Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
File: Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft (raw, json)
Hash identifier: MAB2oCE9zhNWJlPoW4Wih4Ptl85qNrc0hjUfO7X46AI=
Subject key identifier: DB:41:C6:88:A5:10:D1:E5:0C:0A:81:E9:F2:A0:95:47:CD:09:CD:81
Authority key identifier: 55:E9:3C:C3:E6:1C:F3:34:B1:61:11:CA:E3:4A:E9:92:8C:4F:C3:FA
Certificate issuer: /CN=55e93cc3e61cf334b16111cae34ae9928c4fc3fa
Certificate serial: 01992255560869F1D8F017598A6BF84BF7C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
Manifest number: 1103
Signing time: Sun 07 Sep 2025 04:00:41 +0000
Manifest this update: Sun 07 Sep 2025 04:00:41 +0000
Manifest next update: Mon 08 Sep 2025 04:00:41 +0000
Files and hashes: 1: 8WKeNRHKfnPMtDPrJe2tbs0peW8.roa (hash: p24Kg0o2ZZFpnMMb7fnMgorqDU4JrcszVsb7S2USX88=)
2: Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl (hash: M1fe5qteNNvwReLkb1DoPikU+EMVdCui5MyjnyV9dTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:56:08:69:f1:d8:f0:17:59:8a:6b:f8:4b:f7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55e93cc3e61cf334b16111cae34ae9928c4fc3fa
Validity
Not Before: Sep 7 04:00:41 2025 GMT
Not After : Sep 8 04:00:41 2025 GMT
Subject: CN=db41c688a510d1e50c0a81e9f2a09547cd09cd81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5f:35:30:4a:3c:f2:81:2f:6b:23:e8:1e:bb:
89:24:66:d5:08:06:7a:07:75:ae:a5:10:ed:49:57:
c6:b3:39:ae:65:b0:2f:1d:ce:03:34:ce:66:a1:ff:
14:e0:fb:f8:d4:64:73:31:2f:0d:a5:a8:dd:af:62:
c0:d1:6e:03:f0:1c:fa:72:14:cb:de:2d:ac:2c:07:
68:97:d5:e2:0a:41:75:da:44:bf:ca:f9:d5:31:2f:
66:31:7b:d8:d6:de:8a:1c:db:5f:14:30:d1:ac:f7:
ef:a8:cd:11:85:f4:85:86:f8:5a:59:d3:08:40:e9:
4d:8e:ec:57:91:82:36:44:cf:1c:f6:1e:96:a2:ca:
4b:94:8e:65:82:a6:43:3c:54:f7:ea:9c:a0:10:8c:
40:14:de:65:6c:95:10:16:3c:9e:53:56:ab:58:bb:
37:cc:95:4c:a4:b2:63:28:f4:30:cd:f6:23:43:df:
af:d6:f9:b2:f9:6c:c6:1d:90:b1:ca:a1:c9:6a:fa:
61:e1:c8:08:13:9d:9a:7d:42:bb:fa:45:21:e4:60:
74:ef:da:34:b4:bf:58:bf:24:d5:4d:85:5f:c4:76:
01:7c:9a:35:3a:ce:e0:72:27:bc:9d:8b:83:df:2f:
9c:fb:37:37:70:95:8f:66:47:1d:65:43:d3:08:15:
35:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:41:C6:88:A5:10:D1:E5:0C:0A:81:E9:F2:A0:95:47:CD:09:CD:81
X509v3 Authority Key Identifier:
keyid:55:E9:3C:C3:E6:1C:F3:34:B1:61:11:CA:E3:4A:E9:92:8C:4F:C3:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:fa:94:ae:8e:97:98:e5:cb:4c:55:05:4f:a8:79:94:25:24:
68:0d:39:f0:90:10:88:28:d1:14:ff:b2:72:38:1d:1e:40:33:
7c:1a:89:33:42:d1:4e:29:61:b8:b6:cb:39:6a:84:20:41:d4:
77:8a:fb:b9:96:76:7b:d2:ba:ee:7f:10:37:b0:40:2c:0e:e6:
20:ad:75:5a:1c:df:35:dc:5b:24:91:7c:a9:5c:aa:53:90:9f:
bd:27:fb:df:22:fb:32:ec:13:67:cd:97:1e:ee:96:98:e9:cc:
cf:3c:3c:52:34:06:9c:f3:4d:1b:72:db:b5:d8:c8:64:10:f5:
f1:69:93:e1:47:7c:bd:f0:44:94:74:b2:8c:05:63:93:ee:d6:
f1:22:66:d3:0d:1f:fa:d0:cc:f8:eb:c2:29:c6:00:43:ed:c4:
70:8d:d5:e0:65:01:af:26:b8:61:a3:f1:7a:65:a8:5f:65:5b:
14:b7:74:03:cd:74:ce:68:bf:3a:76:e4:15:cd:0d:fb:d6:2d:
16:64:18:a0:ec:93:06:5f:5d:0c:ab:cd:0e:45:c3:21:65:5a:
c7:6a:2d:b0:79:44:9e:50:d3:c5:7b:d0:44:ba:d3:aa:80:d2:
df:54:a3:1f:5b:01:87:86:00:12:12:11:17:c1:af:ba:e4:7c:
f7:e0:5f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:16 2025 by rpki-client