
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
File: vmWzDa10rHadS1syMS2o-oGrM9E.mft (raw, json)
Hash identifier: 2swceq/IB6sz3h4e6NlDlI9H0N4wGzU8P0dBArip3H8=
Subject key identifier: 42:F4:EF:32:6B:F9:20:0E:E5:FB:AE:BA:60:2B:11:41:C9:B7:08:41
Authority key identifier: BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1
Certificate issuer: /CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1
Certificate serial: 0199FE46ECEC1F534C1703754195EFE22C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
Manifest number: 0C3B
Signing time: Sun 19 Oct 2025 21:01:25 +0000
Manifest this update: Sun 19 Oct 2025 21:01:25 +0000
Manifest next update: Mon 20 Oct 2025 21:01:25 +0000
Files and hashes: 1: gySZz205phomZv7uwZ9DDc75Itk.roa (hash: eO5SMh+ywbk5mzLS6dSPU+KeItuyQY93yBUL4wk+YdY=)
2: vmWzDa10rHadS1syMS2o-oGrM9E.crl (hash: gpuKtTseOg1UG+hRu6Id1kyJ+67LbnUv4B636nQ7pyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:ec:ec:1f:53:4c:17:03:75:41:95:ef:e2:2c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1
Validity
Not Before: Oct 19 21:01:25 2025 GMT
Not After : Oct 20 21:01:25 2025 GMT
Subject: CN=42f4ef326bf9200ee5fbaeba602b1141c9b70841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:91:d4:00:0a:f1:a1:87:2f:49:6c:eb:ce:bb:
90:0a:a7:5a:f3:d3:6c:c9:d4:f8:ca:d3:43:5d:05:
58:0a:2f:f8:59:17:98:a9:40:f0:34:1a:35:8f:88:
1f:3d:5a:45:35:38:ae:c2:82:3f:cc:b6:a6:9d:71:
2f:7c:72:43:ab:f5:92:8d:af:a1:bf:ba:f4:b4:93:
99:1b:14:b5:ea:64:0c:9a:80:87:ea:37:20:da:bd:
c0:0a:8e:9a:dc:c0:26:3d:6c:4b:63:75:d5:37:7b:
00:53:12:d1:64:d1:99:a6:1d:96:00:15:ed:36:de:
78:e1:94:61:d6:10:64:91:36:1a:d9:80:a0:5a:be:
b0:c4:22:83:9f:2e:9e:4b:d0:54:94:a2:52:b8:0b:
94:e1:0c:a7:a9:82:80:63:74:fb:f0:c8:52:eb:c7:
6f:4b:2e:0c:d6:54:a3:c3:d2:5f:84:b1:6b:a3:d6:
3b:dd:c5:d2:90:62:e9:19:9c:10:94:31:00:b4:b3:
67:80:56:b1:da:d0:29:95:3c:ca:80:df:f8:65:1d:
01:7c:96:1a:e9:50:47:6f:44:90:76:8b:1d:08:83:
e1:ad:69:e9:56:6e:23:38:42:ae:f8:d4:ca:dc:21:
29:8a:33:e8:f6:e1:f9:55:c0:d5:30:67:45:62:3d:
a9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F4:EF:32:6B:F9:20:0E:E5:FB:AE:BA:60:2B:11:41:C9:B7:08:41
X509v3 Authority Key Identifier:
keyid:BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ec:39:6a:ef:c3:a3:92:f2:a4:ba:0b:33:88:9c:a7:75:bd:
6a:79:e6:50:45:61:a4:59:d8:a0:45:7e:6d:4f:f5:da:e7:2f:
2e:37:e5:7a:0e:4e:94:c3:aa:c8:84:ce:61:74:d4:e6:02:28:
eb:5e:39:70:15:3c:68:53:a6:e1:de:fa:2d:17:4b:15:d5:35:
3c:1e:5b:4b:f9:7b:ae:4c:79:13:8f:e5:a3:47:91:96:80:37:
c9:94:01:03:fc:fd:0e:14:2e:db:5e:b0:5d:30:70:77:9c:17:
8d:82:b4:d9:d7:99:ec:f3:41:c8:b3:07:43:73:ce:6f:d4:ac:
4a:70:0f:32:03:a0:96:d9:f4:b1:0f:4e:c1:b2:ef:e3:90:6a:
f2:7e:da:db:1d:bf:ce:88:27:44:92:63:9f:1a:3f:f4:d6:d2:
1a:b0:39:ea:b2:c9:c3:2d:97:3b:85:15:c4:40:0d:40:45:80:
6c:e5:42:c1:a5:ca:19:37:5a:42:cb:d6:14:0f:3b:d6:c9:c0:
21:10:f2:e0:a9:a4:59:ab:0b:df:27:42:15:bc:74:07:b7:a8:
62:1b:91:d1:1f:66:22:24:71:d7:7b:67:cd:54:dc:88:9e:88:
2b:17:17:b2:d2:5d:da:f7:d0:3b:a0:cb:40:d5:7d:c8:7c:b0:
b3:69:7e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:43:08 2025 by rpki-client