Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
File: _vkYxakzDbvm7uF8uaHWL7yFW94.mft (raw, json)
Hash identifier: gna2OrZQBHE3Oyl1L0b549qkyxaIKV24exRpiqH6z/U=
Subject key identifier: 79:90:41:D1:87:12:3E:AF:2B:CC:D6:77:B6:54:FA:0C:10:AD:E4:9C
Authority key identifier: FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
Certificate issuer: /CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Certificate serial: 01995DC5C72AD0BCD33D794AC384EBC6AE84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
Manifest number: 09B5
Signing time: Thu 18 Sep 2025 17:01:06 +0000
Manifest this update: Thu 18 Sep 2025 17:01:06 +0000
Manifest next update: Fri 19 Sep 2025 17:01:06 +0000
Files and hashes: 1: SMgRC4CuBXV__0uh7hMZJPp526I.roa (hash: q90cjV8xUyFwL4y2m0KAQvnLqB0y5wCNss55Rkz0PM0=)
2: _vkYxakzDbvm7uF8uaHWL7yFW94.crl (hash: Vxn477eYaH7V7+YYlqmW0gMEUOBka74pODWJLup/qbQ=)
3: nhbcHBf3KyDRfxTTz6M2nv3FDrc.roa (hash: Zxdw2e4bDTlf7LQ65Hz/8o5/IiJ9rQjv2vVBLW/NpXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 17:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5d:c5:c7:2a:d0:bc:d3:3d:79:4a:c3:84:eb:c6:ae:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Validity
Not Before: Sep 18 17:01:06 2025 GMT
Not After : Sep 19 17:01:06 2025 GMT
Subject: CN=799041d187123eaf2bccd677b654fa0c10ade49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0b:50:d3:8a:10:21:dc:45:a4:86:c2:a7:45:
0f:03:f2:32:b5:3e:4a:ea:1c:e5:5b:40:4a:19:87:
91:e5:ba:44:63:5f:75:f8:22:5b:5f:b5:76:15:b4:
8b:08:f4:c5:31:ea:34:51:42:20:fa:c8:95:4f:58:
c7:81:84:8b:2b:5a:6f:ef:ce:ac:18:0f:68:58:2e:
9f:20:ab:94:e9:fd:c9:c7:0f:29:af:e6:fa:cf:b8:
79:fd:83:ed:07:75:f2:62:3c:69:ff:53:95:4f:81:
f1:a4:ed:9d:83:86:71:71:81:19:a5:86:51:bb:da:
7b:6f:fd:34:15:35:7a:2c:16:67:67:91:ec:5e:13:
3d:c3:e8:24:cc:18:f9:55:db:1a:e7:18:93:86:a9:
be:98:80:21:54:02:38:4e:a5:ad:58:97:e3:03:bf:
e0:07:09:8d:0e:47:d0:eb:f7:29:2b:30:e5:8f:b3:
24:4f:6b:20:92:a6:34:b8:6b:17:c1:08:d5:9a:7b:
73:f7:12:87:05:77:98:02:93:78:9e:14:53:6b:da:
96:f4:3d:ee:d8:91:62:75:7e:23:23:63:eb:40:8b:
e6:9d:15:be:b7:75:6b:1c:83:46:a8:a8:0e:f7:d8:
db:42:d0:8c:c0:2b:a1:10:ea:48:11:50:21:46:b5:
cb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:90:41:D1:87:12:3E:AF:2B:CC:D6:77:B6:54:FA:0C:10:AD:E4:9C
X509v3 Authority Key Identifier:
keyid:FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b9:9d:8c:a6:0b:89:44:7c:fd:0d:af:22:7b:47:c2:d9:a0:
16:b8:0d:dc:53:36:5e:ac:b9:67:b0:c9:6f:df:34:48:02:83:
44:ff:fd:6a:da:51:d4:40:40:cc:24:23:49:93:bf:b2:60:16:
da:cd:48:a3:6a:c2:18:32:68:53:df:42:0f:59:0d:bd:19:19:
e6:58:03:ef:2d:10:3f:e5:c4:e7:68:5c:7c:dd:65:61:43:ed:
d2:2f:0d:1c:39:84:0d:46:b6:43:aa:01:12:bd:0e:ca:77:aa:
ce:67:59:a5:0f:bf:1d:0c:22:d0:5c:3e:77:c2:b9:03:e0:f6:
07:d6:14:5d:4d:a5:f3:1b:da:0c:4f:d2:58:2a:4e:41:d9:78:
1f:f6:17:0e:e3:9c:91:fa:49:51:1f:a1:a3:80:ae:59:31:77:
f3:15:38:d3:76:ba:06:b3:1f:70:c1:5f:24:93:fe:c4:dd:35:
03:93:bb:d6:cd:85:84:d5:1a:60:5d:46:7c:3a:6e:67:b9:de:
25:cd:53:2a:72:21:c2:eb:e9:7f:a6:a4:d4:01:e8:11:f8:ec:
91:4b:1c:7b:4c:20:1d:0d:73:3b:06:11:67:ce:96:78:1e:91:
6a:d9:2b:fd:f2:fa:08:ba:45:ab:5e:1a:46:6f:bb:b1:94:50:
00:b9:42:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 01:38:05 2025 by rpki-client