Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
File: vBWSH1umvRR_9AAReqlzhjPxWH0.mft (raw, json)
Hash identifier: kEpl2ZCfdt+fnMW7hRr8le/uhuWvClWDaTnvh27wg4k=
Subject key identifier: 00:60:C1:01:D2:E7:09:47:1B:F9:59:6F:B2:D4:F3:9F:33:B8:76:EB
Authority key identifier: BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D
Certificate issuer: /CN=bc15921f5ba6bd147ff400117aa9738633f1587d
Certificate serial: 019A5262F5926F675380D44E516B01F871A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
Manifest number: 1717
Signing time: Wed 05 Nov 2025 05:00:08 +0000
Manifest this update: Wed 05 Nov 2025 05:00:08 +0000
Manifest next update: Thu 06 Nov 2025 05:00:08 +0000
Files and hashes: 1: U77ECX22fJUQ9Szp6lrBtYkTrQY.roa (hash: jYSTL2r9IXnyVhPYQjdEYfmkmSawy+babAO2lCpGCAs=)
2: VJMTsLB0DoA7dIhG-PlGlwqEhfg.roa (hash: zqcr9YUGQTYEQLg2JeQTvIegn0/uHC3qCTzqhOaEtjE=)
3: fyx1ny3-_FInDq0dmTByBfBn0j8.roa (hash: oB7Zx3DOWzJhigoLM671xc6bT3MSHf/pGnlfM7WSuvs=)
4: vBWSH1umvRR_9AAReqlzhjPxWH0.crl (hash: myvi7Zv8Y6oijI3y4phemMeiwkqundCQQPq4sCHQ600=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:62:f5:92:6f:67:53:80:d4:4e:51:6b:01:f8:71:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc15921f5ba6bd147ff400117aa9738633f1587d
Validity
Not Before: Nov 5 05:00:08 2025 GMT
Not After : Nov 6 05:00:08 2025 GMT
Subject: CN=0060c101d2e709471bf9596fb2d4f39f33b876eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1c:48:54:0d:bd:cb:03:f7:18:d5:7c:d4:63:
8d:74:03:36:d5:20:9d:19:ab:dc:85:30:1c:bd:7a:
67:84:0c:5c:55:68:32:64:b6:57:fd:46:4c:5e:02:
27:b8:1a:40:5a:26:10:8c:d3:77:9e:10:38:7f:7e:
c2:f7:a1:f0:20:b7:bf:58:d5:98:f2:8a:8d:11:8c:
c2:ee:ee:38:28:3f:ed:98:77:92:e0:ca:7c:c7:1b:
fc:a1:41:10:ca:ad:bf:eb:72:ca:72:5c:48:f5:0d:
34:f8:47:7c:ef:78:d6:f9:a2:0f:ee:d2:5b:8d:78:
74:51:16:fc:ce:a7:0d:e3:a1:9f:bc:58:37:77:63:
b2:da:ae:a0:13:6b:56:20:07:90:a8:b4:22:de:c5:
cf:2e:36:58:cd:89:ae:d2:c8:67:d6:08:8d:4d:7a:
e7:43:45:f2:0f:3f:83:b9:9e:72:a1:27:95:5a:73:
59:35:85:ff:d8:c3:1a:a2:b5:3b:e8:36:4c:8e:7f:
b0:f2:46:c9:27:ba:fd:81:84:9c:ad:63:52:2e:c1:
fc:13:b0:ad:d6:53:64:18:f3:70:bc:e2:25:31:83:
ab:62:f2:75:66:89:80:be:dd:8a:fd:20:73:5e:ba:
8a:60:ed:f9:8a:f2:98:d0:72:dd:3b:ac:e1:5d:f0:
5d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:60:C1:01:D2:E7:09:47:1B:F9:59:6F:B2:D4:F3:9F:33:B8:76:EB
X509v3 Authority Key Identifier:
keyid:BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:bc:e8:f4:53:d4:89:74:3f:87:67:fc:7e:8a:9f:d9:3b:6e:
87:08:e6:ad:5b:1b:fd:5e:32:c5:ae:78:e9:c5:67:66:5f:28:
62:0d:7b:df:34:80:41:ff:96:57:e4:6b:49:ac:60:6d:4a:f2:
1d:87:71:73:7f:6f:d4:b2:2c:22:cc:58:db:ed:20:55:ab:01:
d3:8e:11:ff:c6:6c:f3:e5:28:1b:dd:c4:a1:73:32:49:47:93:
80:b4:24:37:9d:6a:8a:94:7e:16:75:8f:5d:13:12:2b:00:ff:
6f:d7:d6:c6:44:5a:68:24:c9:58:58:3b:57:e0:88:1b:ef:96:
f2:19:81:7c:12:6b:78:ed:c1:e6:0f:4f:93:be:6d:aa:c1:fa:
38:60:0d:f3:a4:e2:8c:e6:24:81:1f:ae:0d:ac:b4:38:6d:5c:
4e:d3:a8:26:07:08:8c:60:12:de:df:2a:d1:2b:de:a0:d4:23:
77:bb:e2:a5:a3:a5:48:6f:f1:b8:38:a4:e8:2f:12:39:78:7b:
b3:37:0f:89:78:49:36:60:37:42:98:3c:6b:ec:96:6b:94:9c:
9f:03:38:3b:b3:91:3e:45:26:44:4b:61:57:37:09:c7:fc:d5:
61:d3:dd:7f:6a:61:c6:09:8e:b4:91:85:6f:68:25:9e:e6:3c:
5c:fb:38:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:24:40 2025 by rpki-client