Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
File: vkOZUom2pcqXLEuHteMUnDLLRDA.mft (raw, json)
Hash identifier: 4Kc3S2OTz9BaJQFHRXyxOqgn7zdwGkesJJF3E9Z8Tdw=
Subject key identifier: ED:BA:B1:93:76:D7:DA:CE:75:56:D8:84:97:7C:59:54:22:C5:36:17
Authority key identifier: BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
Certificate issuer: /CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Certificate serial: 01991CF883AACA061D82D68FBB86EB5EC753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
Manifest number: 143A
Signing time: Sat 06 Sep 2025 03:01:12 +0000
Manifest this update: Sat 06 Sep 2025 03:01:12 +0000
Manifest next update: Sun 07 Sep 2025 03:01:12 +0000
Files and hashes: 1: ReY2tPX210-enwDcd_knQa9-DQY.roa (hash: 2jOnLIUq8fBeQ/tq35cU67+fxV+LGlNJaoKupdGfzn4=)
2: e0TEu5beAVWeSmXxkW6X6x2gBHA.roa (hash: bCc+ujeebjVb3R0AjVp+lBJExzxOGb5apQpq8yxW908=)
3: vkOZUom2pcqXLEuHteMUnDLLRDA.crl (hash: 5sQqCXK4zT+yp1fSr/LFHJgIJ51rpGgvSLafNfxu+pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1c:f8:83:aa:ca:06:1d:82:d6:8f:bb:86:eb:5e:c7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Validity
Not Before: Sep 6 03:01:12 2025 GMT
Not After : Sep 7 03:01:12 2025 GMT
Subject: CN=edbab19376d7dace7556d884977c595422c53617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:aa:26:fe:d3:7f:05:17:a7:c8:a1:59:1c:3f:
6e:d9:47:54:cf:a7:6e:60:23:35:c4:85:78:32:eb:
a1:4a:9d:22:72:da:c8:46:cf:8a:71:23:89:10:83:
a1:dc:93:4b:e9:d5:eb:c1:ba:a9:bd:69:a9:5c:5e:
d1:38:67:b9:11:1c:ce:07:e0:2d:8e:a6:cd:cf:6a:
2b:6d:9c:c6:78:e0:88:aa:4e:8c:68:25:86:1f:9c:
3c:bb:6a:6a:60:27:d0:30:c2:64:e0:1d:41:52:92:
ad:6f:ec:ff:2d:14:f5:43:b5:94:b5:ff:ae:d1:e3:
9d:42:f3:91:c5:66:eb:24:82:20:a2:b9:33:b5:79:
a7:8b:3e:19:31:9b:d2:e5:d1:9e:f4:f5:a2:1a:cc:
18:9b:23:12:7e:9f:e5:05:1c:0a:57:98:bf:1a:de:
1a:3d:33:cb:d4:25:a3:26:98:96:e6:f7:ee:9d:33:
16:17:d5:34:97:65:01:1e:f9:b9:5d:f1:b2:bf:30:
5a:a5:22:50:fe:04:11:09:d0:28:f7:51:6e:cb:64:
29:b3:9e:50:57:e0:bf:c9:26:84:55:fc:82:0e:be:
75:98:52:ae:67:c3:23:81:e6:0f:bd:cc:96:6d:30:
b0:07:0a:ac:be:c1:99:80:71:31:a5:eb:75:e7:f5:
fe:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BA:B1:93:76:D7:DA:CE:75:56:D8:84:97:7C:59:54:22:C5:36:17
X509v3 Authority Key Identifier:
keyid:BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:1c:eb:90:25:d8:5a:c1:b8:ec:ea:99:19:d5:41:4c:1a:d1:
6d:37:56:89:a0:60:bf:cb:37:56:92:63:d1:e8:d7:a0:50:aa:
6a:11:10:f1:bf:01:50:6d:24:76:b1:98:0f:3e:e8:40:3a:d6:
66:6b:90:16:88:9d:23:0d:84:cb:9f:a1:36:2b:34:8d:08:42:
e9:55:bf:38:0c:6d:bb:9f:b3:c8:87:d2:1e:33:33:39:4d:3e:
db:a5:1b:47:e9:9a:3e:38:8b:e3:ca:d6:4e:14:c1:26:88:74:
2d:62:ed:37:ba:65:90:2c:78:d9:23:ac:e3:17:cc:40:24:13:
0a:6b:93:f6:9e:79:ab:4e:b0:48:71:13:ce:40:11:07:74:5e:
4f:73:1e:6c:85:27:05:b9:4a:8f:71:69:3f:bd:71:88:54:ec:
04:32:ef:c6:a5:55:1a:d2:80:16:41:d2:cd:d7:85:c9:2d:2e:
64:03:fd:c1:d7:cf:34:d6:b9:55:57:35:2d:54:e2:f1:2f:68:
77:e4:a9:1f:b0:58:80:dc:66:fb:cc:e8:41:d6:1f:d3:04:49:
ea:49:b3:90:b3:4f:61:c5:d7:22:cc:30:c8:53:be:f7:21:b6:
00:26:0e:1b:1a:01:5b:e2:7d:29:ef:2b:3e:10:72:d3:b0:ed:
ad:2e:15:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 12:38:12 2025 by rpki-client