Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
File: vmWzDa10rHadS1syMS2o-oGrM9E.mft (raw, json)
Hash identifier: uEPHas1dGh7G6No5vy1zIugCpQG4PLao40ymEYoz44g=
Subject key identifier: E2:D5:53:32:C7:F5:7B:41:6B:65:49:FC:88:03:1D:13:96:6F:AD:D2
Authority key identifier: BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1
Certificate issuer: /CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1
Certificate serial: 019A533F83626F01A7BD7D6350744E4A78BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
Manifest number: 0C67
Signing time: Wed 05 Nov 2025 09:01:02 +0000
Manifest this update: Wed 05 Nov 2025 09:01:02 +0000
Manifest next update: Thu 06 Nov 2025 09:01:02 +0000
Files and hashes: 1: gySZz205phomZv7uwZ9DDc75Itk.roa (hash: eO5SMh+ywbk5mzLS6dSPU+KeItuyQY93yBUL4wk+YdY=)
2: vmWzDa10rHadS1syMS2o-oGrM9E.crl (hash: Rk1AB4DY1m9eAXmqpPrhCIrzSL1ovDHUgzhEaejp6Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:83:62:6f:01:a7:bd:7d:63:50:74:4e:4a:78:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1
Validity
Not Before: Nov 5 09:01:02 2025 GMT
Not After : Nov 6 09:01:02 2025 GMT
Subject: CN=e2d55332c7f57b416b6549fc88031d13966fadd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:71:68:c0:a0:07:38:58:91:7e:6b:fb:f1:a3:
c5:01:fb:76:07:8e:ff:3b:ca:5c:75:e3:ed:95:f4:
a6:07:a3:c3:81:9e:dd:21:bf:b9:a8:c0:51:62:31:
9f:3d:60:5d:d7:2e:3c:99:df:de:60:94:55:1f:df:
01:bb:84:08:49:cc:49:6a:7d:da:42:8c:00:f3:13:
8c:c5:94:90:3a:76:6a:f0:d0:54:b8:b8:9f:c5:6a:
0c:20:03:12:e0:46:dc:9f:bd:8d:9f:38:20:b2:5c:
04:0e:b7:78:67:39:97:c9:2d:1b:88:cd:eb:cc:97:
69:97:9d:9d:60:cc:62:a3:be:09:bf:53:7c:cd:29:
0e:ff:19:2f:a8:6b:12:2d:2e:3e:75:8b:b1:85:1d:
87:aa:5b:b4:c6:b8:e5:61:62:05:4a:a9:6e:db:08:
ab:24:14:c4:38:1b:ec:d9:a2:7a:bf:65:cf:1b:15:
f4:7c:7b:93:5d:26:c9:ee:56:dc:d3:66:2c:29:54:
29:fe:76:66:9f:6e:f1:73:7b:f1:d5:05:7c:fb:65:
34:0d:ad:29:72:8b:d5:31:8a:97:ee:ec:d6:54:30:
d9:82:19:f3:7e:49:ad:af:cd:ed:1a:fe:42:ee:35:
93:e6:f5:5c:a2:e3:54:ba:cb:81:70:47:9c:23:cb:
33:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D5:53:32:C7:F5:7B:41:6B:65:49:FC:88:03:1D:13:96:6F:AD:D2
X509v3 Authority Key Identifier:
keyid:BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:32:83:94:96:bb:03:53:37:16:c6:9e:07:00:4f:d1:b3:6c:
c3:49:81:7a:3e:b6:1b:63:65:a5:8e:83:42:cd:cc:9c:a3:29:
f9:62:cb:98:91:dd:7f:0b:d1:49:78:55:78:6e:94:31:68:8d:
1e:4e:ee:d5:77:25:ff:d9:53:3b:0a:eb:c2:e3:78:4d:c9:81:
b9:14:2d:c8:44:78:e1:57:62:4e:87:33:9a:26:06:ec:28:ee:
cd:19:01:95:6f:a5:ca:d2:c0:f2:98:5c:a9:ba:31:d3:37:f8:
6a:84:d0:30:cf:8d:9b:44:ea:9a:a3:ab:c2:f1:f3:32:37:3b:
77:dd:9b:d7:de:26:ad:4a:95:ec:60:01:05:42:ca:17:cc:11:
bf:b4:0c:df:4b:65:17:87:64:84:7a:d6:f5:42:74:1c:c6:31:
41:9d:42:81:44:e3:41:f5:30:9a:6b:7a:d8:d5:70:e5:0d:7a:
3e:e4:43:19:69:06:30:28:7c:d6:5b:41:c4:17:33:94:aa:f8:
d1:11:e3:6d:4f:9d:e0:5c:9b:41:6c:47:cc:0e:95:72:8a:e6:
04:fb:f0:85:83:9b:d1:30:2f:c1:26:98:6d:03:bf:1a:1e:60:
63:cf:b6:75:e7:c1:d8:ea:d5:52:09:68:af:d8:72:39:64:99:
86:65:44:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:04:56 2025 by rpki-client