Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
File: v9gcqQzFIkWGr-urHHixeQJo1cE.mft (raw, json)
Hash identifier: WgSuKlVmi5lqUI5a245tjAeZ4I6qpxoIiztHoGxA2cE=
Subject key identifier: 40:BB:38:32:43:E1:38:4A:62:9D:14:0C:86:4D:8E:65:C3:F6:1E:65
Authority key identifier: BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
Certificate issuer: /CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Certificate serial: 019A0AB87B375295522C51348EB7A99ECED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
Manifest number: 16EA
Signing time: Wed 22 Oct 2025 07:00:53 +0000
Manifest this update: Wed 22 Oct 2025 07:00:53 +0000
Manifest next update: Thu 23 Oct 2025 07:00:53 +0000
Files and hashes: 1: 9UunLY0e7RvMMeMDRjD3u7_pf2Y.roa (hash: 7lRPIrPRKCCE3BPTd9dDNpxXDgXsPWg+ml+ju6JbueA=)
2: ncR4oR_y2D6exGXXU4466Dj_Hq0.roa (hash: QHWP1FBTjP+R0Pof3RRPjusJf04L/sCOEBJrDKRdhZ4=)
3: rOoYFHKRe7ghGBjkeruHV6kIlyA.roa (hash: elXY8PrAbFgsd98hRj7mkOX8iG0smL3sFgAD/6xBNtE=)
4: v9gcqQzFIkWGr-urHHixeQJo1cE.crl (hash: FflqOUh9jeyzDV5OszPO4hADsYJcpRzupySjTdDI7rY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:b8:7b:37:52:95:52:2c:51:34:8e:b7:a9:9e:ce:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Validity
Not Before: Oct 22 07:00:53 2025 GMT
Not After : Oct 23 07:00:53 2025 GMT
Subject: CN=40bb383243e1384a629d140c864d8e65c3f61e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3a:16:6b:fb:a1:df:0d:86:ad:c5:6b:fe:e9:
49:cc:9a:65:6f:37:73:f0:34:b0:3c:34:90:59:5a:
7d:27:76:b5:5d:50:5c:f9:2f:3a:58:5a:73:99:f4:
4c:71:32:d4:97:da:7e:86:64:66:35:f8:f7:b7:b3:
36:f2:26:6a:51:25:f7:e2:4f:ae:b8:67:26:71:75:
6c:3e:84:26:b4:31:79:a4:e2:78:f0:af:95:c2:ce:
e0:91:80:42:c9:c5:03:b4:d0:3d:8b:e7:58:97:d0:
72:02:76:60:63:89:ea:14:95:21:bc:40:18:d9:78:
4f:4b:d1:45:3d:26:46:93:b8:ee:e6:a2:b0:59:e9:
f6:02:c1:f8:2e:7a:20:0a:f6:2e:20:38:9a:c3:ab:
a4:75:50:aa:af:2b:43:81:10:4f:35:16:19:8d:05:
e0:51:93:67:1f:52:74:1e:5b:96:10:3a:b2:de:96:
34:35:c9:17:be:f1:67:94:89:ac:cf:75:8c:9a:91:
3a:dc:60:57:1a:a0:d7:c1:a5:64:86:4e:2c:88:ff:
db:de:50:a6:35:91:7d:9c:07:7d:47:19:f9:5c:5d:
67:f3:49:f0:0b:48:ea:aa:a7:e2:a9:12:9f:bb:21:
22:69:01:86:6d:c3:ca:cc:6a:75:6d:8e:6f:38:9b:
54:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BB:38:32:43:E1:38:4A:62:9D:14:0C:86:4D:8E:65:C3:F6:1E:65
X509v3 Authority Key Identifier:
keyid:BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ee:55:1d:b0:45:2d:f2:ab:46:80:4c:cb:4a:d0:97:8e:8f:
a2:5f:d6:18:2e:8c:18:fd:2a:48:bc:73:83:1b:7b:cf:c3:21:
8b:12:77:ac:d4:ad:00:5b:41:d8:c9:4b:5f:af:07:d1:32:0d:
9c:73:3f:ed:72:8a:fb:83:6b:ba:a3:01:69:91:47:bf:19:62:
51:01:fc:71:6a:00:62:62:1e:ac:c8:8d:d6:00:f0:ff:14:8c:
f4:9b:d6:36:84:3a:eb:9b:7c:a8:25:c3:56:00:80:ad:fb:3f:
0c:a8:97:0f:cd:de:c7:25:6e:97:c9:6d:35:29:fc:50:8e:b5:
70:c7:d6:87:97:2c:2f:ec:7a:cb:ab:76:e7:54:75:d7:ec:f6:
7c:d9:e7:0d:13:d8:fb:38:26:de:0c:cb:70:d8:6d:09:8c:a9:
9a:83:6e:41:4d:5e:5a:6b:65:68:49:db:27:f7:2f:61:23:6e:
57:f5:ba:0b:16:62:3f:df:36:14:15:eb:e2:71:4b:6f:06:0b:
cd:1e:af:1a:16:02:5f:d5:a9:da:4a:f9:ad:56:66:12:41:05:
a0:89:6e:61:11:0e:d5:cf:1b:36:ea:77:5c:4a:ab:6a:18:e4:
a7:13:ba:28:3a:c3:19:64:42:34:c7:22:30:dc:a1:7d:81:31:
80:8e:4c:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoKuHs3UpVSLFE0jrepns7UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZDgxY2E5MGNjNTIyNDU4NmFmZWJhYjFjNzhiMTc5MDI2
OGQ1YzEwHhcNMjUxMDIyMDcwMDUzWhcNMjUxMDIzMDcwMDUzWjAzMTEwLwYDVQQD
Eyg0MGJiMzgzMjQzZTEzODRhNjI5ZDE0MGM4NjRkOGU2NWMzZjYxZTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjoWa/uh3w2GrcVr/ulJzJplbzdz
8DSwPDSQWVp9J3a1XVBc+S86WFpzmfRMcTLUl9p+hmRmNfj3t7M28iZqUSX34k+u
uGcmcXVsPoQmtDF5pOJ48K+Vws7gkYBCycUDtNA9i+dYl9ByAnZgY4nqFJUhvEAY
2XhPS9FFPSZGk7ju5qKwWen2AsH4LnogCvYuIDiaw6ukdVCqrytDgRBPNRYZjQXg
UZNnH1J0HluWEDqy3pY0NckXvvFnlImsz3WMmpE63GBXGqDXwaVkhk4siP/b3lCm
NZF9nAd9Rxn5XF1n80nwC0jqqqfiqRKfuyEiaQGGbcPKzGp1bY5vOJtUcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEC7ODJD4ThKYp0UDIZNjmXD9h5lMB8GA1UdIwQY
MBaAFL/YHKkMxSJFhq/rqxx4sXkCaNXBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjlnY3FRekZJa1dHci11ckhIaXhlUUpvMWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8yNWE1OWMtYzJmYy00ZmQ0LTk2Zjct
ODRhZGNiZjVhYzU1LzEvdjlnY3FRekZJa1dHci11ckhIaXhlUUpvMWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8yNWE1OWMtYzJmYy00ZmQ0LTk2ZjctODRhZGNiZjVhYzU1
LzEvdjlnY3FRekZJa1dHci11ckhIaXhlUUpvMWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYO5VHbBF
LfKrRoBMy0rQl46Pol/WGC6MGP0qSLxzgxt7z8MhixJ3rNStAFtB2MlLX68H0TIN
nHM/7XKK+4NruqMBaZFHvxliUQH8cWoAYmIerMiN1gDw/xSM9JvWNoQ665t8qCXD
VgCArfs/DKiXD83exyVul8ltNSn8UI61cMfWh5csL+x6y6t251R11+z2fNnnDRPY
+zgm3gzLcNhtCYypmoNuQU1eWmtlaEnbJ/cvYSNuV/W6CxZiP982FBXr4nFLbwYL
zR6vGhYCX9Wp2kr5rVZmEkEFoIluYREO1c8bNup3XEqrahjkpxO6KDrDGWRCNMci
MNyhfYExgI5MQA==
-----END CERTIFICATE-----
Generated at Wed Oct 22 14:19:57 2025 by rpki-client