Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
File: vkCzwr54Ndeze1gmEC-HRqUZnUk.mft (raw, json)
Hash identifier: 9tWyhMDB92UzfY4S9a4w8JDBNFQuOKAn5GUEgOkD8V0=
Subject key identifier: F7:3A:34:63:D7:20:EC:68:D3:2C:8C:59:33:8F:88:D8:D9:33:CE:42
Authority key identifier: BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
Certificate issuer: /CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Certificate serial: 019A4FD00B7CD7F7A33CE1BCA3450CB770E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
Manifest number: 0FC0
Signing time: Tue 04 Nov 2025 17:00:25 +0000
Manifest this update: Tue 04 Nov 2025 17:00:25 +0000
Manifest next update: Wed 05 Nov 2025 17:00:25 +0000
Files and hashes: 1: PvXyotkF7CUuPU9IpGsqtPRuTDs.roa (hash: hlW2pG80ndqwHM6JsZ8rS5M7wLdO6b8IAZvrk0uvgBY=)
2: oCn4wpr5As_rj6i8SdJkg85R0Hc.roa (hash: 7S82NkRvXrpT2+oGArNGUxQHnJWcUMj49moLiAKQQWA=)
3: vkCzwr54Ndeze1gmEC-HRqUZnUk.crl (hash: 7uRrPj6VeoRVCYGBWKrv3ZmW2wyAJITM5dHRyCLLK/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:0b:7c:d7:f7:a3:3c:e1:bc:a3:45:0c:b7:70:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Validity
Not Before: Nov 4 17:00:25 2025 GMT
Not After : Nov 5 17:00:25 2025 GMT
Subject: CN=f73a3463d720ec68d32c8c59338f88d8d933ce42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cd:c0:be:26:92:cf:fd:38:60:59:14:98:d9:
94:ff:b3:33:01:5d:7b:f5:ae:a6:c3:df:42:30:bf:
4f:e5:f3:2a:2b:d2:07:d1:6e:d7:48:39:35:b5:d5:
97:96:b5:59:45:58:78:ca:b3:6d:79:ac:97:1f:b4:
23:c1:6c:89:5e:7c:0d:bf:54:ce:0c:8c:7d:41:2e:
d3:a8:69:88:3b:6b:a6:6f:3f:75:1b:42:0a:b8:9e:
3c:00:e2:87:a6:39:d4:e5:3e:9d:a6:33:e9:4d:57:
52:cd:47:24:b7:ef:32:74:61:e6:bb:3b:7e:5c:46:
e6:4d:bb:aa:2c:d7:af:db:b0:40:f0:64:cb:3e:a2:
c4:44:59:81:1a:7c:ab:91:45:aa:d9:d2:31:f7:a8:
40:26:07:f3:4f:4c:fd:9a:de:3b:5d:47:ca:6b:5a:
7f:aa:e0:93:87:32:a2:21:45:e7:b5:a6:db:c8:03:
32:19:e0:02:69:74:66:23:8c:f2:92:35:a9:13:04:
fc:5d:94:0c:f5:ba:32:21:11:31:14:ed:59:77:bc:
e2:04:15:eb:a2:b6:e1:5a:c2:d4:2f:92:d6:38:36:
37:1f:96:6f:83:f5:e9:a3:d7:7c:51:d8:04:63:c7:
75:43:8a:11:3c:16:ce:78:dd:40:e4:d4:ac:98:b6:
64:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3A:34:63:D7:20:EC:68:D3:2C:8C:59:33:8F:88:D8:D9:33:CE:42
X509v3 Authority Key Identifier:
keyid:BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:9e:f2:2b:ea:8a:88:87:33:7e:48:ea:a3:f8:3f:98:ec:1b:
d2:a1:b4:f6:9f:a7:43:e4:5c:9b:d1:ad:0a:4b:d4:f9:e1:19:
a8:b8:17:db:d4:18:db:e2:53:47:80:85:42:2b:12:ff:c8:00:
ea:37:6a:31:4a:fe:c2:c3:17:e7:90:31:90:fc:c3:a5:3b:6a:
58:f7:43:00:33:b3:b6:4d:f5:c1:ae:67:1f:53:2e:98:5a:25:
67:46:7e:c7:4c:ee:9f:92:5d:3b:16:ad:09:a7:fa:be:69:07:
14:25:dc:8d:32:2b:3f:a8:0b:d2:44:7e:75:0a:1c:6b:4b:3a:
05:b1:6e:b9:9e:4f:c4:9d:fd:01:44:a8:19:4b:83:39:60:09:
0b:46:fe:09:c5:5a:25:d7:79:b2:a1:f1:19:5c:fe:89:58:4b:
d2:a5:2d:df:64:07:91:55:fa:e4:00:2f:37:23:25:5c:22:35:
a2:ae:bd:21:9f:cf:1f:0d:29:12:fe:b2:c6:ea:b4:41:09:87:
e9:1d:f5:40:07:08:24:e8:a6:aa:1f:fe:dd:bb:b4:92:04:52:
4c:1e:7d:67:21:78:b2:05:91:f1:36:9f:ce:d9:70:bd:83:64:
58:e1:1f:eb:9d:54:a3:46:cd:fc:de:c5:4f:a7:43:d1:21:52:
83:e0:e7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:25:57 2025 by rpki-client