Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
File: vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft (raw, json)
Hash identifier: KHnpFuIJ3LF9oK8OCvrutSVpCHOXRU873L8loH1eyh8=
Subject key identifier: 41:FB:39:16:3D:97:CE:B9:AE:CB:79:7F:30:C1:3C:6E:2E:00:4D:96
Authority key identifier: BE:44:8C:67:A3:AB:0E:A3:75:FB:A8:48:C9:FE:8C:8E:B1:E8:4D:6F
Certificate issuer: /CN=be448c67a3ab0ea375fba848c9fe8c8eb1e84d6f
Certificate serial: 0199239F54CC2F72A60FDACEE3B74BF8F1C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
Manifest number: 0C63
Signing time: Sun 07 Sep 2025 10:01:08 +0000
Manifest this update: Sun 07 Sep 2025 10:01:08 +0000
Manifest next update: Mon 08 Sep 2025 10:01:08 +0000
Files and hashes: 1: 9UcomILdtAe6cNct4YOh4DKdhek.roa (hash: 5S+dEogRJfe8M30SkPrXb8z3+L8Fg1f4Nn7krQuU6Oo=)
2: vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl (hash: mjkWTf2Wh3FqMxhq5gP640ivT4cwf95aIHQ18a8w3vY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:54:cc:2f:72:a6:0f:da:ce:e3:b7:4b:f8:f1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be448c67a3ab0ea375fba848c9fe8c8eb1e84d6f
Validity
Not Before: Sep 7 10:01:08 2025 GMT
Not After : Sep 8 10:01:08 2025 GMT
Subject: CN=41fb39163d97ceb9aecb797f30c13c6e2e004d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:58:fa:78:16:92:c8:8d:9c:56:20:16:57:ca:
66:2d:0b:0b:18:c6:bf:4e:f6:5e:9c:93:a5:5a:f9:
1e:a0:34:da:6f:3e:77:20:2c:8a:b3:19:0f:42:20:
b1:a6:c0:15:ab:17:bd:d0:bf:8e:9b:d5:9f:dc:af:
b2:31:bd:b5:dd:65:ba:ac:06:49:68:cc:a3:33:86:
b9:9b:0d:12:a0:7c:88:03:59:bb:46:8e:9c:1f:f4:
63:63:1a:be:44:a1:7a:32:51:93:fb:d1:32:9d:59:
e0:53:5f:48:7d:68:ac:e7:d6:2a:ee:77:7a:9a:cd:
6b:68:ce:15:07:16:18:88:04:f5:fc:71:55:bb:02:
e9:75:af:24:22:c3:77:55:d5:90:6c:b8:df:22:f0:
2e:ca:18:74:a4:b9:37:2b:7b:90:b4:60:41:e7:d9:
19:e7:86:60:5a:72:fc:b3:85:98:de:33:6c:29:04:
8c:81:69:87:c2:71:e4:4a:ed:38:8d:c3:6a:b7:27:
69:d1:cf:22:51:aa:36:fc:18:04:5f:f5:47:28:04:
81:7a:f8:7a:f8:6d:b0:3c:19:87:f9:e3:8d:2a:b7:
82:91:9c:20:7b:70:cc:e6:01:05:cb:ce:0e:06:5c:
99:25:ab:48:c3:88:b9:d4:d1:f7:0b:bd:51:45:4f:
31:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FB:39:16:3D:97:CE:B9:AE:CB:79:7F:30:C1:3C:6E:2E:00:4D:96
X509v3 Authority Key Identifier:
keyid:BE:44:8C:67:A3:AB:0E:A3:75:FB:A8:48:C9:FE:8C:8E:B1:E8:4D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:08:31:d1:8b:47:ed:ed:d8:d6:4b:f0:4a:84:db:0b:62:c1:
72:13:8c:3f:72:54:5d:e0:4b:69:70:66:13:38:5e:a7:5f:c0:
1e:a5:ed:de:79:db:17:07:3a:89:27:9b:5a:28:3f:6d:21:72:
1f:61:68:02:cb:19:e0:b2:6a:00:8c:f8:6a:51:0a:a5:fe:61:
46:a1:fb:f3:57:83:ab:0d:ad:c1:76:a6:60:e2:1f:a9:15:84:
93:16:df:e9:49:98:c8:9b:4a:4a:4d:a4:bb:77:bc:81:67:88:
80:71:a8:4e:ad:77:c9:c5:f9:d8:70:2c:7e:52:f2:e4:28:64:
d9:1e:4c:0b:ca:e6:cb:03:15:0d:0e:6d:8c:87:41:d3:97:c6:
df:d7:78:c0:62:47:6e:79:d3:10:21:9c:4b:f4:1a:f1:79:bb:
f9:ac:95:e4:c0:70:2c:e2:70:52:f7:a0:ea:70:2a:63:0f:f1:
86:35:c2:05:76:48:ea:13:47:7d:9b:4c:35:15:00:38:4a:d7:
79:9f:4e:79:6d:b9:ed:28:d8:89:70:cf:67:36:36:15:a8:b7:
29:38:99:e2:59:4f:52:82:ee:a5:0f:68:1a:04:73:97:d9:93:
3f:41:2e:f5:96:48:e7:0c:b6:d4:20:0d:e3:57:77:e0:95:b2:
d5:f5:b4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:16 2025 by rpki-client