Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
File: vmWzDa10rHadS1syMS2o-oGrM9E.mft (raw, json)
Hash identifier: CrsNakD1aolOZnp67Lde3zbvL0EiHp4Mpa7/aa4IUHk=
Subject key identifier: 63:B8:11:05:E6:8B:13:0B:DB:54:A4:7B:E3:82:AF:88:D7:50:B8:B0
Authority key identifier: BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1
Certificate issuer: /CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1
Certificate serial: 019A22F78CECE0CF665B2B98FED5B7994E6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
Manifest number: 0C4E
Signing time: Mon 27 Oct 2025 00:00:40 +0000
Manifest this update: Mon 27 Oct 2025 00:00:40 +0000
Manifest next update: Tue 28 Oct 2025 00:00:40 +0000
Files and hashes: 1: gySZz205phomZv7uwZ9DDc75Itk.roa (hash: eO5SMh+ywbk5mzLS6dSPU+KeItuyQY93yBUL4wk+YdY=)
2: vmWzDa10rHadS1syMS2o-oGrM9E.crl (hash: sEAHkI0nm9FaDVrH0La6fkN8qviKuw19o1H1x01T/WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:8c:ec:e0:cf:66:5b:2b:98:fe:d5:b7:99:4e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1
Validity
Not Before: Oct 27 00:00:40 2025 GMT
Not After : Oct 28 00:00:40 2025 GMT
Subject: CN=63b81105e68b130bdb54a47be382af88d750b8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:31:0d:95:a7:24:2c:2a:c4:4c:da:af:c2:5b:
8a:65:a5:f8:27:73:f5:b5:11:c9:98:77:5b:69:49:
e5:7b:9a:f2:1e:9f:09:d7:2d:fc:77:18:fa:22:84:
4c:02:23:75:a7:ec:9a:9a:bf:07:8a:7f:e1:ca:58:
a5:89:b5:2d:bd:6b:37:f2:58:bc:59:1f:4e:e2:f8:
0c:f3:94:41:95:98:b5:ac:bf:d7:36:13:80:c9:a5:
5a:13:eb:60:ff:c6:3c:3c:90:32:e0:7d:54:8f:62:
a4:08:fe:fa:ec:64:be:9c:12:0e:2f:e0:48:ca:a9:
d7:a1:4c:4f:a2:c7:8c:f4:67:51:db:4a:e3:ab:b5:
ed:41:45:92:13:87:31:b5:ed:bc:a1:c2:b2:2f:a2:
f0:16:29:45:37:25:ce:2f:be:78:7d:59:7a:b8:54:
72:9c:9a:08:99:d2:44:cf:cd:bc:8e:49:0a:22:7e:
bf:d2:88:4c:1a:bd:81:51:d7:07:b1:87:89:50:ea:
6c:1a:86:1f:0b:19:46:b0:37:4a:96:48:c8:50:d2:
f7:ac:fd:a7:24:c1:53:e7:85:65:31:5e:1b:5a:92:
0d:f4:6d:e0:42:16:21:7d:53:de:49:b3:99:ef:2d:
fd:39:e8:4b:06:87:51:8a:d6:c7:97:27:87:18:82:
e4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B8:11:05:E6:8B:13:0B:DB:54:A4:7B:E3:82:AF:88:D7:50:B8:B0
X509v3 Authority Key Identifier:
keyid:BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f3:b5:14:30:21:77:51:06:de:00:fd:1a:8e:a3:60:57:3e:
e1:09:4a:5e:11:7e:5e:a2:32:40:32:52:a8:d2:d8:fa:c1:9d:
24:b6:bb:41:63:5c:28:d8:6b:72:2b:42:28:e7:7e:05:f6:58:
56:be:04:81:21:9b:76:6a:b9:d8:7f:8d:0f:0c:8c:e3:58:f0:
06:e8:b4:2d:98:0e:4f:20:50:03:31:12:a1:84:87:36:ec:32:
d2:39:0a:6c:60:43:9f:fa:bb:dd:1a:f0:bc:e1:83:b9:87:c4:
9a:1e:02:28:56:b9:f9:3f:f6:9d:20:4a:23:cc:24:1e:18:bd:
b0:2d:ec:a4:73:c7:a1:34:32:07:02:d0:1b:b9:83:1d:11:ac:
06:bb:a6:d3:4b:e4:05:f5:58:9c:e2:46:5f:61:60:17:7f:20:
b7:8b:1b:db:c0:ec:43:a0:cb:af:6e:f5:c4:3b:1f:03:ab:a2:
37:2c:2b:b8:ec:10:95:c2:5f:22:a0:72:de:cb:a0:89:b3:78:
57:e7:f0:10:0a:ff:1b:a7:7d:c3:f8:d1:c5:ec:ad:04:06:74:
fc:24:7f:27:c6:9f:a0:ed:32:e5:5f:16:4d:bd:7c:59:66:c6:
dc:82:7f:d8:54:af:9b:18:12:df:f6:a7:05:ba:9b:2f:d6:d6:
0c:6f:51:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:19:03 2025 by rpki-client