
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft
File: vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft (raw, json)
Hash identifier: ic2q1Kz1ctXt1i23nnA+ElmwAKJs9QRV+X7Qt7usLhE=
Subject key identifier: 15:8E:A0:FB:4C:B0:68:1E:63:E5:F7:8D:B6:13:C4:F2:CB:D9:CE:DB
Authority key identifier: BC:18:4D:30:D1:FD:2F:DE:50:BE:A6:F7:0F:E2:DB:E2:05:18:A0:3E
Certificate issuer: /CN=bc184d30d1fd2fde50bea6f70fe2dbe20518a03e
Certificate serial: 019933B77D0C410CD765A37358E83EB48F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft
Manifest number: 160C
Signing time: Wed 10 Sep 2025 13:01:26 +0000
Manifest this update: Wed 10 Sep 2025 13:01:26 +0000
Manifest next update: Thu 11 Sep 2025 13:01:26 +0000
Files and hashes: 1: vBhNMNH9L95Qvqb3D-Lb4gUYoD4.crl (hash: hgYQUAUEymszNMZ9zHBwNyQz4/3O4yyIja/VGYMyagw=)
2: zXUyVEZPQIOvlcMzJdAhnQlNrBA.roa (hash: R0waJ/l+tfmJv5LfjnRTw8gnCOj1Af2T9Z4QZDnplrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b7:7d:0c:41:0c:d7:65:a3:73:58:e8:3e:b4:8f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc184d30d1fd2fde50bea6f70fe2dbe20518a03e
Validity
Not Before: Sep 10 13:01:26 2025 GMT
Not After : Sep 11 13:01:26 2025 GMT
Subject: CN=158ea0fb4cb0681e63e5f78db613c4f2cbd9cedb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:10:e6:30:9a:1f:1a:1b:ca:7b:e3:6b:3f:c8:
d1:2a:31:e3:ee:6e:28:9d:2a:a3:2a:65:a7:1d:d4:
e0:99:53:5c:25:3c:ae:29:7d:b6:72:5f:a8:ea:46:
81:de:5e:89:fa:ab:0c:e8:b6:60:78:ff:f5:c4:9c:
aa:0b:57:80:9c:0b:93:92:4f:c3:09:20:4a:22:7b:
4e:e3:7b:0f:0b:1d:1a:35:60:1f:10:64:14:69:24:
29:28:b1:87:55:a7:ac:ec:c5:e6:b9:97:a9:20:03:
c3:0d:fc:d9:57:88:02:ad:7b:bc:04:c5:5e:ac:56:
ac:71:cb:58:d8:b8:ee:24:99:a6:9d:94:9d:94:bf:
04:37:d1:17:05:96:24:12:41:dd:75:bf:2b:c0:29:
73:d4:6f:98:9d:23:0f:9f:ff:e9:1c:89:7f:12:f6:
c1:14:ca:18:95:ef:ce:23:66:35:78:c0:8d:23:e0:
e6:a8:85:0f:1c:ae:28:83:90:96:c1:8f:46:33:a8:
05:b4:3d:cb:ce:1c:ce:fe:9e:98:a3:57:12:40:03:
2d:45:42:d3:4c:ec:12:6c:02:a6:f9:fe:dc:0e:24:
ab:1b:d1:29:0a:29:f7:3b:29:4f:c0:df:f9:9e:1e:
cd:0e:fd:9c:3f:30:a5:73:bb:86:41:94:2e:4a:1d:
e0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8E:A0:FB:4C:B0:68:1E:63:E5:F7:8D:B6:13:C4:F2:CB:D9:CE:DB
X509v3 Authority Key Identifier:
keyid:BC:18:4D:30:D1:FD:2F:DE:50:BE:A6:F7:0F:E2:DB:E2:05:18:A0:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c5:cd:5c:ab:c7:35:01:6c:47:56:c7:86:70:74:3a:cd:94:
80:9a:a9:16:23:b6:fa:d5:00:22:95:fd:80:78:46:4d:b5:4d:
e4:85:6d:2b:23:d6:d2:90:44:44:0f:6c:85:9c:10:56:1e:43:
e6:8b:9b:e2:b2:c8:0b:44:7a:48:10:97:87:64:30:88:8a:f2:
01:9e:16:fe:88:26:6b:e0:6d:7f:c8:4c:64:38:2e:f9:79:4b:
ee:9d:db:de:ce:65:01:45:00:86:3d:ad:f0:a3:47:67:51:23:
24:4a:7d:45:b7:0e:d9:d2:59:90:71:2a:ef:dd:f4:fc:a0:42:
d7:78:d5:13:2c:58:ad:35:dc:fd:8d:8f:dc:bc:eb:04:ea:89:
97:1b:92:98:9b:72:f1:70:8b:19:3b:2d:ca:51:1e:7c:20:f9:
93:f5:1f:5e:1d:ad:53:19:6b:bc:26:c0:0e:8f:7c:12:ba:3e:
15:1a:82:08:80:54:b1:a2:47:1a:ea:0f:93:b8:8a:41:c3:55:
f3:0c:62:73:71:c5:e1:3c:6a:bc:ce:f5:5f:fa:b6:e3:64:2a:
47:14:35:e5:ac:c6:62:59:05:82:0a:47:9f:72:8c:97:1f:6c:
62:0c:a8:bc:c9:85:f2:41:6a:be:4c:82:20:9c:19:8f:a6:d1:
8c:8e:7a:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkzt30MQQzXZaNzWOg+tI96MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMTg0ZDMwZDFmZDJmZGU1MGJlYTZmNzBmZTJkYmUyMDUx
OGEwM2UwHhcNMjUwOTEwMTMwMTI2WhcNMjUwOTExMTMwMTI2WjAzMTEwLwYDVQQD
EygxNThlYTBmYjRjYjA2ODFlNjNlNWY3OGRiNjEzYzRmMmNiZDljZWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRDmMJofGhvKe+NrP8jRKjHj7m4o
nSqjKmWnHdTgmVNcJTyuKX22cl+o6kaB3l6J+qsM6LZgeP/1xJyqC1eAnAuTkk/D
CSBKIntO43sPCx0aNWAfEGQUaSQpKLGHVaes7MXmuZepIAPDDfzZV4gCrXu8BMVe
rFascctY2LjuJJmmnZSdlL8EN9EXBZYkEkHddb8rwClz1G+YnSMPn//pHIl/EvbB
FMoYle/OI2Y1eMCNI+DmqIUPHK4og5CWwY9GM6gFtD3LzhzO/p6Yo1cSQAMtRULT
TOwSbAKm+f7cDiSrG9EpCin3OylPwN/5nh7NDv2cPzClc7uGQZQuSh3gZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWOoPtMsGgeY+X3jbYTxPLL2c7bMB8GA1UdIwQY
MBaAFLwYTTDR/S/eUL6m9w/i2+IFGKA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkJoTk1OSDlMOTVRdnFiM0QtTGI0Z1VZb0Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84Y2M0N2YtMDI2NS00MDdjLWJhNDUt
MDVkN2JkNGE3NDFkLzEvdkJoTk1OSDlMOTVRdnFiM0QtTGI0Z1VZb0Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC84Y2M0N2YtMDI2NS00MDdjLWJhNDUtMDVkN2JkNGE3NDFk
LzEvdkJoTk1OSDlMOTVRdnFiM0QtTGI0Z1VZb0Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbMXNXKvH
NQFsR1bHhnB0Os2UgJqpFiO2+tUAIpX9gHhGTbVN5IVtKyPW0pBERA9shZwQVh5D
5oub4rLIC0R6SBCXh2QwiIryAZ4W/ogma+Btf8hMZDgu+XlL7p3b3s5lAUUAhj2t
8KNHZ1EjJEp9RbcO2dJZkHEq7930/KBC13jVEyxYrTXc/Y2P3LzrBOqJlxuSmJty
8XCLGTstylEefCD5k/UfXh2tUxlrvCbADo98Ero+FRqCCIBUsaJHGuoPk7iKQcNV
8wxic3HF4TxqvM71X/q242QqRxQ15azGYlkFggpHn3KMlx9sYgyovMmF8kFqvkyC
IJwZj6bRjI56vQ==
-----END CERTIFICATE-----
Generated at Wed Sep 10 22:54:29 2025 by rpki-client