Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
File: vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft (raw, json)
Hash identifier: pLzQ5/tA+NNy+sOAZMW1NmNtDUUoQk4h68f0IN2xWEo=
Subject key identifier: E0:42:7B:81:F5:DA:E6:62:A0:64:F8:F4:56:75:52:3B:3C:A5:96:89
Authority key identifier: BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7
Certificate issuer: /CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
Certificate serial: 019A4D077C298EA2DA0D2FC6011FEF5F061C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 04:02:07 +0000
Manifest this update: Tue 04 Nov 2025 04:02:07 +0000
Manifest next update: Wed 05 Nov 2025 04:02:07 +0000
Files and hashes: 1: Ciu6VIqlt_xKrbAE5HXa7sI9yIo.roa (hash: GBLv2kj+5/bD+8oVDkrec3Xg5+JexPkwOskhgAEq7iw=)
2: vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl (hash: yjndf4Vf6EqBdN7NT+YklUptJ8f+7kMuzkNBdd+f+v0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:7c:29:8e:a2:da:0d:2f:c6:01:1f:ef:5f:06:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
Validity
Not Before: Nov 4 04:02:07 2025 GMT
Not After : Nov 5 04:02:07 2025 GMT
Subject: CN=e0427b81f5dae662a064f8f45675523b3ca59689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:13:c8:0b:f1:8e:0f:b9:0b:ae:8a:52:18:2b:
af:5b:1f:5c:9f:73:82:d4:37:88:14:9b:d2:2a:8b:
54:d4:ba:ab:1d:e3:03:23:e5:77:75:93:2c:09:ec:
d2:85:04:54:30:c7:b6:1b:55:12:b1:a2:86:fe:ce:
a9:62:af:45:6b:5d:f5:42:c0:6f:68:16:72:36:2e:
6f:48:b0:68:26:3e:af:18:c7:c5:9b:57:82:a2:d6:
49:97:87:a7:69:f1:6b:35:38:3f:39:8a:c4:fc:1d:
91:aa:60:9b:3f:d5:d8:d2:4e:11:09:0c:05:66:a5:
a6:5c:04:40:65:56:fa:71:f5:62:8a:c1:e4:a1:25:
ed:82:57:27:28:b0:e8:a3:84:6a:9d:47:f6:a6:59:
87:bc:86:fd:60:3b:d2:2a:03:66:1a:38:b5:9d:a2:
0a:18:e1:10:94:7c:d8:1b:93:c7:89:51:eb:2b:22:
84:39:5d:15:9a:06:c8:3b:7d:7b:a0:13:cf:07:fd:
cd:13:3d:2a:6a:8e:f0:56:17:4a:a2:b2:83:34:d4:
9b:a0:c2:9f:15:87:34:ef:68:37:4c:67:0a:45:7c:
f4:04:2a:6a:d6:50:96:1a:4c:b4:93:e3:92:c4:a4:
b7:41:c0:63:c7:65:c3:cb:d9:fb:b7:c6:4a:87:00:
e2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:42:7B:81:F5:DA:E6:62:A0:64:F8:F4:56:75:52:3B:3C:A5:96:89
X509v3 Authority Key Identifier:
keyid:BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ce:00:b8:a5:0a:01:b1:96:70:f0:c2:2d:b3:82:4d:20:16:
8b:e5:b0:6e:c5:45:1a:d0:6d:5b:a0:f4:98:26:73:35:c3:57:
97:14:45:d4:69:11:b8:b8:d0:d2:6b:80:4e:86:d2:57:4c:52:
f6:ae:82:55:58:a3:58:4d:a2:0e:d3:21:73:6b:af:4e:49:41:
c6:b7:56:13:ee:e1:aa:42:05:ca:15:2b:a4:4f:24:a1:45:68:
81:bc:36:01:e2:1b:da:8c:45:b0:40:e6:c3:98:7c:b8:6f:cf:
f7:be:40:f0:21:2e:f3:bd:7c:f9:65:cd:16:f7:e7:57:cf:d0:
87:2e:fa:ca:44:eb:0b:25:57:6e:4f:56:cf:63:df:3f:fb:a7:
9c:bf:56:85:6f:1c:6c:ef:ef:74:37:91:57:95:1a:6f:90:fb:
ec:ea:97:56:fe:fa:24:6f:14:53:9d:e2:3c:cf:87:72:de:c5:
f3:cb:88:57:b4:14:c3:21:49:f9:b8:0d:b2:eb:a1:79:37:f5:
e2:9a:24:5c:84:23:06:ba:8c:ae:0f:05:10:22:b5:52:88:45:
bf:1e:20:e7:6c:73:17:ec:5e:07:84:c0:0e:0d:a3:94:65:13:
1f:9c:4a:53:12:88:f7:64:bc:aa:0a:9a:27:7c:78:a5:90:8f:
12:1f:bf:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:02:43 2025 by rpki-client