Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
File: v-NULdY_7SUN5ctl9uykh-f0eEc.mft (raw, json)
Hash identifier: kbBKyHAWLHbPNhoD59jIOXFAGwhvI5XhOaKgdx7ioiw=
Subject key identifier: 3C:30:4E:2A:F6:5A:4C:DA:7B:05:23:08:7A:58:23:97:AD:C6:96:7E
Authority key identifier: BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
Certificate issuer: /CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Certificate serial: 019A232E3A6ACC88100130E3D788B5A32E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
Manifest number: 16F6
Signing time: Mon 27 Oct 2025 01:00:23 +0000
Manifest this update: Mon 27 Oct 2025 01:00:23 +0000
Manifest next update: Tue 28 Oct 2025 01:00:23 +0000
Files and hashes: 1: 7_ycmg0-2tzp7CIdo8gplL9a278.roa (hash: XEoDI5Kr97fRLNGyRswSpfdzIPuYNKJgNWwTLw/sOpg=)
2: u42E-rWAmQgBLYpngQke_W6nUiE.roa (hash: skcKb420yoQzvUX8+CNyJl60MwIyb91kXhUGkdXKV9A=)
3: v-NULdY_7SUN5ctl9uykh-f0eEc.crl (hash: QLSl1k3vnghS5cn/lw3f2zN82Nu5m5Zwcu/+o8PzJ9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:3a:6a:cc:88:10:01:30:e3:d7:88:b5:a3:2e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Validity
Not Before: Oct 27 01:00:23 2025 GMT
Not After : Oct 28 01:00:23 2025 GMT
Subject: CN=3c304e2af65a4cda7b0523087a582397adc6967e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ff:67:60:67:04:c8:f2:34:99:05:45:08:15:
64:53:5d:6c:75:5b:02:f0:54:e0:20:9d:8b:ac:8b:
f0:ef:9e:f3:40:fe:27:63:07:28:9c:eb:ec:2d:11:
17:14:8f:76:e6:1f:74:3e:f2:22:da:38:88:bd:69:
41:9d:7d:45:90:c7:3c:29:eb:33:01:62:29:ce:60:
58:7f:56:f3:60:38:ab:38:5f:98:96:56:16:69:1b:
46:c1:73:d6:6e:c5:cc:c1:84:b1:97:e8:09:aa:9a:
54:1b:4e:46:6a:ff:e4:2f:f6:c2:6e:2e:fc:26:50:
53:3a:c8:93:f6:5c:29:5f:71:2b:c5:9f:70:9f:20:
37:fc:13:31:e7:d8:37:79:6a:64:73:c6:1e:24:76:
cc:d9:82:0a:2c:04:52:ea:37:32:39:ff:37:b2:e7:
f1:a0:65:6b:c2:18:bb:b6:c7:5f:92:9f:2a:6c:32:
67:a6:15:62:c1:4b:2e:3b:3c:91:de:4e:a2:5a:1e:
d7:66:5b:e0:d2:60:93:1d:46:9c:a6:77:1f:5b:3b:
d0:8a:2b:37:c7:cb:fa:82:ca:15:9b:55:4b:83:48:
f2:24:56:30:43:7f:36:01:b8:01:3c:67:65:ae:e5:
f4:1f:c7:07:ed:b9:14:1a:08:f8:b5:91:a8:09:85:
03:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:30:4E:2A:F6:5A:4C:DA:7B:05:23:08:7A:58:23:97:AD:C6:96:7E
X509v3 Authority Key Identifier:
keyid:BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:2d:08:2b:0d:16:03:40:27:bc:a2:3c:4a:a9:8f:72:7e:3b:
c6:16:d1:4f:03:4b:78:63:ed:8c:d7:cc:e8:0c:78:96:51:d1:
6a:ce:1f:2d:32:bc:69:36:e4:d0:14:60:50:17:74:4f:a7:73:
ed:36:c5:76:2d:fa:d3:02:61:c1:8b:a8:c7:d4:e6:98:93:61:
cb:54:14:ec:7a:9d:f2:04:41:e1:01:a0:e1:6e:12:5b:e2:34:
23:de:5a:96:49:11:52:5e:5a:d3:24:cb:46:e7:d3:88:8e:07:
5d:e4:75:49:42:c7:c0:89:6d:c2:b7:b1:9f:53:18:c6:45:b8:
43:4f:db:28:d0:65:c1:17:2d:cc:f1:82:30:bc:71:54:eb:f0:
89:61:6e:f2:f7:83:ac:e0:d4:45:ff:ba:a6:67:10:c1:20:43:
46:5b:3b:60:65:c5:64:d3:b3:cc:c1:22:1f:fa:cf:11:e6:c9:
6d:10:5b:28:27:47:b7:98:db:04:fb:eb:d5:7d:2c:50:30:cf:
20:15:0e:31:1b:b0:17:10:3f:37:87:66:ab:06:1b:b7:52:59:
b6:c9:04:93:c7:dd:21:21:04:2e:ba:41:95:33:c1:ec:5b:cf:
d2:6a:eb:d9:7b:81:4c:80:a4:b1:c8:f0:28:f4:d7:e3:16:92:
65:7f:b0:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZojLjpqzIgQATDj14i1oy4IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZTM1NDJkZDYzZmVkMjUwZGU1Y2I2NWY2ZWNhNDg3ZTdm
NDc4NDcwHhcNMjUxMDI3MDEwMDIzWhcNMjUxMDI4MDEwMDIzWjAzMTEwLwYDVQQD
EygzYzMwNGUyYWY2NWE0Y2RhN2IwNTIzMDg3YTU4MjM5N2FkYzY5NjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiP9nYGcEyPI0mQVFCBVkU11sdVsC
8FTgIJ2LrIvw757zQP4nYwconOvsLREXFI925h90PvIi2jiIvWlBnX1FkMc8Kesz
AWIpzmBYf1bzYDirOF+YllYWaRtGwXPWbsXMwYSxl+gJqppUG05Gav/kL/bCbi78
JlBTOsiT9lwpX3ErxZ9wnyA3/BMx59g3eWpkc8YeJHbM2YIKLARS6jcyOf83sufx
oGVrwhi7tsdfkp8qbDJnphViwUsuOzyR3k6iWh7XZlvg0mCTHUacpncfWzvQiis3
x8v6gsoVm1VLg0jyJFYwQ382AbgBPGdlruX0H8cH7bkUGgj4tZGoCYUDSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwwTir2WkzaewUjCHpYI5etxpZ+MB8GA1UdIwQY
MBaAFL/jVC3WP+0lDeXLZfbspIfn9HhHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdi1OVUxkWV83U1VONWN0bDl1eWtoLWYwZUVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9iMTU2NTgtMTBiNi00MDQxLWEzZGEt
OGQzYTZkMTY1ZGEzLzEvdi1OVUxkWV83U1VONWN0bDl1eWtoLWYwZUVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9iMTU2NTgtMTBiNi00MDQxLWEzZGEtOGQzYTZkMTY1ZGEz
LzEvdi1OVUxkWV83U1VONWN0bDl1eWtoLWYwZUVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoy0IKw0W
A0AnvKI8SqmPcn47xhbRTwNLeGPtjNfM6Ax4llHRas4fLTK8aTbk0BRgUBd0T6dz
7TbFdi360wJhwYuox9TmmJNhy1QU7Hqd8gRB4QGg4W4SW+I0I95alkkRUl5a0yTL
RufTiI4HXeR1SULHwIltwrexn1MYxkW4Q0/bKNBlwRctzPGCMLxxVOvwiWFu8veD
rODURf+6pmcQwSBDRls7YGXFZNOzzMEiH/rPEebJbRBbKCdHt5jbBPvr1X0sUDDP
IBUOMRuwFxA/N4dmqwYbt1JZtskEk8fdISEELrpBlTPB7FvP0mrr2XuBTICkscjw
KPTX4xaSZX+wIw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 09:16:04 2025 by rpki-client