Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft
File: V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft (raw, json)
Hash identifier: 4/mA7U+LnkQZ5+SsU9RSwhKNmsa93dXQ1DGK23RJ/qA=
Subject key identifier: B9:C2:41:5D:49:B1:F0:4C:C5:08:A3:92:C9:8D:BA:C5:FE:AC:F8:BE
Authority key identifier: 57:C5:A7:6F:28:B7:1E:A8:DB:F9:99:AB:AA:B7:A6:59:83:9A:C1:82
Certificate issuer: /CN=57c5a76f28b71ea8dbf999abaab7a659839ac182
Certificate serial: 019A70A5438C40D28A5DCBDC9292CEC41877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft
Manifest number: 10B0
Signing time: Tue 11 Nov 2025 02:01:10 +0000
Manifest this update: Tue 11 Nov 2025 02:01:10 +0000
Manifest next update: Wed 12 Nov 2025 02:01:10 +0000
Files and hashes: 1: 7mW3WjVVw9eGN8jbjHf3-to5ckg.roa (hash: mgTvCDtWlsTF65gNfXMneOYsagkRwGQqVAdRKNVR7wE=)
2: V8Wnbyi3Hqjb-ZmrqremWYOawYI.crl (hash: 2ulmvRBVi3YExRTr9iuLZ89PILNYefievZR2QA3hink=)
3: opZuDmDWQL5ca_7w2GLyUTRdL5E.roa (hash: icGuPqMDdyClVp/nHf/m0TN12+gflYp9hAwPQL0ezMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:43:8c:40:d2:8a:5d:cb:dc:92:92:ce:c4:18:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c5a76f28b71ea8dbf999abaab7a659839ac182
Validity
Not Before: Nov 11 02:01:10 2025 GMT
Not After : Nov 12 02:01:10 2025 GMT
Subject: CN=b9c2415d49b1f04cc508a392c98dbac5feacf8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:d4:03:8c:e6:80:6e:8b:32:db:fa:b1:ac:9f:
f2:56:55:61:da:7a:e6:af:ca:8d:45:20:58:d3:91:
4f:0e:5a:a1:af:82:41:2a:68:d5:16:3a:da:be:03:
0b:fe:42:22:87:b7:ef:3f:3e:34:f8:5e:62:31:11:
b1:6a:d5:7b:86:11:24:48:44:02:4b:b3:c5:28:c2:
c8:b1:fe:f9:55:a6:3f:bb:6c:3f:a8:e7:a6:8b:ae:
e5:a2:51:ec:74:51:c8:45:ca:9a:45:cd:fe:20:5f:
a8:5e:0d:aa:84:90:8d:eb:50:fb:6f:1d:a8:a1:aa:
22:3d:e9:68:65:fe:12:d0:81:86:02:00:2f:ce:b0:
e8:43:ad:8a:d0:91:de:f6:ae:a3:29:70:8d:da:6d:
09:aa:6c:64:6c:28:31:46:31:5e:8b:0e:d0:aa:e5:
3d:9f:37:0c:8b:b8:d1:f7:d0:ae:cc:6d:43:d7:8d:
a8:ce:a7:ab:50:62:b4:59:e0:6e:bf:e5:7a:f3:78:
e6:4b:9a:c9:44:a0:0e:6d:4f:d7:ad:f1:73:9c:7a:
c9:5a:73:80:07:6a:e4:6e:48:30:9c:0e:5c:6d:79:
02:a7:40:5f:05:1f:59:a0:64:85:3c:fd:39:bd:3e:
bb:e2:db:a6:ad:a5:00:08:30:41:a8:a0:e6:e9:d8:
2e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C2:41:5D:49:B1:F0:4C:C5:08:A3:92:C9:8D:BA:C5:FE:AC:F8:BE
X509v3 Authority Key Identifier:
keyid:57:C5:A7:6F:28:B7:1E:A8:DB:F9:99:AB:AA:B7:A6:59:83:9A:C1:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:66:41:49:f3:45:f8:f0:61:47:d3:5a:60:2c:06:4c:4c:67:
e1:3b:56:39:d7:8c:8b:98:5b:d2:2b:0d:54:66:68:a5:7d:c2:
5b:af:0f:06:64:67:60:34:be:d9:b2:60:89:34:55:ae:2f:8b:
0b:aa:a7:9c:6f:10:f6:45:bf:79:a3:64:14:85:8b:c0:fb:11:
68:26:b7:fb:a2:e7:76:b8:60:42:2b:d0:42:76:6d:77:5f:84:
96:ec:d1:85:6b:bf:b5:18:84:b4:59:f9:0e:2d:4d:2f:82:15:
58:6d:73:f7:1b:25:8d:78:28:56:56:a2:eb:e2:95:b2:6e:97:
fb:a6:db:3d:14:bf:6b:66:0b:c4:b3:e0:75:1b:bb:72:34:b2:
45:98:48:54:79:c7:fd:91:b1:e3:1f:c0:95:46:72:47:07:a1:
b2:43:d9:99:96:19:e3:0d:e1:91:3e:eb:66:0b:65:ba:a0:11:
f2:98:ef:4c:f7:da:85:ee:ff:2c:19:74:84:6d:0c:3d:64:07:
24:c4:9f:f4:a1:fc:13:8b:1c:f3:f0:01:0c:6f:ea:d0:5c:0a:
4c:94:19:40:77:b3:18:3a:db:10:9c:5e:38:9f:d5:d6:f3:b8:
4d:8b:a1:e6:8f:8a:4b:ce:9a:a3:87:69:64:43:8a:5b:16:c5:
2f:ef:e3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:13 2025 by rpki-client