b3:
c3:76:15:32:ed:12:08:50:bf:3c:e8:9d:d5:ec:d6:f6:2d:9b:
72:c1:b0:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpGXxrqSc7vINn09YIANPu1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOWYwYjlhYzFkNTY1MmYzZGNhMWVmMTYyM2JmOTlhYjI5
NjQ3ZGYwHhcNMjUxMTAyMjEwMDI5WhcNMjUxMTAzMjEwMDI5WjAzMTEwLwYDVQQD
EyhkZWViZjk0ODZmMTFhZDRlNzgxNzUwMzkwZDk3NTVmNzFlYWQzYzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA283YlcQAQ/eK9JHbHY0eZ7WQfgDM
cpWse2erueBL3wLx35ypYfs3lfuy3LuU2Fc9NlPZyZScCfCGsT55V9jzKIHM0I0m
zqhCgZDof2mAB0iT44t5CwcT3s3iaKxSq+n9pFL010Qd1hE+XL5TmSGntfeyAehn
NfCoZGeXk1FAOV5PSPKiDSfCFzFbByhRGVY0a3w/JWm4lOKBHJL85wCdpFd7bL1B
iyvbnReUyx6gJTUU4JrrIAMlJoitDYKBzKnqmXEH1X9xB6nJoUzRiNv5/2XuuvqQ
kbP+8i5Xm15BlU9qmUZzXs2/ShK+JyVw8jwk4S9pHXDjccv7pcsXb1kJuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7r+UhvEa1OeBdQOQ2XVfcerTxpMB8GA1UdIwQY
MBaAFLyfC5rB1WUvPcoe8WI7+ZqylkffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdko4TG1zSFZaUzg5eWg3eFlqdjVtcktXUjk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80OTkyYjYtZmRhZS00YzlmLWJmM2Ut
OTVjODk0MmRmNzI0LzEvdko4TG1zSFZaUzg5eWg3eFlqdjVtcktXUjk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS80OTkyYjYtZmRhZS00YzlmLWJmM2UtOTVjODk0MmRmNzI0
LzEvdko4TG1zSFZaUzg5eWg3eFlqdjVtcktXUjk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUr5eHL5
e5Mf9oWj63lFpFgQbSh6XvTd0ymAKOrzWjQn2hR8f3khDWWaULkZekPZqhFFg1HO
Nq3H9SibucsYiJiHVeMdU1bCxVd872q+SRTRx/cqc1bJOMhWa+KrsnBWnxDLvk8h
FqVYpDnXFR8ujdlnxelmurRXuRMtj1TVfluG1ZwxxVg468fEUghw3kaL0gSQ3FuC
l2Sq1+nUWPNVGMAubSYlbkeopkHPaSgjkRS+VmqBg/8oLd28wf1EJ3FPzqhIUOdM
XzdtTAiTRaNmICDy1/jq9ulmGPwMb+TwJlIMTy0deSVAsMWzw3YVMu0SCFC/POid
1ezW9i2bcsGwBA==
-----END CERTIFICATE-----
Generated at Mon Nov 3 06:36:23 2025 by rpki-client