Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
File: vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft (raw, json)
Hash identifier: Eojo+HnFjlmSe0S4myLhwQZzSQXkW7CuALZsCNyPiy8=
Subject key identifier: A4:29:68:37:EC:7C:EA:11:5C:A5:8F:CF:00:FB:4B:05:15:BB:43:0E
Authority key identifier: BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7
Certificate issuer: /CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
Certificate serial: 019A49294A44D1C7E9D6587C0CBCB0EBAC47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
Manifest number: 170A
Signing time: Mon 03 Nov 2025 10:00:33 +0000
Manifest this update: Mon 03 Nov 2025 10:00:33 +0000
Manifest next update: Tue 04 Nov 2025 10:00:33 +0000
Files and hashes: 1: Ciu6VIqlt_xKrbAE5HXa7sI9yIo.roa (hash: GBLv2kj+5/bD+8oVDkrec3Xg5+JexPkwOskhgAEq7iw=)
2: vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl (hash: lqLeKAMoQocnuUyl1Gv4a2dul722gTlopx+dQ2o4r8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:49:29:4a:44:d1:c7:e9:d6:58:7c:0c:bc:b0:eb:ac:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
Validity
Not Before: Nov 3 10:00:33 2025 GMT
Not After : Nov 4 10:00:33 2025 GMT
Subject: CN=a4296837ec7cea115ca58fcf00fb4b0515bb430e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:87:ac:33:a2:27:44:5f:50:72:ad:e7:7c:b1:
1b:41:c3:f3:42:da:c9:03:35:af:56:0a:b1:a2:41:
a9:a4:5f:e2:a5:86:3d:3b:f0:ae:c1:56:00:69:36:
d1:03:88:87:d9:33:d9:a2:86:43:2a:07:be:a2:34:
ab:89:54:d2:96:45:be:61:c8:96:7b:1f:95:5b:d3:
1c:db:c1:1f:a4:51:cf:1d:56:85:51:c9:5e:41:0f:
07:af:b5:f5:ac:6a:7a:19:dd:ba:1f:63:35:5b:e0:
37:fd:62:42:b4:00:15:f2:b4:d8:41:1c:9b:98:88:
0e:37:6f:d0:39:61:3d:60:4a:fb:e9:0f:6c:db:72:
bd:79:0a:b9:2b:c1:34:b4:7d:96:db:ee:2d:b5:73:
b6:e6:2d:d2:0f:6e:f4:ab:03:fc:fc:1a:4b:00:a0:
13:3e:a1:98:1c:27:2d:f9:91:bc:01:52:0f:b5:48:
21:42:bc:b2:dd:3e:e2:1e:f1:1d:cc:29:3c:bf:dc:
4c:33:ca:d4:b9:07:73:48:0a:e6:c7:63:cc:69:6d:
a9:91:58:cb:6a:08:b3:14:6a:1f:25:fc:ac:a9:0a:
4b:4c:93:96:9d:54:bd:f9:b7:33:6a:60:bf:9a:63:
a5:8c:0e:fb:f5:bb:fe:a1:41:56:8a:75:70:d3:02:
da:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:29:68:37:EC:7C:EA:11:5C:A5:8F:CF:00:FB:4B:05:15:BB:43:0E
X509v3 Authority Key Identifier:
keyid:BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:55:cc:2c:49:cc:33:3e:45:95:b1:65:8c:e2:10:9f:4c:a7:
c4:ba:35:5c:d8:d0:cb:c4:e9:62:3b:e5:1a:98:ac:67:20:90:
83:f5:72:3f:ea:49:00:95:2b:c6:f8:d0:4c:9c:37:7b:c4:64:
a2:54:ad:59:de:b0:70:ba:32:3c:4d:db:b7:12:d1:3d:d7:4c:
7b:26:63:9e:94:c8:1b:a1:f9:1d:92:7b:9a:b0:ba:52:a3:be:
ed:5e:6e:02:a0:84:f3:03:00:f5:6d:31:0f:c7:e3:a0:7b:db:
0b:67:8a:d5:cb:e5:e0:9b:f4:9f:17:e8:d9:80:27:76:36:ed:
17:e8:e6:62:c1:fe:ab:65:41:63:c1:f2:d5:58:dc:1a:b4:b9:
35:cf:5e:09:64:96:d1:59:dc:80:80:63:04:2c:c4:6b:6d:5c:
4a:11:09:5c:7c:c9:2f:3e:ee:20:83:c5:ae:b1:7e:85:83:3c:
37:97:f8:d5:ff:97:93:1a:d9:5d:68:7c:70:4b:23:b8:7a:bd:
58:9f:9e:b4:37:74:c1:eb:5f:6b:1a:47:bc:e1:dd:49:1a:23:
ad:db:e7:1c:c8:18:5e:e0:4f:a9:67:dd:f3:a2:ae:d1:b8:39:
48:a9:6e:a9:f6:76:a9:a1:60:9d:ba:11:69:c6:95:02:65:20:
d0:d8:83:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpJKUpE0cfp1lh8DLyw66xHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMTVhMDI3YjVlZTRiMGU4NTM3YThmNzE5OGNmYTllYTA5
NDVhZTcwHhcNMjUxMTAzMTAwMDMzWhcNMjUxMTA0MTAwMDMzWjAzMTEwLwYDVQQD
EyhhNDI5NjgzN2VjN2NlYTExNWNhNThmY2YwMGZiNGIwNTE1YmI0MzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoesM6InRF9Qcq3nfLEbQcPzQtrJ
AzWvVgqxokGppF/ipYY9O/CuwVYAaTbRA4iH2TPZooZDKge+ojSriVTSlkW+YciW
ex+VW9Mc28EfpFHPHVaFUcleQQ8Hr7X1rGp6Gd26H2M1W+A3/WJCtAAV8rTYQRyb
mIgON2/QOWE9YEr76Q9s23K9eQq5K8E0tH2W2+4ttXO25i3SD270qwP8/BpLAKAT
PqGYHCct+ZG8AVIPtUghQryy3T7iHvEdzCk8v9xMM8rUuQdzSArmx2PMaW2pkVjL
agizFGofJfysqQpLTJOWnVS9+bczamC/mmOljA779bv+oUFWinVw0wLanQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQpaDfsfOoRXKWPzwD7SwUVu0MOMB8GA1UdIwQY
MBaAFLwVoCe17ksOhTeo9xmM+p6glFrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkJXZ0o3WHVTdzZGTjZqM0dZejZucUNVV3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yN2NkNzEtOWRmNS00ZjVhLWE3MDEt
NmRmZTIzOWFlNTQxLzEvdkJXZ0o3WHVTdzZGTjZqM0dZejZucUNVV3VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8yN2NkNzEtOWRmNS00ZjVhLWE3MDEtNmRmZTIzOWFlNTQx
LzEvdkJXZ0o3WHVTdzZGTjZqM0dZejZucUNVV3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZVXMLEnM
Mz5FlbFljOIQn0ynxLo1XNjQy8TpYjvlGpisZyCQg/VyP+pJAJUrxvjQTJw3e8Rk
olStWd6wcLoyPE3btxLRPddMeyZjnpTIG6H5HZJ7mrC6UqO+7V5uAqCE8wMA9W0x
D8fjoHvbC2eK1cvl4Jv0nxfo2YAndjbtF+jmYsH+q2VBY8Hy1VjcGrS5Nc9eCWSW
0VncgIBjBCzEa21cShEJXHzJLz7uIIPFrrF+hYM8N5f41f+XkxrZXWh8cEsjuHq9
WJ+etDd0wetfaxpHvOHdSRojrdvnHMgYXuBPqWfd86Ku0bg5SKluqfZ2qaFgnboR
acaVAmUg0NiDCA==
-----END CERTIFICATE-----
Generated at Mon Nov 3 11:29:02 2025 by rpki-client