Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
File: V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft (raw, json)
Hash identifier: MIxyTb+Vm+iUs3ya+olJwg3iyvJCBt4Pq7QLa8Z0p1k=
Subject key identifier: 24:C1:39:CF:33:FA:38:F9:A5:DA:05:6E:65:6A:B9:68:51:92:B3:E1
Authority key identifier: 57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
Certificate issuer: /CN=578d854bd2bee242a82fb83922d149bccf19ed02
Certificate serial: 019A258A7A9464CA23A522D34FF115A84103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
Manifest number: 16FC
Signing time: Mon 27 Oct 2025 12:00:23 +0000
Manifest this update: Mon 27 Oct 2025 12:00:23 +0000
Manifest next update: Tue 28 Oct 2025 12:00:23 +0000
Files and hashes: 1: NhjTM3dOPnMsLQ7ebQq_0aK61EU.roa (hash: pDZlPFnX9elEIPNsw2D7ajm33IBeKqhaDpBvumlLRQw=)
2: O9m05o_UDIKemPeCfI7Sc16B69Y.roa (hash: yXqGk5sjcirZhyM4OHBNZEpEXcAXLb0N0cHRwAFg1zo=)
3: V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl (hash: lvE3kgth0mq5eaQERtXcxmrgfUEp0kS8UipQdtLdDlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:7a:94:64:ca:23:a5:22:d3:4f:f1:15:a8:41:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578d854bd2bee242a82fb83922d149bccf19ed02
Validity
Not Before: Oct 27 12:00:23 2025 GMT
Not After : Oct 28 12:00:23 2025 GMT
Subject: CN=24c139cf33fa38f9a5da056e656ab9685192b3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:27:92:fd:51:00:5f:83:8b:96:8a:ab:48:f9:
f5:e6:1d:1d:55:1a:3d:42:b9:87:a7:e8:99:a4:57:
af:b9:4b:ce:6c:37:1d:22:d4:42:c7:30:ae:60:ef:
b7:4d:aa:8d:86:2d:47:a4:7c:9e:a6:1c:5b:d3:7c:
db:5a:95:f4:83:ea:ba:5d:17:7e:74:b5:04:94:14:
22:2e:95:92:bc:df:7e:65:67:4e:29:ae:c0:c3:d4:
b6:e3:8c:f5:e3:f0:54:a8:ab:23:b1:ca:0f:00:82:
f5:48:80:76:6e:26:4a:4d:ff:25:a7:fa:ac:46:20:
a0:ad:bf:4c:74:c1:34:bf:b8:08:a0:a2:70:5d:e6:
ff:ea:54:a6:61:ab:da:45:10:9c:c4:20:21:d4:41:
27:d6:18:84:d2:0c:5d:ee:84:bd:34:ca:d8:b1:18:
7a:40:30:7a:18:f2:f1:51:5c:58:23:54:05:2e:0c:
ae:29:ed:0c:c3:8e:52:c9:fc:89:ee:95:e9:bb:6b:
b6:51:67:7b:fa:fd:49:d3:64:6f:e1:3b:70:37:eb:
d3:d6:02:47:e7:e3:02:f2:63:27:ca:70:9a:d9:20:
2b:30:7c:9b:ae:09:07:2d:4c:45:2d:c4:cc:4a:bf:
a4:82:61:8c:76:ba:0d:88:ba:95:e7:c5:08:ed:7f:
83:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C1:39:CF:33:FA:38:F9:A5:DA:05:6E:65:6A:B9:68:51:92:B3:E1
X509v3 Authority Key Identifier:
keyid:57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e2:a2:a4:51:8b:14:bb:66:7f:8a:aa:51:e9:97:18:30:a4:
4f:a2:a3:7d:b0:1e:8f:9c:00:12:9a:84:82:b5:e8:00:02:10:
a2:e4:52:b5:8b:eb:d4:d1:d8:e2:92:7c:f0:5b:f4:6c:ad:20:
c9:ac:73:7c:2d:66:ee:df:f0:c2:78:f5:2b:13:57:1a:24:69:
d2:34:d3:e5:c4:9b:9d:4a:ab:f7:0d:72:e5:5a:86:a4:ba:55:
4d:d0:b0:7b:61:30:35:40:a0:00:d8:63:66:07:76:42:2b:83:
81:4a:81:a2:7f:b9:29:14:8a:f4:7a:69:26:30:44:56:02:5d:
9d:0e:00:94:ab:1e:d4:f3:ad:fb:93:4d:0e:6c:93:cc:08:83:
0c:94:5f:77:63:bd:ad:44:69:58:4e:32:f0:56:39:1d:9a:22:
a2:13:b5:bf:a0:95:85:f0:02:c7:8f:f3:8d:87:bf:42:f6:c8:
48:ac:d4:c9:eb:b6:46:90:d1:33:d7:cd:ce:8c:6e:bd:b7:13:
2e:ad:e8:e5:17:d2:20:dd:17:84:75:75:c3:92:9a:cb:0d:57:
91:fe:8e:74:37:30:9c:b3:37:87:0b:a1:0b:37:96:e1:47:fb:
59:76:97:6f:14:b2:e1:f3:c7:2c:d5:24:c5:48:dd:9d:cf:05:
d6:f7:88:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 20:32:01 2025 by rpki-client