Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
File: vmWzDa10rHadS1syMS2o-oGrM9E.mft (raw, json)
Hash identifier: 1pW5o31alLWNT6zM2tB0p7UD9CMzo0pC9C79BOLthOU=
Subject key identifier: 26:4E:36:B7:54:F1:30:C9:07:A2:C1:A2:9C:EC:52:73:DF:A0:72:E6
Authority key identifier: BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1
Certificate issuer: /CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1
Certificate serial: 0199356F0B4E7B1A4940FB420A3E9A851EAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
Manifest number: 0BD3
Signing time: Wed 10 Sep 2025 21:01:33 +0000
Manifest this update: Wed 10 Sep 2025 21:01:33 +0000
Manifest next update: Thu 11 Sep 2025 21:01:33 +0000
Files and hashes: 1: gySZz205phomZv7uwZ9DDc75Itk.roa (hash: eO5SMh+ywbk5mzLS6dSPU+KeItuyQY93yBUL4wk+YdY=)
2: vmWzDa10rHadS1syMS2o-oGrM9E.crl (hash: lGvI8rHMqw0FWbIXDzGqHyOzVVg2k4zM6bVnxv/8e2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:6f:0b:4e:7b:1a:49:40:fb:42:0a:3e:9a:85:1e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1
Validity
Not Before: Sep 10 21:01:33 2025 GMT
Not After : Sep 11 21:01:33 2025 GMT
Subject: CN=264e36b754f130c907a2c1a29cec5273dfa072e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:88:7e:88:e8:b5:42:d1:7c:18:8b:31:9f:0a:
b8:17:d3:60:a3:2e:a5:69:0a:7f:08:1e:c4:49:21:
2b:a0:12:b7:63:62:b7:f1:94:57:31:64:2c:0d:5e:
51:1e:28:93:0e:c6:27:1e:62:ba:41:cc:d5:ba:04:
d0:16:a0:19:c5:56:79:63:da:0b:f6:02:32:b5:55:
35:92:60:f8:81:3f:6a:68:0f:73:24:54:ae:b5:35:
1f:e4:0b:5d:d2:c7:c2:64:1b:b6:d2:fc:63:17:2a:
e0:96:a6:ce:98:c8:cf:6e:7b:ff:bb:5b:80:e7:d6:
bc:5f:98:eb:72:53:4b:06:68:6d:d2:99:ec:8b:0a:
e8:1d:d2:b0:a8:d1:ac:10:da:69:19:22:a2:43:b4:
2a:3c:23:c8:2e:fe:fb:d2:80:cb:7a:7c:3c:0d:36:
c4:ca:1f:a3:b1:9d:4b:9c:14:73:59:d9:f7:7b:85:
70:6e:10:c1:d6:f1:26:ec:64:23:14:be:68:09:1c:
61:20:ec:77:18:a7:f5:79:d5:ce:5a:fe:bb:55:eb:
78:4e:3c:1e:49:8b:ea:30:d9:ff:cf:2f:22:84:c8:
a3:b5:a8:59:97:bb:ec:39:20:c7:63:d7:ae:99:43:
33:40:71:94:dc:f7:24:34:1d:e4:b0:b1:53:db:83:
0f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4E:36:B7:54:F1:30:C9:07:A2:C1:A2:9C:EC:52:73:DF:A0:72:E6
X509v3 Authority Key Identifier:
keyid:BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d2:bc:84:e6:88:22:a1:6e:d9:81:13:59:19:99:ad:03:49:
92:e6:21:b9:1b:2b:d6:6b:c3:35:5b:23:02:21:0b:84:dc:0a:
aa:50:d1:b4:d0:26:2a:c2:2b:d9:f3:91:30:9f:a6:c1:57:ad:
12:46:8c:97:ca:18:4e:39:94:ba:a5:9e:43:e0:a6:91:a4:85:
b5:9e:c9:29:49:8f:f3:09:e1:70:76:33:1f:f3:4e:33:db:4b:
2a:b4:3a:81:5b:48:ac:1c:04:7f:67:c3:0e:8e:4b:2f:4b:2a:
c8:c3:0a:4f:d5:ed:5f:26:b3:85:b8:c5:e1:49:56:3a:f8:c0:
31:f6:49:8b:bd:8a:6a:b7:63:a3:53:2d:18:aa:ae:56:0a:1d:
b1:14:ea:32:26:37:d5:51:36:42:c5:fd:db:3a:d7:90:43:2c:
45:75:b7:14:33:07:a0:a9:d3:60:dc:de:b8:eb:80:04:ca:98:
55:6f:bd:83:ea:45:a1:36:d1:bb:fd:13:0f:b0:db:bd:c2:9b:
16:db:cf:d0:d4:b2:10:11:a4:10:88:02:73:b2:b0:49:b8:36:
02:d2:be:43:2d:98:e9:1a:f7:fd:37:21:5c:56:07:c2:cc:5f:
ee:d3:f1:89:aa:13:8b:f4:22:ce:52:0d:85:17:62:72:bc:b3:
10:6d:4f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 04:30:49 2025 by rpki-client