Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
File: vlULjv-QzM7p-NMTS2Q4mWt9J80.mft (raw, json)
Hash identifier: b63GaAkVeYC/D/r/Xv2HeT+AgEWI7QYZxACbKdFrhsE=
Subject key identifier: A6:93:15:7F:50:6F:96:70:CB:09:D9:9E:7E:8C:D4:48:EE:76:E2:44
Authority key identifier: BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
Certificate issuer: /CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Certificate serial: 019892FF0BCEA839B0CA591494EE185767AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
Manifest number: 136C
Signing time: Sun 10 Aug 2025 08:00:44 +0000
Manifest this update: Sun 10 Aug 2025 08:00:44 +0000
Manifest next update: Mon 11 Aug 2025 08:00:44 +0000
Files and hashes: 1: IJsuPHEjRD5U3Gv14sc7K0m3CaI.roa (hash: 9xaSijx/J+UcS287yiWqygtaW2+asOVi313BpTLMGG0=)
2: vlULjv-QzM7p-NMTS2Q4mWt9J80.crl (hash: tIf0D8wXDo1GNAYVekJPsTrQnCZcaJFyTAtRdfNhFZ4=)
3: zP5R8a3op0AinKANwtJJCIKO-GU.roa (hash: sqncdyyLwGH/z3iOAF+o4ESAH5+bPPTw9cDS/1fHdJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:ff:0b:ce:a8:39:b0:ca:59:14:94:ee:18:57:67:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Validity
Not Before: Aug 10 08:00:44 2025 GMT
Not After : Aug 11 08:00:44 2025 GMT
Subject: CN=a693157f506f9670cb09d99e7e8cd448ee76e244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a6:e3:ae:aa:86:15:ce:af:5d:75:cb:5c:39:
92:f6:c4:b9:73:9b:1c:36:fe:04:a2:80:5d:43:10:
9d:73:62:ee:f0:71:d4:9d:79:f3:82:ff:23:48:52:
7c:56:df:1e:c8:84:e2:83:84:bd:8d:47:6c:6b:f2:
78:a1:14:d4:1b:bc:72:f0:fc:30:fc:e2:27:2c:f0:
cb:4e:d4:10:e4:8e:f8:c6:92:a5:c3:b6:19:20:c3:
90:0a:67:71:10:b6:88:ca:b0:b8:16:09:e4:34:bd:
6b:7c:fb:66:6b:e6:09:11:1b:b2:45:fb:ae:7f:9b:
e0:1c:57:6f:9d:8e:25:1e:92:b4:33:0c:b9:f0:6c:
4c:13:05:be:40:e3:79:9e:37:95:e9:f9:36:94:81:
db:bf:89:fc:1d:8a:c3:9f:64:81:91:06:81:93:ca:
81:9b:c1:1f:38:b2:d2:c8:a3:94:98:1a:01:1e:38:
7e:00:e5:bb:dc:5c:fd:1c:91:ae:94:ed:f0:ff:2d:
8b:a4:99:69:1e:a4:c4:40:26:e7:f1:a6:c8:4b:4b:
2f:65:c4:e9:06:49:9b:46:ea:7e:01:a5:84:84:5b:
3d:15:3d:e7:97:87:7f:b6:4b:fa:a1:77:14:07:fa:
ee:d4:0e:6d:6e:13:9e:ed:e3:49:46:c8:b5:c2:52:
b7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:93:15:7F:50:6F:96:70:CB:09:D9:9E:7E:8C:D4:48:EE:76:E2:44
X509v3 Authority Key Identifier:
keyid:BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:65:76:7b:c3:20:49:10:fa:56:07:14:64:58:2c:fa:44:60:
d9:bb:6e:4a:50:ff:a2:54:0d:02:fc:83:da:64:ae:b7:fb:30:
a0:4d:04:6c:e9:7b:fa:d0:6c:cc:5b:0c:62:9c:df:30:ae:91:
7b:87:70:9f:c1:16:0d:04:c0:62:10:d5:b3:9d:a8:30:8e:74:
97:57:89:cd:ba:70:bd:74:ef:56:24:0b:83:bd:59:05:18:af:
43:67:cf:c4:9d:2e:10:c0:90:bf:79:ab:71:cf:a6:ba:5c:d1:
15:4d:cf:48:41:72:37:4a:42:85:ec:3d:22:8b:6c:02:18:80:
4d:16:fc:6b:16:b2:d0:46:59:e1:74:e1:c3:b1:18:2e:0c:d7:
1d:76:44:61:04:0c:d6:bc:9c:19:05:73:57:7a:79:c2:1f:47:
97:a2:ed:c0:c0:2a:af:7f:9d:66:a0:23:04:5d:f8:f7:8e:f2:
f2:09:f1:65:ea:2c:31:1a:58:0e:6d:e0:55:3a:2b:ef:26:87:
07:01:3e:39:38:0b:39:25:7c:5e:68:7c:f6:1f:07:38:b3:e0:
35:63:97:83:96:e2:46:4f:45:20:ee:fd:4d:75:56:75:bc:b8:
4f:22:c2:2d:c0:40:28:bc:4c:c6:55:a2:af:88:a3:61:b3:2f:
63:3b:e8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:51 2025 by rpki-client