Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
File: vklD9SA9Q0YKE61OqdfVuVDGE80.mft (raw, json)
Hash identifier: 0N2FxO0Q0usRNF3fzpRbfzod+XvcKvXznkQuZ9i3mlY=
Subject key identifier: 04:0A:2F:B1:EF:C6:CB:5D:9B:CA:30:91:BD:74:77:35:44:8F:16:EB
Authority key identifier: BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD
Certificate issuer: /CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd
Certificate serial: 01992331291B586BE86D30537DD7414543B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
Manifest number: 155A
Signing time: Sun 07 Sep 2025 08:00:48 +0000
Manifest this update: Sun 07 Sep 2025 08:00:48 +0000
Manifest next update: Mon 08 Sep 2025 08:00:48 +0000
Files and hashes: 1: FvmWK8AMx-teHQ5tWkhhyLwCTdQ.roa (hash: coWDehO4MQ177+hdG6n28lrng5GzRH0clwFKkBo/jyg=)
2: P0eLHT9-M-aTFtL_3Zf0a5B6Ndg.roa (hash: uyQciIXo2hsIiWCjmOsDyTK0I4LR9Xab2ALuXJDMpzQ=)
3: s1Gqcb4cma0dzStLOOm8HvEO5jQ.roa (hash: NwYmvG8onNhwCfDmhQjAdYoUGMe+Y6N54avr4BG3ekE=)
4: vklD9SA9Q0YKE61OqdfVuVDGE80.crl (hash: sC58z/ybgNlgUc0q5TGllL6syu5Qx71/P9OrQYJWRj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:29:1b:58:6b:e8:6d:30:53:7d:d7:41:45:43:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd
Validity
Not Before: Sep 7 08:00:48 2025 GMT
Not After : Sep 8 08:00:48 2025 GMT
Subject: CN=040a2fb1efc6cb5d9bca3091bd747735448f16eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:86:f8:83:08:4c:f2:13:f0:47:08:86:b6:75:
ce:d2:9a:08:a0:23:f7:63:09:54:05:b2:29:e1:c0:
52:fb:f6:9b:68:37:3a:49:c7:1b:6e:ff:b5:72:ca:
bc:30:bc:8e:72:a0:84:eb:53:66:44:fa:fa:76:ca:
e2:35:3f:de:4c:99:a6:d6:11:d4:62:f1:3c:03:c7:
2c:5c:9d:5d:10:90:31:13:72:21:1d:7d:a2:e0:29:
a9:76:a1:2e:2f:a7:13:c4:72:84:b0:01:08:e6:bb:
7a:f6:41:db:f0:f9:52:87:3d:25:74:6b:bc:d1:52:
61:0a:64:8e:43:29:4f:88:7d:9c:ae:ea:b9:95:1e:
5a:f0:42:e7:d4:7f:d6:dd:99:d8:42:6d:7a:c9:09:
c8:d0:1a:86:53:a6:f3:da:87:5c:41:d9:24:cc:24:
2d:44:e4:20:55:cf:64:28:be:30:af:13:8e:86:99:
84:11:b9:91:7f:da:de:dc:45:53:17:f7:06:79:19:
dc:f1:c6:29:2c:e0:b8:fc:f6:bc:37:23:41:43:10:
b1:6f:4a:29:a8:d0:29:d0:02:d4:c5:ca:88:6b:c0:
4b:f5:5e:03:21:88:48:e8:7e:80:27:3d:e7:1d:e4:
4e:84:49:7e:d9:3a:62:56:ac:c7:b0:90:f3:f3:64:
a1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0A:2F:B1:EF:C6:CB:5D:9B:CA:30:91:BD:74:77:35:44:8F:16:EB
X509v3 Authority Key Identifier:
keyid:BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:e2:19:9b:7b:ed:39:e2:8a:97:38:10:14:e4:9a:27:5b:21:
e1:a4:62:0a:73:d9:b3:7a:0d:ab:b7:c9:03:e8:9e:53:d6:4f:
b3:6c:66:ed:ca:04:e4:5f:51:e3:ce:53:66:4b:de:d2:0f:8c:
ce:e1:46:6e:f5:2f:19:3e:14:ea:40:d6:e3:30:27:5b:a8:e5:
04:0b:77:b1:3c:14:11:e3:09:c1:68:e7:59:b8:8e:3d:53:f8:
3b:8a:f1:a5:f7:30:8b:44:e6:99:a5:65:ab:d6:1c:71:b3:ae:
e3:79:5f:fd:7b:67:bf:31:29:97:df:b5:24:6f:cc:27:f6:f2:
aa:08:0e:e9:a5:6a:41:fb:16:5b:9e:99:57:dc:6e:bf:f1:c4:
e5:67:3e:4c:ea:98:91:ef:52:0b:25:6b:38:60:43:74:41:b8:
6c:04:46:82:d1:87:0f:68:55:f1:53:7b:5f:78:0a:6f:54:9a:
a0:de:56:1a:b9:25:ec:cb:0e:7b:21:51:2e:4a:a4:b5:88:8a:
f1:10:b9:15:f5:89:4a:e0:39:74:68:e3:48:b9:6d:9e:9d:b1:
89:b2:76:5c:46:5a:62:f1:19:e3:71:61:b9:0c:fd:d5:f0:bd:
a6:5a:58:a9:44:47:4f:71:eb:6f:a4:bd:db:a0:a5:ec:83:1c:
19:10:1f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:53:44 2025 by rpki-client