Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
File: _vkYxakzDbvm7uF8uaHWL7yFW94.mft (raw, json)
Hash identifier: AoblnzluhUReP9ZJRoyu3kqx8NeYaJw1JsXjb6M2PdM=
Subject key identifier: D3:94:4E:8B:66:F0:39:B5:FE:C4:4A:EF:0C:8E:65:A8:A6:70:B4:48
Authority key identifier: FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
Certificate issuer: /CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Certificate serial: 019A7301580B1D890796AB7ABB8620977DF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
Manifest number: 0A46
Signing time: Tue 11 Nov 2025 13:00:59 +0000
Manifest this update: Tue 11 Nov 2025 13:00:59 +0000
Manifest next update: Wed 12 Nov 2025 13:00:59 +0000
Files and hashes: 1: _vkYxakzDbvm7uF8uaHWL7yFW94.crl (hash: GrnY01wsCvCUWiQMijXyUyfwyilB2QLRwCWtCDxYMnU=)
2: aeFVo5dh0x2s2x-G-DMeovNIBu0.roa (hash: aCQHOjIuExedt1H9Qi2wUbhVCXELk63ILm+7QLD2vmY=)
3: nhbcHBf3KyDRfxTTz6M2nv3FDrc.roa (hash: Zxdw2e4bDTlf7LQ65Hz/8o5/IiJ9rQjv2vVBLW/NpXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:58:0b:1d:89:07:96:ab:7a:bb:86:20:97:7d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Validity
Not Before: Nov 11 13:00:59 2025 GMT
Not After : Nov 12 13:00:59 2025 GMT
Subject: CN=d3944e8b66f039b5fec44aef0c8e65a8a670b448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4e:f4:b3:29:9f:89:10:81:08:17:56:72:df:
51:3f:70:99:46:0f:4e:60:2d:70:45:e4:93:7d:34:
82:53:be:bd:bf:d4:95:80:6d:16:d5:c9:ba:38:2c:
8c:5f:c4:02:12:6b:36:27:58:76:27:2a:36:4b:33:
b2:f7:46:a0:d4:71:fa:11:0b:9a:15:a9:8e:55:a3:
8b:7f:cb:ab:0f:6c:7f:21:71:96:d1:3c:76:91:f2:
76:ab:ec:2c:1a:e6:83:6b:df:a7:ac:2e:56:88:19:
93:de:63:a2:0f:b2:09:49:e3:5d:ae:f0:41:53:a5:
f5:76:9a:aa:4e:eb:93:11:26:ff:17:c1:e8:74:59:
8b:71:20:36:c6:03:2a:f1:05:2f:0c:69:8f:9e:7f:
3a:a4:8b:e3:e2:6c:21:91:81:b7:22:45:a8:ee:bc:
72:51:06:b5:d5:75:98:c2:9d:d9:21:94:2b:17:89:
8f:fd:2c:11:de:01:bb:d4:11:39:c5:d3:4c:10:db:
b4:fd:0d:4c:2c:3e:6f:87:f1:47:09:a7:6c:a1:80:
70:11:7d:35:88:c6:ab:4b:59:a9:a9:ae:32:a2:0e:
f9:72:6c:44:f7:88:84:3f:87:dd:82:e5:00:03:d8:
3b:2f:46:e4:bc:b7:0e:7a:d6:25:e7:c7:11:49:48:
07:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:94:4E:8B:66:F0:39:B5:FE:C4:4A:EF:0C:8E:65:A8:A6:70:B4:48
X509v3 Authority Key Identifier:
keyid:FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:61:e3:7b:57:93:c5:6d:ca:77:48:94:9f:00:76:cc:9e:0c:
b0:8d:18:e2:3d:10:93:fb:b1:d2:22:81:da:1f:50:cf:d5:d3:
8c:f7:0f:e4:f8:3d:2b:04:54:bc:31:01:af:8f:5b:5e:0a:c7:
44:88:98:f6:e0:f3:30:03:5c:c4:27:73:92:c5:45:58:cf:bc:
5f:07:fa:61:3f:16:74:e6:a0:79:0b:a4:8a:2d:0d:08:41:92:
d8:77:86:2f:75:42:03:d0:64:40:33:03:39:d1:0e:a0:b7:72:
b4:b2:bd:c6:94:a4:6f:46:a2:df:02:6c:fd:3d:69:53:1c:3c:
5c:b3:98:7a:ce:91:7f:ed:3d:08:b3:6a:02:5d:d5:96:43:8e:
20:92:79:91:7e:19:3a:5b:4b:9e:02:94:ac:a4:2f:d7:65:fb:
98:ca:f0:75:66:a1:75:75:2a:83:8d:d2:70:77:49:b5:06:d7:
be:5e:21:c8:f8:44:b2:63:6c:f9:f4:c6:92:98:d6:ce:5b:8c:
df:c1:90:1c:62:e8:a1:c7:12:93:16:55:fd:53:45:a6:0d:13:
ed:12:f6:1b:15:c2:33:eb:da:44:94:2e:7a:95:d9:e6:60:ef:
aa:ba:43:85:89:c5:07:c2:af:48:8c:bf:a9:c1:94:32:c5:17:
aa:55:1d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:41 2025 by rpki-client