Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
File: vPnwsJRzjFKC-_SzBnDsX9y1id8.mft (raw, json)
Hash identifier: UBeOGe9LKIT0qwIFu63AKHjpSY4On8EIVJIWzmTEkak=
Subject key identifier: B0:E0:16:EE:86:78:B9:1A:CA:23:9B:48:6A:2C:2F:F3:D2:D8:84:68
Authority key identifier: BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF
Certificate issuer: /CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df
Certificate serial: 019A71B8380D169B8B9BDC6D7DD455B26629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:01:29 +0000
Manifest this update: Tue 11 Nov 2025 07:01:29 +0000
Manifest next update: Wed 12 Nov 2025 07:01:29 +0000
Files and hashes: 1: GcXZXurTGrAnFXKjvUHU9XD_YyQ.roa (hash: CVqER74xo0XyQrFlwwf0CdK9BC9SAVXvCBJxlFB4CBw=)
2: vPnwsJRzjFKC-_SzBnDsX9y1id8.crl (hash: 4WqeJ4Mi/mbGuukbc23+5RdSCWKoifpG2AR/21QXDyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:38:0d:16:9b:8b:9b:dc:6d:7d:d4:55:b2:66:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df
Validity
Not Before: Nov 11 07:01:29 2025 GMT
Not After : Nov 12 07:01:29 2025 GMT
Subject: CN=b0e016ee8678b91aca239b486a2c2ff3d2d88468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0d:8a:bc:68:46:ed:4d:7e:b0:0e:d8:32:fb:
46:17:e0:ed:8a:df:b7:91:14:6f:b5:e1:d2:56:31:
73:de:14:df:7b:46:9c:28:c8:4e:56:a6:3e:26:8a:
93:9c:9b:0a:9c:89:40:fe:fc:b8:0d:a6:05:b7:fe:
12:4f:e1:12:f0:c6:ef:1d:9a:86:e4:ad:b8:8e:c2:
87:85:b5:62:db:b2:f6:9a:bd:07:ba:10:1e:5c:c7:
2e:e0:1b:58:0c:44:20:5e:62:aa:7b:dc:26:8d:47:
ad:fa:38:36:4a:76:fa:7a:0a:d0:b6:81:db:47:28:
5e:bf:f2:11:41:64:18:8f:0e:66:8d:9a:31:1d:25:
97:b6:2d:8a:aa:c3:31:d9:96:26:6f:92:30:80:9e:
a1:76:b3:89:f4:e9:e3:f9:0a:4a:5c:16:67:24:fa:
b4:ee:63:65:e4:f9:36:e0:fd:df:ad:9f:3b:0d:be:
da:37:85:1e:fc:26:85:72:ea:94:75:b2:bd:40:2b:
25:b5:dd:19:1b:62:c6:f7:69:31:07:82:6b:96:37:
e3:7c:4b:03:3e:ae:e3:7a:dd:06:75:97:39:c3:6b:
84:c4:96:0c:11:2f:68:0e:ac:d2:71:75:63:3e:eb:
9e:6f:52:c3:d2:9f:fb:08:6a:30:7b:c7:a7:f9:82:
9a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E0:16:EE:86:78:B9:1A:CA:23:9B:48:6A:2C:2F:F3:D2:D8:84:68
X509v3 Authority Key Identifier:
keyid:BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b7:12:c3:a6:8d:9e:5f:6a:12:ad:5e:22:3c:b1:80:3d:63:
8d:13:c2:4b:b1:b2:d2:eb:78:97:9d:9b:6d:55:c1:a1:4b:ea:
b4:ba:10:04:31:6a:f3:f4:3b:c6:35:7a:5d:2a:62:eb:04:42:
81:79:34:ab:e6:5f:69:ca:db:1c:90:bc:51:77:8d:cd:08:9b:
74:21:b7:32:02:72:e3:b3:71:b9:45:93:fa:9d:10:7d:2f:b6:
19:e6:4a:f5:64:d0:e5:44:12:96:a1:2d:2e:40:64:4c:99:d4:
7b:be:5a:b0:a8:eb:04:0c:aa:6f:e9:f1:1c:49:33:1a:fd:ed:
2e:10:9f:ef:fe:bb:f3:9d:37:e5:74:d4:e3:79:29:51:d7:0d:
76:8c:0b:f9:00:9d:9e:1f:71:df:ab:51:2b:78:d6:ab:ae:ef:
47:87:f7:cc:a4:7e:f0:8d:c5:f7:a2:a1:ca:b8:b6:ba:ef:82:
39:0b:cf:e6:0a:b6:a2:41:12:ba:ed:e8:28:e2:02:a1:d3:28:
26:a2:e5:ab:b4:88:f5:46:99:83:47:ce:33:db:fb:ca:2d:0d:
1a:bb:94:2e:5d:f0:37:83:db:1e:2c:d3:7d:8c:fb:4e:21:19:
86:56:d5:d1:25:28:c4:c5:18:01:1f:5c:ae:d6:ae:8f:96:d8:
c0:bd:ee:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:34:53 2025 by rpki-client