Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
File: vB0gk2YmtVdDxllFEt5C75-OkF8.mft (raw, json)
Hash identifier: 3lu9OSqh38jReSOvv2mfX+AIGZmQ1TYqaFpx95nt0m0=
Subject key identifier: 81:AD:24:46:DB:52:D3:A9:04:FD:BE:3F:51:E4:BB:1D:CE:66:26:C8
Authority key identifier: BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F
Certificate issuer: /CN=bc1d20936626b55743c6594512de42ef9f8e905f
Certificate serial: 019A4C982C9AB56A2A2CF729F3A94AF976D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 02:00:32 +0000
Manifest this update: Tue 04 Nov 2025 02:00:32 +0000
Manifest next update: Wed 05 Nov 2025 02:00:32 +0000
Files and hashes: 1: 5sX-DGEXiD0BFlvf-Fmo0E_zIWA.roa (hash: 9QROXrOe8DbEbrWzP6N+sqZkzzd6XWEYKMJ32P4x344=)
2: vB0gk2YmtVdDxllFEt5C75-OkF8.crl (hash: rZ3ufkhJrLpn0pxvPHW5kYk3tioIQ5pnUb4M8sfsZeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:2c:9a:b5:6a:2a:2c:f7:29:f3:a9:4a:f9:76:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1d20936626b55743c6594512de42ef9f8e905f
Validity
Not Before: Nov 4 02:00:32 2025 GMT
Not After : Nov 5 02:00:32 2025 GMT
Subject: CN=81ad2446db52d3a904fdbe3f51e4bb1dce6626c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8a:f6:60:82:80:67:3d:70:17:52:6c:0c:b1:
1d:2f:a4:49:02:af:c0:f6:05:40:ee:47:aa:b2:42:
eb:d6:96:1a:87:66:e7:e3:34:fb:bf:cf:80:5e:f6:
ee:f4:2f:85:82:b8:fc:6e:2a:de:23:2e:a7:8c:36:
ad:af:78:cf:43:a7:9e:a0:5d:34:dc:87:36:9b:9c:
67:a0:1c:a5:42:70:b4:73:cd:93:a6:8b:6d:27:23:
05:b8:4d:78:c8:69:2d:a3:bc:60:84:99:47:6d:ce:
bc:a1:a0:c5:01:3c:b2:6c:08:df:78:88:6b:53:e7:
d0:5b:31:af:f0:06:e4:d6:16:c9:bc:f5:16:d8:e6:
e8:de:06:de:77:14:65:09:2b:01:76:33:27:3c:e8:
1d:fd:ad:e8:5d:28:ec:a3:c8:ba:d2:c5:67:cb:97:
5a:fc:95:81:06:77:2c:5f:ee:41:e3:83:3d:d9:75:
71:7f:1c:a6:27:c6:9e:6c:19:59:96:b6:4e:8c:89:
61:45:a7:c8:6e:58:07:e8:51:39:be:66:d1:63:46:
c2:d3:1d:28:7a:26:f4:2b:c0:5b:f9:1b:35:29:d5:
bb:2b:ef:22:dd:e1:53:d1:e3:e1:14:0a:0a:19:4a:
96:2b:e0:fe:f1:05:7e:57:e6:04:d0:11:55:c8:da:
ed:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AD:24:46:DB:52:D3:A9:04:FD:BE:3F:51:E4:BB:1D:CE:66:26:C8
X509v3 Authority Key Identifier:
keyid:BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:6f:bd:c9:19:17:e0:94:5c:4b:07:6e:c4:72:b6:e7:db:48:
4e:8c:74:b9:8b:a0:46:5e:39:a8:03:bb:e9:53:43:d6:19:4d:
83:84:2b:bf:f5:a9:03:02:0b:9d:a9:48:d1:c2:45:7e:cc:02:
47:fa:01:f2:a9:a6:0d:64:09:e9:b4:78:8a:e6:00:71:c2:aa:
66:3b:cf:97:5c:73:e3:8c:93:f0:38:e9:85:75:72:d9:0c:60:
ae:aa:89:98:7a:41:2f:49:ee:8f:02:27:1c:84:99:d5:85:7c:
df:49:f0:4b:d5:d1:f6:bb:e8:4d:2f:77:0f:ce:42:cb:fb:36:
79:0f:1e:4b:7b:c5:3f:08:36:8e:2b:0b:94:00:6f:5c:fa:c9:
58:da:79:b7:19:33:6a:1c:cd:9e:5d:30:2e:06:95:12:6b:7d:
5a:7d:d1:90:0b:c1:18:d5:f0:0e:b1:3a:fc:af:20:90:79:66:
dd:e1:f9:63:60:a6:fb:57:76:8f:2e:82:9d:cc:d0:cd:2f:3c:
28:b9:25:cd:21:6b:c4:b6:80:63:8b:22:86:d7:18:ce:0b:2f:
aa:da:8d:21:d6:4a:c2:4b:8b:53:37:65:e7:07:55:04:90:cc:
ae:df:15:b1:f6:94:28:d1:62:4b:94:10:92:cb:35:5a:59:48:
7d:39:95:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:18 2025 by rpki-client