Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
File: vkOZUom2pcqXLEuHteMUnDLLRDA.mft (raw, json)
Hash identifier: UUemFMlXEZzizRlV4ZFpJj79D6ixwK1sSbPZGnCi0gU=
Subject key identifier: 88:EC:FE:92:10:21:8F:F8:61:7D:D9:17:FE:FF:E9:F9:65:17:5B:A6
Authority key identifier: BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
Certificate issuer: /CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Certificate serial: 019A4E18C0F9F264868CE918395E41648EF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
Manifest number: 14DA
Signing time: Tue 04 Nov 2025 09:00:36 +0000
Manifest this update: Tue 04 Nov 2025 09:00:36 +0000
Manifest next update: Wed 05 Nov 2025 09:00:36 +0000
Files and hashes: 1: Whjew0yK_XkX-CXlS_WNrILKiv0.roa (hash: SmkvTH7lLMGdIP5blssOJRhGTxEwF9y5k4ODBxTnWqc=)
2: r2up5PJgZjybD9vWfNuYIFaqnJY.roa (hash: GFLQGnpUdlWj7rWSa6w4p4+P1f3jR1CWJhiBGbeS5kc=)
3: vkOZUom2pcqXLEuHteMUnDLLRDA.crl (hash: BAKntPLYKPPhFrnlL7vBP27pXnnU1Xo2FQ3emCgDAD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:c0:f9:f2:64:86:8c:e9:18:39:5e:41:64:8e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Validity
Not Before: Nov 4 09:00:36 2025 GMT
Not After : Nov 5 09:00:36 2025 GMT
Subject: CN=88ecfe9210218ff8617dd917feffe9f965175ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:24:89:41:2f:15:a9:14:a0:99:02:9d:05:f0:
26:6f:89:01:eb:e8:cb:df:cc:87:71:86:47:9d:ea:
4c:98:ef:6a:8f:1e:fc:07:42:f8:b3:e2:05:fc:f1:
65:62:f5:50:10:84:6e:9a:03:dd:53:05:ce:20:f9:
50:61:a2:02:81:ce:ab:93:59:5d:8c:ee:6d:96:4e:
31:08:c1:51:4d:db:86:0a:ba:23:c9:eb:20:11:a3:
51:78:03:3e:ee:0b:2a:25:50:ae:8b:6a:72:d9:92:
0d:97:96:a4:57:b1:e1:1d:f4:1c:c0:97:c8:ea:73:
67:04:19:8d:21:98:32:8d:85:d4:f2:c4:6e:58:1d:
77:19:56:52:4c:34:9a:af:2c:7e:8a:f9:fe:cf:15:
b1:ea:bc:9d:af:d5:6d:2e:68:d3:d4:64:c0:89:56:
32:c3:41:0d:c4:ee:cc:70:17:ac:51:f9:03:90:24:
03:15:41:8e:50:8e:9d:48:a1:39:36:7a:dd:df:1a:
79:5e:2a:89:35:1b:e6:3d:2f:a5:49:0b:8a:63:80:
70:aa:81:86:54:27:de:01:88:a7:71:7b:5d:36:fa:
9d:9e:c4:95:ba:a3:5a:ad:17:5b:17:e1:97:cb:e0:
1a:4a:cf:8b:ca:ef:7e:bf:7a:42:9b:14:54:ec:71:
41:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:EC:FE:92:10:21:8F:F8:61:7D:D9:17:FE:FF:E9:F9:65:17:5B:A6
X509v3 Authority Key Identifier:
keyid:BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:9f:c3:0d:a0:d6:63:c3:51:25:e8:af:81:57:40:b8:20:40:
f5:5d:6e:ff:ef:53:39:47:99:7f:7f:af:5e:9e:02:82:f7:88:
7d:e0:bd:4c:c4:5d:5b:f4:88:90:46:7d:c5:c8:cf:11:7a:f1:
a1:a3:60:61:de:97:9c:9d:76:d2:47:91:cc:16:8c:de:74:a4:
79:6a:00:ec:b0:a4:ac:cf:91:00:6f:6b:5b:32:80:20:79:e0:
b3:07:66:d8:23:b2:35:d1:8d:04:37:72:77:68:3f:1e:b7:e9:
dc:02:c4:33:ed:7e:5d:1e:90:bd:78:75:cd:d1:ed:a6:94:31:
44:06:9a:95:8d:a6:ff:36:dc:d2:02:63:cf:67:6a:f4:a5:ff:
d7:49:08:21:fb:10:e5:e3:c1:fe:b5:c1:be:0b:dc:a2:93:99:
e7:d9:31:68:53:98:f8:86:a5:31:ab:87:32:2d:e9:67:47:3a:
e8:78:cb:bb:25:96:f9:20:06:e5:b5:2b:0b:01:0b:a0:d3:07:
1e:36:1c:1f:73:47:46:44:5c:ff:3c:9f:30:3b:d0:be:e3:6a:
72:ef:4b:4f:ab:58:a8:29:26:ab:ea:e2:37:4e:3d:77:f9:a5:
77:65:97:5e:4c:f9:f2:bc:0d:81:31:2d:4f:66:49:ab:14:10:
00:de:7b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:47 2025 by rpki-client