Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
File: vmWzDa10rHadS1syMS2o-oGrM9E.mft (raw, json)
Hash identifier: neGs6N6ZPgIShH7YTGGXpFbAlkiL+9bj6WS89J3yJmQ=
Subject key identifier: 68:74:DF:1A:D1:B2:43:9A:70:98:B3:65:E6:0C:E9:43:1F:FD:C7:6D
Authority key identifier: BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1
Certificate issuer: /CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1
Certificate serial: 0198D4E05F572077C8EC5BC61E33B23FF9E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
Manifest number: 0BA1
Signing time: Sat 23 Aug 2025 03:02:10 +0000
Manifest this update: Sat 23 Aug 2025 03:02:10 +0000
Manifest next update: Sun 24 Aug 2025 03:02:10 +0000
Files and hashes: 1: gySZz205phomZv7uwZ9DDc75Itk.roa (hash: eO5SMh+ywbk5mzLS6dSPU+KeItuyQY93yBUL4wk+YdY=)
2: vmWzDa10rHadS1syMS2o-oGrM9E.crl (hash: hERZ1nlQYVvUpDYG15IvagW0INwBVBgb6YMtNAf6QP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:5f:57:20:77:c8:ec:5b:c6:1e:33:b2:3f:f9:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1
Validity
Not Before: Aug 23 03:02:10 2025 GMT
Not After : Aug 24 03:02:10 2025 GMT
Subject: CN=6874df1ad1b2439a7098b365e60ce9431ffdc76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4c:eb:86:31:92:59:67:93:fe:0e:9a:ba:d0:
90:41:c9:c8:f3:e5:59:7d:18:8a:9f:36:78:e0:77:
87:78:b1:8c:83:6c:32:6f:d0:24:43:3a:79:ff:01:
c0:44:fa:dd:29:63:8a:9f:ac:ba:b6:08:ca:28:ca:
8e:10:56:50:ce:29:30:43:7a:4e:5c:3d:f8:cc:3b:
14:49:00:3d:18:46:09:42:6d:c9:5e:17:f8:cc:ae:
02:8c:3c:d5:64:c6:41:12:fe:c2:5a:54:dc:2b:01:
7a:c4:af:d3:cd:5a:81:0f:36:60:d3:34:86:28:d2:
6a:c0:d9:21:dd:a9:0d:77:07:10:3f:ee:bd:96:59:
79:e0:ef:27:ce:94:8d:23:17:6e:0a:b7:eb:24:46:
69:45:21:93:2b:e5:4e:14:a6:7e:aa:b8:a5:dc:9e:
68:6c:2e:e2:3a:5d:5b:74:cb:f9:f4:50:a7:f3:61:
07:c1:5d:7a:0b:9e:eb:0c:12:01:c0:ab:4f:74:09:
f8:d9:6b:45:7f:36:9b:a6:95:7f:b4:34:a3:a6:ad:
52:ae:b6:a4:35:48:db:ba:2b:39:64:e3:a0:b8:7c:
a9:3b:ef:5a:67:0c:f1:6a:47:2d:ba:35:cf:5f:26:
6f:90:92:85:e6:7b:43:d4:88:fd:34:69:2a:be:a4:
13:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:74:DF:1A:D1:B2:43:9A:70:98:B3:65:E6:0C:E9:43:1F:FD:C7:6D
X509v3 Authority Key Identifier:
keyid:BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:49:dd:c3:17:5e:cc:a4:1e:91:c0:d8:2b:11:e4:bb:54:eb:
5b:54:d8:b3:da:98:31:bd:f4:87:ac:d9:23:1f:08:88:bf:48:
57:eb:70:a8:ed:f1:e6:8c:d9:b6:c9:58:31:c0:4d:52:06:79:
f8:5d:78:f3:d6:9c:f2:46:3f:03:2a:ad:80:52:65:41:67:73:
bd:0e:bb:53:b3:69:5d:21:6e:72:0f:35:d3:4c:48:61:e6:d3:
85:76:ff:5f:08:19:f7:16:b9:80:f4:0f:56:06:59:52:66:c4:
83:51:f9:88:a9:20:75:66:17:46:c7:af:ca:ee:ce:70:32:cc:
e4:c0:6d:d5:77:ca:8c:81:47:58:0c:fa:07:d7:71:54:29:35:
31:07:14:7f:32:bc:6a:8a:c7:4f:80:ec:06:14:41:68:1c:7b:
1f:e2:25:af:bb:f2:95:9b:20:5e:f8:ba:6a:d9:a2:42:7f:df:
36:b5:aa:58:8a:24:4e:27:9c:4d:2d:69:f6:be:7d:c9:d7:91:
78:96:7b:d4:31:fc:83:a3:66:d1:2c:d9:82:4b:b9:7d:8e:85:
7a:79:6c:61:35:02:f3:7c:ab:e9:97:76:f4:73:a2:63:bb:f8:
cd:8d:b9:20:d1:e0:b7:d1:70:9c:9f:b7:1c:82:31:99:1a:6f:
14:b5:f0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:04 2025 by rpki-client