Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft
File: vBwW9b43_2xdQgXyq6JfzjWJAzU.mft (raw, json)
Hash identifier: NNwo2wwqelPWa1k9OMN8UjAw4bJDQ7YVT5FPrko5cB4=
Subject key identifier: 16:7C:9D:AC:AA:1E:ED:F2:2E:16:56:92:4B:86:AE:02:70:1A:06:50
Authority key identifier: BC:1C:16:F5:BE:37:FF:6C:5D:42:05:F2:AB:A2:5F:CE:35:89:03:35
Certificate issuer: /CN=bc1c16f5be37ff6c5d4205f2aba25fce35890335
Certificate serial: 019A70A565F1B610CFB45341A9F47659B3E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft
Manifest number: 0FA3
Signing time: Tue 11 Nov 2025 02:01:18 +0000
Manifest this update: Tue 11 Nov 2025 02:01:18 +0000
Manifest next update: Wed 12 Nov 2025 02:01:18 +0000
Files and hashes: 1: h4LBRXlaL-oC3DBkosImeYIzlhM.roa (hash: fcJ0091j9gyLpmNM62v9sM4sdOjqt1S8YmfKAgde0r4=)
2: vBwW9b43_2xdQgXyq6JfzjWJAzU.crl (hash: Di8jzdEpIhETtGOVENhseIPtoExxZG/mStudKkk2/xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:65:f1:b6:10:cf:b4:53:41:a9:f4:76:59:b3:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1c16f5be37ff6c5d4205f2aba25fce35890335
Validity
Not Before: Nov 11 02:01:18 2025 GMT
Not After : Nov 12 02:01:18 2025 GMT
Subject: CN=167c9dacaa1eedf22e1656924b86ae02701a0650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bd:f3:49:26:e1:22:d9:57:63:52:9e:e6:a5:
65:cd:06:a4:a3:b8:13:21:45:4a:77:a7:06:3b:35:
b2:86:3b:5c:6b:00:75:f6:34:04:43:80:eb:17:66:
0a:09:e2:59:17:d2:34:d3:e2:50:78:9e:ae:f3:29:
7c:ee:5f:6f:81:c5:35:fa:6c:c2:16:03:87:b7:d6:
b3:e1:59:69:a5:fc:4a:10:0a:7d:5e:33:fb:11:19:
7d:b4:38:9e:c6:79:06:55:6a:3e:b6:bf:91:12:a2:
10:cc:af:0c:1c:00:fa:30:9a:b5:ed:36:7b:48:99:
9a:c4:8e:21:d9:44:c1:14:9a:a4:6a:9d:55:9e:f8:
ed:bf:57:99:66:17:0b:05:8c:a4:65:cd:cc:2b:64:
e5:41:a5:a4:ee:5f:a2:e3:11:8c:f1:e1:6d:4a:6c:
0f:cb:7b:67:32:d1:e6:6e:b8:4c:55:43:fb:44:bb:
de:e7:1d:3a:a6:43:57:75:2c:ec:24:e7:75:62:93:
1a:dc:72:e5:bd:2f:ab:a1:b0:9b:e3:1f:dd:75:77:
0e:c3:10:70:9c:30:48:3e:e0:1d:d2:b1:4e:3b:af:
ba:27:4d:40:2a:f7:9d:5e:fb:96:5b:02:c1:a2:05:
1f:65:1c:0b:2e:af:4c:24:d5:a4:2f:ee:63:dd:cd:
2e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7C:9D:AC:AA:1E:ED:F2:2E:16:56:92:4B:86:AE:02:70:1A:06:50
X509v3 Authority Key Identifier:
keyid:BC:1C:16:F5:BE:37:FF:6C:5D:42:05:F2:AB:A2:5F:CE:35:89:03:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:65:8e:38:84:a6:89:75:95:c2:49:29:c3:f4:ea:dc:f0:6f:
e8:95:fe:0e:44:81:b5:0e:b0:53:c8:6c:9a:75:a8:2d:dc:5e:
9b:74:a5:55:2c:08:b0:8d:e1:3e:08:68:08:4d:f3:14:02:79:
07:ed:e8:cb:7d:f0:a3:f0:4e:fc:c2:80:2b:53:6f:8b:34:8f:
51:28:2f:95:5c:ca:87:57:bb:0a:c7:c3:d6:dc:5d:f8:c8:e2:
87:ae:c3:33:a1:d2:f5:82:e2:d8:02:ed:fa:41:89:2c:63:f2:
e6:97:7b:73:34:ff:29:72:5d:d6:df:a6:a4:40:7d:f2:0b:8d:
27:69:ac:c9:a0:2f:e9:9b:7e:bf:d7:11:99:38:8a:6b:a0:37:
cb:c0:3a:6a:f5:56:4e:a0:ff:e7:08:f3:e8:1f:e9:8e:8b:77:
64:fc:1e:98:07:31:cc:1c:3d:16:68:51:87:1b:a1:a6:8a:3d:
24:18:73:aa:e5:9d:fa:be:90:5d:4b:1c:fd:ba:05:fe:25:a4:
04:12:b5:56:6b:31:8c:e0:8b:51:e9:8c:47:3f:05:2d:03:61:
4a:ae:cd:2b:06:24:fe:f4:89:53:ba:a0:b9:bf:df:c0:f3:27:
81:2d:8f:1a:2f:0f:f9:32:8b:d3:1f:45:86:7b:80:c0:e5:dc:
69:d5:d3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:52 2025 by rpki-client