Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
File: vSX3G6QTFIO7m4I92IZR06_UTns.mft (raw, json)
Hash identifier: 3hBU+rB14laRS4ABgiGY2UXkqACfnFv6ILg/qqUjjxg=
Subject key identifier: 28:F7:43:3B:9C:EC:3A:E0:A4:71:3A:31:A9:94:81:BC:8C:CE:F5:67
Authority key identifier: BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
Certificate issuer: /CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Certificate serial: 019937CA6F3C64E1F087DCCB1C861397ADAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
Manifest number: 134E
Signing time: Thu 11 Sep 2025 08:00:37 +0000
Manifest this update: Thu 11 Sep 2025 08:00:37 +0000
Manifest next update: Fri 12 Sep 2025 08:00:37 +0000
Files and hashes: 1: VTzQEre1LOW5un0PlYn-CvmDAKI.roa (hash: fUzpWZIo72ujZLDiYOULGotM+6e+u6e7TR9QhDLmQyE=)
2: uOlfWw_ot1GNz-xDs0HfE8f0GXg.roa (hash: p6HLTz97eUfObx31ZQ7fD3+tg4SDQ5VAA/i07H3/8o4=)
3: vSX3G6QTFIO7m4I92IZR06_UTns.crl (hash: 8+LGUTRarbCrPB/FkdgRgQJV8DRK6HVWRNczlZvCPX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:ca:6f:3c:64:e1:f0:87:dc:cb:1c:86:13:97:ad:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Validity
Not Before: Sep 11 08:00:37 2025 GMT
Not After : Sep 12 08:00:37 2025 GMT
Subject: CN=28f7433b9cec3ae0a4713a31a99481bc8ccef567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:61:f8:5a:62:e2:f1:ac:c5:67:22:7a:c2:01:
7c:00:53:c5:09:bb:47:28:ce:64:40:24:46:60:b8:
90:b7:28:86:2a:af:1b:5c:26:e3:fb:b8:71:9d:7f:
48:87:2b:c4:88:87:24:b8:c6:39:e0:68:c7:50:53:
a5:69:d0:53:24:37:66:cf:ef:be:46:fb:e0:fa:5f:
27:63:7d:31:27:19:6c:9b:08:fe:8f:0e:1d:48:f7:
d2:33:da:64:1b:43:7f:aa:10:2b:b7:d7:6f:6d:fc:
2f:65:c9:a5:96:ba:47:4f:81:20:8d:26:45:50:e4:
2d:67:88:c2:c0:6c:7a:04:d5:48:ae:ff:ee:61:22:
c3:e0:ff:8f:6d:48:a3:6b:97:ee:e9:07:6c:a8:19:
bc:ce:96:53:96:90:50:f3:9b:70:fc:7b:30:f9:23:
e6:92:57:02:9f:fc:18:7e:a7:c5:9f:68:c0:56:71:
e6:cf:50:1e:bb:6a:04:e8:cf:7c:34:52:61:99:44:
7a:83:d9:c4:67:4c:0f:f4:13:c2:17:fb:da:03:ef:
a1:51:ff:31:30:da:89:4b:8f:6b:17:71:d3:b5:5e:
57:9a:e1:f7:48:71:92:0e:b7:b3:c8:db:75:0e:44:
01:fd:70:57:bb:6a:22:96:3e:61:51:46:67:47:a2:
b4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F7:43:3B:9C:EC:3A:E0:A4:71:3A:31:A9:94:81:BC:8C:CE:F5:67
X509v3 Authority Key Identifier:
keyid:BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:03:a9:26:ea:e4:f6:d3:6b:da:0e:8f:2f:a8:69:9f:40:6a:
44:db:79:79:5d:2b:46:af:b6:40:2b:ad:b6:11:6b:91:6e:61:
42:90:bd:8a:a8:70:1d:09:cf:ba:14:4a:4e:54:f3:cd:49:0a:
b5:65:85:77:50:de:29:8f:56:b2:20:7a:ae:73:5a:5d:8e:c2:
45:ef:36:15:ec:e9:2c:4f:0b:91:83:96:e6:4d:1f:54:08:78:
e7:22:42:bd:5f:3c:73:69:99:20:a1:c4:37:37:d5:aa:16:37:
8e:11:99:08:79:69:c4:29:0f:61:bc:ac:cb:98:2f:05:b9:37:
4f:03:c0:70:fb:08:b7:43:9b:bb:43:97:a9:45:97:13:de:a4:
9c:53:02:97:60:d2:6a:42:31:47:a1:b1:3c:34:91:78:6e:fc:
bb:a2:bc:74:01:2c:6d:02:2b:70:ed:d4:fd:85:43:ef:ce:30:
ad:3b:64:ab:a6:6a:c4:da:9e:30:9d:21:f1:42:38:bd:49:2b:
42:b7:79:c5:40:8f:5b:16:75:c6:eb:a5:35:c5:62:22:a0:6c:
f7:c4:fa:fc:55:5a:95:5a:6e:1f:c8:90:10:74:c5:57:44:e5:
8b:f7:73:bd:3e:be:49:55:0c:42:8d:2a:a7:8a:42:f1:1e:c3:
61:b5:84:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 09:25:11 2025 by rpki-client