Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft
File: vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft (raw, json)
Hash identifier: 3k+od6FuYnPIARGiOAgF4TI1H+T9IoLjaVPl936R49Q=
Subject key identifier: 41:67:A9:E9:FB:C1:48:CD:07:1F:BA:12:0D:E2:BE:B8:B5:38:46:AD
Authority key identifier: BC:10:6E:4D:82:FB:AE:34:C1:52:A3:5D:43:D0:FD:F4:9D:54:BE:9E
Certificate issuer: /CN=bc106e4d82fbae34c152a35d43d0fdf49d54be9e
Certificate serial: 019A4DE18D974FDFDA3F1F49523F0CE582CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 08:00:18 +0000
Manifest this update: Tue 04 Nov 2025 08:00:18 +0000
Manifest next update: Wed 05 Nov 2025 08:00:18 +0000
Files and hashes: 1: vBBuTYL7rjTBUqNdQ9D99J1Uvp4.crl (hash: 7Vtkg9xfAe4hsw7CctmGLdqrHTPbkiRZ8gKi+racuto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:8d:97:4f:df:da:3f:1f:49:52:3f:0c:e5:82:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc106e4d82fbae34c152a35d43d0fdf49d54be9e
Validity
Not Before: Nov 4 08:00:18 2025 GMT
Not After : Nov 5 08:00:18 2025 GMT
Subject: CN=4167a9e9fbc148cd071fba120de2beb8b53846ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:29:0c:a7:a7:b6:e0:e0:00:94:04:d8:b8:55:
50:f1:51:20:58:a6:f9:ea:5b:8c:3a:74:49:f1:ed:
62:0f:02:20:14:27:a9:8a:c6:91:41:90:73:18:a7:
52:81:57:7c:c4:bd:a6:af:c5:27:a8:c2:50:4d:13:
e2:c7:cf:61:dd:cf:96:ab:ac:d8:12:bc:84:6f:8d:
03:be:7b:0d:b9:ea:bb:d2:ac:b9:0d:76:15:48:e7:
a0:90:02:ef:56:49:fa:e6:58:bf:0f:70:55:84:e5:
95:29:89:25:dd:95:10:ab:2f:04:52:3e:03:c9:1e:
cd:3d:14:35:61:d0:e0:43:41:ee:da:f6:a4:68:ce:
57:b5:47:4f:a9:2b:3d:e5:1e:f6:45:84:bc:19:65:
e1:f7:86:6b:d7:49:4c:30:b9:82:49:52:ec:82:0d:
14:ea:4c:2b:28:93:c7:c7:5d:b3:81:08:26:df:4b:
33:21:53:dc:2c:69:8a:f0:ae:3b:52:ca:5d:a6:e1:
80:08:14:dd:ae:9a:61:c8:1a:0b:5c:8e:82:ea:36:
6f:e5:3b:b1:af:6a:55:fa:00:13:0b:4d:d4:c2:c7:
78:b5:07:2d:31:60:e2:10:75:b3:67:cc:84:26:ba:
db:30:a6:f9:dc:34:3b:56:dc:23:5e:6d:c0:d8:2b:
66:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:67:A9:E9:FB:C1:48:CD:07:1F:BA:12:0D:E2:BE:B8:B5:38:46:AD
X509v3 Authority Key Identifier:
keyid:BC:10:6E:4D:82:FB:AE:34:C1:52:A3:5D:43:D0:FD:F4:9D:54:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:b4:f9:df:e9:9d:cb:5b:cc:03:44:57:98:8f:99:64:d0:8f:
f8:ed:17:f3:84:7e:b6:25:58:70:8b:67:a1:02:12:b4:ce:05:
ef:1f:24:38:b3:b3:fa:69:65:a4:97:f0:9f:61:ac:ce:53:f1:
51:6c:39:ba:13:a2:2f:68:4d:1b:02:22:f0:02:a0:3e:f5:3f:
15:8f:ac:11:da:85:1b:63:42:d1:ec:98:b5:30:11:1b:25:ca:
3b:94:5a:ac:0e:16:e6:d5:97:11:cb:fe:26:fd:f4:2f:de:dd:
65:5f:b4:a0:86:5a:48:65:bb:c6:a6:66:c2:d1:15:8b:bd:a0:
b6:27:f6:e4:fb:2d:25:c7:6f:79:b7:c4:fc:38:d0:1a:16:52:
94:29:21:3e:5c:e4:09:41:e9:fa:df:3b:7f:ad:26:ee:9c:9f:
90:32:fc:8f:05:d0:a8:29:28:bd:c6:ad:42:b5:6a:d5:c1:ec:
9c:f1:b3:30:17:a5:19:12:e8:10:cb:d9:19:cc:66:04:dd:84:
c4:a4:7c:42:64:28:76:19:fc:27:6d:e3:d4:1a:d1:45:97:7f:
d2:99:16:ae:43:c6:1a:fe:32:e6:31:85:06:5d:39:a6:12:3b:
3c:ab:d8:11:30:ad:85:16:11:86:99:c0:c3:bd:1a:b1:32:af:
8f:eb:7a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:51 2025 by rpki-client