Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
File: vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft (raw, json)
Hash identifier: 09aAaWL6jzaybMAyvzyZY9v5QQgN1ZzxJHSLtUlrNuA=
Subject key identifier: 8B:05:2C:9A:6A:F1:B1:3F:37:DA:79:AD:45:5F:17:B7:76:17:A5:F3
Authority key identifier: BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB
Certificate issuer: /CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb
Certificate serial: 019A2B8D121993B5E79EAEC995DAE8DFABBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
Manifest number: 168B
Signing time: Tue 28 Oct 2025 16:00:56 +0000
Manifest this update: Tue 28 Oct 2025 16:00:56 +0000
Manifest next update: Wed 29 Oct 2025 16:00:56 +0000
Files and hashes: 1: T6mhvGgjsjqSjSFXAxAChHn88ic.roa (hash: FPbExUKvK5N7b1i2EWlflqO6OJIjL5/osRySrLfPqFk=)
2: vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl (hash: jmpHbkCGPia1xWbSEXEV07IJnZLSjKwrdS4K5UVsztg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:8d:12:19:93:b5:e7:9e:ae:c9:95:da:e8:df:ab:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb
Validity
Not Before: Oct 28 16:00:56 2025 GMT
Not After : Oct 29 16:00:56 2025 GMT
Subject: CN=8b052c9a6af1b13f37da79ad455f17b77617a5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:04:89:3e:18:15:f2:e6:71:f8:dd:13:c3:67:
db:0a:26:90:19:94:ca:6d:e2:b1:46:d6:13:fb:88:
87:32:89:90:0c:48:74:65:c5:24:b8:4a:5d:d0:db:
dd:da:43:85:aa:79:6a:b8:1f:41:dc:a6:10:0a:08:
24:7d:57:17:16:23:d4:d5:6f:ba:5c:3b:0b:43:e7:
a4:99:07:27:6b:90:57:b2:45:ac:d6:a7:54:3e:8a:
57:69:25:fe:d5:47:a2:f6:c9:76:9c:87:c6:c7:3b:
e9:38:43:df:a7:64:d3:9b:d6:7b:83:b0:e9:fc:92:
1e:ee:97:52:ef:f4:33:dc:26:80:3f:ae:58:51:a6:
02:71:85:bd:ca:32:8f:09:5f:d9:e1:4a:30:dc:7c:
27:0a:0c:04:be:d0:dd:92:96:5c:5b:87:b8:27:b6:
1b:29:bf:3d:97:58:11:22:07:66:f4:c1:b3:10:8e:
dc:db:21:49:3a:7b:ae:ba:96:fc:cf:48:94:c7:dd:
24:4f:df:b6:a8:86:85:cd:62:ae:ce:7c:2a:7d:b5:
d4:eb:f8:1c:bd:9d:d3:a9:bd:75:c0:41:c6:56:ed:
54:6b:99:40:f0:80:3c:29:05:a1:13:d8:c6:25:1f:
80:ee:6d:bc:91:90:8c:69:32:46:c8:7f:39:44:83:
36:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:05:2C:9A:6A:F1:B1:3F:37:DA:79:AD:45:5F:17:B7:76:17:A5:F3
X509v3 Authority Key Identifier:
keyid:BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:54:ff:df:aa:33:89:94:c3:f5:67:11:57:62:cf:0b:36:1f:
9a:da:d5:71:87:7d:b4:06:98:e0:36:aa:25:95:49:9e:76:a4:
ea:c1:e9:c0:2c:c9:55:38:7a:db:8d:25:bf:d6:0b:f9:94:b6:
d7:37:69:de:82:9a:c1:81:11:7e:bd:cf:fc:1c:7d:92:28:80:
7b:2e:27:4c:b2:3e:d9:f0:fd:05:21:58:f8:83:61:da:c2:87:
c8:2b:e7:64:c6:87:02:91:31:59:55:48:0c:2a:65:e0:a0:83:
88:f6:d3:22:04:b6:5c:6b:f5:e8:3f:b5:66:ae:0b:3b:e7:aa:
4e:48:9e:cd:d2:3d:9c:80:41:86:21:d4:e5:22:67:d5:71:7b:
e1:3a:67:ea:f5:97:d3:72:62:4e:7f:2e:f5:5c:e9:2d:97:c4:
d3:a2:9f:c8:9d:33:3c:58:47:c5:ee:91:ef:79:da:23:e8:ea:
11:7b:fa:7a:f3:f8:57:a4:b0:b2:57:78:75:a2:8e:90:9f:6b:
0d:28:b7:32:72:a6:d9:fe:2a:b2:20:3e:ed:7b:5c:dc:c1:67:
61:5b:23:ac:27:ea:8b:90:8f:23:4c:19:43:30:5c:5c:4f:b8:
50:29:b8:73:83:79:81:5d:16:06:fa:ee:9c:cf:9f:45:48:cd:
0b:19:2a:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZorjRIZk7Xnnq7Jldro36u+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNjhjMWRhZDkxYTQxMDFjNzE1M2MwZjZkMDE1NjIzOGFk
NzQ2YmIwHhcNMjUxMDI4MTYwMDU2WhcNMjUxMDI5MTYwMDU2WjAzMTEwLwYDVQQD
Eyg4YjA1MmM5YTZhZjFiMTNmMzdkYTc5YWQ0NTVmMTdiNzc2MTdhNWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQSJPhgV8uZx+N0Tw2fbCiaQGZTK
beKxRtYT+4iHMomQDEh0ZcUkuEpd0Nvd2kOFqnlquB9B3KYQCggkfVcXFiPU1W+6
XDsLQ+ekmQcna5BXskWs1qdUPopXaSX+1Uei9sl2nIfGxzvpOEPfp2TTm9Z7g7Dp
/JIe7pdS7/Qz3CaAP65YUaYCcYW9yjKPCV/Z4Uow3HwnCgwEvtDdkpZcW4e4J7Yb
Kb89l1gRIgdm9MGzEI7c2yFJOnuuupb8z0iUx90kT9+2qIaFzWKuznwqfbXU6/gc
vZ3Tqb11wEHGVu1Ua5lA8IA8KQWhE9jGJR+A7m28kZCMaTJGyH85RIM26wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIsFLJpq8bE/N9p5rUVfF7d2F6XzMB8GA1UdIwQY
MBaAFL1owdrZGkEBxxU8D20BViOK10a7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdldqQjJ0a2FRUUhIRlR3UGJRRldJNHJYUnJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi80ZjRlZmYtYWY1NC00ZGIwLTkxY2Qt
MTM2OWNlZjdhNGNhLzEvdldqQjJ0a2FRUUhIRlR3UGJRRldJNHJYUnJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi80ZjRlZmYtYWY1NC00ZGIwLTkxY2QtMTM2OWNlZjdhNGNh
LzEvdldqQjJ0a2FRUUhIRlR3UGJRRldJNHJYUnJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARlT/36oz
iZTD9WcRV2LPCzYfmtrVcYd9tAaY4DaqJZVJnnak6sHpwCzJVTh6240lv9YL+ZS2
1zdp3oKawYERfr3P/Bx9kiiAey4nTLI+2fD9BSFY+INh2sKHyCvnZMaHApExWVVI
DCpl4KCDiPbTIgS2XGv16D+1Zq4LO+eqTkiezdI9nIBBhiHU5SJn1XF74Tpn6vWX
03JiTn8u9VzpLZfE06KfyJ0zPFhHxe6R73naI+jqEXv6evP4V6Swsld4daKOkJ9r
DSi3MnKm2f4qsiA+7Xtc3MFnYVsjrCfqi5CPI0wZQzBcXE+4UCm4c4N5gV0WBvru
nM+fRUjNCxkqNA==
-----END CERTIFICATE-----
Generated at Tue Oct 28 23:07:59 2025 by rpki-client