Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
File: vkCzwr54Ndeze1gmEC-HRqUZnUk.mft (raw, json)
Hash identifier: Wywkh1T0E0RTFvqQVCVX4CVGo8M93EhEWo9MNpHKDng=
Subject key identifier: 39:8A:BC:56:9E:59:DB:28:19:8E:E4:12:FA:A6:33:8A:4F:AD:71:76
Authority key identifier: BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
Certificate issuer: /CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Certificate serial: 0199C2D641A96F31E57BFE73156ED2DD46D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
Manifest number: 0F77
Signing time: Wed 08 Oct 2025 08:00:45 +0000
Manifest this update: Wed 08 Oct 2025 08:00:45 +0000
Manifest next update: Thu 09 Oct 2025 08:00:45 +0000
Files and hashes: 1: PvXyotkF7CUuPU9IpGsqtPRuTDs.roa (hash: hlW2pG80ndqwHM6JsZ8rS5M7wLdO6b8IAZvrk0uvgBY=)
2: oCn4wpr5As_rj6i8SdJkg85R0Hc.roa (hash: 7S82NkRvXrpT2+oGArNGUxQHnJWcUMj49moLiAKQQWA=)
3: vkCzwr54Ndeze1gmEC-HRqUZnUk.crl (hash: 5yiz/tty9TKJUxgYvzPdloXkBhnll6ht5ThjTSeAAb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c2:d6:41:a9:6f:31:e5:7b:fe:73:15:6e:d2:dd:46:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Validity
Not Before: Oct 8 08:00:45 2025 GMT
Not After : Oct 9 08:00:45 2025 GMT
Subject: CN=398abc569e59db28198ee412faa6338a4fad7176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d4:9a:47:70:a7:1e:86:57:c4:9c:69:89:0c:
bd:76:34:44:ee:ff:00:b9:85:55:11:28:38:01:7c:
d6:bd:cf:7a:78:65:81:71:02:8e:f5:6b:21:06:72:
86:42:d5:05:b7:91:13:3b:d5:7b:27:f4:16:78:2b:
d7:e7:13:df:65:39:75:92:0c:c5:22:8e:ba:15:2f:
5a:52:ef:7b:48:21:56:11:1a:a9:12:b5:ca:60:4e:
17:8e:57:8e:5b:c6:d9:da:97:99:c9:79:56:49:0a:
d0:1f:a4:94:9d:33:f7:20:ab:3f:71:b7:51:2f:10:
40:e8:83:0b:64:72:d3:80:03:0d:ce:26:c5:9e:c0:
83:97:82:cb:4c:d7:0a:f4:7d:02:65:cd:b4:14:4f:
1a:6e:37:64:1b:ed:90:76:09:3d:93:02:4d:c4:f7:
44:9e:23:80:10:9b:83:50:5e:0a:ed:2a:4a:61:d3:
76:01:eb:82:5b:76:9d:db:0a:8e:2a:de:05:ed:a8:
da:ee:42:d6:60:14:c2:d1:3f:75:f9:0d:49:94:0f:
54:0b:92:1a:5a:ef:87:1e:be:1d:9f:b8:84:13:d4:
c2:2e:e8:29:18:fd:56:0c:d2:80:90:f7:47:d9:93:
50:03:bb:74:d3:98:0a:47:75:14:db:60:87:67:5a:
2d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8A:BC:56:9E:59:DB:28:19:8E:E4:12:FA:A6:33:8A:4F:AD:71:76
X509v3 Authority Key Identifier:
keyid:BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:52:58:42:ac:dd:5b:f0:ee:b7:3b:b1:12:1d:52:61:ea:c2:
35:25:11:5d:ed:42:dc:1c:0a:0a:f6:eb:2d:bf:59:ec:7e:63:
a9:62:31:8a:2d:b0:07:21:de:f0:58:09:b8:27:76:56:97:c6:
7d:3b:31:ba:2e:65:6c:de:47:90:11:a8:45:2f:25:e7:15:cf:
e9:70:b9:0d:26:dc:e5:7d:35:ef:b4:56:1e:29:3d:37:8a:41:
47:5b:0c:e0:34:22:c9:ab:31:99:5b:c2:bb:6e:1e:60:cd:ad:
7a:54:e5:5f:75:99:12:a4:18:44:2b:70:ba:e0:34:41:63:20:
8d:23:81:6e:a1:d0:08:87:ff:aa:bc:ff:6f:b6:b1:79:93:9a:
73:c9:72:e8:85:35:29:61:7f:01:d4:56:4d:9c:d2:98:8b:40:
e2:8d:80:4c:a0:da:c6:e9:da:4c:69:ac:7a:88:72:5c:f2:0a:
e6:b7:25:88:3f:d3:61:64:b7:fa:9a:3d:78:a0:57:1a:58:20:
34:21:d4:b6:93:51:e1:c9:71:58:2b:63:54:45:21:2c:40:3b:
f9:94:13:0c:9a:a4:90:74:ef:98:da:64:61:3d:34:27:f0:f0:
28:9f:b8:90:b9:c2:1a:65:ae:52:e5:00:f1:ed:ae:69:04:6a:
bf:3d:81:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 13:39:51 2025 by rpki-client