Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
File: vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft (raw, json)
Hash identifier: NIwanjRJn8fQoWYaYdb/hKTh1QBsTMzBlrgbWeccsFs=
Subject key identifier: AC:64:AB:E2:54:9E:4D:22:2A:82:C5:72:85:CD:7E:4B:11:E3:80:61
Authority key identifier: BE:44:8C:67:A3:AB:0E:A3:75:FB:A8:48:C9:FE:8C:8E:B1:E8:4D:6F
Certificate issuer: /CN=be448c67a3ab0ea375fba848c9fe8c8eb1e84d6f
Certificate serial: 019A4D0694736FE6BA31E1480D82C04765D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
Manifest number: 0CFD
Signing time: Tue 04 Nov 2025 04:01:07 +0000
Manifest this update: Tue 04 Nov 2025 04:01:07 +0000
Manifest next update: Wed 05 Nov 2025 04:01:07 +0000
Files and hashes: 1: 9UcomILdtAe6cNct4YOh4DKdhek.roa (hash: 5S+dEogRJfe8M30SkPrXb8z3+L8Fg1f4Nn7krQuU6Oo=)
2: vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl (hash: y0fHrRHP5TlWuNxNJXY9wjedzmM7LR6P1RYx7YoqFtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:94:73:6f:e6:ba:31:e1:48:0d:82:c0:47:65:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be448c67a3ab0ea375fba848c9fe8c8eb1e84d6f
Validity
Not Before: Nov 4 04:01:07 2025 GMT
Not After : Nov 5 04:01:07 2025 GMT
Subject: CN=ac64abe2549e4d222a82c57285cd7e4b11e38061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:eb:3c:e4:e1:d3:84:55:a9:17:89:62:59:16:
c7:7b:18:74:8c:5f:1b:39:e4:bc:a0:1b:6d:78:b4:
53:bb:78:eb:b5:23:89:80:94:d8:cd:7d:c2:a6:7b:
e7:14:61:bb:40:e7:56:7c:04:30:ae:fc:f7:31:fe:
93:3e:b1:77:b0:58:b4:58:3d:d1:9c:0e:ec:4e:e9:
a2:59:ba:d6:31:09:fb:88:9d:4c:9d:11:6a:89:fc:
60:27:b1:f0:75:4f:ee:88:5f:97:d4:a2:98:11:e1:
af:b1:8c:50:c4:f1:bd:0d:dc:53:e6:9f:04:35:dc:
3f:f9:99:26:29:dc:57:b4:e3:c0:78:27:3a:51:47:
f7:c6:14:87:5c:e2:e3:e0:77:b7:9c:a4:39:19:ef:
26:4e:31:b8:e8:46:33:3e:9b:98:f2:cc:15:6e:b4:
20:28:66:fd:c0:86:f0:3a:11:90:6f:c6:37:7f:d9:
f5:88:44:1d:d0:d0:9f:fb:9e:12:f7:8c:1e:dc:0e:
fe:70:f4:58:a0:fa:3a:33:c8:26:d3:e0:af:32:2b:
cd:81:2d:ec:db:2e:6f:97:d7:0f:eb:d6:f0:16:3c:
d3:04:f8:9b:fc:90:1d:f4:cc:9c:dd:ae:7f:c1:55:
49:4e:30:0f:97:10:1e:26:59:41:0b:f0:57:b3:3b:
b2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:64:AB:E2:54:9E:4D:22:2A:82:C5:72:85:CD:7E:4B:11:E3:80:61
X509v3 Authority Key Identifier:
keyid:BE:44:8C:67:A3:AB:0E:A3:75:FB:A8:48:C9:FE:8C:8E:B1:E8:4D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:59:b9:23:26:4f:2a:09:86:3d:2d:63:73:17:40:a2:a6:c4:
d9:50:6b:44:8c:27:1b:48:59:d7:40:52:7a:78:54:22:f7:e3:
36:11:62:9e:ae:59:c7:76:b9:5e:8d:a1:44:5b:d2:00:f6:bb:
2d:20:ae:f3:6a:10:b9:75:4b:60:47:89:27:5d:b6:30:dc:ea:
93:ea:03:a2:93:5e:ba:e5:bf:bb:78:28:52:f2:9f:b0:5f:a4:
2a:ce:02:31:88:4e:de:83:8f:07:19:9d:c8:43:b2:bd:04:8f:
28:fe:ec:06:87:e6:f6:ae:69:db:7a:d7:01:ed:45:59:9e:bc:
e0:4e:c7:5f:95:18:8e:8b:42:b3:34:0b:8d:ba:6b:b7:46:84:
7c:44:4c:29:b2:16:61:5e:fa:f6:6d:03:be:91:a3:a2:7f:4b:
3c:17:54:05:ca:ee:38:cb:90:0f:4b:54:27:ba:ed:f7:27:85:
55:dc:e8:e4:5a:15:a6:f1:d5:03:49:57:23:ce:b5:df:0d:77:
65:80:f6:42:d0:82:87:5c:79:cd:e9:bd:e3:4b:ea:07:5d:b3:
76:03:4d:ae:1c:04:5a:55:bc:98:aa:3e:c1:7b:3e:f6:74:40:
c7:c8:4d:11:46:35:72:b1:bf:33:95:19:57:54:a0:40:b8:7d:
bc:4e:5b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:42 2025 by rpki-client