Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
File: vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft (raw, json)
Hash identifier: PBekTjVpZe8kPsvGLIC4RU3uFHj6RjXeYoeqdgSVqmc=
Subject key identifier: F5:AD:3B:27:B2:88:4F:26:0D:7E:00:1B:37:33:E2:B1:C5:63:D9:A5
Authority key identifier: BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7
Certificate issuer: /CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
Certificate serial: 0199FBEB49380865F3C6227C6FB57CE05D19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:04 +0000
Manifest this update: Sun 19 Oct 2025 10:02:04 +0000
Manifest next update: Mon 20 Oct 2025 10:02:04 +0000
Files and hashes: 1: Ciu6VIqlt_xKrbAE5HXa7sI9yIo.roa (hash: GBLv2kj+5/bD+8oVDkrec3Xg5+JexPkwOskhgAEq7iw=)
2: vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl (hash: UFKsuJq1uRXz1cDVIpa1s78YB5QYRjCo2BPKg85xhqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:49:38:08:65:f3:c6:22:7c:6f:b5:7c:e0:5d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
Validity
Not Before: Oct 19 10:02:04 2025 GMT
Not After : Oct 20 10:02:04 2025 GMT
Subject: CN=f5ad3b27b2884f260d7e001b3733e2b1c563d9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a1:04:20:f8:82:cd:32:d7:0c:ba:c0:a7:bd:
34:40:a6:88:47:7c:07:6a:dd:92:e1:19:e2:af:d1:
b4:61:9d:43:60:c2:89:95:12:25:ff:47:ca:37:c9:
3e:95:78:34:95:e3:36:18:dd:58:da:de:f3:25:ca:
31:91:44:f8:11:3c:9c:fe:78:3f:4c:89:43:a1:22:
48:17:c7:d5:6d:71:bc:d2:21:1c:82:3e:b4:0a:f7:
cb:0f:3d:04:a7:ff:3f:8c:89:9b:32:d5:8f:24:0e:
12:8c:e6:d4:3f:61:3a:10:91:b6:ce:79:3e:20:42:
96:5c:ca:8e:17:2d:54:1a:bd:78:aa:d8:fd:0c:13:
49:20:2c:1f:f2:06:79:cb:0c:b8:7a:f7:17:61:61:
5e:42:42:16:08:e2:cb:a5:46:76:bd:dc:f1:8e:a5:
f8:b4:cb:a3:a5:21:69:94:c5:4a:11:cb:f1:68:aa:
9e:76:a1:cc:9e:2a:34:45:9a:e6:b7:7a:33:2f:a1:
fb:f0:9f:1f:c0:46:93:cd:80:dd:30:f8:35:b1:32:
4a:fe:e6:95:4f:7f:3c:78:f3:7e:d0:d0:4c:7d:dd:
c5:da:8f:ec:6a:b3:ef:35:3c:bc:c4:45:98:5d:f0:
21:87:8c:2d:17:bf:72:ac:3a:a1:3c:27:60:bf:9a:
69:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AD:3B:27:B2:88:4F:26:0D:7E:00:1B:37:33:E2:B1:C5:63:D9:A5
X509v3 Authority Key Identifier:
keyid:BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:26:84:20:7f:42:5e:4e:51:43:9f:03:f5:6c:6a:3a:37:81:
ed:f0:75:94:bf:69:f5:32:f1:53:84:5e:66:f9:99:00:72:b1:
57:e9:24:06:14:71:fb:0c:90:a7:48:cb:70:ca:13:f7:1e:86:
99:fc:8f:8b:d4:e1:e6:11:88:bc:0b:0d:08:26:51:42:ac:9a:
d5:5b:d4:b3:ab:26:b0:e1:3a:d7:1f:81:27:df:6e:67:f0:38:
1f:3e:bb:3c:29:22:d5:da:d5:6f:c6:42:4b:f8:aa:07:61:fc:
f9:5c:62:76:fc:70:0c:9b:75:d6:74:25:2f:e4:7c:aa:1f:f6:
70:ad:8d:7c:76:98:65:cb:db:8a:18:7a:6b:28:38:4b:e9:04:
93:98:f3:3e:b8:90:ca:21:3b:16:38:e4:b5:98:52:05:aa:00:
61:18:cc:e4:05:cf:b2:a2:96:eb:04:2f:0c:7f:db:a9:11:5f:
a4:23:30:c7:43:73:59:04:33:fc:24:48:a4:5c:7a:65:f2:7f:
d4:10:34:b1:51:07:fa:b8:fb:f3:f9:77:c3:d3:eb:2c:a2:4d:
8b:16:a8:75:d5:f5:7a:9a:c2:e6:1a:bb:75:9a:ae:a4:e9:57:
7a:dd:0e:fc:ee:80:e3:b6:b9:45:5a:c5:36:38:40:ff:41:44:
dc:d1:d3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:28 2025 by rpki-client