Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
File: _vkYxakzDbvm7uF8uaHWL7yFW94.mft (raw, json)
Hash identifier: ex71Mf/fybYIDaNF9DYkNyHh1K3Mt3ujo06hf2dxkpw=
Subject key identifier: 9A:B0:D7:EB:D2:A9:BE:E4:DE:96:05:95:8F:7B:F6:0C:38:FE:1C:B1
Authority key identifier: FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
Certificate issuer: /CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Certificate serial: 019894EDDB46B591FB1F9A21A70A538C51D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
Manifest number: 094D
Signing time: Sun 10 Aug 2025 17:01:12 +0000
Manifest this update: Sun 10 Aug 2025 17:01:12 +0000
Manifest next update: Mon 11 Aug 2025 17:01:12 +0000
Files and hashes: 1: SMgRC4CuBXV__0uh7hMZJPp526I.roa (hash: q90cjV8xUyFwL4y2m0KAQvnLqB0y5wCNss55Rkz0PM0=)
2: _vkYxakzDbvm7uF8uaHWL7yFW94.crl (hash: o63/5/bOjTZYoC6Hi/2Iqwtrbbg8VKg3oJkabM0sWnU=)
3: nhbcHBf3KyDRfxTTz6M2nv3FDrc.roa (hash: Zxdw2e4bDTlf7LQ65Hz/8o5/IiJ9rQjv2vVBLW/NpXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:ed:db:46:b5:91:fb:1f:9a:21:a7:0a:53:8c:51:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Validity
Not Before: Aug 10 17:01:12 2025 GMT
Not After : Aug 11 17:01:12 2025 GMT
Subject: CN=9ab0d7ebd2a9bee4de9605958f7bf60c38fe1cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:22:1f:3e:8a:78:62:e6:3e:0c:ea:6f:79:1c:
cc:86:45:89:58:95:0b:20:36:f2:1f:f2:15:f9:e1:
c5:15:b8:1d:e8:43:05:a9:41:38:33:bc:19:3d:3e:
cb:36:57:1a:1f:b4:d0:6d:7e:5b:6a:48:1c:6d:6e:
bf:23:bd:17:d0:ca:5d:a0:cf:5b:ad:34:5b:32:70:
af:d4:b7:c5:be:77:f8:dc:f9:36:7d:86:ab:1c:12:
b7:86:3d:0c:d7:f3:f0:6e:f4:56:f6:cf:e2:3d:13:
fb:60:67:48:41:9c:3f:51:7e:6a:bb:f7:4b:17:5f:
5d:3d:7f:76:eb:a5:b3:ae:18:25:37:23:4e:f8:5f:
a7:c0:ee:fa:ef:52:a7:ef:00:f0:b7:f9:de:98:89:
31:52:ce:f7:99:30:fc:4e:e1:f4:8e:a9:ca:6e:ff:
f4:90:e1:28:97:ad:d2:a5:34:67:f7:5e:34:7f:bb:
44:95:3e:41:42:35:cc:f6:1b:4c:d9:2c:5a:a1:2f:
3d:7c:8a:f6:32:ac:67:cd:69:1e:57:38:90:5d:ff:
52:27:9c:3a:85:fc:70:6a:d7:95:d6:a7:7f:41:0b:
18:06:fd:8a:92:d0:bb:a8:ff:a3:df:32:e8:de:2f:
36:3d:18:8c:20:2b:c9:ae:e9:90:8c:d7:9e:5d:89:
f1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B0:D7:EB:D2:A9:BE:E4:DE:96:05:95:8F:7B:F6:0C:38:FE:1C:B1
X509v3 Authority Key Identifier:
keyid:FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:36:a0:98:31:79:6a:be:04:5d:1a:c7:2a:1e:4c:3f:e1:06:
34:6a:22:0c:cd:12:09:9d:68:fa:31:ec:96:86:5b:f7:01:01:
c5:ce:36:1d:19:a9:64:e8:9f:a5:9f:45:63:de:85:a7:1b:d1:
b0:50:c7:01:3e:38:90:c0:74:b8:ba:9d:a8:37:30:76:15:61:
4d:b0:46:d3:41:98:e9:b4:7a:6a:54:2b:99:fb:66:93:54:f7:
a8:fd:85:15:c1:5a:46:9c:e9:85:53:43:15:63:4d:c8:41:8d:
f6:41:dd:c6:d7:37:43:28:7d:ab:30:3e:ca:31:d6:e5:42:cd:
b6:76:11:29:72:08:7a:da:83:28:25:78:e0:1a:0f:de:a5:e9:
40:ab:65:6f:0f:e4:73:86:70:4a:0e:61:8c:a6:e9:e5:98:14:
53:7b:2d:51:ec:0a:2a:2b:47:50:c2:93:86:73:89:b9:62:56:
da:06:03:a2:c0:fb:14:ff:0a:64:6a:af:6c:3b:c9:ba:25:d5:
7e:80:a9:95:23:fd:a0:c3:22:42:43:19:47:de:c6:e3:14:5b:
95:ee:ee:38:b7:ae:48:de:74:50:b4:ee:bb:70:a0:32:fd:09:
af:72:ba:d1:6b:0b:24:e9:e0:b0:58:63:52:9b:b6:74:04:8f:
ec:b2:0c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:02:00 2025 by rpki-client