Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
File: vrfYT-FaMkPBAANHsJkLpGuzrkI.mft (raw, json)
Hash identifier: zwknj89taSnuxnINj/DAp9DCPCtnO/0lGzZdB9a9cow=
Subject key identifier: 7A:0E:BD:AD:B8:65:24:36:66:C6:EA:CC:62:18:A9:89:40:73:8D:47
Authority key identifier: BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42
Certificate issuer: /CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42
Certificate serial: 019A71B857AA5F99CD67EECFD96D0423826E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
Manifest number: 0750
Signing time: Tue 11 Nov 2025 07:01:37 +0000
Manifest this update: Tue 11 Nov 2025 07:01:37 +0000
Manifest next update: Wed 12 Nov 2025 07:01:37 +0000
Files and hashes: 1: 4JbsqghTrIDqYvxRn3KkEBvNEXw.roa (hash: tPrE7VB6YTkQk/rEZVSQYz48H4Rfa9ADrk+TF9kaYiY=)
2: vrfYT-FaMkPBAANHsJkLpGuzrkI.crl (hash: WsHWORdu5pEzXf4E/l04H4NctJVm6jqGAm4F/NjB4Zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:57:aa:5f:99:cd:67:ee:cf:d9:6d:04:23:82:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42
Validity
Not Before: Nov 11 07:01:37 2025 GMT
Not After : Nov 12 07:01:37 2025 GMT
Subject: CN=7a0ebdadb865243666c6eacc6218a98940738d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:db:05:b3:87:cb:81:e5:3b:94:c9:bc:0d:f1:
24:31:1d:d3:85:e2:51:3d:ab:75:5d:3a:da:1d:63:
92:94:ad:2d:23:02:39:08:73:71:b0:8c:5f:52:48:
86:ac:46:7d:36:e6:72:1d:84:0e:cf:40:27:24:a9:
cb:1c:01:ae:e4:70:c4:81:3e:78:e7:a6:a4:e3:6c:
eb:49:68:7a:e6:b4:a5:8a:f0:ab:44:50:19:d7:c8:
c4:cd:3e:b6:9f:5c:56:19:ed:db:6b:7e:01:79:8e:
52:98:58:aa:24:fe:5d:11:fa:a8:a8:13:4f:78:3c:
6d:6c:1f:29:c6:b1:70:9d:80:58:ed:78:0d:6c:3c:
67:4d:d0:25:8b:70:68:0a:e5:13:2f:bb:23:6c:c9:
7b:30:02:60:d9:1c:21:9d:8b:c4:b3:42:e9:18:f7:
28:39:05:f9:29:e0:1b:72:83:df:09:9b:18:7b:a2:
05:a1:74:eb:b5:ba:43:79:e3:8c:b2:67:54:f9:f7:
87:ff:86:6e:4c:9a:6f:03:17:3a:21:9d:b6:40:cf:
5b:65:a4:fc:7b:1f:b9:99:38:79:af:75:25:e7:74:
20:1b:76:c0:9d:fb:cd:4d:36:f2:96:5d:77:04:f2:
d7:da:a8:90:66:f2:df:84:37:76:8f:f1:81:b7:d7:
92:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0E:BD:AD:B8:65:24:36:66:C6:EA:CC:62:18:A9:89:40:73:8D:47
X509v3 Authority Key Identifier:
keyid:BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9e:e2:ae:40:3a:49:19:ac:69:f4:47:8e:c2:1d:71:cc:39:
57:6b:fa:34:36:d8:bc:3e:8a:96:bf:82:1b:58:b2:18:9d:b2:
44:bb:74:78:7f:6e:76:2b:a9:64:6b:67:cc:a5:24:85:cf:54:
b7:85:11:87:75:e3:d3:ba:8b:26:a3:6b:89:37:f6:bb:ee:18:
7b:e7:c6:d0:b1:e2:3d:db:9d:89:48:98:6b:b6:3c:0e:db:8e:
ab:63:74:ce:e1:5d:76:2c:0b:7c:e0:c8:25:41:0a:6f:12:ba:
a0:1e:8f:2d:9d:61:ba:6d:8f:f0:d6:e2:54:bc:1b:d0:1b:78:
06:4a:8d:64:f7:64:bf:0d:b1:bd:30:26:78:17:b9:fb:a4:a2:
49:32:66:e4:21:4f:b1:b1:10:28:cd:21:63:1c:60:a9:d3:b9:
e4:93:fa:a4:a4:18:61:e5:e1:4c:ec:c6:93:92:64:97:80:63:
16:79:c3:25:f3:4f:9d:a8:25:f4:17:ea:68:23:db:ac:19:d5:
b0:75:8c:86:47:36:d2:67:e6:2c:95:6e:bc:bd:53:a2:bc:57:
3f:51:50:1c:08:5f:37:f0:23:9d:39:c3:10:92:48:5c:04:0e:
4f:5d:cb:74:75:e5:c5:13:1c:9c:49:06:ea:34:08:4e:08:e5:
23:96:95:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:18 2025 by rpki-client