Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/V_nB-yK84e8kHdfviSpRjQVmqKs.mft
File: V_nB-yK84e8kHdfviSpRjQVmqKs.mft (raw, json)
Hash identifier: XJF1pr6e1BXMAUsU6ZySKMbeohWF8QrC6IuFvm6ZImE=
Subject key identifier: 73:0B:6C:86:C1:DC:8B:00:F4:E7:3E:25:9A:F4:A2:B9:3B:1C:DB:3D
Authority key identifier: 57:F9:C1:FB:22:BC:E1:EF:24:1D:D7:EF:89:2A:51:8D:05:66:A8:AB
Certificate issuer: /CN=57f9c1fb22bce1ef241dd7ef892a518d0566a8ab
Certificate serial: 019A28C2E0E0FAF08BDD887167D9424A1278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V_nB-yK84e8kHdfviSpRjQVmqKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/V_nB-yK84e8kHdfviSpRjQVmqKs.mft
Manifest number: 16FB
Signing time: Tue 28 Oct 2025 03:00:51 +0000
Manifest this update: Tue 28 Oct 2025 03:00:51 +0000
Manifest next update: Wed 29 Oct 2025 03:00:51 +0000
Files and hashes: 1: V_nB-yK84e8kHdfviSpRjQVmqKs.crl (hash: cFMtaSJxBuyPnbXmXqMPL3jsDGkBVxrIJOHYo89Fr8c=)
2: fnzKoJIItFzpKqsa1DSC_YU9Oz0.roa (hash: VMMeskb+gseTxaGOSqruyC/TYUaQqqzUpJ/qPck/ehc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/V_nB-yK84e8kHdfviSpRjQVmqKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/V_nB-yK84e8kHdfviSpRjQVmqKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/V_nB-yK84e8kHdfviSpRjQVmqKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:c2:e0:e0:fa:f0:8b:dd:88:71:67:d9:42:4a:12:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57f9c1fb22bce1ef241dd7ef892a518d0566a8ab
Validity
Not Before: Oct 28 03:00:51 2025 GMT
Not After : Oct 29 03:00:51 2025 GMT
Subject: CN=730b6c86c1dc8b00f4e73e259af4a2b93b1cdb3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:58:f6:a4:3d:1f:7a:87:19:63:88:a1:92:24:
d5:2e:9f:90:7b:0b:2a:16:ed:bf:d5:12:34:d6:02:
8a:b9:89:9d:da:3e:8c:d5:bd:5a:51:3a:3f:9b:8b:
02:c3:a3:67:23:15:e1:18:38:34:d1:81:32:f8:be:
67:8a:64:51:cc:e2:a1:2e:65:d2:1b:90:77:f0:1c:
4b:c9:d6:f4:e1:48:7b:bf:e1:3f:74:f5:5b:57:fe:
72:75:28:aa:3e:d6:4d:ba:84:99:19:e2:bb:9b:3c:
70:98:ea:13:ba:c6:13:48:3c:be:88:06:c7:f5:b3:
d8:13:bd:54:33:ed:54:0f:6e:50:4c:f6:d6:72:3b:
23:88:ef:e8:f1:ff:d2:6f:97:74:5c:72:8d:5b:11:
09:40:fe:7b:5c:b4:7f:22:d5:c4:69:ba:20:e1:46:
68:48:c8:25:f1:49:f7:90:bc:5b:ba:7a:b2:11:fc:
a2:c7:9e:f4:94:2e:98:42:67:1c:03:9c:c9:27:6f:
a4:38:c5:63:5a:06:43:e6:f1:62:51:3d:ca:ca:63:
cd:23:07:ff:dc:10:e8:43:a5:7f:5f:3e:c7:05:2b:
6e:78:dd:43:02:25:6f:12:2f:03:84:bc:7c:5c:5c:
0a:d7:d6:c9:69:5f:97:ce:6a:d3:8c:3f:53:bd:6f:
6c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0B:6C:86:C1:DC:8B:00:F4:E7:3E:25:9A:F4:A2:B9:3B:1C:DB:3D
X509v3 Authority Key Identifier:
keyid:57:F9:C1:FB:22:BC:E1:EF:24:1D:D7:EF:89:2A:51:8D:05:66:A8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V_nB-yK84e8kHdfviSpRjQVmqKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/V_nB-yK84e8kHdfviSpRjQVmqKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/V_nB-yK84e8kHdfviSpRjQVmqKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:66:46:da:c5:25:27:fd:e9:28:4c:d8:21:f5:ef:6e:3b:f8:
f8:df:bd:09:55:7a:f0:8b:da:d7:82:b4:5f:ae:30:6e:1b:7a:
27:c0:8e:e9:e0:37:08:97:d7:ac:4e:9c:55:ff:d4:8f:cd:01:
ad:b3:cc:bc:0e:5f:c0:2f:5d:49:f1:3f:75:e3:57:b9:56:53:
8e:32:c5:1d:8d:28:e2:55:c6:00:fa:6c:ef:5a:ff:1a:61:3f:
78:cb:53:f6:9e:ab:b3:28:9a:4d:d1:71:5b:6b:57:b0:69:bf:
7b:97:96:16:29:b5:4e:a2:3d:7d:cc:12:b2:de:eb:aa:a8:cf:
06:cd:12:ae:b4:c1:f8:b5:11:7c:ad:33:f7:f9:d5:a1:87:45:
8d:33:0e:be:07:50:d7:05:f5:e8:a1:f5:2b:d0:d6:6f:c9:e5:
6f:ca:83:48:bc:c7:17:2a:c2:d1:83:0a:3f:f7:81:3d:22:2e:
47:34:3d:c9:73:f9:f7:82:21:b5:db:24:8b:c3:00:78:20:65:
8e:fe:9c:0e:27:a5:db:7f:34:77:63:a5:54:48:23:39:0d:76:
88:06:fa:dc:9f:5c:c7:7a:14:a2:00:5e:e0:11:65:01:06:1d:
f7:33:e2:a2:22:c7:d9:e7:4c:e3:80:31:ea:d3:74:09:ab:7c:
df:a7:bc:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoowuDg+vCL3YhxZ9lCShJ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZjljMWZiMjJiY2UxZWYyNDFkZDdlZjg5MmE1MThkMDU2
NmE4YWIwHhcNMjUxMDI4MDMwMDUxWhcNMjUxMDI5MDMwMDUxWjAzMTEwLwYDVQQD
Eyg3MzBiNmM4NmMxZGM4YjAwZjRlNzNlMjU5YWY0YTJiOTNiMWNkYjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFj2pD0feocZY4ihkiTVLp+Qewsq
Fu2/1RI01gKKuYmd2j6M1b1aUTo/m4sCw6NnIxXhGDg00YEy+L5nimRRzOKhLmXS
G5B38BxLydb04Uh7v+E/dPVbV/5ydSiqPtZNuoSZGeK7mzxwmOoTusYTSDy+iAbH
9bPYE71UM+1UD25QTPbWcjsjiO/o8f/Sb5d0XHKNWxEJQP57XLR/ItXEabog4UZo
SMgl8Un3kLxbunqyEfyix570lC6YQmccA5zJJ2+kOMVjWgZD5vFiUT3KymPNIwf/
3BDoQ6V/Xz7HBStueN1DAiVvEi8DhLx8XFwK19bJaV+XzmrTjD9TvW9s9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMLbIbB3IsA9Oc+JZr0ork7HNs9MB8GA1UdIwQY
MBaAFFf5wfsivOHvJB3X74kqUY0FZqirMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVl9uQi15Szg0ZThrSGRmdmlTcFJqUVZtcUtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS85NzY1OTctNjU5Yi00NGU0LTkyYjIt
OWQ4ZWEyMzQyOTViLzEvVl9uQi15Szg0ZThrSGRmdmlTcFJqUVZtcUtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS85NzY1OTctNjU5Yi00NGU0LTkyYjItOWQ4ZWEyMzQyOTVi
LzEvVl9uQi15Szg0ZThrSGRmdmlTcFJqUVZtcUtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALmZG2sUl
J/3pKEzYIfXvbjv4+N+9CVV68Iva14K0X64wbht6J8CO6eA3CJfXrE6cVf/Uj80B
rbPMvA5fwC9dSfE/deNXuVZTjjLFHY0o4lXGAPps71r/GmE/eMtT9p6rsyiaTdFx
W2tXsGm/e5eWFim1TqI9fcwSst7rqqjPBs0SrrTB+LURfK0z9/nVoYdFjTMOvgdQ
1wX16KH1K9DWb8nlb8qDSLzHFyrC0YMKP/eBPSIuRzQ9yXP594Ihtdski8MAeCBl
jv6cDiel2380d2OlVEgjOQ12iAb63J9cx3oUogBe4BFlAQYd9zPioiLH2edM44Ax
6tN0Cat836e8Ew==
-----END CERTIFICATE-----
Generated at Tue Oct 28 12:17:22 2025 by rpki-client