Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
File: vkOZUom2pcqXLEuHteMUnDLLRDA.mft (raw, json)
Hash identifier: NZF9CUW4jQHtc7MLqX00vwcjBXOvqfdJGaxQujo50pw=
Subject key identifier: B8:F2:5D:A9:B2:78:F1:0E:95:4C:F6:73:BC:A4:5F:61:1A:86:01:CA
Authority key identifier: BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
Certificate issuer: /CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Certificate serial: 0198D583E8E11FD45505E5814E85C86C13BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
Manifest number: 1415
Signing time: Sat 23 Aug 2025 06:00:48 +0000
Manifest this update: Sat 23 Aug 2025 06:00:48 +0000
Manifest next update: Sun 24 Aug 2025 06:00:48 +0000
Files and hashes: 1: ReY2tPX210-enwDcd_knQa9-DQY.roa (hash: 2jOnLIUq8fBeQ/tq35cU67+fxV+LGlNJaoKupdGfzn4=)
2: e0TEu5beAVWeSmXxkW6X6x2gBHA.roa (hash: bCc+ujeebjVb3R0AjVp+lBJExzxOGb5apQpq8yxW908=)
3: vkOZUom2pcqXLEuHteMUnDLLRDA.crl (hash: 1ToxvmS7z6oaFG03FZU5ryHZwfAH4/+gjYS4MUBQtwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:e8:e1:1f:d4:55:05:e5:81:4e:85:c8:6c:13:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Validity
Not Before: Aug 23 06:00:48 2025 GMT
Not After : Aug 24 06:00:48 2025 GMT
Subject: CN=b8f25da9b278f10e954cf673bca45f611a8601ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:93:b7:25:98:58:31:e0:3e:5d:e1:e4:69:fe:
ac:7a:1e:2d:97:8d:41:50:58:24:29:11:5c:80:9e:
7a:61:e8:ca:06:67:9d:67:fe:a3:63:91:da:e4:e1:
44:1a:8c:de:e8:3f:54:78:71:3d:09:aa:5c:04:27:
41:2f:31:80:1b:ed:1e:2e:27:f8:3c:c0:c6:05:eb:
9f:ea:22:4e:b9:bd:23:2f:59:61:47:2a:46:1d:32:
58:1f:38:f6:f6:0c:e8:7d:2b:25:db:a1:57:0a:cc:
5d:ff:26:c7:15:25:69:74:c1:54:97:9f:fc:ba:2c:
0a:18:3a:63:d4:2a:a2:f3:7f:61:34:47:a2:56:4f:
20:a8:e6:0f:1b:ec:d2:44:e7:bb:6c:3d:80:d6:b8:
1e:74:09:5a:17:7f:69:72:15:3c:bd:83:51:7c:85:
d5:54:f6:92:23:f2:f2:e8:d5:c3:1f:bb:4c:19:aa:
6c:77:e2:ed:2c:82:87:ac:3b:22:1e:d6:48:ae:19:
17:d2:19:31:95:7e:b5:34:c0:50:70:5f:8d:de:c5:
a9:df:7d:96:ed:d4:a0:78:6e:64:59:8e:75:a1:c0:
b4:5d:be:11:3f:25:de:c5:da:02:8c:f1:75:73:0c:
ef:48:59:5c:37:10:f7:4b:4b:b8:38:a5:f8:5b:75:
dd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F2:5D:A9:B2:78:F1:0E:95:4C:F6:73:BC:A4:5F:61:1A:86:01:CA
X509v3 Authority Key Identifier:
keyid:BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:50:c5:e6:e2:93:9b:f3:61:d4:c8:ce:75:d6:20:01:6a:bf:
7d:17:d6:00:7d:76:4b:d0:84:dd:96:76:72:d5:14:39:9b:00:
5b:08:f9:c5:9f:89:63:75:e8:5a:e9:0a:32:47:2a:eb:67:0c:
f9:6b:4d:38:52:50:99:9d:53:9f:b5:71:ed:e7:f8:4d:2a:05:
04:20:c4:89:cb:14:b8:17:46:2c:10:49:62:55:2f:e1:47:40:
55:12:25:88:68:b7:65:ba:0e:74:57:5e:a9:78:6a:b5:3e:6e:
02:ab:5d:7b:57:27:3c:05:8b:b3:a9:99:50:ba:de:7a:c8:c7:
77:e6:50:cd:52:8a:c7:3b:7b:22:5e:22:61:00:2e:d0:36:19:
9a:36:1f:7f:5f:b1:25:39:1b:4d:fd:f9:e0:b7:b5:0c:cd:15:
11:05:d9:62:81:df:be:4f:84:be:b9:8f:d1:0f:23:c8:60:e3:
2d:65:27:6b:6e:4f:a5:c3:b6:71:2c:ac:56:0e:58:dc:3e:5c:
fc:58:ef:df:40:a8:98:e8:a7:56:76:55:d8:5b:f4:80:f3:40:
7e:cf:d9:29:20:5e:9c:7a:f6:50:54:8c:64:ed:4f:fd:bb:98:
20:55:e9:28:74:78:01:51:2d:e2:8d:b0:75:ff:2d:ca:5a:22:
c7:ad:79:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:26 2025 by rpki-client