Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.mft
File: VEbfB_88sm389O64dh-wFsr3-e4.mft (raw, json)
Hash identifier: jrhskXG+R+yWCttPyso+Jgr3xOZg44VRJhzHJH39oBc=
Subject key identifier: BE:78:75:93:7E:15:2A:9F:81:CF:14:B2:2D:80:82:5B:AA:FB:A4:CE
Authority key identifier: 54:46:DF:07:FF:3C:B2:6D:FC:F4:EE:B8:76:1F:B0:16:CA:F7:F9:EE
Certificate issuer: /CN=5446df07ff3cb26dfcf4eeb8761fb016caf7f9ee
Certificate serial: 01992443B59E63B0F0BDD20D1D1A15BBABD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEbfB_88sm389O64dh-wFsr3-e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.mft
Manifest number: 65
Signing time: Sun 07 Sep 2025 13:00:41 +0000
Manifest this update: Sun 07 Sep 2025 13:00:41 +0000
Manifest next update: Mon 08 Sep 2025 13:00:41 +0000
Files and hashes: 1: Mt4ySnJ9tLnzzQYq2U6tfp3Q3JA.roa (hash: Czeue2iwQkgf4dbWmDFWclQeOMsHJV7V0inLeSwakN8=)
2: VEbfB_88sm389O64dh-wFsr3-e4.crl (hash: IHZjtAPq2lEV3ei16pdfYW4ZMgi488nnsiG/dhhnAjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VEbfB_88sm389O64dh-wFsr3-e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:43:b5:9e:63:b0:f0:bd:d2:0d:1d:1a:15:bb:ab:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5446df07ff3cb26dfcf4eeb8761fb016caf7f9ee
Validity
Not Before: Sep 7 13:00:41 2025 GMT
Not After : Sep 8 13:00:41 2025 GMT
Subject: CN=be7875937e152a9f81cf14b22d80825baafba4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:e8:07:8c:8a:d0:29:d4:61:12:1d:bd:09:5e:
94:2d:a9:2a:9e:c1:4e:44:8b:54:de:97:24:52:ad:
1f:a8:4e:10:3e:04:2e:71:bd:58:cf:5c:be:62:7d:
22:d8:0f:a3:b8:b5:17:95:d8:e4:c9:29:52:44:46:
0d:8c:d1:4a:76:4c:3f:30:10:80:68:69:60:e0:db:
cf:ee:9e:5d:97:55:8d:40:a6:57:6b:2d:b7:05:f0:
45:9c:86:35:04:b4:61:b8:37:75:b4:f8:db:6d:00:
62:f9:1a:96:b0:c8:60:fc:2a:8e:bd:d5:27:32:a2:
4e:29:0e:07:79:bc:a6:37:d4:d3:a8:e0:05:d5:65:
9a:29:22:47:40:94:bd:ab:7e:26:10:ea:a9:25:b9:
52:b5:e8:77:ce:a0:d3:33:70:7b:e4:55:88:ee:c8:
48:fa:fd:96:18:bd:52:4f:24:fb:38:75:b1:5a:19:
e6:01:15:10:08:48:69:50:d2:01:f6:59:96:ea:a6:
bc:ec:67:f2:cd:24:7a:21:13:c0:e9:a5:79:ab:9e:
39:4a:17:84:64:73:ad:4c:9d:11:f0:c2:0d:fc:a8:
b4:67:11:b8:f6:34:60:4c:d6:f0:b5:75:28:57:cf:
06:55:78:f6:94:64:ae:50:63:e7:8e:a7:f8:b5:66:
16:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:78:75:93:7E:15:2A:9F:81:CF:14:B2:2D:80:82:5B:AA:FB:A4:CE
X509v3 Authority Key Identifier:
keyid:54:46:DF:07:FF:3C:B2:6D:FC:F4:EE:B8:76:1F:B0:16:CA:F7:F9:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEbfB_88sm389O64dh-wFsr3-e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:15:5e:04:90:74:e3:69:68:5a:9d:c3:14:ff:8f:dc:79:2b:
6f:a4:71:44:f6:96:07:a1:33:86:f0:e1:b2:93:df:06:84:79:
1c:09:3b:36:00:8a:4f:ed:cf:97:65:9d:c2:15:d6:99:3d:f1:
71:7e:da:1d:0c:4b:fd:55:f8:40:db:e6:99:d9:55:02:38:5c:
b9:f4:53:7b:df:56:8a:7e:93:c0:d0:58:66:9e:8b:de:91:7b:
33:42:04:4a:e7:6b:2c:47:1e:19:85:99:71:bd:57:d5:99:13:
7e:a9:45:e2:6a:2e:2a:8b:d3:a5:df:e6:f7:ec:0c:79:4b:d8:
37:f0:09:ee:dc:2b:16:08:05:a1:d5:f1:40:0d:ce:f2:c9:c5:
e6:5a:aa:65:42:4c:99:94:ca:f1:d2:cd:b7:78:ae:c0:f9:d2:
4f:c9:35:a3:7f:28:65:81:a9:4d:4e:90:6d:56:37:61:ec:ac:
c6:44:c6:e8:cd:82:a7:82:f0:e5:3e:d2:b1:24:fb:fe:29:68:
58:cd:f2:13:32:3b:3d:15:a8:84:6f:0d:4d:67:38:19:f3:f4:
ac:19:a1:0e:d0:c2:3b:b0:57:14:98:2a:08:92:1c:8b:ea:ae:
c1:a6:cb:3b:13:d9:45:7e:8c:ed:00:99:4c:51:fd:f0:b8:d5:
6e:92:d3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:02:04 2025 by rpki-client