Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
File: v-b8dorUe5aOCiWf7Mij2jL6xeo.mft (raw, json)
Hash identifier: DMicyGPG1dC3EMzKjQLZ2ktPgwPsD/KX6Cylxkdy0UA=
Subject key identifier: B4:2F:AE:AF:4B:17:C3:F7:D8:A7:FF:A1:51:9A:44:07:C5:85:B0:F6
Authority key identifier: BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
Certificate issuer: /CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Certificate serial: 019A1F1B13A74BDE6919705B930F9AFC3969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
Manifest number: 16F9
Signing time: Sun 26 Oct 2025 06:00:59 +0000
Manifest this update: Sun 26 Oct 2025 06:00:59 +0000
Manifest next update: Mon 27 Oct 2025 06:00:59 +0000
Files and hashes: 1: BbPU1Bnn4njLoJyEV_1fon0xq_M.roa (hash: hSofywL/61c+ycaV0QrJyYDUafrPsowFjsTpxS/wPU8=)
2: idgepXLlrREH-xoC6R-XHWqyAro.roa (hash: m88a+GTZ/SRnSaetSuTlX6BeBnowd2dvflLVRuisI/M=)
3: v-b8dorUe5aOCiWf7Mij2jL6xeo.crl (hash: TNSgffKVvM7Er1BP2s1WY06stXfGJdkwmx+OlD7no3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 05:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:1b:13:a7:4b:de:69:19:70:5b:93:0f:9a:fc:39:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Validity
Not Before: Oct 26 06:00:59 2025 GMT
Not After : Oct 27 06:00:59 2025 GMT
Subject: CN=b42faeaf4b17c3f7d8a7ffa1519a4407c585b0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:82:c3:67:e1:ec:6f:69:a0:80:93:34:9c:81:
86:cf:e2:b2:80:e9:df:11:83:9c:3f:27:55:aa:e1:
2c:dd:5c:84:d3:a3:32:ff:8d:38:90:a7:10:a8:d0:
fb:85:fb:0d:04:e7:c4:b4:2f:32:dd:a4:76:ec:8c:
2d:c2:6a:0c:4e:f5:38:a4:89:6c:5e:f8:02:0c:59:
d1:28:49:9f:0b:ae:a6:2c:3b:ea:fc:b0:87:ac:e3:
66:5b:e3:30:5c:0f:56:50:58:f2:c0:a7:4a:a0:16:
d5:32:3c:13:41:16:a3:8d:6f:8f:dc:a6:e1:57:ae:
1b:8e:cf:e7:cc:d5:0f:1c:7b:de:53:3a:ab:7d:a4:
7e:90:9c:19:27:e6:b8:46:70:e3:a3:cf:83:f1:24:
ed:10:00:a2:13:51:44:ab:4a:4f:18:e8:0c:e0:8d:
a1:8e:02:ea:d8:41:34:9e:f6:cc:a3:56:64:9b:9e:
72:94:d6:2a:2a:e4:91:e6:04:7d:8c:f9:fc:68:c9:
1b:25:32:3d:52:a4:a1:61:9a:e4:27:c7:21:88:23:
60:b3:70:33:91:93:ab:99:83:c0:5e:a3:af:3c:0e:
10:41:87:15:df:2b:59:b4:ab:ab:cd:bd:14:d5:4e:
a2:a8:5b:3a:98:2f:73:72:49:1b:70:73:3f:a2:72:
ad:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2F:AE:AF:4B:17:C3:F7:D8:A7:FF:A1:51:9A:44:07:C5:85:B0:F6
X509v3 Authority Key Identifier:
keyid:BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:d3:cd:6b:21:06:a2:9a:bb:a7:3e:8a:22:2a:60:2c:f8:7e:
9d:f1:66:71:c5:b1:42:b6:1f:2d:ef:7b:e0:98:50:cd:b0:73:
62:9f:74:bd:59:2f:51:ad:9d:c8:1f:19:6c:a8:45:de:b2:48:
4e:6b:b0:3b:49:51:fd:1b:b7:80:12:cc:e9:0a:70:2f:49:56:
d8:02:10:4b:28:18:bd:7d:bd:be:11:61:00:c0:3f:90:0a:34:
55:8b:ee:f3:b1:67:d5:d9:85:b4:69:a6:ae:cf:49:3f:bd:85:
8e:2c:60:b8:71:1f:58:9e:2f:45:70:ee:5b:7f:56:68:58:00:
69:84:4f:6e:a7:b5:45:ed:70:bd:9b:50:56:85:11:09:5a:01:
e8:83:de:4e:4d:8d:5e:2f:b5:de:d7:57:17:b4:93:6d:24:8d:
7e:b0:1c:66:ff:3e:d1:0d:8b:ff:8b:64:c0:7e:f4:80:1d:de:
8e:61:e4:d1:4a:40:3a:14:89:97:a4:63:0e:84:b2:8a:70:c2:
c3:c8:cb:9e:15:13:98:14:ce:9f:d5:ce:b8:36:ee:34:2d:90:
b4:fc:f3:f2:11:92:b6:61:e9:17:10:c6:04:6f:1a:d2:dd:e8:
fb:37:3f:03:1e:1e:d0:36:ff:80:d3:13:ea:82:c8:d5:1c:38:
f6:dc:7d:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZofGxOnS95pGXBbkw+a/DlpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZTZmYzc2OGFkNDdiOTY4ZTBhMjU5ZmVjYzhhM2RhMzJm
YWM1ZWEwHhcNMjUxMDI2MDYwMDU5WhcNMjUxMDI3MDYwMDU5WjAzMTEwLwYDVQQD
EyhiNDJmYWVhZjRiMTdjM2Y3ZDhhN2ZmYTE1MTlhNDQwN2M1ODViMGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+4LDZ+Hsb2mggJM0nIGGz+KygOnf
EYOcPydVquEs3VyE06My/404kKcQqND7hfsNBOfEtC8y3aR27IwtwmoMTvU4pIls
XvgCDFnRKEmfC66mLDvq/LCHrONmW+MwXA9WUFjywKdKoBbVMjwTQRajjW+P3Kbh
V64bjs/nzNUPHHveUzqrfaR+kJwZJ+a4RnDjo8+D8STtEACiE1FEq0pPGOgM4I2h
jgLq2EE0nvbMo1Zkm55ylNYqKuSR5gR9jPn8aMkbJTI9UqShYZrkJ8chiCNgs3Az
kZOrmYPAXqOvPA4QQYcV3ytZtKurzb0U1U6iqFs6mC9zckkbcHM/onKteQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQvrq9LF8P32Kf/oVGaRAfFhbD2MB8GA1UdIwQY
MBaAFL/m/HaK1HuWjgoln+zIo9oy+sXqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdi1iOGRvclVlNWFPQ2lXZjdNaWoyakw2eGVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wMGM3MTEtMGMyOS00MzAxLTk0YmMt
ZWE1N2NiZTM2ODExLzEvdi1iOGRvclVlNWFPQ2lXZjdNaWoyakw2eGVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8wMGM3MTEtMGMyOS00MzAxLTk0YmMtZWE1N2NiZTM2ODEx
LzEvdi1iOGRvclVlNWFPQ2lXZjdNaWoyakw2eGVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn9PNayEG
opq7pz6KIipgLPh+nfFmccWxQrYfLe974JhQzbBzYp90vVkvUa2dyB8ZbKhF3rJI
TmuwO0lR/Ru3gBLM6QpwL0lW2AIQSygYvX29vhFhAMA/kAo0VYvu87Fn1dmFtGmm
rs9JP72FjixguHEfWJ4vRXDuW39WaFgAaYRPbqe1Re1wvZtQVoURCVoB6IPeTk2N
Xi+13tdXF7STbSSNfrAcZv8+0Q2L/4tkwH70gB3ejmHk0UpAOhSJl6RjDoSyinDC
w8jLnhUTmBTOn9XOuDbuNC2QtPzz8hGStmHpFxDGBG8a0t3o+zc/Ax4e0Db/gNMT
6oLI1Rw49tx9hw==
-----END CERTIFICATE-----
Generated at Sun Oct 26 13:48:03 2025 by rpki-client