Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
File: vlULjv-QzM7p-NMTS2Q4mWt9J80.mft (raw, json)
Hash identifier: HciPTS5q8vlPIiy0LhW9utDhLionzI4ys2n6yYpgRTU=
Subject key identifier: 81:C1:1D:F3:5A:6D:E4:06:D2:E3:D3:DF:30:E3:25:26:5C:A9:B2:62
Authority key identifier: BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
Certificate issuer: /CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Certificate serial: 01974AB1A3983B2DA986D716040A5DB819F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
Manifest number: 12C2
Signing time: Sat 07 Jun 2025 14:00:45 +0000
Manifest this update: Sat 07 Jun 2025 14:00:45 +0000
Manifest next update: Sun 08 Jun 2025 14:00:45 +0000
Files and hashes: 1: IJsuPHEjRD5U3Gv14sc7K0m3CaI.roa (hash: 9xaSijx/J+UcS287yiWqygtaW2+asOVi313BpTLMGG0=)
2: vlULjv-QzM7p-NMTS2Q4mWt9J80.crl (hash: MeyESRfvx0vRLvhD5G9iNDgWeoQFgYajeYKK1K7kZcE=)
3: zP5R8a3op0AinKANwtJJCIKO-GU.roa (hash: sqncdyyLwGH/z3iOAF+o4ESAH5+bPPTw9cDS/1fHdJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:a3:98:3b:2d:a9:86:d7:16:04:0a:5d:b8:19:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Validity
Not Before: Jun 7 14:00:45 2025 GMT
Not After : Jun 8 14:00:45 2025 GMT
Subject: CN=81c11df35a6de406d2e3d3df30e325265ca9b262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ae:94:ba:6a:31:e6:90:5f:ac:c5:60:3e:1e:
ea:be:f9:38:de:eb:d0:9f:05:52:1e:7a:73:a0:bb:
c4:12:8a:20:bf:29:be:b5:62:8b:87:3a:9b:39:ca:
48:fb:99:23:44:6c:16:58:0b:d9:b3:71:0a:04:95:
19:d0:ea:d3:0f:47:04:18:8f:b3:f8:6e:31:e9:e6:
b8:7c:ea:5b:da:91:57:d1:c4:86:90:aa:73:51:01:
29:96:e8:3b:cd:b5:db:50:97:66:c4:79:af:42:29:
58:ce:6e:17:b6:f8:b0:51:b6:0f:fd:7a:d0:25:bc:
74:9c:bf:d7:46:53:5b:21:79:9e:9f:7a:37:0e:49:
11:35:94:99:9a:4d:ad:3f:7d:3d:36:a2:28:53:65:
e0:f5:64:70:16:a5:a9:6d:be:71:c7:e8:f0:f1:f9:
18:53:31:29:a7:08:a7:04:79:93:60:f8:22:d7:5d:
a9:dd:37:f2:94:48:0a:92:2b:2c:14:2e:4c:a8:96:
f3:7e:3c:44:59:c5:a4:5d:c7:d1:9d:02:c4:36:67:
1b:fd:dc:9b:ef:1d:02:61:39:f5:84:49:41:2c:07:
0e:ed:c7:94:fe:64:1c:32:8e:79:f4:e8:9f:1b:e4:
59:af:4a:51:6e:d8:e4:15:fb:b8:ff:e4:4b:34:77:
10:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C1:1D:F3:5A:6D:E4:06:D2:E3:D3:DF:30:E3:25:26:5C:A9:B2:62
X509v3 Authority Key Identifier:
keyid:BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c6:6e:e7:02:41:d3:08:c2:21:d6:13:a8:49:6b:72:16:55:
63:2d:d6:4b:2d:67:77:97:45:a3:5d:72:3a:8f:2a:66:26:cb:
f7:3e:bd:ab:7b:56:42:fd:69:26:65:28:8a:60:fc:a3:1f:dd:
5c:e6:8d:68:07:d4:70:b8:5b:2b:32:e4:90:c2:07:0a:da:1e:
6c:b2:ec:f7:25:b9:a0:2c:bc:95:00:aa:28:4e:44:86:88:f9:
9b:9d:57:73:53:2f:22:9c:ba:e0:5c:50:45:68:e5:bb:1a:fc:
ee:57:f2:74:c4:a4:9e:29:28:f7:74:f9:2b:1e:b4:22:83:3d:
3d:de:b7:2c:a6:83:5e:97:b2:a2:bb:f4:b3:7a:cc:c2:f6:4a:
fc:a5:61:a2:75:31:1a:02:b8:a2:8c:78:d5:cb:f1:b7:53:3d:
d6:5d:b9:14:6c:63:84:ac:cc:54:21:1f:91:5b:76:d6:82:6c:
c2:ae:0b:cc:9c:e1:2a:d1:f3:cf:95:e5:bc:99:3d:ee:23:c8:
18:a7:2c:21:80:f3:c5:ce:98:e5:f2:6f:73:66:bb:72:12:e2:
90:ae:64:40:8d:03:78:fc:9b:b0:8c:81:ed:b0:17:1d:2b:37:
b9:1e:84:fc:9a:c6:9d:bb:98:21:30:33:29:3a:11:22:0e:07:
5f:27:0a:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKsaOYOy2phtcWBApduBn5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNTUwYjhlZmY5MGNjY2VlOWY4ZDMxMzRiNjQzODk5NmI3
ZDI3Y2QwHhcNMjUwNjA3MTQwMDQ1WhcNMjUwNjA4MTQwMDQ1WjAzMTEwLwYDVQQD
Eyg4MWMxMWRmMzVhNmRlNDA2ZDJlM2QzZGYzMGUzMjUyNjVjYTliMjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK6Uumox5pBfrMVgPh7qvvk43uvQ
nwVSHnpzoLvEEoogvym+tWKLhzqbOcpI+5kjRGwWWAvZs3EKBJUZ0OrTD0cEGI+z
+G4x6ea4fOpb2pFX0cSGkKpzUQEplug7zbXbUJdmxHmvQilYzm4XtviwUbYP/XrQ
Jbx0nL/XRlNbIXmen3o3DkkRNZSZmk2tP309NqIoU2Xg9WRwFqWpbb5xx+jw8fkY
UzEppwinBHmTYPgi112p3TfylEgKkissFC5MqJbzfjxEWcWkXcfRnQLENmcb/dyb
7x0CYTn1hElBLAcO7ceU/mQcMo559OifG+RZr0pRbtjkFfu4/+RLNHcQOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHBHfNabeQG0uPT3zDjJSZcqbJiMB8GA1UdIwQY
MBaAFL5VC47/kMzO6fjTE0tkOJlrfSfNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmxVTGp2LVF6TTdwLU5NVFMyUTRtV3Q5SjgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8zNDBkY2QtM2FlZS00MDEyLTkyMzMt
YzE1NTMyYmFmZjdkLzEvdmxVTGp2LVF6TTdwLU5NVFMyUTRtV3Q5SjgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8zNDBkY2QtM2FlZS00MDEyLTkyMzMtYzE1NTMyYmFmZjdk
LzEvdmxVTGp2LVF6TTdwLU5NVFMyUTRtV3Q5SjgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjcZu5wJB
0wjCIdYTqElrchZVYy3WSy1nd5dFo11yOo8qZibL9z69q3tWQv1pJmUoimD8ox/d
XOaNaAfUcLhbKzLkkMIHCtoebLLs9yW5oCy8lQCqKE5Ehoj5m51Xc1MvIpy64FxQ
RWjluxr87lfydMSkniko93T5Kx60IoM9Pd63LKaDXpeyorv0s3rMwvZK/KVhonUx
GgK4oox41cvxt1M91l25FGxjhKzMVCEfkVt21oJswq4LzJzhKtHzz5XlvJk97iPI
GKcsIYDzxc6Y5fJvc2a7chLikK5kQI0DePybsIyB7bAXHSs3uR6E/JrGnbuYITAz
KToRIg4HXycKlQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:31:12 2025 by rpki-client