Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
File: vmBP81opyRFWvkvSKbO693yDl70.mft (raw, json)
Hash identifier: rzq47aVPJ5dXCy7DLz8XHPo43Y4BDkChd35a/cIzrqk=
Subject key identifier: 0D:D2:70:BD:4F:61:B5:8D:45:8C:76:D7:29:94:9B:CE:83:D9:E6:7B
Authority key identifier: BE:60:4F:F3:5A:29:C9:11:56:BE:4B:D2:29:B3:BA:F7:7C:83:97:BD
Certificate issuer: /CN=be604ff35a29c91156be4bd229b3baf77c8397bd
Certificate serial: 019A4CCEAF329E91333728FC5E406786EB65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
Manifest number: 0935
Signing time: Tue 04 Nov 2025 03:00:04 +0000
Manifest this update: Tue 04 Nov 2025 03:00:04 +0000
Manifest next update: Wed 05 Nov 2025 03:00:04 +0000
Files and hashes: 1: 8TP605-bnnRU4oKxlSCpw5mXUvE.roa (hash: mDnmEgfw91sdWLEWlPQZ2jWiCvBV4IYovQSRnJwJt28=)
2: vmBP81opyRFWvkvSKbO693yDl70.crl (hash: QAt2mb+v4YFFEmZCNSLr1ljPebmWI+UQMTuR2r8EKfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 03:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:ce:af:32:9e:91:33:37:28:fc:5e:40:67:86:eb:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be604ff35a29c91156be4bd229b3baf77c8397bd
Validity
Not Before: Nov 4 03:00:04 2025 GMT
Not After : Nov 5 03:00:04 2025 GMT
Subject: CN=0dd270bd4f61b58d458c76d729949bce83d9e67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a7:aa:47:51:0d:3d:b0:0b:ef:e5:e2:ba:5a:
9d:78:6d:94:59:3f:98:c3:cd:b0:0f:65:21:28:dc:
37:87:ad:d6:98:af:e7:05:c6:5f:ce:db:97:64:90:
1a:17:ce:9d:ab:e2:b8:b2:80:dd:26:9a:f3:76:c3:
09:15:7d:4c:13:22:6f:d3:50:0f:c1:6e:50:53:19:
b6:e0:33:d6:11:dc:13:f1:86:3c:05:ca:bc:ec:11:
b2:20:63:5c:26:9c:3d:79:c9:18:28:7d:df:1d:54:
ec:4c:c4:27:8a:77:e3:cc:cd:6e:8a:a3:8d:df:87:
4d:b5:82:d9:84:55:a4:d7:cd:87:ff:17:a3:7f:bb:
c3:79:b3:59:52:d3:b3:dd:20:21:14:bd:4b:c5:2e:
3f:b9:86:a4:2d:34:a1:d6:36:af:bb:ef:5d:62:f8:
52:cc:c6:22:ee:09:12:d2:75:1f:b1:b3:f3:e8:53:
2a:0e:f7:cb:b9:a3:33:10:11:45:5a:34:6a:99:da:
76:9f:7d:32:33:e6:ad:a6:00:81:c8:4b:09:b4:fa:
87:85:f9:08:76:b2:67:82:06:1d:f3:d1:98:d9:13:
a3:a3:44:8c:95:22:c5:a2:32:67:9f:b3:91:d4:e0:
dd:fa:da:16:b4:70:fe:d1:33:9e:5e:a5:ac:40:0d:
ca:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D2:70:BD:4F:61:B5:8D:45:8C:76:D7:29:94:9B:CE:83:D9:E6:7B
X509v3 Authority Key Identifier:
keyid:BE:60:4F:F3:5A:29:C9:11:56:BE:4B:D2:29:B3:BA:F7:7C:83:97:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:48:42:fc:1f:fb:f5:83:9b:8d:4d:4d:33:4f:eb:25:fe:02:
03:b1:46:5c:83:8b:3a:02:7d:bd:5c:93:fc:d4:ae:2b:d0:5e:
b5:e4:14:c3:aa:32:18:ab:f4:58:53:de:f2:4f:b9:73:a2:69:
d5:11:58:61:18:32:f9:a6:94:e7:f7:57:6f:ab:8d:3e:8d:e8:
cd:8c:fa:96:9c:4d:db:ad:56:76:0c:24:a2:1e:62:b5:95:5f:
89:7c:e0:b9:bb:23:96:b6:fa:aa:e8:4e:65:3c:60:c3:bc:bc:
89:de:d5:4b:e1:1b:58:f9:5c:dd:cf:33:33:c9:e8:7c:92:9b:
07:a7:fb:d0:bc:a0:a5:3c:18:e3:8e:f8:33:ee:ef:51:e1:5a:
15:b6:7a:26:26:d6:d6:e8:39:91:17:f1:3c:69:e3:e5:44:3f:
ad:dc:80:99:6f:7e:5a:4f:58:53:e8:09:f5:1c:1c:51:f9:d5:
80:6d:77:a0:7f:5f:be:eb:f9:7a:23:ae:5c:f8:4c:70:1b:5d:
78:6d:d4:a7:f8:35:21:35:ad:1b:60:88:be:11:18:47:d0:05:
b0:be:98:4b:51:9b:a0:cd:8f:cf:10:85:85:d0:93:ab:3a:1f:
10:71:fb:be:f2:92:b8:eb:bc:58:1a:07:e1:4f:79:a6:ee:a1:
04:2b:42:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:19 2025 by rpki-client