Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
File: vmFEtFm84Tnyc0pE-9tGyYEymys.mft (raw, json)
Hash identifier: YHutg/Vl/xHDBcMm7kh6NWN8IpotstaHOc8YaA9X5cY=
Subject key identifier: B9:D4:61:5A:A9:E8:3B:7E:1D:89:DC:26:F3:20:FE:D7:3E:49:0B:9C
Authority key identifier: BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
Certificate issuer: /CN=be6144b459bce139f2734a44fbdb46c981329b2b
Certificate serial: 0198D58371F6B68994950645509B661C83AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
Manifest number: 0AD6
Signing time: Sat 23 Aug 2025 06:00:18 +0000
Manifest this update: Sat 23 Aug 2025 06:00:18 +0000
Manifest next update: Sun 24 Aug 2025 06:00:18 +0000
Files and hashes: 1: 1-joLXxcr_bVIX8GYv6pA9Fl0-sU.roa (hash: fC8xsMT8pkAhb0cnhW19TBbsU5HJIWYiSjKEjJGjv0I=)
2: sYPkj1N3no6PTM91c5Pov65EAC8.roa (hash: uAS0kma3H4GS4hrLx52tm2yalQVMm9OuSp2lJZ08j2k=)
3: vmFEtFm84Tnyc0pE-9tGyYEymys.crl (hash: 6ojtpZLPGj2+z7PH9oEg/+HOdVEAY4eCUD26150tgtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:71:f6:b6:89:94:95:06:45:50:9b:66:1c:83:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6144b459bce139f2734a44fbdb46c981329b2b
Validity
Not Before: Aug 23 06:00:18 2025 GMT
Not After : Aug 24 06:00:18 2025 GMT
Subject: CN=b9d4615aa9e83b7e1d89dc26f320fed73e490b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:46:2f:44:f6:da:ba:0e:7f:ae:65:49:67:2e:
27:54:f9:90:b2:79:dc:f5:7a:66:00:58:49:2b:8a:
ac:c5:6b:89:44:04:8d:82:48:b2:6c:b9:63:9b:5b:
52:8c:de:35:84:2a:8b:4d:ea:65:76:93:eb:81:20:
46:00:7d:9b:9c:7e:f0:63:c1:89:27:97:88:75:36:
0b:6f:a3:f9:6b:0d:c4:d8:c2:b4:0d:80:23:3e:4e:
d7:84:c9:58:c3:4f:5c:76:a0:96:2c:1f:47:ea:4e:
45:a4:ee:38:1a:3a:91:27:4d:c7:da:e5:5d:ed:4f:
e2:c8:70:b1:5a:38:05:cc:c9:69:61:45:96:cf:96:
98:8f:94:1c:54:59:3d:9e:6c:bf:e5:2f:e2:d7:9b:
ea:a4:60:14:70:6c:da:50:68:0d:79:a6:3f:43:c3:
66:66:88:9f:b4:c4:fb:a7:5a:de:e3:b1:df:b8:97:
89:13:63:41:3e:5e:e8:9f:7a:e4:c8:5e:45:c6:e8:
d9:c1:8b:6f:f2:11:3d:69:17:7f:8c:ec:1d:83:1a:
36:2a:61:bf:f5:fc:ce:dc:a2:49:34:b8:5a:35:99:
84:d8:0c:a3:7d:f8:6c:e0:d5:c3:4e:8c:a9:41:17:
a1:58:44:3d:57:86:18:fa:98:54:20:31:7d:aa:97:
ce:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D4:61:5A:A9:E8:3B:7E:1D:89:DC:26:F3:20:FE:D7:3E:49:0B:9C
X509v3 Authority Key Identifier:
keyid:BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:84:d8:d9:26:29:73:c9:1c:34:07:78:7f:7b:85:c7:86:42:
b7:e1:70:3a:c8:e1:aa:3e:c6:2b:bd:1d:1c:43:b4:fb:d4:9e:
8f:3b:dd:ca:64:a5:cd:8b:5f:f6:3d:c5:59:4c:40:50:b9:2a:
c7:27:c4:d3:42:59:99:32:d9:24:c6:c2:c1:a3:18:a4:e0:85:
6e:22:9d:41:a7:b8:6e:d6:a1:03:34:a6:e6:c2:e0:68:d7:46:
e5:97:16:6a:ea:cf:c5:c8:7a:8d:93:ac:93:e6:de:4d:6a:c8:
90:96:07:41:42:09:22:fb:5d:43:a9:19:4b:c8:42:a9:78:ea:
bd:66:18:aa:6f:7a:99:31:6b:df:15:3b:a9:a0:13:8c:fc:4d:
20:4c:9f:10:80:34:c2:8e:b7:da:67:0f:5e:12:e0:18:09:1a:
7d:2e:e2:08:21:26:07:39:2f:4d:98:e4:fc:86:31:38:b5:88:
89:6f:9b:66:d2:0a:9f:33:3a:3c:7a:34:0f:2d:5c:cf:d7:9c:
08:a9:13:87:94:36:cb:2f:2b:d6:8d:92:93:6f:f5:c7:fc:a1:
b6:cd:54:d3:52:5c:df:a8:be:93:a1:91:d5:a5:1a:7b:89:a4:
02:ed:60:10:26:52:fa:fc:44:f3:c0:e4:cd:13:e4:8e:dd:2b:
88:f6:8b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:13 2025 by rpki-client