Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft
File: v38LbdEqN0vCk1y-nfYeCTtVvvY.mft (raw, json)
Hash identifier: OlXAl+ezUzT3+e6bs0Hza9nfmKePRc71dbk30QsD21A=
Subject key identifier: E2:59:CC:28:81:AB:CB:8B:18:FD:13:2F:EC:88:DB:F0:52:E9:F9:AB
Authority key identifier: BF:7F:0B:6D:D1:2A:37:4B:C2:93:5C:BE:9D:F6:1E:09:3B:55:BE:F6
Certificate issuer: /CN=bf7f0b6dd12a374bc2935cbe9df61e093b55bef6
Certificate serial: 019A71EEC1223D7A35F777279D055E06049F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft
Manifest number: 0B9B
Signing time: Tue 11 Nov 2025 08:01:03 +0000
Manifest this update: Tue 11 Nov 2025 08:01:03 +0000
Manifest next update: Wed 12 Nov 2025 08:01:03 +0000
Files and hashes: 1: BFvGU9aoz7rWEn9pDQTts3L78L8.roa (hash: +uFs0aOYRrvBvDpuqjNUWAjstxrFKIih9wDuEmZp20g=)
2: v38LbdEqN0vCk1y-nfYeCTtVvvY.crl (hash: c27S0o0UBznm+PWD2v+oklK8MmTQkE16i+mKevl+MWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c1:22:3d:7a:35:f7:77:27:9d:05:5e:06:04:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7f0b6dd12a374bc2935cbe9df61e093b55bef6
Validity
Not Before: Nov 11 08:01:03 2025 GMT
Not After : Nov 12 08:01:03 2025 GMT
Subject: CN=e259cc2881abcb8b18fd132fec88dbf052e9f9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f7:b0:62:be:98:8b:6c:7b:62:d3:db:b1:ab:
26:47:87:34:b5:52:7c:72:74:7e:eb:5c:df:c3:d4:
b9:55:45:2b:8b:ed:87:03:ab:e1:90:52:1a:f0:d1:
11:0c:aa:3d:cf:35:12:66:c5:90:53:c9:30:9c:d5:
77:ae:3a:b7:f3:8c:6f:1d:eb:cb:6f:63:2c:65:06:
ad:3c:28:d7:6c:8d:1f:43:6d:e2:b5:75:36:0d:90:
8e:57:b5:1d:16:d0:5c:74:54:af:f0:ce:d3:b3:86:
25:32:0c:1a:fd:97:84:12:b8:47:0d:ff:d6:dc:ee:
cb:e3:ee:55:41:2e:73:eb:82:18:f0:cf:f0:0b:80:
50:30:c6:b0:01:be:1e:fe:a4:5e:78:42:35:4c:73:
5c:57:24:a0:e9:3c:fb:a2:64:06:2d:65:3c:00:2c:
dd:10:3f:8d:78:81:88:2c:b1:53:12:3b:f8:ce:dc:
f8:e7:92:91:ef:5f:cc:42:f6:73:13:fc:6d:39:f4:
a6:a6:00:bc:ad:86:8c:5f:34:77:77:4d:4c:59:d1:
2a:1b:9c:9f:9c:a3:c2:f0:85:db:eb:3f:b9:ef:04:
49:64:3f:46:82:da:a7:26:78:3b:08:86:b0:18:2e:
27:51:ac:ae:e0:8b:66:d3:14:38:75:26:e1:3f:12:
92:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:59:CC:28:81:AB:CB:8B:18:FD:13:2F:EC:88:DB:F0:52:E9:F9:AB
X509v3 Authority Key Identifier:
keyid:BF:7F:0B:6D:D1:2A:37:4B:C2:93:5C:BE:9D:F6:1E:09:3B:55:BE:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:00:cb:f2:ff:f1:5e:51:5d:e1:00:19:de:c1:3b:a1:98:94:
91:a6:48:0c:26:51:a9:93:e3:bc:d9:75:88:de:c1:ba:4f:92:
06:8a:f8:13:9f:39:90:66:84:40:4f:05:25:d1:f0:5c:85:62:
9e:0b:75:d8:a0:96:44:5e:2b:34:5c:e1:2e:b4:41:ba:12:56:
aa:33:e2:4f:d9:82:93:a3:6a:e0:66:49:eb:c1:3d:27:99:a7:
f1:98:cf:b0:7d:18:0d:49:15:ec:a1:52:81:8c:bd:46:e4:52:
6e:7e:24:cc:0e:ef:c6:ac:b7:11:a5:41:8e:2d:d1:9c:fc:fb:
9e:be:d9:cc:9a:c5:25:f6:2f:41:46:47:f8:10:3e:d2:a2:27:
85:1e:78:cb:b2:03:00:6b:5e:b0:54:3e:79:43:b5:bd:09:d8:
f5:dc:fa:70:c5:e5:b9:6d:df:b3:28:7a:f3:df:98:db:32:98:
92:f2:ee:08:c2:f2:d4:3e:56:f9:9f:eb:5a:d7:40:79:1a:de:
9c:80:37:59:a8:d0:f9:a4:2f:23:be:0e:ed:91:8a:b9:81:b9:
de:56:22:54:d4:80:58:66:eb:7a:40:da:e0:19:21:49:14:21:
d5:8f:c3:41:44:33:94:52:e8:c5:99:8f:2b:d8:14:d3:90:0b:
88:6c:28:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7sEiPXo193cnnQVeBgSfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmN2YwYjZkZDEyYTM3NGJjMjkzNWNiZTlkZjYxZTA5M2I1
NWJlZjYwHhcNMjUxMTExMDgwMTAzWhcNMjUxMTEyMDgwMTAzWjAzMTEwLwYDVQQD
EyhlMjU5Y2MyODgxYWJjYjhiMThmZDEzMmZlYzg4ZGJmMDUyZTlmOWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPewYr6Yi2x7YtPbsasmR4c0tVJ8
cnR+61zfw9S5VUUri+2HA6vhkFIa8NERDKo9zzUSZsWQU8kwnNV3rjq384xvHevL
b2MsZQatPCjXbI0fQ23itXU2DZCOV7UdFtBcdFSv8M7Ts4YlMgwa/ZeEErhHDf/W
3O7L4+5VQS5z64IY8M/wC4BQMMawAb4e/qReeEI1THNcVySg6Tz7omQGLWU8ACzd
ED+NeIGILLFTEjv4ztz455KR71/MQvZzE/xtOfSmpgC8rYaMXzR3d01MWdEqG5yf
nKPC8IXb6z+57wRJZD9GgtqnJng7CIawGC4nUayu4Itm0xQ4dSbhPxKSzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJZzCiBq8uLGP0TL+yI2/BS6fmrMB8GA1UdIwQY
MBaAFL9/C23RKjdLwpNcvp32Hgk7Vb72MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjM4TGJkRXFOMHZDazF5LW5mWWVDVHRWdnZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hODYzMTctOTVjNC00ZGM3LWEzMGIt
ZjdkMTEzMzlkYmFkLzEvdjM4TGJkRXFOMHZDazF5LW5mWWVDVHRWdnZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hODYzMTctOTVjNC00ZGM3LWEzMGItZjdkMTEzMzlkYmFk
LzEvdjM4TGJkRXFOMHZDazF5LW5mWWVDVHRWdnZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyADL8v/x
XlFd4QAZ3sE7oZiUkaZIDCZRqZPjvNl1iN7Buk+SBor4E585kGaEQE8FJdHwXIVi
ngt12KCWRF4rNFzhLrRBuhJWqjPiT9mCk6Nq4GZJ68E9J5mn8ZjPsH0YDUkV7KFS
gYy9RuRSbn4kzA7vxqy3EaVBji3RnPz7nr7ZzJrFJfYvQUZH+BA+0qInhR54y7ID
AGtesFQ+eUO1vQnY9dz6cMXluW3fsyh689+Y2zKYkvLuCMLy1D5W+Z/rWtdAeRre
nIA3WajQ+aQvI74O7ZGKuYG53lYiVNSAWGbrekDa4BkhSRQh1Y/DQUQzlFLoxZmP
K9gU05ALiGwoSA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:02 2025 by rpki-client