Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
File: vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft (raw, json)
Hash identifier: G0V02NIlupGrpjY8uORqyOes9GI2cB5Z88EXDpOkNss=
Subject key identifier: C8:FA:8D:29:73:F2:0C:86:45:DC:07:C8:E6:29:85:CA:73:45:7F:78
Authority key identifier: BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8
Certificate issuer: /CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
Certificate serial: 019A4DE22488230B4FE57174DC40258F47E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 08:00:57 +0000
Manifest this update: Tue 04 Nov 2025 08:00:57 +0000
Manifest next update: Wed 05 Nov 2025 08:00:57 +0000
Files and hashes: 1: 6pAZoUeyJNKjbIkJ9bo52GGChiE.roa (hash: H9UE5mQZ+sgOHGu/NqWUAUZ7b5ITdi+7fpdJ+eVNZFg=)
2: vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl (hash: z8451Fw71PQ29GkaBN5PMPzonDqyBVn1Rpvc4GzHdJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:24:88:23:0b:4f:e5:71:74:dc:40:25:8f:47:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
Validity
Not Before: Nov 4 08:00:57 2025 GMT
Not After : Nov 5 08:00:57 2025 GMT
Subject: CN=c8fa8d2973f20c8645dc07c8e62985ca73457f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1c:70:c5:b2:ba:5f:72:50:cc:0a:21:c5:c3:
ec:4e:ca:a2:3a:4b:03:d1:bd:d0:21:21:51:8e:ec:
94:68:31:c7:e0:ca:e8:67:42:64:82:f2:ca:f7:4b:
db:94:08:a9:28:5a:56:2c:8c:b6:63:d5:10:7c:b5:
a1:1f:1c:ff:1a:63:2b:17:e7:0c:15:dd:77:f9:a3:
ba:a0:0f:02:b9:82:10:92:b6:85:12:11:4c:e1:12:
2f:38:01:87:35:1e:0b:1c:f7:07:83:77:ec:7e:32:
d0:f4:70:e4:9f:9f:24:09:ea:3c:e0:2a:fe:a8:51:
7c:d6:89:1d:b4:81:bd:5e:87:bc:bf:2f:52:7c:6e:
b8:0c:b1:4c:8c:4c:d4:b1:f6:92:3b:6b:b3:45:74:
20:ad:af:ad:ae:fc:7e:04:ad:24:a9:96:ad:be:97:
8f:8e:59:53:10:ac:14:38:34:b8:1f:45:48:37:7c:
c7:f1:61:48:fb:9d:7c:46:0a:66:ce:5e:b5:3f:58:
4c:c8:79:ad:36:5e:e9:eb:fd:14:52:3f:b6:11:72:
20:75:d3:6d:5f:a9:3d:1c:27:6d:11:d1:fc:d6:96:
33:92:a3:f0:7e:b7:06:43:99:70:df:cd:af:fa:6a:
02:06:68:e7:fd:6c:fa:34:f6:ae:ce:ac:ed:5f:85:
24:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FA:8D:29:73:F2:0C:86:45:DC:07:C8:E6:29:85:CA:73:45:7F:78
X509v3 Authority Key Identifier:
keyid:BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:0f:7d:1c:9e:23:9c:6f:25:b7:48:91:24:5c:96:0d:00:71:
64:65:0b:cf:ee:6c:85:ca:79:ad:a6:27:42:0f:82:aa:9f:a9:
e9:4c:9d:ee:2c:78:2f:62:bb:57:2d:ab:23:11:e1:10:8b:f3:
25:06:c2:42:67:cf:f1:21:8c:5f:20:ae:64:cb:b7:f3:de:1f:
0e:ee:9d:d7:9b:7b:5f:c4:70:00:e0:b1:03:bb:fb:4e:be:07:
9d:f6:7c:14:ad:7e:3b:6b:95:b0:0c:e2:eb:94:a1:55:ba:26:
ef:82:d5:01:5f:1a:c4:fb:31:7f:2f:d2:7a:8e:44:c6:9f:70:
cb:f1:fc:79:1c:9c:e3:98:f0:af:97:c2:4f:ba:d2:69:cb:42:
cd:88:68:56:8d:0a:18:ae:55:8e:c3:4b:fb:71:46:34:02:0b:
c6:fd:99:f6:39:82:e8:45:be:41:5f:52:bb:38:61:67:95:df:
9e:6a:06:b2:bd:3f:52:a5:a7:ee:aa:e4:b9:9d:42:67:52:ea:
fe:52:4f:69:0a:27:d0:09:60:ab:31:cf:21:85:61:e1:ec:af:
55:c5:92:47:4c:c0:0f:76:b3:a5:2f:d5:47:74:4e:43:e2:36:
0d:88:4f:52:4a:60:c4:4b:d7:29:d1:53:eb:43:29:7e:21:20:
7d:a2:64:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:51 2025 by rpki-client