
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
File: VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft (raw, json)
Hash identifier: Uys4YRtzijKsQt/679W1Kh79trl/zoRFP2VJAqkgeaM=
Subject key identifier: A3:B9:57:6F:3F:C3:BF:6B:63:DA:8C:11:77:5B:7B:DB:DB:A6:72:37
Authority key identifier: 54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44
Certificate issuer: /CN=54158203da3a1e96318e85043411e7d4d03d4c44
Certificate serial: 01985456C8C6E25340A0FA8C6547F8C1D1E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
Manifest number: 0137
Signing time: Tue 29 Jul 2025 04:00:30 +0000
Manifest this update: Tue 29 Jul 2025 04:00:30 +0000
Manifest next update: Wed 30 Jul 2025 04:00:30 +0000
Files and hashes: 1: VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl (hash: TrBYzXLIoi7Xm4l/gGHwRBG8wn/+hAUEd7VSUDrbN6k=)
2: vP7OBBy6Rc-iXCzpNtqqwwaR6pA.roa (hash: MbpCA8/2M3yt7Y/21BLSADPFYL3YqJ9PW3u4Q8kGOqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:56:c8:c6:e2:53:40:a0:fa:8c:65:47:f8:c1:d1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54158203da3a1e96318e85043411e7d4d03d4c44
Validity
Not Before: Jul 29 04:00:30 2025 GMT
Not After : Jul 30 04:00:30 2025 GMT
Subject: CN=a3b9576f3fc3bf6b63da8c11775b7bdbdba67237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:23:91:95:f7:bc:12:16:20:fa:d4:19:70:0e:
69:c5:95:c6:e6:93:a0:ef:95:78:24:80:91:d3:b5:
3d:39:46:5f:40:8a:1d:70:58:1e:51:63:e8:4f:e8:
fe:24:a1:58:b3:15:12:98:64:b2:3d:01:cd:86:7a:
c0:4f:0e:75:9a:53:e3:e5:d0:57:b2:e5:67:ca:ef:
29:bb:15:17:af:97:09:98:50:83:f9:6a:ae:72:a6:
cd:85:d1:0b:a7:54:ca:4b:89:a9:0b:dd:6a:1d:9a:
95:87:08:47:53:8a:be:b4:9c:76:1a:0e:2f:46:0a:
f3:f0:86:6b:8b:10:3f:ff:44:fb:28:92:9f:fe:31:
00:c6:ff:a9:2f:7b:f4:a1:a3:3c:98:7f:bc:84:11:
a7:f5:95:24:40:76:e0:26:70:9a:b8:bb:e8:9b:5f:
2b:53:6c:71:c4:bf:3e:06:6f:a7:cc:b4:87:43:6a:
c9:74:6c:9f:96:76:ce:13:73:36:0d:fe:66:96:a5:
17:d0:23:4d:bf:6b:bc:6f:4c:73:36:61:db:f5:ca:
3a:e9:01:fe:21:6e:ac:bc:92:6a:b6:cc:b6:d5:bf:
72:40:8a:52:28:05:40:bb:b7:1a:3b:03:68:e1:b0:
ff:54:46:26:16:2f:c5:51:b5:58:08:da:94:4a:b5:
02:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B9:57:6F:3F:C3:BF:6B:63:DA:8C:11:77:5B:7B:DB:DB:A6:72:37
X509v3 Authority Key Identifier:
keyid:54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:3a:f5:0a:5a:9f:48:d1:91:28:44:10:47:f1:7b:41:40:66:
d8:99:4c:c7:e9:11:5d:2e:3e:a5:c9:b8:6b:78:b2:45:a8:7a:
7b:db:d0:03:69:b6:47:26:f8:34:0f:81:f1:8a:5a:43:8b:31:
7d:7c:79:dc:e3:51:77:e4:c1:23:73:8a:ed:0f:b5:11:c7:cf:
39:92:f6:b1:a7:63:3b:7c:ca:9d:f6:bc:f2:6b:fe:bd:dd:7f:
f7:a7:ab:40:d7:77:18:24:9a:8c:17:45:6a:7a:5f:9d:22:ca:
cf:f3:52:fe:7e:de:f0:4d:39:86:eb:19:ea:91:b9:13:9c:f0:
d1:c2:3f:37:f4:fc:d9:fa:0f:0e:6f:e3:c4:28:b9:55:ce:a1:
fd:ec:20:72:2b:6a:ae:37:bc:53:02:a3:b3:1c:1b:27:60:a8:
b5:be:13:a5:02:3b:3a:81:42:d8:9a:fc:58:15:43:81:8e:5b:
76:01:a2:5f:0b:73:c6:3a:bf:08:7d:7d:8a:f4:fa:a3:94:16:
93:e5:72:32:50:d3:15:f5:c0:ed:b7:50:04:35:85:d5:36:2f:
e2:fc:f3:c6:09:cf:9f:a6:58:05:b5:f2:7e:a3:29:48:ea:d1:
1a:eb:7b:50:03:cd:27:58:17:58:84:e6:c3:b8:58:9f:ec:ef:
4b:33:bf:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:37:29 2025 by rpki-client