Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
File: vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft (raw, json)
Hash identifier: 9l9Hj492jpKDWbgtTDYeapaMRdGQ41EMLyeCKb/pbHI=
Subject key identifier: 68:16:79:57:66:75:90:C8:FF:FA:A7:8A:68:07:3E:31:63:32:CF:C5
Authority key identifier: BE:44:8C:67:A3:AB:0E:A3:75:FB:A8:48:C9:FE:8C:8E:B1:E8:4D:6F
Certificate issuer: /CN=be448c67a3ab0ea375fba848c9fe8c8eb1e84d6f
Certificate serial: 0198D65F758CBE76F6270685C988B41A090C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
Manifest number: 0C3B
Signing time: Sat 23 Aug 2025 10:00:36 +0000
Manifest this update: Sat 23 Aug 2025 10:00:36 +0000
Manifest next update: Sun 24 Aug 2025 10:00:36 +0000
Files and hashes: 1: 9UcomILdtAe6cNct4YOh4DKdhek.roa (hash: 5S+dEogRJfe8M30SkPrXb8z3+L8Fg1f4Nn7krQuU6Oo=)
2: vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl (hash: 6f5xfwWDJUHzAfxO3JaW3vTrCSThVrnjyROLah4X9+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:75:8c:be:76:f6:27:06:85:c9:88:b4:1a:09:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be448c67a3ab0ea375fba848c9fe8c8eb1e84d6f
Validity
Not Before: Aug 23 10:00:36 2025 GMT
Not After : Aug 24 10:00:36 2025 GMT
Subject: CN=68167957667590c8fffaa78a68073e316332cfc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:51:1a:31:5e:a1:19:52:33:b9:d0:3b:c7:03:
b7:6c:d8:a0:5e:06:a6:3a:48:8d:93:ce:ac:f1:e3:
76:92:63:87:19:e1:aa:33:b0:6e:20:f1:12:7e:ac:
5f:d0:94:b0:8c:45:07:44:dc:16:99:71:9c:75:d1:
9e:7b:de:3a:c3:c5:57:ce:7c:8d:01:64:91:2d:aa:
7a:4b:73:75:11:3b:e4:98:d7:05:18:cb:12:c1:bb:
97:4a:95:2f:be:9a:e7:5c:0c:c3:d6:26:15:b4:cc:
56:47:ae:12:c2:a5:02:72:d6:eb:e0:52:4c:26:f1:
bb:5a:0c:f9:30:30:e8:4c:65:97:59:60:d3:f8:95:
c8:f9:1d:dd:c7:b2:cf:7b:84:92:66:e1:f2:1a:70:
e6:0b:22:55:14:4a:47:ee:da:ab:4a:e1:ec:5e:5a:
4e:ad:4c:c7:8c:7c:33:e6:ef:47:d4:71:ea:00:2f:
30:39:b1:04:af:7c:39:4d:9d:97:e2:5c:2e:04:29:
4b:22:5b:bd:fb:99:f4:a0:19:f4:fe:28:42:24:9f:
be:11:8b:94:9f:99:1e:25:cc:0c:6f:c4:f0:76:76:
59:c0:76:c3:91:6a:c2:a5:1e:53:61:28:b1:00:05:
3d:8e:11:a4:16:40:2b:62:3c:6a:eb:9b:b0:af:f3:
d8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:16:79:57:66:75:90:C8:FF:FA:A7:8A:68:07:3E:31:63:32:CF:C5
X509v3 Authority Key Identifier:
keyid:BE:44:8C:67:A3:AB:0E:A3:75:FB:A8:48:C9:FE:8C:8E:B1:E8:4D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ba:c2:11:7c:a4:63:7b:41:60:a7:c8:d9:cd:11:6d:b9:f9:
1d:be:51:fd:fd:26:13:78:16:ba:ae:61:e7:fb:61:7a:4a:ec:
8b:42:18:8f:80:a1:f8:ee:cc:e7:8c:f8:75:da:38:26:78:7a:
a1:4a:1f:da:ca:4e:84:4f:91:7b:da:1f:6d:8c:55:3e:15:23:
db:7a:9c:31:ae:57:27:52:61:a6:cf:05:c8:38:fe:77:bb:fe:
bf:65:d9:3c:a6:88:cf:b6:23:74:06:ec:eb:b7:3d:a7:11:36:
45:ce:5f:d5:cf:99:0a:c9:e7:6a:3c:fc:5b:73:6a:39:80:24:
1e:1a:be:6b:ac:35:dd:92:8f:8b:3e:a7:e4:c8:fb:f5:da:de:
54:28:5f:b6:35:7d:ab:68:74:99:8c:9c:b4:15:db:01:51:bc:
4f:08:ad:ac:80:4a:e2:4b:f8:e7:bf:0e:4f:81:39:d4:5d:fe:
0f:02:50:e7:92:8c:9f:db:ca:3f:01:06:50:d7:3e:4c:ab:39:
4f:8e:2f:d5:7b:10:b6:21:51:0c:c6:99:29:7a:56:25:0e:66:
f1:f5:af:1b:b0:86:bb:d8:3f:66:60:c7:5b:f0:e6:dc:ad:c2:
46:d0:87:3e:99:b7:d7:07:81:7e:22:08:a1:b5:c1:a3:94:ee:
51:dc:66:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:59 2025 by rpki-client