Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
File: vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft (raw, json)
Hash identifier: N5VHscqFBl7bCmhI759H4Um0fbC1NDVH/aOfWBW/hLc=
Subject key identifier: CC:C0:2E:4F:5C:35:B4:A9:0C:3F:76:B4:05:2F:01:22:9C:33:3C:56
Authority key identifier: BE:44:8C:67:A3:AB:0E:A3:75:FB:A8:48:C9:FE:8C:8E:B1:E8:4D:6F
Certificate issuer: /CN=be448c67a3ab0ea375fba848c9fe8c8eb1e84d6f
Certificate serial: 0199FBEB8CD7BFD1CA2002615068698F60C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
Manifest number: 0CD3
Signing time: Sun 19 Oct 2025 10:02:22 +0000
Manifest this update: Sun 19 Oct 2025 10:02:22 +0000
Manifest next update: Mon 20 Oct 2025 10:02:22 +0000
Files and hashes: 1: 9UcomILdtAe6cNct4YOh4DKdhek.roa (hash: 5S+dEogRJfe8M30SkPrXb8z3+L8Fg1f4Nn7krQuU6Oo=)
2: vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl (hash: x5Tf/VpaynOSSz1kMDby+ZKp3waeZx1drnNH2Y06s7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:8c:d7:bf:d1:ca:20:02:61:50:68:69:8f:60:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be448c67a3ab0ea375fba848c9fe8c8eb1e84d6f
Validity
Not Before: Oct 19 10:02:22 2025 GMT
Not After : Oct 20 10:02:22 2025 GMT
Subject: CN=ccc02e4f5c35b4a90c3f76b4052f01229c333c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:65:4d:ca:9d:dd:c5:2d:2f:87:ba:24:53:3d:
fe:20:f6:e0:90:c8:35:a8:36:3d:95:50:1b:60:d2:
39:ab:f5:70:1b:82:00:f6:03:63:51:b0:05:92:81:
c6:79:18:76:75:14:c0:13:75:44:74:46:c8:6a:06:
e8:76:3a:86:6b:05:87:b6:0e:c9:7a:12:7d:82:69:
a8:9c:d5:92:da:5f:85:b7:5d:5e:f8:17:b1:d5:b7:
87:00:23:28:78:35:4b:dc:aa:66:f1:7c:fc:05:19:
af:63:ad:74:f7:3f:7a:a1:63:29:d0:9e:e1:18:dd:
ee:2d:85:65:6d:b3:f8:7a:f2:f5:c5:be:15:20:6a:
8b:42:98:0b:e1:b6:36:86:ed:3d:87:33:9f:06:6c:
76:40:f2:5e:ba:3e:56:a3:9e:0b:13:c4:f2:6f:8e:
32:92:92:3d:99:30:02:34:44:dc:97:a6:45:8e:e7:
84:7e:76:06:59:42:7a:b4:b6:fa:bb:c8:3e:63:25:
73:25:15:17:3e:a3:e5:ed:c3:b2:d1:ff:ac:d3:0b:
83:c2:a6:52:85:f7:e2:21:a4:f7:23:f7:0a:43:4d:
2d:aa:a7:57:1d:cf:59:75:0f:80:31:c2:69:99:09:
a5:ea:4f:a9:6b:82:22:de:75:53:7c:60:70:07:80:
4c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C0:2E:4F:5C:35:B4:A9:0C:3F:76:B4:05:2F:01:22:9C:33:3C:56
X509v3 Authority Key Identifier:
keyid:BE:44:8C:67:A3:AB:0E:A3:75:FB:A8:48:C9:FE:8C:8E:B1:E8:4D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:cc:60:d2:21:cc:03:50:da:11:79:c6:d3:39:98:31:ef:26:
27:7b:69:2b:2a:19:3d:e4:92:55:b9:f7:c4:42:ad:58:02:f4:
f7:53:42:85:7a:28:5f:4d:91:53:42:c1:74:c5:c5:f9:58:a1:
1e:b1:b7:fd:59:e5:ca:75:1c:d1:d7:6d:c8:6e:cf:e2:13:d1:
a6:3c:15:4b:61:5e:1e:9c:dd:85:56:59:bc:02:71:0f:cc:fe:
52:ed:59:90:24:62:80:e4:32:3c:2f:3c:3a:db:49:59:63:9c:
b8:2b:8f:1d:43:5d:d2:52:b8:1a:9a:d5:f1:28:3b:1d:20:d3:
85:e1:ae:93:78:43:4c:fa:84:0a:2f:11:35:6d:b8:a1:56:83:
23:e6:c8:b9:f7:04:83:46:6c:9e:e2:0a:78:44:2d:fd:11:32:
2d:e9:4f:96:43:73:0e:af:79:7d:3f:a9:90:5a:a8:e0:6c:b8:
4f:0f:96:f4:47:16:7b:56:5a:8b:92:2d:a2:f9:fa:28:ec:1c:
42:70:ad:72:97:d6:42:80:eb:b4:0d:d3:1f:36:13:f6:69:99:
97:7f:b1:67:52:a6:5f:dd:8e:c7:68:ef:a0:aa:62:2f:e7:77:
16:06:ca:7f:7c:9d:25:63:20:86:8f:01:06:19:4a:bb:f8:86:
9e:b6:bb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:48 2025 by rpki-client