Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
File: vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft (raw, json)
Hash identifier: 2wuIbk6HM/5i84Z4ZsDMjSEdy53v7GyCJvLod4CGIfs=
Subject key identifier: C6:BB:46:9F:5B:9A:0D:69:A2:31:C9:92:F8:D3:C6:8A:BB:B2:AD:2C
Authority key identifier: BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7
Certificate issuer: /CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
Certificate serial: 019938E081316C13429897250370A066CB62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
Manifest number: 167D
Signing time: Thu 11 Sep 2025 13:04:21 +0000
Manifest this update: Thu 11 Sep 2025 13:04:21 +0000
Manifest next update: Fri 12 Sep 2025 13:04:21 +0000
Files and hashes: 1: Ciu6VIqlt_xKrbAE5HXa7sI9yIo.roa (hash: GBLv2kj+5/bD+8oVDkrec3Xg5+JexPkwOskhgAEq7iw=)
2: vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl (hash: IljItXRu5Vs2syLkSyykXZLHXMG3XKWPKhx0UfjmVco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:e0:81:31:6c:13:42:98:97:25:03:70:a0:66:cb:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
Validity
Not Before: Sep 11 13:04:21 2025 GMT
Not After : Sep 12 13:04:21 2025 GMT
Subject: CN=c6bb469f5b9a0d69a231c992f8d3c68abbb2ad2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b1:b7:c8:72:ea:8e:6f:7f:fd:21:76:3e:52:
23:97:a2:29:06:77:34:a4:07:4f:9c:d5:7a:d2:72:
30:61:bc:b2:ad:49:3a:d8:ea:ed:e9:23:76:97:9f:
c9:9b:9e:25:75:22:c9:1c:fb:78:07:20:7e:a8:55:
14:c2:7f:8f:6a:dd:52:0a:a1:10:67:76:81:dd:b2:
1c:41:36:9c:3f:20:c8:4f:ed:8e:f5:15:92:f9:42:
1b:87:3a:4a:b6:97:15:bd:6e:4f:80:70:dc:93:2b:
a5:65:b4:5d:ed:31:d5:3b:b7:3d:93:b8:ec:48:79:
07:da:ae:1c:07:8d:e2:d0:4d:1a:ea:a5:99:78:f4:
e6:f4:cb:dd:f6:5c:47:ff:3f:23:3b:cc:02:d4:6d:
64:64:ea:08:2a:5e:d9:fc:e2:a4:90:e6:44:0d:24:
10:14:df:58:9c:43:41:28:e7:16:7c:79:94:46:e8:
65:97:c8:1c:fa:72:a6:e9:48:b8:ec:49:00:b6:be:
9d:6d:ee:5c:57:c5:f3:63:7a:d3:ed:fe:ac:7f:f0:
7d:d5:45:29:b6:83:9c:46:49:71:76:fb:b6:70:a9:
5e:bb:f5:ac:62:16:4a:e3:05:49:55:6a:a9:96:c4:
a4:03:e2:5e:ef:1a:9e:6d:69:08:17:0b:c1:8c:a4:
ce:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BB:46:9F:5B:9A:0D:69:A2:31:C9:92:F8:D3:C6:8A:BB:B2:AD:2C
X509v3 Authority Key Identifier:
keyid:BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:96:4c:97:c3:66:1a:81:b8:85:8a:64:70:9d:ee:24:c9:0f:
54:56:be:1a:c3:70:bb:91:92:2b:d0:32:af:60:2f:d2:b0:ac:
d6:f0:a8:a5:73:47:ee:06:ba:75:71:52:63:05:67:6e:4a:a3:
54:4a:76:a1:c6:1c:2a:9f:c1:5c:3b:e3:5c:f5:d6:df:8b:94:
c2:2d:89:62:49:d5:56:f6:b7:73:05:16:79:1e:6a:e6:18:69:
0b:69:d9:0f:06:49:dd:9d:78:be:1a:28:88:6a:4e:ef:b6:86:
a2:7f:7b:39:95:87:1a:ad:2e:c9:3b:0c:01:28:87:26:e7:a0:
fb:70:9b:12:37:38:56:ac:07:7e:16:20:5c:68:64:bf:74:4f:
ef:85:14:c1:cd:9b:9d:17:3d:b1:02:0d:04:19:38:c2:64:59:
c8:df:e8:06:eb:fa:a3:5a:10:27:32:9f:fa:92:e5:9b:0d:87:
e1:db:fa:b9:37:75:eb:b5:e5:f9:73:76:24:99:cc:63:b0:52:
18:26:31:d6:82:45:67:c2:45:d3:d8:7f:90:94:fc:1b:24:46:
d0:7f:f4:b3:78:13:4f:da:90:65:f0:ae:ce:4b:be:f3:6c:71:
ea:22:94:5c:1f:95:5b:b2:45:a9:d4:82:01:f2:06:b3:1d:7f:
93:08:df:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk44IExbBNCmJclA3CgZstiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMTVhMDI3YjVlZTRiMGU4NTM3YThmNzE5OGNmYTllYTA5
NDVhZTcwHhcNMjUwOTExMTMwNDIxWhcNMjUwOTEyMTMwNDIxWjAzMTEwLwYDVQQD
EyhjNmJiNDY5ZjViOWEwZDY5YTIzMWM5OTJmOGQzYzY4YWJiYjJhZDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibG3yHLqjm9//SF2PlIjl6IpBnc0
pAdPnNV60nIwYbyyrUk62Ort6SN2l5/Jm54ldSLJHPt4ByB+qFUUwn+Pat1SCqEQ
Z3aB3bIcQTacPyDIT+2O9RWS+UIbhzpKtpcVvW5PgHDckyulZbRd7THVO7c9k7js
SHkH2q4cB43i0E0a6qWZePTm9Mvd9lxH/z8jO8wC1G1kZOoIKl7Z/OKkkOZEDSQQ
FN9YnENBKOcWfHmURuhll8gc+nKm6Ui47EkAtr6dbe5cV8XzY3rT7f6sf/B91UUp
toOcRklxdvu2cKleu/WsYhZK4wVJVWqplsSkA+Je7xqebWkIFwvBjKTOFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMa7Rp9bmg1pojHJkvjTxoq7sq0sMB8GA1UdIwQY
MBaAFLwVoCe17ksOhTeo9xmM+p6glFrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkJXZ0o3WHVTdzZGTjZqM0dZejZucUNVV3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yN2NkNzEtOWRmNS00ZjVhLWE3MDEt
NmRmZTIzOWFlNTQxLzEvdkJXZ0o3WHVTdzZGTjZqM0dZejZucUNVV3VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8yN2NkNzEtOWRmNS00ZjVhLWE3MDEtNmRmZTIzOWFlNTQx
LzEvdkJXZ0o3WHVTdzZGTjZqM0dZejZucUNVV3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG5ZMl8Nm
GoG4hYpkcJ3uJMkPVFa+GsNwu5GSK9Ayr2Av0rCs1vCopXNH7ga6dXFSYwVnbkqj
VEp2ocYcKp/BXDvjXPXW34uUwi2JYknVVva3cwUWeR5q5hhpC2nZDwZJ3Z14vhoo
iGpO77aGon97OZWHGq0uyTsMASiHJueg+3CbEjc4VqwHfhYgXGhkv3RP74UUwc2b
nRc9sQINBBk4wmRZyN/oBuv6o1oQJzKf+pLlmw2H4dv6uTd167Xl+XN2JJnMY7BS
GCYx1oJFZ8JF09h/kJT8GyRG0H/0s3gTT9qQZfCuzku+82xx6iKUXB+VW7JFqdSC
AfIGsx1/kwjf9Q==
-----END CERTIFICATE-----
Generated at Thu Sep 11 14:19:01 2025 by rpki-client