Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
File: vptUWMI322WEjLKsvsbblCP8s6Y.mft (raw, json)
Hash identifier: i06+pKCUf57SzLTZSLakT3MHNXWRUVIbuH+L4aaMsN8=
Subject key identifier: 33:9B:04:0D:D4:7C:12:DF:3B:2A:A4:98:30:3C:00:6E:CE:4D:C2:CA
Authority key identifier: BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6
Certificate issuer: /CN=be9b5458c237db65848cb2acbec6db9423fcb3a6
Certificate serial: 01984B8A3545F582B20B3B871C032C07F289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
Manifest number: 119C
Signing time: Sun 27 Jul 2025 11:00:05 +0000
Manifest this update: Sun 27 Jul 2025 11:00:05 +0000
Manifest next update: Mon 28 Jul 2025 11:00:05 +0000
Files and hashes: 1: SPOdZUKsCzIXgJOCF_UL7n1RilU.roa (hash: AvcsY0IcsdeApRna15WxWc9F7nJGA8l55JTs96Qf9tg=)
2: vptUWMI322WEjLKsvsbblCP8s6Y.crl (hash: Ji32NCvfuZtZafGIT3sGJElrNrsLZPl+CDZvCebKbNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:35:45:f5:82:b2:0b:3b:87:1c:03:2c:07:f2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9b5458c237db65848cb2acbec6db9423fcb3a6
Validity
Not Before: Jul 27 11:00:05 2025 GMT
Not After : Jul 28 11:00:05 2025 GMT
Subject: CN=339b040dd47c12df3b2aa498303c006ece4dc2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0c:e3:39:31:5f:65:73:c7:fd:df:be:f6:dc:
82:f4:99:ae:42:1b:85:ad:ee:45:46:eb:de:9a:ae:
21:c6:90:10:43:02:28:2a:ee:50:ac:9f:2b:b3:11:
15:02:f0:da:9d:d7:86:f5:b4:7b:89:85:37:51:11:
6f:e9:97:4c:be:06:88:10:e6:4b:91:cb:ef:4d:0d:
f3:64:fd:62:51:de:d3:44:4e:66:91:e6:01:ee:ce:
e0:73:b1:2e:49:a0:8c:b4:9c:2c:f7:a0:29:74:ac:
1d:55:3d:f1:67:79:cf:ba:a4:7e:df:33:11:9e:65:
54:9c:01:72:00:72:f9:23:ff:7c:b5:ee:12:ad:6a:
9f:4a:5a:5b:2d:45:cc:43:73:a2:1f:eb:c6:ff:4e:
fb:09:80:0a:60:b5:b1:df:70:91:c9:06:b2:70:da:
73:c0:f8:5c:ad:c8:9c:32:00:ca:fb:9e:34:68:bf:
69:3d:f9:79:69:61:f1:d5:0c:be:19:1c:e8:9a:c2:
2d:d0:9b:8b:fc:1c:5c:ff:a8:5e:eb:c5:fc:6b:bf:
cf:f0:4e:ef:68:89:70:c1:df:a5:31:85:2d:82:99:
d0:c5:8a:55:cd:b7:3f:7d:cf:fc:e6:40:92:0d:91:
05:a7:42:87:2a:f5:51:94:03:82:58:9c:65:1d:c4:
24:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9B:04:0D:D4:7C:12:DF:3B:2A:A4:98:30:3C:00:6E:CE:4D:C2:CA
X509v3 Authority Key Identifier:
keyid:BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:77:03:31:50:77:58:ba:18:de:f9:dc:db:3d:ad:b9:be:30:
8f:8d:76:14:0e:5d:ba:1b:31:1d:b5:dd:72:64:3d:fa:9e:19:
fe:cf:06:9d:d5:14:ba:59:79:21:1c:62:4f:7b:85:08:47:68:
1f:c5:a7:3a:56:eb:40:98:9e:50:5f:61:b9:b5:99:b4:e6:52:
d8:21:c9:6a:c4:0e:b5:05:02:96:fe:34:d3:ac:14:e2:66:65:
41:66:9a:db:94:a5:23:5f:af:d7:84:47:52:4d:81:47:e4:61:
f2:ee:5e:bd:4a:bb:d5:57:b2:eb:72:31:af:18:ad:7a:90:7c:
53:cf:df:8e:9c:f9:a5:bd:03:f6:67:36:a1:6d:0f:11:6c:28:
93:64:6b:33:21:db:2f:37:27:aa:2b:34:83:02:82:a8:af:b2:
ce:90:56:54:7b:ab:ca:df:4c:44:70:33:2b:ad:3b:6c:b1:ae:
0b:49:91:b9:5f:bc:e3:c5:28:38:c9:d0:5b:9f:e6:a1:67:89:
1d:e0:84:00:72:11:82:46:0b:b1:54:f2:4d:6c:1f:3a:db:90:
ad:36:25:3f:56:61:31:00:21:76:98:c8:a5:cd:ba:81:4a:d6:
8f:ad:a5:11:f0:7f:d0:99:ea:76:8c:d1:37:4a:cf:2b:6d:e8:
00:8a:7c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:39:55 2025 by rpki-client