Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
File: v_9Blln1TfN4eStgLACSw1OYjsg.mft (raw, json)
Hash identifier: 2gzpDgGdjEYkeb9ItCyuLFHlA3XDwtSgO7ArpsPQk8s=
Subject key identifier: B3:F1:C3:30:7C:95:0F:05:CE:F8:90:2F:21:A1:58:D8:61:C2:FB:FC
Authority key identifier: BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
Certificate issuer: /CN=bfff419659f54df378792b602c0092c353988ec8
Certificate serial: 019A0824E8A48C07C4C2FF21324235A34478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
Manifest number: 0B2D
Signing time: Tue 21 Oct 2025 19:00:27 +0000
Manifest this update: Tue 21 Oct 2025 19:00:27 +0000
Manifest next update: Wed 22 Oct 2025 19:00:27 +0000
Files and hashes: 1: Pbu77IMqgBIggCHuoPCgPeA-JYI.roa (hash: MfbYLWDGe0vBfVw8/15weNnWm0f+1AXVR3Lu2ooMJ2Q=)
2: SJ31osOZq8GAkUzTcgDMle6L-Ko.roa (hash: OpBd6e9+J397K48R0gJPVRSyhgNBftdRPHKKbxpf8EI=)
3: TLegbcgI8kzdZX0LyaY_jBKsLjM.roa (hash: jfnT8EG89ibu6lVDZPQfuHKOWHv4n9hSUWRGapOkR0I=)
4: v_9Blln1TfN4eStgLACSw1OYjsg.crl (hash: EU9j9Leq0ge76GhOmwLpyO9CtY+BHt8kuBHnuJqM40Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:08:24:e8:a4:8c:07:c4:c2:ff:21:32:42:35:a3:44:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfff419659f54df378792b602c0092c353988ec8
Validity
Not Before: Oct 21 19:00:27 2025 GMT
Not After : Oct 22 19:00:27 2025 GMT
Subject: CN=b3f1c3307c950f05cef8902f21a158d861c2fbfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:75:c4:92:6f:fe:e1:8d:34:51:42:03:20:a0:
0a:e0:e0:07:73:0a:a6:12:1b:94:fa:41:21:7a:b6:
e6:5b:f9:44:86:7c:81:e4:4c:3c:7a:88:05:d9:94:
5a:41:a3:ba:f6:82:dc:b6:63:31:72:2c:aa:b9:9d:
03:8e:3a:70:65:b2:46:8e:59:23:c7:01:6e:7a:8c:
b5:bc:18:92:4b:74:fe:ad:74:e8:96:d1:6b:52:09:
28:02:fc:1c:70:01:e1:13:da:56:2b:6c:8c:b7:eb:
c4:c9:b4:25:53:1f:e2:e4:a8:c0:8c:3a:2d:82:b8:
fd:d5:ca:39:7b:e5:e0:e0:56:84:3e:e8:3c:c2:e0:
c7:3a:5b:b9:74:23:22:17:7d:2a:e7:9b:fd:51:ae:
93:82:dc:46:67:a6:83:3d:25:37:cf:fd:98:cf:90:
d5:2f:16:f3:38:ae:3c:a6:67:35:4c:9d:42:59:9e:
06:33:2a:d4:77:11:cc:7c:1e:cb:8d:cd:54:a9:31:
c9:b7:b1:e1:94:bd:1e:70:e2:d8:a0:29:05:af:fa:
11:99:37:a1:3f:f6:b5:91:56:70:d5:6a:01:07:ec:
1b:3c:f4:a8:b9:96:18:33:e1:a1:b6:fb:a2:0f:8f:
1a:4b:89:c6:9c:fd:61:37:a0:ef:12:85:5c:0f:d3:
3a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F1:C3:30:7C:95:0F:05:CE:F8:90:2F:21:A1:58:D8:61:C2:FB:FC
X509v3 Authority Key Identifier:
keyid:BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:24:69:c8:de:b4:2d:d2:aa:93:28:25:01:80:7d:6b:66:8f:
83:f1:02:15:bb:23:a3:57:ca:84:99:90:52:1e:47:71:62:6c:
aa:76:2b:42:a3:c8:2a:a6:2d:76:2c:b4:8a:7f:ed:f6:3a:72:
a0:c2:18:39:e1:99:18:1a:af:1f:8a:de:80:2e:37:b5:36:cd:
8b:88:07:9d:f7:dd:04:79:47:f8:82:b0:c4:1c:a7:95:98:44:
91:67:09:7e:e0:82:55:12:11:fa:05:43:6a:88:00:ed:a4:e5:
7e:8d:c9:be:41:20:14:ad:18:ac:de:d2:a1:10:c2:bb:c8:7a:
9a:3f:fa:ee:68:8b:9e:8d:2f:8d:a7:07:2a:7a:ec:c6:79:5f:
b8:12:a1:4b:32:df:d1:12:34:96:39:5d:14:94:70:40:cc:60:
7d:c2:2c:4a:4f:65:9e:26:a3:e1:3c:9f:85:db:25:98:14:22:
81:3f:81:ff:22:c8:e1:da:8f:e3:a2:5a:f1:2c:e0:85:d5:6d:
f0:df:94:49:48:17:53:99:e2:9b:b6:61:ac:b6:2d:32:b7:b9:
77:f3:8f:9b:95:cf:c3:4d:e3:70:9b:89:db:50:a8:27:d0:d2:
ee:06:99:96:5a:a2:b8:25:ea:5e:34:07:1d:5f:e2:0b:d4:b2:
71:d2:93:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoIJOikjAfEwv8hMkI1o0R4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZmY0MTk2NTlmNTRkZjM3ODc5MmI2MDJjMDA5MmMzNTM5
ODhlYzgwHhcNMjUxMDIxMTkwMDI3WhcNMjUxMDIyMTkwMDI3WjAzMTEwLwYDVQQD
EyhiM2YxYzMzMDdjOTUwZjA1Y2VmODkwMmYyMWExNThkODYxYzJmYmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXXEkm/+4Y00UUIDIKAK4OAHcwqm
EhuU+kEherbmW/lEhnyB5Ew8eogF2ZRaQaO69oLctmMxciyquZ0DjjpwZbJGjlkj
xwFueoy1vBiSS3T+rXToltFrUgkoAvwccAHhE9pWK2yMt+vEybQlUx/i5KjAjDot
grj91co5e+Xg4FaEPug8wuDHOlu5dCMiF30q55v9Ua6TgtxGZ6aDPSU3z/2Yz5DV
LxbzOK48pmc1TJ1CWZ4GMyrUdxHMfB7Ljc1UqTHJt7HhlL0ecOLYoCkFr/oRmTeh
P/a1kVZw1WoBB+wbPPSouZYYM+GhtvuiD48aS4nGnP1hN6DvEoVcD9M6AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPxwzB8lQ8FzviQLyGhWNhhwvv8MB8GA1UdIwQY
MBaAFL//QZZZ9U3zeHkrYCwAksNTmI7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdl85QmxsbjFUZk40ZVN0Z0xBQ1N3MU9ZanNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yYmExMzgtMTczNy00NzE0LTk2MGEt
NzBiZGYxNWRkNjE5LzEvdl85QmxsbjFUZk40ZVN0Z0xBQ1N3MU9ZanNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8yYmExMzgtMTczNy00NzE0LTk2MGEtNzBiZGYxNWRkNjE5
LzEvdl85QmxsbjFUZk40ZVN0Z0xBQ1N3MU9ZanNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZyRpyN60
LdKqkyglAYB9a2aPg/ECFbsjo1fKhJmQUh5HcWJsqnYrQqPIKqYtdiy0in/t9jpy
oMIYOeGZGBqvH4regC43tTbNi4gHnffdBHlH+IKwxBynlZhEkWcJfuCCVRIR+gVD
aogA7aTlfo3JvkEgFK0YrN7SoRDCu8h6mj/67miLno0vjacHKnrsxnlfuBKhSzLf
0RI0ljldFJRwQMxgfcIsSk9lniaj4TyfhdslmBQigT+B/yLI4dqP46Ja8SzghdVt
8N+USUgXU5nim7ZhrLYtMre5d/OPm5XPw03jcJuJ21CoJ9DS7gaZllqiuCXqXjQH
HV/iC9SycdKTog==
-----END CERTIFICATE-----
Generated at Tue Oct 21 22:56:46 2025 by rpki-client