Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
File: vEgmB2OhHnewtdfdICukzDAFOLE.mft (raw, json)
Hash identifier: 8uXugdB2m0Pa51207zloz6yTQ093+UgwTOAKcpGS+hc=
Subject key identifier: D3:42:52:18:1B:52:C8:6B:A6:76:B1:F1:B7:1A:26:3D:74:DB:DB:F2
Authority key identifier: BC:48:26:07:63:A1:1E:77:B0:B5:D7:DD:20:2B:A4:CC:30:05:38:B1
Certificate issuer: /CN=bc48260763a11e77b0b5d7dd202ba4cc300538b1
Certificate serial: 019A5E67EC93CBED45FC2833637452ADE520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
Manifest number: 01CA
Signing time: Fri 07 Nov 2025 13:01:00 +0000
Manifest this update: Fri 07 Nov 2025 13:01:00 +0000
Manifest next update: Sat 08 Nov 2025 13:01:00 +0000
Files and hashes: 1: SbG-TfF_crHX7bjktc6Jm6Mw08k.roa (hash: cILCavbni7VMAY2NB/vg63OOb75/V8DMaIDv6gy9of0=)
2: vEgmB2OhHnewtdfdICukzDAFOLE.crl (hash: 1AX/syF3Ngoa+kpoDgP2GVhNtr8GnoFCJMJPkpkSQGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5e:67:ec:93:cb:ed:45:fc:28:33:63:74:52:ad:e5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc48260763a11e77b0b5d7dd202ba4cc300538b1
Validity
Not Before: Nov 7 13:01:00 2025 GMT
Not After : Nov 8 13:01:00 2025 GMT
Subject: CN=d34252181b52c86ba676b1f1b71a263d74dbdbf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:85:1e:80:54:23:ed:f6:4c:cc:0d:b4:ac:3d:
ad:e1:1d:7f:b7:5c:ec:e6:f0:d9:d1:0f:af:47:b3:
f8:6c:ae:00:44:34:ca:b9:5d:82:c1:cd:46:73:8f:
4a:be:39:c3:47:ca:a8:12:5e:57:ca:3a:e7:96:90:
94:02:1d:92:9a:74:58:81:f0:3d:2b:15:b0:9c:57:
ef:b1:90:b6:3b:b1:1f:1c:e5:83:7f:a3:d3:3b:95:
3f:f9:d7:36:4a:f7:b2:ab:01:7b:c9:13:00:d6:0a:
d2:11:26:35:43:7e:24:00:92:a9:7d:77:01:fe:f0:
89:52:6b:2e:5a:29:6f:ea:d3:e7:23:14:49:9c:dd:
7c:52:a6:8e:26:9f:b6:d0:8a:f0:11:e2:ee:7b:69:
71:a2:c1:80:bb:33:f2:a2:71:99:b4:30:8f:43:78:
14:e3:74:41:3a:12:82:af:dd:01:90:7d:84:16:ae:
bc:be:11:b6:f2:85:24:c5:ff:4c:fc:52:99:50:d8:
8c:f2:1f:f1:57:ad:48:7c:7e:f9:be:01:08:a5:5e:
32:e4:0e:48:e2:60:1f:e8:09:a3:98:68:de:82:77:
31:42:e8:9d:95:b8:33:75:6f:6a:e4:b1:92:60:e8:
df:78:5c:79:ec:a2:b9:da:e7:4a:b1:cd:0a:88:17:
cc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:42:52:18:1B:52:C8:6B:A6:76:B1:F1:B7:1A:26:3D:74:DB:DB:F2
X509v3 Authority Key Identifier:
keyid:BC:48:26:07:63:A1:1E:77:B0:B5:D7:DD:20:2B:A4:CC:30:05:38:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:1a:11:c9:10:98:79:b8:16:be:8c:d3:2e:2a:3e:8c:97:66:
3c:62:d4:4f:e1:63:76:e0:ea:db:d1:99:94:37:23:01:4e:c7:
f5:27:01:91:f6:41:34:73:dd:87:a5:b2:0e:7b:bc:7a:65:a3:
cc:eb:7d:e4:58:0a:2b:c5:c3:04:44:19:8e:b3:98:31:52:ea:
55:6b:d0:63:07:fb:ce:2e:70:d4:2b:31:1c:67:6e:34:49:f9:
c4:5b:af:6c:82:a1:8e:75:cc:ac:48:6f:c0:d8:e6:90:8a:b1:
7d:d5:14:3c:55:ad:b0:93:92:3d:dc:6e:79:71:06:2b:81:fa:
9c:f7:5c:4e:9b:8b:34:4b:12:58:4f:98:ff:b5:27:e7:6c:a1:
26:10:5f:9f:e1:47:b0:08:cf:57:04:23:a3:8c:9b:1b:8b:d9:
24:58:95:23:d5:77:75:e8:3e:7c:4e:82:fd:82:0a:24:5e:30:
d2:01:e1:92:93:17:98:6c:4f:98:4c:7f:66:b0:f7:25:9b:da:
f7:51:4f:e3:f4:c8:1c:78:75:40:7f:27:8c:01:98:46:29:f8:
99:a0:6a:99:1b:35:10:fd:ab:01:3e:ae:b7:e8:29:b6:55:bc:
87:c1:71:9c:08:fc:89:48:e9:7f:8d:56:1a:e4:cb:bc:41:d5:
ce:90:f4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 16:31:21 2025 by rpki-client