
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
File: vkOZUom2pcqXLEuHteMUnDLLRDA.mft (raw, json)
Hash identifier: ad2J+Tr7H4Em9zJSAn3ywfPLvhp27BOhv5t+zDa6hWg=
Subject key identifier: 77:0F:1F:7F:3C:9B:50:BE:7D:E2:06:26:41:30:04:56:F9:BF:15:A5
Authority key identifier: BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
Certificate issuer: /CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Certificate serial: 0199FB0EE94B0A146C5FF6EDF20F2AF34B91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
Manifest number: 14AF
Signing time: Sun 19 Oct 2025 06:01:22 +0000
Manifest this update: Sun 19 Oct 2025 06:01:22 +0000
Manifest next update: Mon 20 Oct 2025 06:01:22 +0000
Files and hashes: 1: Whjew0yK_XkX-CXlS_WNrILKiv0.roa (hash: SmkvTH7lLMGdIP5blssOJRhGTxEwF9y5k4ODBxTnWqc=)
2: r2up5PJgZjybD9vWfNuYIFaqnJY.roa (hash: GFLQGnpUdlWj7rWSa6w4p4+P1f3jR1CWJhiBGbeS5kc=)
3: vkOZUom2pcqXLEuHteMUnDLLRDA.crl (hash: q++heXLbxGW/PsqCLPn/Pq9lVV+TKMGGVhtsUfW1pcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:e9:4b:0a:14:6c:5f:f6:ed:f2:0f:2a:f3:4b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Validity
Not Before: Oct 19 06:01:22 2025 GMT
Not After : Oct 20 06:01:22 2025 GMT
Subject: CN=770f1f7f3c9b50be7de2062641300456f9bf15a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3c:14:64:56:57:e3:be:e6:5b:32:eb:8f:40:
d1:ba:a9:bd:a0:2a:b2:99:02:eb:5a:70:f5:1e:73:
02:23:bf:05:5f:21:ad:9e:3b:a3:8b:bd:ff:71:99:
64:45:21:60:44:71:e6:5b:0c:94:6a:2d:67:b6:a3:
d9:cf:d1:2a:28:b9:a8:71:3d:0b:01:54:64:f3:fb:
99:ff:4d:9b:be:73:a6:ed:6c:a0:cb:b2:9c:f5:88:
5a:78:8d:b1:1e:0b:03:5c:d6:c6:50:33:b1:7f:e0:
b1:0a:ed:f7:a6:e9:bf:ed:95:26:ae:95:d6:d0:cb:
42:df:e8:f8:af:4e:85:dd:d6:d1:8b:2e:15:9d:77:
db:20:a9:2a:16:11:8b:59:71:d1:a7:70:81:70:51:
e7:9c:8e:16:de:e5:73:eb:4e:5b:15:dd:6b:18:5a:
1b:93:9f:5c:ed:48:13:ed:b8:d3:a1:49:51:4e:35:
3f:73:3b:4c:32:a4:ed:24:03:ce:64:42:9d:e8:5f:
61:17:6a:61:3c:90:af:27:a2:ac:da:bc:63:7d:ef:
4f:af:e0:47:59:b3:3f:e0:62:e5:c3:95:65:0c:81:
29:d2:d3:7b:a7:2d:f2:52:ca:41:f0:4b:4c:ce:d5:
f7:da:59:4a:b5:e1:e2:0b:28:ce:5b:ca:58:6e:73:
ed:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0F:1F:7F:3C:9B:50:BE:7D:E2:06:26:41:30:04:56:F9:BF:15:A5
X509v3 Authority Key Identifier:
keyid:BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:94:fb:93:d9:5e:2c:f7:3d:eb:ee:f9:49:2a:84:2c:b4:ad:
ca:8c:11:8c:4d:10:25:e5:7a:ac:f4:1f:da:11:81:4a:92:57:
05:a0:71:eb:41:bd:8e:e0:4e:75:91:6b:6d:01:f9:c2:07:29:
e3:0a:ed:6b:42:1c:e4:9e:b4:1f:f6:42:68:a3:3f:e8:72:a6:
54:20:cc:a4:00:ba:7b:ad:b6:09:e0:04:a4:11:b6:95:8b:f8:
55:cd:6c:0d:15:df:05:8c:b6:e1:f6:e8:b1:fc:ad:b8:33:44:
cf:e7:ca:af:9b:80:ba:17:fa:8c:a3:ea:c2:7f:a3:c9:03:59:
6c:78:d3:1c:01:5d:07:a7:39:ee:8d:36:8b:5c:a2:16:47:89:
f0:bd:44:75:25:c3:68:36:4e:e5:f2:60:93:8a:40:d2:0b:f3:
98:ca:6c:6b:54:e9:b1:f7:4a:d8:25:2a:83:af:a1:9c:07:cb:
6b:6b:cc:a5:d3:e9:d3:3b:ac:4c:0a:e6:13:6b:d9:ee:d4:e1:
9e:0a:95:76:69:1e:95:45:af:74:0a:a5:76:02:7a:a8:4c:5c:
19:35:1d:e9:c4:6b:6a:da:d6:c5:aa:e9:be:54:69:d3:b3:67:
9d:af:b6:fe:c4:a9:42:50:07:71:9d:d6:bc:2a:28:85:6a:8a:
8b:4e:51:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:21 2025 by rpki-client