Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
File: vmFEtFm84Tnyc0pE-9tGyYEymys.mft (raw, json)
Hash identifier: LfkBanNOkUprv/TyntqTvWBAXzhJUXWcnTdu8Od8X34=
Subject key identifier: 46:A7:98:CD:22:1B:94:51:73:51:B5:55:7C:16:EA:F2:C6:1C:E7:5F
Authority key identifier: BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
Certificate issuer: /CN=be6144b459bce139f2734a44fbdb46c981329b2b
Certificate serial: 019A21ADC47C81675A28E05C3B7F6DF2CAC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
Manifest number: 0B82
Signing time: Sun 26 Oct 2025 18:00:27 +0000
Manifest this update: Sun 26 Oct 2025 18:00:27 +0000
Manifest next update: Mon 27 Oct 2025 18:00:27 +0000
Files and hashes: 1: 1-joLXxcr_bVIX8GYv6pA9Fl0-sU.roa (hash: fC8xsMT8pkAhb0cnhW19TBbsU5HJIWYiSjKEjJGjv0I=)
2: sYPkj1N3no6PTM91c5Pov65EAC8.roa (hash: uAS0kma3H4GS4hrLx52tm2yalQVMm9OuSp2lJZ08j2k=)
3: vmFEtFm84Tnyc0pE-9tGyYEymys.crl (hash: lMnZXNxYw5U7J+FE10bfWSFVXZj5HEVX/VdOiE3dAkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:c4:7c:81:67:5a:28:e0:5c:3b:7f:6d:f2:ca:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6144b459bce139f2734a44fbdb46c981329b2b
Validity
Not Before: Oct 26 18:00:27 2025 GMT
Not After : Oct 27 18:00:27 2025 GMT
Subject: CN=46a798cd221b94517351b5557c16eaf2c61ce75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7f:cb:fe:43:af:e5:da:ba:42:66:a6:c6:e0:
f4:30:ac:c2:49:0b:7f:1e:4a:93:4c:4c:69:af:ee:
5c:59:bc:bc:f3:76:4e:42:44:41:eb:87:e7:bd:a5:
f0:a4:12:7d:86:10:d1:d2:6d:5c:0d:63:07:50:64:
90:3e:3c:f2:f4:7c:c2:ef:66:e7:60:82:f2:7e:09:
15:67:63:04:c0:16:4f:75:0c:4b:d6:c2:41:65:da:
f0:cc:7e:68:94:d9:c4:b2:5d:3a:a2:6c:0a:2f:39:
9d:24:7b:35:65:04:7a:61:f4:70:58:b3:f0:dd:aa:
be:92:98:33:df:d1:4b:7e:b5:b5:b8:79:cd:ff:f6:
bd:e8:0e:f3:94:b9:ce:d9:fe:c9:db:85:19:60:53:
6a:95:4a:01:c8:d7:41:92:46:bb:69:4a:08:9c:ef:
b8:5c:3d:34:60:4e:bd:b6:8e:a8:a5:0e:d0:0b:65:
3d:d1:97:8b:4c:c0:d7:8c:42:e6:04:f9:75:ed:48:
e2:9a:67:77:1a:83:e4:99:d4:df:00:5b:e9:6c:2d:
2e:94:b5:5a:18:59:9b:a7:e7:e3:14:8f:64:37:cc:
ee:a5:e7:5f:e3:d1:fc:29:40:91:27:fc:38:64:91:
c8:e7:f5:c2:ba:39:c0:40:90:ad:4c:9d:73:2b:8f:
35:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A7:98:CD:22:1B:94:51:73:51:B5:55:7C:16:EA:F2:C6:1C:E7:5F
X509v3 Authority Key Identifier:
keyid:BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:0d:75:49:9c:1e:2b:19:f6:3c:a9:a8:db:94:06:41:2c:f3:
82:12:a0:80:ae:48:1b:85:80:bb:49:33:1d:35:11:3a:44:ef:
48:93:17:3c:2b:b0:a0:e8:46:66:45:1a:8d:26:a6:83:10:ed:
cc:4c:f1:16:41:4b:ad:16:e4:33:f9:61:1f:d6:a4:77:4a:a3:
37:35:c6:9d:83:2e:93:22:09:f2:62:73:f5:f5:c4:32:65:b2:
72:5a:2e:0b:e3:f7:15:28:ad:1c:7d:ce:9d:a9:99:6e:2b:1c:
37:92:37:8d:33:66:6c:21:83:fa:95:7b:ae:8b:94:9f:af:2f:
a0:e5:6f:1b:51:bd:d0:db:7c:16:e6:25:36:b6:c9:29:96:f8:
68:71:f3:0e:84:86:83:c4:37:25:6f:93:bc:d9:43:ae:fa:71:
c0:2d:ac:1b:ae:7d:d9:d2:2e:01:13:d1:d6:09:89:e4:a7:5a:
56:cf:53:0d:20:fa:dd:a0:3d:1d:37:fc:03:67:82:a8:90:c2:
71:86:c9:b1:bc:40:a9:fe:7c:4b:43:b3:f5:ff:bb:dd:cf:bd:
35:0f:cb:b7:b5:20:c5:98:67:89:cd:aa:c9:c5:ff:23:c2:dc:
e4:8e:7b:06:56:b7:07:b3:6a:44:5e:97:a4:0b:a4:a1:d7:fd:
96:3f:45:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:19:05 2025 by rpki-client