Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
File: vmFEtFm84Tnyc0pE-9tGyYEymys.mft (raw, json)
Hash identifier: ek80Bn1534G1f3uwqFxYyWfmgK7Y5Pe5Lf4kCCAJ+EU=
Subject key identifier: E4:33:6A:69:83:50:7D:75:C9:AB:7B:20:42:58:09:B2:E8:1C:5C:33
Authority key identifier: BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
Certificate issuer: /CN=be6144b459bce139f2734a44fbdb46c981329b2b
Certificate serial: 0198391652A85B5003F57DD9A947CAC42541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
Manifest number: 0A85
Signing time: Wed 23 Jul 2025 21:00:20 +0000
Manifest this update: Wed 23 Jul 2025 21:00:20 +0000
Manifest next update: Thu 24 Jul 2025 21:00:20 +0000
Files and hashes: 1: 1-joLXxcr_bVIX8GYv6pA9Fl0-sU.roa (hash: fC8xsMT8pkAhb0cnhW19TBbsU5HJIWYiSjKEjJGjv0I=)
2: sYPkj1N3no6PTM91c5Pov65EAC8.roa (hash: uAS0kma3H4GS4hrLx52tm2yalQVMm9OuSp2lJZ08j2k=)
3: vmFEtFm84Tnyc0pE-9tGyYEymys.crl (hash: RikfdMLxd1J/TjobaCic1D8gkrR+za3Ges3AROKI9bI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:39:16:52:a8:5b:50:03:f5:7d:d9:a9:47:ca:c4:25:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6144b459bce139f2734a44fbdb46c981329b2b
Validity
Not Before: Jul 23 21:00:20 2025 GMT
Not After : Jul 24 21:00:20 2025 GMT
Subject: CN=e4336a6983507d75c9ab7b20425809b2e81c5c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e7:bb:05:57:28:73:1e:ee:69:10:be:ab:9f:
b9:2c:ca:59:8e:cb:59:06:75:31:c0:63:6a:46:49:
fc:ae:a8:45:d2:f2:e3:a3:43:a1:f0:e1:2a:bb:a4:
58:5a:56:e2:da:0f:31:81:1f:d0:ff:00:77:09:ed:
24:4e:00:31:ca:4c:8b:4c:3b:5f:e6:a0:6b:56:54:
8f:c0:80:4f:00:e8:c1:04:0a:2f:82:9a:7c:74:71:
36:f7:56:96:d7:c7:9a:a1:05:59:3e:29:1a:54:92:
b0:0e:89:d3:24:ed:ce:02:48:4a:67:95:d2:2f:08:
71:72:29:4f:b8:47:51:81:3e:a7:09:cd:e9:e9:d9:
6f:e9:a8:e9:91:3b:da:7b:c1:d6:d8:ab:e3:ee:f9:
3e:06:10:bb:4a:92:a1:03:ee:7a:7b:14:5e:65:a4:
50:db:e3:b1:51:31:45:97:94:ef:00:a1:f8:14:af:
53:e5:01:48:0a:37:87:a8:ee:ca:3f:4d:a8:aa:a4:
59:ed:68:06:8d:77:73:75:37:7e:bb:9f:e4:ac:74:
0b:83:ae:d9:fe:7c:a8:d3:a0:83:18:43:cd:08:fb:
0d:c0:e5:a7:c3:e0:a3:de:6e:26:a8:6f:f2:55:f3:
c0:46:69:df:56:dc:3d:77:db:89:c8:93:6f:a2:2f:
0f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:33:6A:69:83:50:7D:75:C9:AB:7B:20:42:58:09:B2:E8:1C:5C:33
X509v3 Authority Key Identifier:
keyid:BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:0e:1e:16:f1:52:71:d1:82:a7:f2:fb:5d:ed:2f:69:3b:22:
30:c9:19:38:4f:d8:29:55:58:19:a8:1e:27:17:7e:5c:d8:a0:
f9:9d:19:ce:a7:f0:a8:9e:59:17:aa:67:b9:34:b1:2a:97:58:
ac:60:d3:2a:51:74:d2:87:66:8c:dd:03:b4:7c:e4:5b:fa:56:
43:07:d7:99:d8:0a:48:49:e6:5d:c2:8f:1d:61:ce:30:08:2a:
aa:bd:c5:8d:34:14:2d:8b:2d:99:12:0e:d3:b4:7c:a9:70:51:
8c:9f:5b:10:d3:6d:a0:3e:58:42:a7:f1:78:06:34:d7:eb:ff:
26:73:bd:bf:ee:9c:e6:34:6e:52:d4:d5:21:29:a7:f2:7b:b3:
cf:f8:5e:22:73:ce:49:28:bd:bd:96:c3:40:c7:8d:88:7b:08:
7b:7c:47:4d:5e:26:dc:b3:e0:c2:77:14:a0:fd:0d:20:b7:d2:
16:08:fb:c3:6d:3b:5a:5b:d1:40:ec:60:ab:17:3f:e6:d0:fe:
eb:80:39:2c:ea:89:ee:17:86:cf:10:e5:b4:53:a4:d5:46:da:
ba:77:32:a3:8c:1a:8e:ed:98:d6:a3:ed:aa:c7:5b:65:12:5a:
c1:12:1c:a0:b1:1c:15:34:a0:78:34:e1:6b:c6:f5:79:54:0c:
e9:a6:d8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 03:36:04 2025 by rpki-client