Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
File: vpxSiWGxCzIPR-i3BlTurtLyRNM.mft (raw, json)
Hash identifier: 9D+1IDo2xf171nZPbGrIy10lJ4m2minJjZfBYicAK70=
Subject key identifier: DD:FA:27:2E:F4:91:9B:1A:FB:6B:A7:06:14:B6:06:3B:31:7D:CF:59
Authority key identifier: BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3
Certificate issuer: /CN=be9c528961b10b320f47e8b70654eeaed2f244d3
Certificate serial: 0198481C0547B906F2A3813CCA8996451A8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
Manifest number: 0BF1
Signing time: Sat 26 Jul 2025 19:00:52 +0000
Manifest this update: Sat 26 Jul 2025 19:00:52 +0000
Manifest next update: Sun 27 Jul 2025 19:00:52 +0000
Files and hashes: 1: vpxSiWGxCzIPR-i3BlTurtLyRNM.crl (hash: 4oQQOrltzxISqfHz7U5rDNYezOd/SOAJhrxTB+IRhCg=)
2: wtrOxy-Cqrf4yPJ92NbD-E33BP8.roa (hash: HZVqoFJ1fSxzdnoOFKLqW1LRpp7/mkZ4xgc+aQGadyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1c:05:47:b9:06:f2:a3:81:3c:ca:89:96:45:1a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9c528961b10b320f47e8b70654eeaed2f244d3
Validity
Not Before: Jul 26 19:00:52 2025 GMT
Not After : Jul 27 19:00:52 2025 GMT
Subject: CN=ddfa272ef4919b1afb6ba70614b6063b317dcf59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:06:09:37:bf:89:72:38:2d:ed:5e:e3:58:0f:
9e:6c:ab:8a:a7:12:20:b1:4b:09:ae:65:0b:7c:99:
f8:ff:4e:a6:33:7a:46:cb:66:92:82:54:4a:0e:12:
99:c4:43:26:56:2b:61:2f:b9:9d:bc:44:89:3a:e3:
33:4d:c0:1c:67:c1:df:c5:93:0a:6c:28:24:41:09:
3a:40:d6:0f:b8:cf:82:24:0f:c7:39:94:f2:97:f4:
a4:9f:87:56:b4:7c:fd:cd:c6:da:76:67:89:f4:41:
dd:6f:11:e6:48:66:9e:0c:b6:c9:96:da:0f:a0:c4:
b5:22:85:e1:f8:88:57:58:db:4a:8a:c9:cb:2c:e0:
4d:b2:0f:a3:68:dd:36:f7:2d:b6:fd:d7:a3:26:cb:
70:89:51:31:dc:7e:54:07:44:9e:f9:7e:58:d4:ba:
0b:65:21:24:4d:1e:20:5e:9a:95:9b:3c:c0:86:87:
fe:0d:cb:90:2c:9b:d2:03:c2:5e:2a:54:7b:7f:e6:
07:72:3c:ed:bc:d8:03:b6:ce:a9:a1:9b:1f:dd:c0:
ee:31:be:75:75:46:22:e5:12:f5:3f:f9:28:07:c5:
69:0c:df:6f:61:b3:be:f6:c4:d4:21:17:06:3f:68:
28:ab:11:0e:36:b6:b2:da:57:2a:d4:71:a1:1f:ee:
1a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FA:27:2E:F4:91:9B:1A:FB:6B:A7:06:14:B6:06:3B:31:7D:CF:59
X509v3 Authority Key Identifier:
keyid:BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:18:69:d8:ca:a5:41:65:a6:8a:1e:44:3d:16:b0:c3:4a:7c:
1b:97:7a:78:bb:09:5c:b7:6e:33:94:67:ab:c9:46:8c:b3:81:
5b:0d:46:f9:95:ce:7e:ee:ac:ed:af:f8:61:4c:d6:28:d7:80:
66:57:b4:42:1d:e2:56:c2:57:b4:88:81:e0:15:94:ae:2a:9d:
39:17:19:89:50:7e:4b:20:49:81:9f:8e:68:c3:64:50:63:ac:
89:56:34:66:6e:27:30:81:32:38:a3:7c:4c:86:80:2f:21:70:
34:22:5f:fd:c9:7d:4c:2f:99:3e:52:86:c0:e2:c8:ed:78:17:
5f:b7:31:27:f3:48:f0:94:bb:89:e1:e3:91:7a:66:09:c8:43:
81:46:c5:da:2d:fd:a7:91:86:3a:82:38:42:af:e1:5b:e9:e6:
9b:57:d4:35:25:b8:ca:9e:30:85:16:9b:79:ee:ab:46:ad:4b:
40:4f:26:95:92:0b:3e:30:3d:47:43:09:aa:4b:0e:30:d7:68:
bb:07:8c:af:b3:f6:c8:05:0f:d3:51:d0:04:b1:d6:44:e8:fe:
89:09:54:d5:8d:75:8c:f3:55:d9:70:26:6a:04:78:7e:ca:e4:
84:32:58:de:4b:a9:f8:58:b8:89:a1:c5:63:e0:08:9b:53:08:
32:6f:a9:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIHAVHuQbyo4E8yomWRRqNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlOWM1Mjg5NjFiMTBiMzIwZjQ3ZThiNzA2NTRlZWFlZDJm
MjQ0ZDMwHhcNMjUwNzI2MTkwMDUyWhcNMjUwNzI3MTkwMDUyWjAzMTEwLwYDVQQD
EyhkZGZhMjcyZWY0OTE5YjFhZmI2YmE3MDYxNGI2MDYzYjMxN2RjZjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wYJN7+Jcjgt7V7jWA+ebKuKpxIg
sUsJrmULfJn4/06mM3pGy2aSglRKDhKZxEMmVithL7mdvESJOuMzTcAcZ8HfxZMK
bCgkQQk6QNYPuM+CJA/HOZTyl/Skn4dWtHz9zcbadmeJ9EHdbxHmSGaeDLbJltoP
oMS1IoXh+IhXWNtKisnLLOBNsg+jaN029y22/dejJstwiVEx3H5UB0Se+X5Y1LoL
ZSEkTR4gXpqVmzzAhof+DcuQLJvSA8JeKlR7f+YHcjztvNgDts6poZsf3cDuMb51
dUYi5RL1P/koB8VpDN9vYbO+9sTUIRcGP2goqxEONray2lcq1HGhH+4a2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN36Jy70kZsa+2unBhS2Bjsxfc9ZMB8GA1UdIwQY
MBaAFL6cUolhsQsyD0fotwZU7q7S8kTTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnB4U2lXR3hDeklQUi1pM0JsVHVydEx5Uk5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS85ODU3MWQtMzk4Zi00MWRiLTg1YjAt
OGMzYjNmMzBkMjE1LzEvdnB4U2lXR3hDeklQUi1pM0JsVHVydEx5Uk5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS85ODU3MWQtMzk4Zi00MWRiLTg1YjAtOGMzYjNmMzBkMjE1
LzEvdnB4U2lXR3hDeklQUi1pM0JsVHVydEx5Uk5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfRhp2Mql
QWWmih5EPRaww0p8G5d6eLsJXLduM5Rnq8lGjLOBWw1G+ZXOfu6s7a/4YUzWKNeA
Zle0Qh3iVsJXtIiB4BWUriqdORcZiVB+SyBJgZ+OaMNkUGOsiVY0Zm4nMIEyOKN8
TIaALyFwNCJf/cl9TC+ZPlKGwOLI7XgXX7cxJ/NI8JS7ieHjkXpmCchDgUbF2i39
p5GGOoI4Qq/hW+nmm1fUNSW4yp4whRabee6rRq1LQE8mlZILPjA9R0MJqksOMNdo
uweMr7P2yAUP01HQBLHWROj+iQlU1Y11jPNV2XAmagR4fsrkhDJY3kup+Fi4iaHF
Y+AIm1MIMm+p1w==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:08:55 2025 by rpki-client