Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
File: _vkYxakzDbvm7uF8uaHWL7yFW94.mft (raw, json)
Hash identifier: N5KMKpQfd+s3gMYc3B7f46h/In5/nrboMdTXUIfVJJ8=
Subject key identifier: 6E:B5:6B:7C:9B:87:92:7E:0E:9F:A8:73:29:79:D5:5B:63:27:65:7F
Authority key identifier: FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
Certificate issuer: /CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Certificate serial: 019860C966D7E9710111050D384CD2F9F3CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
Manifest number: 0932
Signing time: Thu 31 Jul 2025 14:01:08 +0000
Manifest this update: Thu 31 Jul 2025 14:01:08 +0000
Manifest next update: Fri 01 Aug 2025 14:01:08 +0000
Files and hashes: 1: SMgRC4CuBXV__0uh7hMZJPp526I.roa (hash: q90cjV8xUyFwL4y2m0KAQvnLqB0y5wCNss55Rkz0PM0=)
2: _vkYxakzDbvm7uF8uaHWL7yFW94.crl (hash: 1ivWTOtkRWZQDTlbP/VqVB3C0FtjyeDEgRKZKL7brAE=)
3: nhbcHBf3KyDRfxTTz6M2nv3FDrc.roa (hash: Zxdw2e4bDTlf7LQ65Hz/8o5/IiJ9rQjv2vVBLW/NpXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:60:c9:66:d7:e9:71:01:11:05:0d:38:4c:d2:f9:f3:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Validity
Not Before: Jul 31 14:01:08 2025 GMT
Not After : Aug 1 14:01:08 2025 GMT
Subject: CN=6eb56b7c9b87927e0e9fa8732979d55b6327657f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8a:2c:42:90:08:77:1c:cd:ec:6f:62:1f:59:
ab:17:4c:ff:06:91:2a:bc:36:cd:00:25:d9:3a:38:
e9:c1:78:06:d0:a7:2b:d3:22:32:c6:32:c0:15:54:
e7:d6:b7:71:f6:cb:80:c2:af:02:69:38:cf:f6:1f:
4d:80:7f:9a:1c:9d:b1:82:1b:f6:ac:36:71:0f:86:
63:12:18:ed:aa:9f:95:a9:90:cc:7b:9e:eb:6a:66:
3d:3f:27:59:ce:47:81:5a:16:6e:fc:1e:91:a2:f4:
8d:02:4f:44:01:c3:39:02:15:a1:62:e1:47:98:04:
07:e8:7d:8e:df:5c:ee:58:10:64:21:e8:f0:4f:6e:
a4:e8:ca:12:b0:44:8c:8b:b3:5a:58:ad:b0:a3:1e:
a5:63:13:81:f7:ba:ee:2c:5f:46:6a:11:d9:ad:fe:
2b:79:0c:b0:1f:08:e1:fa:ed:95:c7:25:4f:44:04:
a5:ce:b3:8e:79:bb:bd:b8:fb:17:0c:70:8e:58:98:
1f:a6:4c:d4:4b:8c:ed:7b:69:a2:cf:08:24:da:d0:
6c:8b:f4:bc:6b:e5:77:b1:8e:c7:2e:76:03:a0:39:
3a:49:9a:ff:bc:84:cf:1c:26:eb:e8:1c:96:fc:98:
12:0e:bc:f0:5f:2c:3f:d9:de:34:5c:25:23:06:a1:
f2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B5:6B:7C:9B:87:92:7E:0E:9F:A8:73:29:79:D5:5B:63:27:65:7F
X509v3 Authority Key Identifier:
keyid:FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:4c:dc:09:2c:8a:9d:64:d8:f6:bd:ee:10:73:d9:85:83:64:
87:77:35:07:33:6c:c8:78:87:75:58:b1:47:49:2b:78:a1:54:
49:e0:5f:64:74:62:9c:25:64:f7:a8:a5:fb:94:c3:71:8b:4c:
5d:d1:70:19:11:e4:9d:60:0e:c7:ef:a4:6d:df:71:68:19:4b:
bf:62:5e:0c:51:a6:bf:1f:49:9c:6b:4d:07:e4:51:57:2e:3c:
12:e1:9f:89:ca:00:83:f3:d4:12:09:ed:bf:17:92:cb:43:6c:
56:87:96:6a:d9:23:a6:cf:3e:33:ae:76:14:4a:44:89:eb:eb:
10:ea:67:b1:c0:28:79:95:91:2f:5e:91:34:63:0d:4e:ce:10:
59:70:25:ea:8c:1d:f4:dc:9a:58:1a:94:d7:fd:14:81:04:03:
df:29:38:95:37:84:48:3a:85:1d:7a:81:d5:d5:2e:d5:5a:eb:
23:ef:a9:8e:66:79:e9:2b:3a:a2:ee:90:7c:a6:b4:c3:5f:4d:
67:c0:33:ea:45:f9:37:2a:b3:e8:96:ac:fd:9e:75:b1:29:21:
01:5f:35:f2:8f:55:09:2b:0c:dc:16:6c:09:9a:b6:59:d9:a9:
95:8d:43:56:98:38:08:ce:51:3b:ab:95:c0:76:0a:13:59:f0:
59:87:92:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 19:59:11 2025 by rpki-client