Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
File: vGW0uk14adXLj5V08PT-7nDrxsU.mft (raw, json)
Hash identifier: G7I6YiK3IhZmHw0UlQWzZhIxAVm0fqAg61UcWYX1qKk=
Subject key identifier: 07:28:92:5D:AE:A8:D1:E4:A4:31:A6:1C:09:E1:1D:B0:86:F3:D3:96
Authority key identifier: BC:65:B4:BA:4D:78:69:D5:CB:8F:95:74:F0:F4:FE:EE:70:EB:C6:C5
Certificate issuer: /CN=bc65b4ba4d7869d5cb8f9574f0f4feee70ebc6c5
Certificate serial: 019A4D06323DD59AA65D0ACCDBC72A176B44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 04:00:42 +0000
Manifest this update: Tue 04 Nov 2025 04:00:42 +0000
Manifest next update: Wed 05 Nov 2025 04:00:42 +0000
Files and hashes: 1: Lyt3wxp7GPsYmae1yjcH7ZriVhY.roa (hash: hPKn4hG6PTy5BGSQf4AvDzlOXQQIjurdWjZynBc0Dss=)
2: tj6K5SjptWHwjdC118oFQLdh9d0.roa (hash: r+olKMGe/rwlvBp2fd9whUIN+tGxqF1STWjeBypW8Gg=)
3: vGW0uk14adXLj5V08PT-7nDrxsU.crl (hash: mJDPPqWRKmq6BoXjJoX3HEVeDlRPyKdUkJwNemGv/nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:32:3d:d5:9a:a6:5d:0a:cc:db:c7:2a:17:6b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc65b4ba4d7869d5cb8f9574f0f4feee70ebc6c5
Validity
Not Before: Nov 4 04:00:42 2025 GMT
Not After : Nov 5 04:00:42 2025 GMT
Subject: CN=0728925daea8d1e4a431a61c09e11db086f3d396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:75:51:56:72:cf:c1:95:33:b4:af:88:2e:7e:
fb:20:ea:76:f5:a8:72:78:91:af:2a:2c:37:a1:9e:
d1:ca:ea:ec:3e:43:4e:7d:02:f6:d6:ef:7a:7e:65:
97:77:67:4f:40:af:8f:ed:4a:84:6a:96:ee:1e:65:
8e:c6:5c:3d:23:52:d9:04:a2:61:2d:d1:9d:7e:a9:
76:d6:21:b2:5b:9a:45:19:f5:ea:f2:0d:ec:3c:b0:
e1:e7:2d:84:25:e4:26:dd:17:e3:6a:9d:aa:6e:66:
aa:9c:4c:02:bc:df:01:6e:5d:30:f6:e7:26:12:a2:
49:6a:91:41:da:0a:e9:a7:ae:1f:f8:aa:79:d9:90:
62:3c:25:1a:6d:25:b6:28:21:98:2c:04:08:99:a4:
d3:bb:73:7f:91:ab:11:2b:b7:f1:53:55:00:e4:52:
6a:27:11:a1:c3:14:4b:69:e5:8a:2c:e7:17:4a:93:
bc:53:25:cf:20:76:94:36:b9:f8:3a:2f:cd:bb:90:
3a:32:43:8f:42:74:6f:0a:47:05:46:97:75:f4:77:
1d:33:96:3f:06:26:d2:2e:d0:ce:f6:1d:b9:89:99:
78:93:ef:92:20:26:54:12:39:d8:92:b7:71:e3:67:
11:3f:bb:54:e6:4a:43:4e:f5:dd:8b:d9:40:b5:1b:
4e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:28:92:5D:AE:A8:D1:E4:A4:31:A6:1C:09:E1:1D:B0:86:F3:D3:96
X509v3 Authority Key Identifier:
keyid:BC:65:B4:BA:4D:78:69:D5:CB:8F:95:74:F0:F4:FE:EE:70:EB:C6:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:62:d9:e2:a3:1a:97:03:5e:5c:c6:ab:99:c0:bd:74:f6:ed:
5d:05:d5:6b:11:38:22:cd:3c:6c:f6:ed:aa:6d:1c:6f:17:db:
12:b8:14:85:90:09:d4:d6:81:2f:30:00:bc:f3:ae:61:9b:dd:
2f:18:9c:18:44:d3:88:d5:e2:46:cb:b7:f4:6e:fa:0b:ea:11:
21:24:d4:92:77:81:a5:7e:e7:a3:4b:af:0e:8e:47:1e:8f:0c:
bd:b1:0d:54:3d:5e:a1:1b:7b:93:78:a8:0a:f2:42:c1:ce:39:
00:d3:93:8e:b6:36:0f:8c:2c:33:9c:79:a7:3b:42:6d:72:79:
9a:76:be:c1:cc:83:91:65:e4:a7:7f:35:38:9f:b6:92:45:81:
e3:f5:db:ed:65:14:d4:f1:d6:74:8e:05:bd:38:8f:44:b8:6c:
1b:22:c5:f9:91:e7:d0:b1:81:87:a2:4a:c0:cf:3b:f3:96:89:
0e:3f:6b:1c:09:76:d1:ad:43:5f:e9:de:3a:c9:78:f0:c9:95:
96:2f:49:5a:4e:0d:6c:92:6b:03:b9:f9:c7:91:61:95:d6:83:
4d:4b:7c:98:58:8c:2b:0b:62:66:0d:23:e8:ff:03:bb:01:1d:
4c:35:68:9b:4e:a4:3c:0d:4a:d6:6c:a9:3e:68:f8:d0:22:b8:
d1:f1:2f:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNBjI91ZqmXQrM28cqF2tEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNjViNGJhNGQ3ODY5ZDVjYjhmOTU3NGYwZjRmZWVlNzBl
YmM2YzUwHhcNMjUxMTA0MDQwMDQyWhcNMjUxMTA1MDQwMDQyWjAzMTEwLwYDVQQD
EygwNzI4OTI1ZGFlYThkMWU0YTQzMWE2MWMwOWUxMWRiMDg2ZjNkMzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XVRVnLPwZUztK+ILn77IOp29ahy
eJGvKiw3oZ7RyursPkNOfQL21u96fmWXd2dPQK+P7UqEapbuHmWOxlw9I1LZBKJh
LdGdfql21iGyW5pFGfXq8g3sPLDh5y2EJeQm3Rfjap2qbmaqnEwCvN8Bbl0w9ucm
EqJJapFB2grpp64f+Kp52ZBiPCUabSW2KCGYLAQImaTTu3N/kasRK7fxU1UA5FJq
JxGhwxRLaeWKLOcXSpO8UyXPIHaUNrn4Oi/Nu5A6MkOPQnRvCkcFRpd19HcdM5Y/
BibSLtDO9h25iZl4k++SICZUEjnYkrdx42cRP7tU5kpDTvXdi9lAtRtORQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAcokl2uqNHkpDGmHAnhHbCG89OWMB8GA1UdIwQY
MBaAFLxltLpNeGnVy4+VdPD0/u5w68bFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkdXMHVrMTRhZFhMajVWMDhQVC03bkRyeHNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NDIxMDEtNzgwYi00N2FjLTg1N2Qt
ZjllN2NiMDNjNTI3LzEvdkdXMHVrMTRhZFhMajVWMDhQVC03bkRyeHNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80NDIxMDEtNzgwYi00N2FjLTg1N2QtZjllN2NiMDNjNTI3
LzEvdkdXMHVrMTRhZFhMajVWMDhQVC03bkRyeHNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYmLZ4qMa
lwNeXMarmcC9dPbtXQXVaxE4Is08bPbtqm0cbxfbErgUhZAJ1NaBLzAAvPOuYZvd
LxicGETTiNXiRsu39G76C+oRISTUkneBpX7no0uvDo5HHo8MvbENVD1eoRt7k3io
CvJCwc45ANOTjrY2D4wsM5x5pztCbXJ5mna+wcyDkWXkp381OJ+2kkWB4/Xb7WUU
1PHWdI4FvTiPRLhsGyLF+ZHn0LGBh6JKwM8785aJDj9rHAl20a1DX+neOsl48MmV
li9JWk4NbJJrA7n5x5FhldaDTUt8mFiMKwtiZg0j6P8DuwEdTDVom06kPA1K1myp
Pmj40CK40fEvNQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:49 2025 by rpki-client