Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
File: vEgmB2OhHnewtdfdICukzDAFOLE.mft (raw, json)
Hash identifier: 1ntEFlzk+ldsmo40LLvdbitCWeEcvQIxaG1p9Q10anU=
Subject key identifier: CC:E9:66:8B:43:43:66:21:9D:F5:A6:C1:EF:84:0E:A1:00:06:7C:96
Authority key identifier: BC:48:26:07:63:A1:1E:77:B0:B5:D7:DD:20:2B:A4:CC:30:05:38:B1
Certificate issuer: /CN=bc48260763a11e77b0b5d7dd202ba4cc300538b1
Certificate serial: 019A2289884482BAEEE2AC0CA30737150F35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
Manifest number: 01AB
Signing time: Sun 26 Oct 2025 22:00:29 +0000
Manifest this update: Sun 26 Oct 2025 22:00:29 +0000
Manifest next update: Mon 27 Oct 2025 22:00:29 +0000
Files and hashes: 1: SbG-TfF_crHX7bjktc6Jm6Mw08k.roa (hash: cILCavbni7VMAY2NB/vg63OOb75/V8DMaIDv6gy9of0=)
2: vEgmB2OhHnewtdfdICukzDAFOLE.crl (hash: rqqT2bSimMpTwSrFOI/ogHDWtk89E4qPiZKI1Ujj04A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:88:44:82:ba:ee:e2:ac:0c:a3:07:37:15:0f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc48260763a11e77b0b5d7dd202ba4cc300538b1
Validity
Not Before: Oct 26 22:00:29 2025 GMT
Not After : Oct 27 22:00:29 2025 GMT
Subject: CN=cce9668b434366219df5a6c1ef840ea100067c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d6:5f:e6:ce:3b:42:2e:e2:d0:b7:6d:b1:b6:
6e:45:82:d5:bd:4f:47:25:b1:93:44:8a:ad:54:83:
8b:4d:b3:db:af:a7:51:ba:c0:fb:7f:2f:a8:c0:9d:
63:ca:17:d0:d5:b2:8b:c6:cb:35:88:14:88:78:bb:
fe:5e:61:39:3d:44:25:c5:c8:71:cf:2a:a4:63:54:
94:8b:68:50:e7:86:f5:bc:79:de:dd:79:d1:01:b1:
fd:8a:99:77:08:7f:27:6a:87:7d:75:3f:87:03:e1:
92:84:23:d3:85:5a:3a:62:54:7e:e6:f3:09:16:a3:
7d:fc:77:fc:4e:ef:61:87:7b:77:21:89:dd:18:91:
99:bb:eb:7b:9f:f5:65:4f:eb:c2:4e:7f:d2:a6:78:
fa:56:a2:e0:55:7e:73:1f:53:bc:18:31:3e:f6:64:
38:bc:c1:35:2e:fa:36:55:24:1b:d7:f9:c7:af:f3:
a3:a7:22:4d:4d:20:7d:8e:55:b6:b4:57:d4:a0:4e:
64:27:41:56:6a:c1:fe:87:11:05:39:e3:a0:b6:fa:
7c:19:91:78:bd:42:6e:ec:9f:e2:b1:c0:15:2d:bb:
dd:70:d0:f8:19:2e:80:35:ef:ba:9e:d0:f9:c1:04:
af:ba:a0:9c:83:d0:2f:64:78:19:0b:44:f1:b9:08:
a7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E9:66:8B:43:43:66:21:9D:F5:A6:C1:EF:84:0E:A1:00:06:7C:96
X509v3 Authority Key Identifier:
keyid:BC:48:26:07:63:A1:1E:77:B0:B5:D7:DD:20:2B:A4:CC:30:05:38:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:6a:26:a0:ca:8f:7e:c6:39:97:45:4e:73:0a:8d:d1:31:5c:
64:b2:5d:50:f2:3a:04:66:4d:9b:aa:f8:98:6f:68:ce:d0:19:
65:66:40:fa:18:47:15:87:a9:84:6e:45:ac:e4:52:cc:1d:e2:
5c:f5:36:95:79:a3:e8:70:47:f6:23:7e:41:78:40:d2:f5:06:
b0:1c:02:37:9f:2b:da:21:d4:2d:d7:f2:7a:f5:5b:c5:84:98:
4e:6c:d5:2b:55:96:af:aa:e8:28:66:d7:bb:11:74:11:0d:a4:
dd:4f:ae:3e:6e:95:92:e8:e5:48:74:f1:83:12:4a:31:6b:52:
22:60:bb:03:27:ad:da:99:b8:9e:4c:c5:1e:ad:be:f5:0b:31:
f6:4f:72:1e:9d:d5:fd:fd:67:1f:71:3e:cb:9b:2d:11:47:b4:
fd:66:11:04:93:fa:f0:67:13:ef:29:2b:b7:f3:a8:b3:07:50:
aa:7c:ba:d2:e7:f7:eb:2c:5f:91:4a:4a:c6:cf:04:03:87:fd:
14:bd:f8:29:a3:93:04:7d:0b:ad:f3:06:8e:a2:2f:78:57:b0:
c3:1d:3e:ad:46:f4:41:82:53:66:ef:58:ea:f5:5e:cf:b7:34:
fb:ec:68:fd:be:b6:76:08:ec:18:84:1a:08:67:41:6f:8f:e0:
0a:ff:43:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:37:19 2025 by rpki-client