Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
File: vmFEtFm84Tnyc0pE-9tGyYEymys.mft (raw, json)
Hash identifier: ObG3jcKKMm3mXbv/rnsl5aoMpyVcacLredPu+txXkzA=
Subject key identifier: 22:DD:6B:80:73:5C:1A:07:32:DD:04:D7:95:AB:2B:A1:F7:B0:65:22
Authority key identifier: BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
Certificate issuer: /CN=be6144b459bce139f2734a44fbdb46c981329b2b
Certificate serial: 01992C6B37129826BD23308129328E88EEAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
Manifest number: 0B03
Signing time: Tue 09 Sep 2025 03:00:47 +0000
Manifest this update: Tue 09 Sep 2025 03:00:47 +0000
Manifest next update: Wed 10 Sep 2025 03:00:47 +0000
Files and hashes: 1: 1-joLXxcr_bVIX8GYv6pA9Fl0-sU.roa (hash: fC8xsMT8pkAhb0cnhW19TBbsU5HJIWYiSjKEjJGjv0I=)
2: sYPkj1N3no6PTM91c5Pov65EAC8.roa (hash: uAS0kma3H4GS4hrLx52tm2yalQVMm9OuSp2lJZ08j2k=)
3: vmFEtFm84Tnyc0pE-9tGyYEymys.crl (hash: ebls/Xgemx7gWz2/KIPSvOHxLjYtQJXz1+uJo8OqFRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:6b:37:12:98:26:bd:23:30:81:29:32:8e:88:ee:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6144b459bce139f2734a44fbdb46c981329b2b
Validity
Not Before: Sep 9 03:00:47 2025 GMT
Not After : Sep 10 03:00:47 2025 GMT
Subject: CN=22dd6b80735c1a0732dd04d795ab2ba1f7b06522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5d:18:ac:c5:73:99:ac:ee:5e:e2:c6:c4:d4:
08:e4:53:fb:48:f8:0e:4f:b7:39:c2:16:ad:e0:73:
4b:a2:8b:7a:1d:ad:89:4a:2e:af:20:37:41:64:fa:
dd:95:c2:6b:bc:2b:cb:4b:41:95:c7:86:c6:b0:9a:
ad:32:96:9e:2b:c0:c9:ca:c3:30:cf:c5:33:31:3e:
af:94:76:dd:d7:fc:cf:32:0d:6c:13:bd:81:a4:65:
ae:43:45:35:9f:0b:b2:66:fa:14:66:32:ca:72:98:
9e:59:d5:1e:9c:e0:00:ff:81:eb:c8:0f:f7:54:5e:
f4:88:74:cd:59:ce:ad:e4:08:b9:fb:9f:69:f5:91:
0d:fd:a0:9f:72:41:a3:e1:b6:88:3e:35:41:66:f9:
0c:9c:65:48:4e:8f:a5:72:6b:df:72:ed:b3:71:92:
6f:3f:97:d9:90:71:4f:94:f4:6b:35:a5:a7:9e:cb:
38:d9:64:2f:e1:6b:16:d9:a9:54:82:59:59:ba:48:
63:ab:0f:dc:c2:33:87:f4:40:23:d1:ba:9e:09:d3:
3e:b6:74:61:a3:75:69:32:b0:e0:59:bb:db:43:02:
ef:f0:c9:89:37:cc:5c:75:37:3f:af:c7:a3:61:55:
fe:0d:d9:77:4e:e9:13:cd:b8:d7:65:32:c3:b7:3a:
94:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DD:6B:80:73:5C:1A:07:32:DD:04:D7:95:AB:2B:A1:F7:B0:65:22
X509v3 Authority Key Identifier:
keyid:BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ba:bb:0e:5f:59:4c:f2:3b:0c:b9:62:d1:ab:58:bd:99:5b:
51:c4:be:ea:df:c6:29:e9:76:68:7e:73:68:a0:3c:fe:c0:df:
f3:00:6e:2b:67:22:86:92:2e:8e:82:96:86:d5:02:03:85:24:
6f:a6:00:6f:79:b5:c8:3d:77:71:7f:fb:c4:c2:f4:e4:a7:ca:
9e:89:1e:5a:c7:fd:d7:6b:81:4d:a8:1e:39:f2:30:3b:3f:fa:
63:41:70:5d:49:2e:9c:d6:0f:dc:dd:be:1c:5c:db:1f:f5:dc:
b3:ac:73:de:29:87:81:38:2a:c2:03:ad:96:35:4c:39:1f:2b:
31:b0:4f:89:a6:8e:15:e7:e2:24:c6:80:b8:c2:6b:2a:81:8e:
87:4b:72:94:9e:08:81:1a:cc:03:e0:54:af:fd:f3:66:d2:2f:
9d:15:f9:c2:15:8f:e7:00:d4:53:7b:0e:d3:bc:94:1c:39:87:
16:98:96:16:f6:fd:0e:58:9a:b4:e0:03:86:18:85:e1:b1:bd:
a0:67:48:f6:93:02:e9:3e:3e:5e:6e:97:2b:88:b6:29:ae:c0:
bc:a8:f8:8c:c3:e2:53:c6:85:dc:57:13:08:6d:b6:62:01:6d:
f5:71:9b:79:e6:f5:46:95:62:97:98:61:50:a7:f3:60:2f:25:
89:b0:42:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 10:54:18 2025 by rpki-client