Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
File: vptUWMI322WEjLKsvsbblCP8s6Y.mft (raw, json)
Hash identifier: 9rwCGYdVD7JYsPoNagccpRc0rhKDF0i3vKcBnmrNSMg=
Subject key identifier: ED:BD:DA:B1:99:82:5C:D9:A4:B8:1C:7F:57:4D:72:78:97:51:83:C2
Authority key identifier: BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6
Certificate issuer: /CN=be9b5458c237db65848cb2acbec6db9423fcb3a6
Certificate serial: 019939154C7153DBDE99899D0E03A2BF0E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
Manifest number: 1217
Signing time: Thu 11 Sep 2025 14:02:00 +0000
Manifest this update: Thu 11 Sep 2025 14:02:00 +0000
Manifest next update: Fri 12 Sep 2025 14:02:00 +0000
Files and hashes: 1: SPOdZUKsCzIXgJOCF_UL7n1RilU.roa (hash: AvcsY0IcsdeApRna15WxWc9F7nJGA8l55JTs96Qf9tg=)
2: vptUWMI322WEjLKsvsbblCP8s6Y.crl (hash: mLqX+LNq9w4eF1Qi4csMlkL++kWPk+MMfaxpCUfugnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:15:4c:71:53:db:de:99:89:9d:0e:03:a2:bf:0e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9b5458c237db65848cb2acbec6db9423fcb3a6
Validity
Not Before: Sep 11 14:02:00 2025 GMT
Not After : Sep 12 14:02:00 2025 GMT
Subject: CN=edbddab199825cd9a4b81c7f574d7278975183c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ce:d4:81:7e:7a:c7:77:20:79:a3:81:ca:04:
fa:e7:f3:43:dc:46:86:fb:05:3d:b3:92:61:99:65:
fa:99:d7:9d:cf:f7:b2:12:13:55:a5:19:93:d0:10:
0c:98:23:5d:25:21:2f:6f:7d:81:76:df:98:fb:94:
c2:ca:9b:95:19:32:54:c3:37:0f:58:4b:89:7b:91:
2d:51:a6:7f:26:f3:7d:c3:78:ae:31:7e:b7:1e:d8:
fb:fd:e9:b4:38:95:92:41:3c:20:0f:4e:15:7f:15:
30:d6:30:03:63:9c:60:05:09:21:80:6c:22:d6:c4:
bc:59:ae:10:54:ba:fc:47:0c:f5:e0:9a:d7:33:19:
5a:b2:9c:b9:e0:f8:f9:fe:55:73:cd:12:6b:10:e9:
8d:6e:d7:9a:13:8b:b5:63:f3:6a:78:c7:27:4c:97:
8e:85:f0:59:63:12:4a:f1:84:ec:a0:bf:2d:d5:3e:
42:4a:fa:33:a3:8e:d2:5f:37:cb:16:cc:a8:da:53:
5a:49:f2:63:05:c8:ab:c2:bb:cb:bf:98:c3:23:50:
5e:49:35:6f:a6:84:89:f8:9f:af:9c:60:23:24:fc:
45:e2:9f:04:78:93:45:d6:fc:fd:ba:4a:c2:3c:cb:
d5:44:d3:91:22:92:a1:13:5c:cc:24:a6:ce:53:49:
42:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BD:DA:B1:99:82:5C:D9:A4:B8:1C:7F:57:4D:72:78:97:51:83:C2
X509v3 Authority Key Identifier:
keyid:BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3e:72:ec:46:c0:b9:c8:58:83:8a:a0:8e:8c:6b:54:97:94:
99:dc:77:c7:12:81:ef:5b:88:28:00:3e:e4:fb:f5:e1:64:c4:
a5:eb:da:a0:b1:42:b8:62:80:80:ba:5a:56:96:54:63:38:21:
0e:48:3f:65:85:2c:98:3f:00:cf:75:ec:11:9d:ed:24:87:91:
7c:76:49:cb:23:ec:40:15:72:fb:d0:b5:31:ba:bd:88:91:7f:
c4:52:68:94:55:1c:64:d4:eb:80:82:9b:fe:39:bc:b8:e2:d2:
be:5e:c6:dd:55:26:19:64:2d:51:15:b6:d2:c9:f5:c6:1d:3d:
00:72:60:89:ad:d5:17:3d:d9:8a:18:15:33:8e:88:20:f4:bc:
26:c0:7d:03:1b:b4:0a:51:4b:18:a2:52:65:59:58:08:64:4d:
27:71:55:24:07:14:7d:ad:93:b0:17:6d:f6:aa:4a:b6:30:50:
00:2d:1c:8d:46:c2:14:cb:a4:80:a9:ca:d2:32:7b:ef:8d:92:
ba:78:c1:c1:82:81:54:00:f2:51:aa:2f:55:af:eb:d3:72:7b:
47:c1:64:55:43:f3:43:bb:c6:4f:5e:b6:6e:e8:b6:30:9e:54:
92:a8:95:18:c0:19:5c:81:78:eb:f8:d4:00:19:2c:d6:b2:38:
f6:32:e2:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk5FUxxU9vemYmdDgOivw6HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlOWI1NDU4YzIzN2RiNjU4NDhjYjJhY2JlYzZkYjk0MjNm
Y2IzYTYwHhcNMjUwOTExMTQwMjAwWhcNMjUwOTEyMTQwMjAwWjAzMTEwLwYDVQQD
EyhlZGJkZGFiMTk5ODI1Y2Q5YTRiODFjN2Y1NzRkNzI3ODk3NTE4M2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc7UgX56x3cgeaOBygT65/ND3EaG
+wU9s5JhmWX6mdedz/eyEhNVpRmT0BAMmCNdJSEvb32Bdt+Y+5TCypuVGTJUwzcP
WEuJe5EtUaZ/JvN9w3iuMX63Htj7/em0OJWSQTwgD04VfxUw1jADY5xgBQkhgGwi
1sS8Wa4QVLr8Rwz14JrXMxlaspy54Pj5/lVzzRJrEOmNbteaE4u1Y/NqeMcnTJeO
hfBZYxJK8YTsoL8t1T5CSvozo47SXzfLFsyo2lNaSfJjBcirwrvLv5jDI1BeSTVv
poSJ+J+vnGAjJPxF4p8EeJNF1vz9ukrCPMvVRNORIpKhE1zMJKbOU0lCLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO292rGZglzZpLgcf1dNcniXUYPCMB8GA1UdIwQY
MBaAFL6bVFjCN9tlhIyyrL7G25Qj/LOmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnB0VVdNSTMyMldFakxLc3ZzYmJsQ1A4czZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jZDFkYjMtMjg3Ny00ZjMyLTgzYzUt
MzcwYjgyZTlmOTBiLzEvdnB0VVdNSTMyMldFakxLc3ZzYmJsQ1A4czZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9jZDFkYjMtMjg3Ny00ZjMyLTgzYzUtMzcwYjgyZTlmOTBi
LzEvdnB0VVdNSTMyMldFakxLc3ZzYmJsQ1A4czZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaD5y7EbA
uchYg4qgjoxrVJeUmdx3xxKB71uIKAA+5Pv14WTEpevaoLFCuGKAgLpaVpZUYzgh
Dkg/ZYUsmD8Az3XsEZ3tJIeRfHZJyyPsQBVy+9C1Mbq9iJF/xFJolFUcZNTrgIKb
/jm8uOLSvl7G3VUmGWQtURW20sn1xh09AHJgia3VFz3ZihgVM46IIPS8JsB9Axu0
ClFLGKJSZVlYCGRNJ3FVJAcUfa2TsBdt9qpKtjBQAC0cjUbCFMukgKnK0jJ7742S
unjBwYKBVADyUaovVa/r03J7R8FkVUPzQ7vGT162bui2MJ5UkqiVGMAZXIF46/jU
ABks1rI49jLiwg==
-----END CERTIFICATE-----
Generated at Thu Sep 11 20:01:13 2025 by rpki-client