Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.mft
File: vedQeWGGkbrh9HvL7VIxRJaWOJE.mft (raw, json)
Hash identifier: Kw7cjlSETPBUIjnuKISPe8h3yrLmLkDWQx/zc9b9Jbk=
Subject key identifier: 06:82:15:B6:B8:5E:AE:E0:A1:3A:74:BE:B4:0A:7A:6A:CF:64:FF:7A
Authority key identifier: BD:E7:50:79:61:86:91:BA:E1:F4:7B:CB:ED:52:31:44:96:96:38:91
Certificate issuer: /CN=bde75079618691bae1f47bcbed52314496963891
Certificate serial: 019A006C438777B6302A76232C655F9B667D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vedQeWGGkbrh9HvL7VIxRJaWOJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.mft
Manifest number: 12C6
Signing time: Mon 20 Oct 2025 07:01:26 +0000
Manifest this update: Mon 20 Oct 2025 07:01:26 +0000
Manifest next update: Tue 21 Oct 2025 07:01:26 +0000
Files and hashes: 1: dN-uhf4yHU1KWIuxr4O44km4Ib0.roa (hash: erjr+nwKgTpJdhI7Z4IWA4jUyQt8GWT0g5Kuu0xltYE=)
2: djt1wnEeMWCGixI9JNMPiTXrt7U.roa (hash: fvje1Lm8IIK5mAd7uOyfo0YMgHNd5fDXDiGQLx1jFzE=)
3: n806vQCKJO6E1y-xgzc_uqP7AsI.roa (hash: N130woa+XpJIXwfcoDYXVXM648PPasYWXY1QC+kU7WQ=)
4: vedQeWGGkbrh9HvL7VIxRJaWOJE.crl (hash: xYfgsxpqtREEJwIRYAg2m0QGuweUF3YcoW72UG7W34g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vedQeWGGkbrh9HvL7VIxRJaWOJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:43:87:77:b6:30:2a:76:23:2c:65:5f:9b:66:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde75079618691bae1f47bcbed52314496963891
Validity
Not Before: Oct 20 07:01:26 2025 GMT
Not After : Oct 21 07:01:26 2025 GMT
Subject: CN=068215b6b85eaee0a13a74beb40a7a6acf64ff7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ed:bf:38:01:cb:23:85:74:e4:8f:c6:cd:db:
fa:f2:b9:c3:82:1e:2e:f4:a9:c3:34:07:a2:5c:cc:
55:41:a1:45:1f:0e:75:72:c6:3f:4e:48:c2:9e:00:
a3:cf:ac:90:90:3f:0f:9b:5d:51:22:2b:de:b2:e2:
99:ed:55:17:90:53:0d:56:43:74:b9:a1:26:c2:a7:
1c:bc:c0:17:e7:0d:fd:c2:09:36:95:d5:f4:40:98:
55:30:72:60:7b:5f:a3:7f:35:e5:11:79:8e:0a:8d:
69:0e:38:49:b2:b6:b6:45:0b:1e:a7:d3:d2:25:42:
89:1b:9c:dc:c2:82:49:da:84:e8:db:92:ef:1f:db:
a6:43:42:15:03:0f:4a:ba:62:3c:e2:59:10:e4:e4:
87:07:60:95:f0:a2:5f:d1:62:c5:94:3d:88:9a:aa:
2c:36:d4:4e:68:6f:85:96:af:7a:8f:7f:91:05:05:
98:b1:8e:e2:f3:fb:1a:1d:a2:35:f4:45:2c:08:da:
d2:09:d2:d5:ea:d0:8c:a7:a9:eb:29:96:42:be:2f:
3c:b3:47:04:8d:3a:7d:44:30:0d:c4:f0:64:97:04:
71:a3:d6:9e:2c:9f:13:7c:74:99:5f:c6:62:13:83:
3d:c2:ad:f2:4a:cd:f4:39:52:96:2f:09:97:7d:e4:
94:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:82:15:B6:B8:5E:AE:E0:A1:3A:74:BE:B4:0A:7A:6A:CF:64:FF:7A
X509v3 Authority Key Identifier:
keyid:BD:E7:50:79:61:86:91:BA:E1:F4:7B:CB:ED:52:31:44:96:96:38:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vedQeWGGkbrh9HvL7VIxRJaWOJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:0b:11:a2:0e:c8:19:6e:04:7f:bd:7d:f1:53:95:41:69:a9:
28:e5:28:71:ce:29:47:e2:d0:9f:62:2d:b4:37:09:50:ec:8b:
7a:fa:f2:92:63:67:bf:93:20:24:58:5a:6f:57:29:ad:a9:3d:
16:f6:06:f2:e6:60:f8:a1:58:f4:2a:86:75:ee:19:1e:b2:45:
bf:60:17:63:ae:08:ac:65:27:27:7f:ba:26:ef:f9:c2:d4:ee:
51:f6:2d:b2:e7:3a:45:30:e0:7d:c5:79:2f:44:52:f0:78:57:
28:57:63:d3:6a:eb:94:d2:d1:c1:69:9a:c9:cf:24:dd:54:ed:
f5:c2:88:ab:9b:1c:fa:19:c3:a0:78:2f:0b:18:dd:94:82:43:
99:61:2c:02:ae:99:1a:ca:e7:b2:98:d5:5e:f0:85:da:d9:31:
e8:d9:1f:c6:03:77:f1:66:1c:b7:a9:8b:99:b2:73:1b:69:81:
6c:fa:06:84:62:5f:cb:bb:88:58:00:45:57:d4:88:8d:dc:5f:
09:30:b6:76:ce:a0:f4:59:bf:0a:f4:36:28:71:d6:36:71:eb:
83:cd:2d:d3:98:e3:1a:50:38:b9:79:85:27:e0:8c:b0:52:95:
a4:48:8c:cf:c6:60:aa:44:5d:c5:3a:a7:ab:09:2d:2a:35:80:
78:df:d7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:01:50 2025 by rpki-client