Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
File: dVSsTH9FHFu5OC-81G1wxMD53lY.mft (raw, json)
Hash identifier: 1cGAPaithhHbLQIXDvZTI0ZPm5nE0HxdE0aatQeW71o=
Subject key identifier: 9E:7A:FD:AB:4E:20:14:D2:D5:F4:EB:DE:93:38:31:9C:ED:CF:C8:85
Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Certificate serial: 019A23D34A2EDBBC8FB98FEC55A1773D1710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
Manifest number: 1707
Signing time: Mon 27 Oct 2025 04:00:40 +0000
Manifest this update: Mon 27 Oct 2025 04:00:40 +0000
Manifest next update: Tue 28 Oct 2025 04:00:40 +0000
Files and hashes: 1: 54dHE0jadLwCWG8zkr-DJUOEEaw.roa (hash: oNDnO3daYus3xELeZDv1QShW9ceHJLAT7TByuVM8qlM=)
2: G5C1ZqYlTLCRRxbHStMwHe3D7Ns.roa (hash: LpFTYAOw4TDfnjUrddNXOWvBHb296+OG0h5PcCYbZJE=)
3: L_hiJ_zTIPvJHKnWltGOdh1BBUE.roa (hash: fnkqnOVp0hCGhUIs9oj2vYD3xsZ2o6VTqPgLKa54b08=)
4: _udyEbevQeyPMsntui78RQRmYXo.roa (hash: 8RRyytezjUw6YTel2ifQgoEKUcJPXqM6Y67HGaLLOtA=)
5: dVSsTH9FHFu5OC-81G1wxMD53lY.crl (hash: Likz179oQyYLFBigRdg2XlBXhSbcDoPFFcI2qO4Wxck=)
6: d_QjM08NyWxu6Tcwa6Z9vaHDI6E.roa (hash: 2UiuRNdprh1vh3n/JUuIuP4pSF4iJgcL2G0BqHfLcb8=)
7: gu5dao22fJp9scPActSQNTp8QK4.roa (hash: SFp8Pdfj96YgeaI0ilX+9ls8kY++x5GaLl2llXmCJNc=)
8: jwpY6rERA_zyIv98bpD7R8nes4o.roa (hash: zhq9elSEk74CwB7NZMhv2D35pQpbRAFiT6FBizp5Yp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d3:4a:2e:db:bc:8f:b9:8f:ec:55:a1:77:3d:17:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Validity
Not Before: Oct 27 04:00:40 2025 GMT
Not After : Oct 28 04:00:40 2025 GMT
Subject: CN=9e7afdab4e2014d2d5f4ebde9338319cedcfc885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:38:8b:0d:d2:70:33:09:19:59:20:c5:a9:b7:
35:5b:3f:07:b0:6a:6b:8f:55:f2:a2:2c:a2:a4:47:
72:ee:bd:e7:56:61:f4:21:73:2c:43:2c:84:1c:dd:
e4:bd:6e:7d:b8:bd:1b:d0:2a:62:03:70:6b:c7:3f:
6f:39:35:5e:69:7d:52:96:e3:6e:45:bc:a1:3e:20:
12:de:eb:fb:ad:3f:c9:7e:5d:1c:ba:11:93:2a:31:
d7:8c:8c:cc:70:17:4f:0c:af:d2:65:13:3f:cb:3f:
ce:52:3f:6c:25:4f:fd:5b:75:f2:1b:6c:dc:fd:88:
e0:62:8e:d3:0c:3c:97:41:9b:a3:32:ce:73:d2:01:
7d:37:ff:90:28:4a:88:17:2b:5e:e4:1d:92:5f:72:
f1:b2:02:e2:d0:3f:64:05:f1:b7:f2:1e:49:1e:f6:
b1:83:39:c0:e2:71:05:05:25:b5:c4:df:3c:1d:21:
14:3a:e8:56:57:b1:2f:e0:86:a4:c8:90:43:c1:9b:
de:56:2d:7e:5a:44:5e:8a:01:66:44:a2:e5:d8:13:
ba:a4:3e:94:0b:05:8b:2c:68:9d:5d:da:4c:cc:17:
64:cf:29:95:c0:ef:e6:7d:15:f7:06:f0:ea:61:a5:
74:64:70:48:5b:2b:eb:a7:85:18:8f:b0:cf:59:cf:
d9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7A:FD:AB:4E:20:14:D2:D5:F4:EB:DE:93:38:31:9C:ED:CF:C8:85
X509v3 Authority Key Identifier:
keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ca:89:37:91:3b:c3:10:94:95:92:69:4c:d1:5b:0d:f2:6e:
1d:e6:6a:2f:b5:80:c8:2f:71:f6:57:dd:23:7c:47:0d:96:15:
80:8f:7e:e2:d8:97:d4:b4:96:66:24:35:cb:52:45:49:f8:35:
6d:5d:d2:08:51:f7:fb:ec:32:5a:c0:f1:2d:b9:c4:a5:bc:f9:
f6:83:8a:f1:53:bb:0a:e5:83:12:88:ea:14:85:df:04:c3:e5:
d1:09:df:ab:ab:f5:71:73:82:83:e9:6e:e5:13:e0:0e:3c:4f:
78:7c:bf:ae:87:f7:03:0e:29:ad:0e:7f:bc:93:e5:c1:0c:5a:
58:ed:4d:6d:86:38:e6:be:c3:15:15:3a:4e:f3:16:57:d3:24:
dc:0d:bf:d1:3c:ba:0c:58:e5:54:4e:45:fd:a7:bc:4b:26:3d:
71:71:64:8f:d3:ce:0b:4b:3e:71:dd:a7:c3:e8:cc:72:e2:82:
b3:59:ab:9f:08:90:79:09:15:1b:2b:2f:82:17:b9:1a:fa:b8:
b0:bf:7a:55:e1:0c:cc:b3:f1:71:44:50:a0:73:f0:bf:98:c2:
c5:3d:d7:ff:6a:c4:c9:53:31:a8:1c:2d:8b:34:9f:3b:b1:93:
13:b8:9c:86:1e:76:22:c5:c1:fc:6f:86:25:df:4c:3d:9d:89:
43:75:b3:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoj00ou27yPuY/sVaF3PRcQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NTRhYzRjN2Y0NTFjNWJiOTM4MmZiY2Q0NmQ3MGM0YzBm
OWRlNTYwHhcNMjUxMDI3MDQwMDQwWhcNMjUxMDI4MDQwMDQwWjAzMTEwLwYDVQQD
Eyg5ZTdhZmRhYjRlMjAxNGQyZDVmNGViZGU5MzM4MzE5Y2VkY2ZjODg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ziLDdJwMwkZWSDFqbc1Wz8HsGpr
j1XyoiyipEdy7r3nVmH0IXMsQyyEHN3kvW59uL0b0CpiA3Brxz9vOTVeaX1SluNu
RbyhPiAS3uv7rT/Jfl0cuhGTKjHXjIzMcBdPDK/SZRM/yz/OUj9sJU/9W3XyG2zc
/YjgYo7TDDyXQZujMs5z0gF9N/+QKEqIFyte5B2SX3LxsgLi0D9kBfG38h5JHvax
gznA4nEFBSW1xN88HSEUOuhWV7Ev4IakyJBDwZveVi1+WkReigFmRKLl2BO6pD6U
CwWLLGidXdpMzBdkzymVwO/mfRX3BvDqYaV0ZHBIWyvrp4UYj7DPWc/ZlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ56/atOIBTS1fTr3pM4MZztz8iFMB8GA1UdIwQY
MBaAFHVUrEx/RRxbuTgvvNRtcMTA+d5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4Mjgt
ZDkzMzdkYjM5ZDFmLzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4MjgtZDkzMzdkYjM5ZDFm
LzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbcqJN5E7
wxCUlZJpTNFbDfJuHeZqL7WAyC9x9lfdI3xHDZYVgI9+4tiX1LSWZiQ1y1JFSfg1
bV3SCFH3++wyWsDxLbnEpbz59oOK8VO7CuWDEojqFIXfBMPl0Qnfq6v1cXOCg+lu
5RPgDjxPeHy/rof3Aw4prQ5/vJPlwQxaWO1NbYY45r7DFRU6TvMWV9Mk3A2/0Ty6
DFjlVE5F/ae8SyY9cXFkj9POC0s+cd2nw+jMcuKCs1mrnwiQeQkVGysvghe5Gvq4
sL96VeEMzLPxcURQoHPwv5jCxT3X/2rEyVMxqBwtizSfO7GTE7ichh52IsXB/G+G
Jd9MPZ2JQ3WzXA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 07:54:51 2025 by rpki-client