Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.mft
File: vedQeWGGkbrh9HvL7VIxRJaWOJE.mft (raw, json)
Hash identifier: EzHs9NrngCopL23NsX2xq5OL/wQuBE0gswrZ3YZmzvM=
Subject key identifier: 0A:81:F4:A2:A6:13:5B:C2:5B:07:34:10:DD:E3:BF:6F:9A:AA:F5:25
Authority key identifier: BD:E7:50:79:61:86:91:BA:E1:F4:7B:CB:ED:52:31:44:96:96:38:91
Certificate issuer: /CN=bde75079618691bae1f47bcbed52314496963891
Certificate serial: 019A725CDAED2FD46F70F1307B0153A49F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vedQeWGGkbrh9HvL7VIxRJaWOJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.mft
Manifest number: 1301
Signing time: Tue 11 Nov 2025 10:01:19 +0000
Manifest this update: Tue 11 Nov 2025 10:01:19 +0000
Manifest next update: Wed 12 Nov 2025 10:01:19 +0000
Files and hashes: 1: dN-uhf4yHU1KWIuxr4O44km4Ib0.roa (hash: erjr+nwKgTpJdhI7Z4IWA4jUyQt8GWT0g5Kuu0xltYE=)
2: djt1wnEeMWCGixI9JNMPiTXrt7U.roa (hash: fvje1Lm8IIK5mAd7uOyfo0YMgHNd5fDXDiGQLx1jFzE=)
3: n806vQCKJO6E1y-xgzc_uqP7AsI.roa (hash: N130woa+XpJIXwfcoDYXVXM648PPasYWXY1QC+kU7WQ=)
4: vedQeWGGkbrh9HvL7VIxRJaWOJE.crl (hash: HavkNAILgBhwhEoqJgmjei61ipMXlfGTdN1aTNMsS5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vedQeWGGkbrh9HvL7VIxRJaWOJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:da:ed:2f:d4:6f:70:f1:30:7b:01:53:a4:9f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde75079618691bae1f47bcbed52314496963891
Validity
Not Before: Nov 11 10:01:19 2025 GMT
Not After : Nov 12 10:01:19 2025 GMT
Subject: CN=0a81f4a2a6135bc25b073410dde3bf6f9aaaf525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1e:f1:f6:52:6b:34:6c:c4:8c:65:a4:7e:78:
1f:72:04:fc:31:15:b9:e4:c0:f0:67:11:3a:16:1e:
ea:8e:09:f5:a9:0f:66:c4:91:c9:d6:78:11:da:d0:
06:52:74:bd:60:66:3a:70:8e:95:91:58:1b:df:59:
dd:da:82:7a:77:be:76:94:79:e2:bd:4f:11:8a:89:
5e:88:3f:86:f4:ef:fa:9c:02:2a:d6:87:2e:8b:43:
a4:ca:de:a4:49:de:0b:31:8f:d9:82:10:c7:bd:64:
27:41:94:93:04:5c:df:32:a8:8c:87:94:72:67:06:
82:7a:e2:d6:31:a1:37:1b:3b:bf:2e:6c:fe:5d:c9:
c3:a0:f3:20:2f:c6:a0:0c:fe:15:e0:51:65:73:b6:
cf:37:1c:dd:c7:e9:9f:98:6a:61:f6:53:40:0b:14:
80:7b:28:49:36:9a:a1:63:5b:1b:f7:b1:1b:0b:e5:
a8:6c:bb:01:75:56:d5:aa:86:cd:12:d3:2b:e4:2c:
82:e4:89:f1:99:d8:71:d9:2f:71:22:65:04:32:b7:
c0:d8:9c:d6:47:76:6c:87:32:17:39:8f:3e:59:af:
5d:1f:f6:c3:b2:c4:78:bf:22:3b:d6:a9:1b:eb:87:
f9:61:be:6f:22:9f:4a:02:d6:e8:51:07:c6:7b:bd:
d7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:81:F4:A2:A6:13:5B:C2:5B:07:34:10:DD:E3:BF:6F:9A:AA:F5:25
X509v3 Authority Key Identifier:
keyid:BD:E7:50:79:61:86:91:BA:E1:F4:7B:CB:ED:52:31:44:96:96:38:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vedQeWGGkbrh9HvL7VIxRJaWOJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:03:17:ca:ee:de:8a:05:2a:49:d7:7a:c0:ba:62:99:ce:57:
1a:fa:a2:fc:56:cc:89:e1:9f:f1:28:0d:6b:8c:2c:19:47:0c:
58:7b:88:03:99:cf:0e:f2:45:02:a1:69:bc:75:dd:fc:1a:1c:
3f:e9:94:8a:ef:ca:f3:dc:aa:f1:32:91:e0:11:ff:8d:00:db:
17:6c:0a:52:d7:50:4f:bf:5a:48:f3:9f:79:be:d5:25:5d:b8:
9b:e0:c1:b7:fe:f7:e6:bc:d6:c8:31:71:f8:f3:e5:36:f1:1a:
9d:62:f2:f3:95:39:ae:82:e0:4b:33:02:a6:0c:0e:39:0b:e0:
5f:1b:b7:b2:99:f8:d2:69:7c:a7:f8:74:06:41:ab:8b:93:43:
6e:2c:ea:0a:8f:f4:70:b7:e4:79:7c:1a:6a:a5:b1:30:c6:35:
c1:9a:76:63:34:6b:8b:2c:05:b2:a3:b7:37:73:81:2f:73:e7:
02:ec:01:ae:5e:41:88:c8:fd:0b:a5:65:30:cb:85:c1:0b:e4:
ca:4a:4e:fe:87:0c:f3:7e:de:b1:5e:f9:5c:c0:91:91:8e:64:
26:d8:a1:63:7b:13:2d:21:37:51:70:69:b4:3b:9a:a6:1b:f9:
5b:5e:33:9c:f0:6b:da:e5:ba:28:4d:32:51:d0:c9:7c:9f:eb:
60:a3:42:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:00:45 2025 by rpki-client