Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
File: vmFEtFm84Tnyc0pE-9tGyYEymys.mft (raw, json)
Hash identifier: +RildZRc/LHerqovE3WqarxykeGxkFaXDbL2iXhDT+E=
Subject key identifier: 14:7B:A0:7A:E4:0C:38:1B:4E:54:A1:AA:80:E7:A6:6D:C1:39:6F:2D
Authority key identifier: BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
Certificate issuer: /CN=be6144b459bce139f2734a44fbdb46c981329b2b
Certificate serial: 0199FCFD3C3BC06C837A32EBFB63C36F9552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
Manifest number: 0B6F
Signing time: Sun 19 Oct 2025 15:01:18 +0000
Manifest this update: Sun 19 Oct 2025 15:01:18 +0000
Manifest next update: Mon 20 Oct 2025 15:01:18 +0000
Files and hashes: 1: 1-joLXxcr_bVIX8GYv6pA9Fl0-sU.roa (hash: fC8xsMT8pkAhb0cnhW19TBbsU5HJIWYiSjKEjJGjv0I=)
2: sYPkj1N3no6PTM91c5Pov65EAC8.roa (hash: uAS0kma3H4GS4hrLx52tm2yalQVMm9OuSp2lJZ08j2k=)
3: vmFEtFm84Tnyc0pE-9tGyYEymys.crl (hash: E7UVlLKtKZj3lUXGXa1W3TPm1kyd0TKcvrgXvb5xNyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:3c:3b:c0:6c:83:7a:32:eb:fb:63:c3:6f:95:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6144b459bce139f2734a44fbdb46c981329b2b
Validity
Not Before: Oct 19 15:01:18 2025 GMT
Not After : Oct 20 15:01:18 2025 GMT
Subject: CN=147ba07ae40c381b4e54a1aa80e7a66dc1396f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:52:b1:fa:b5:6f:0a:2a:b9:81:02:7e:ac:e7:
d9:cf:ce:a1:e8:74:a8:5e:b7:7c:02:44:1f:5e:bf:
44:a3:90:c6:42:2c:e1:71:71:e8:ab:1d:ed:b2:7e:
2a:c8:49:52:1b:2c:c6:0d:73:1a:03:ca:5e:63:59:
e8:39:57:0e:b8:c3:78:e4:29:be:95:b4:25:ac:85:
69:46:b0:36:22:25:53:58:2a:00:0c:1e:1b:ba:72:
08:16:9c:b1:39:6d:86:2d:b9:62:73:a1:7f:1a:bc:
11:1f:12:3f:66:a4:74:3c:1d:34:47:c4:8c:67:ff:
03:6c:72:8d:5a:4c:b8:e8:9c:39:92:90:20:e0:41:
3e:5e:1b:c0:64:e9:b8:24:c7:3b:5d:1b:e8:b4:46:
6e:55:f7:47:e8:89:05:c0:4b:aa:39:cb:21:67:f8:
5a:c2:7f:7b:23:c5:56:a3:87:fb:d4:09:b9:dc:3f:
52:33:a2:73:38:13:e7:cc:bc:71:5e:bf:5b:46:80:
c8:09:9b:48:8a:9e:09:7a:f2:92:b0:83:b2:42:a5:
ab:20:c1:0b:41:80:94:bf:d6:d3:a0:b5:fb:9a:0b:
94:ed:23:80:9c:9d:68:48:23:28:0b:9e:76:55:32:
5d:18:d5:79:86:95:88:3a:ce:bb:64:d6:1c:6b:c5:
5e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7B:A0:7A:E4:0C:38:1B:4E:54:A1:AA:80:E7:A6:6D:C1:39:6F:2D
X509v3 Authority Key Identifier:
keyid:BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d0:c9:fd:9c:54:22:c5:cf:1b:f0:67:d5:7d:06:84:4a:3e:
4b:ad:d4:a6:a3:92:44:df:25:d4:77:74:1f:22:a2:94:9d:bf:
4f:a8:1d:c8:08:ab:37:64:ed:ba:4c:32:17:1f:71:24:2c:c0:
1f:8a:00:30:cc:4e:0a:51:7b:31:d7:5f:6c:63:00:37:9b:c8:
0d:0a:cf:84:38:d5:db:22:97:43:f4:dd:93:43:bc:7d:e0:e7:
33:c8:d6:d0:c4:e3:76:d7:6e:c8:e2:81:8e:ba:0b:78:e4:c5:
e1:d5:37:4e:7b:9e:75:3b:54:37:f5:5d:40:5e:e5:6b:78:91:
81:93:ed:87:e3:77:ca:a7:f8:46:9a:b5:03:0b:8f:3d:2a:69:
51:a5:5f:45:01:40:61:0f:ea:a3:65:e8:e4:32:e5:ae:e1:89:
19:ca:c7:15:43:07:ba:1e:24:89:7f:01:04:a0:6f:aa:77:34:
86:4d:9a:8d:97:56:f9:50:75:1e:bb:40:11:0f:33:38:7a:78:
f4:3c:9e:f6:09:46:e2:5f:e4:aa:c2:b5:7c:32:a4:d0:f8:0a:
65:8b:ed:5f:03:f6:e3:ab:16:15:97:13:38:95:47:2f:6e:a8:
8a:eb:52:82:2b:cf:a3:d0:5d:73:e7:5c:f6:ab:1c:d1:34:3a:
bd:8b:4d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:37 2025 by rpki-client