Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
File: vlULjv-QzM7p-NMTS2Q4mWt9J80.mft (raw, json)
Hash identifier: uQ1MzTXnR9p5+n1B8s9g4uXy73P4yKK/RP4WeESFmvA=
Subject key identifier: DB:2E:AB:11:BE:DF:1B:C9:E7:5B:8B:B7:27:CF:9D:1F:D7:CC:FB:E5
Authority key identifier: BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
Certificate issuer: /CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Certificate serial: 019A51F55882A1171072C41C0E5264B7AFF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
Manifest number: 1454
Signing time: Wed 05 Nov 2025 03:00:24 +0000
Manifest this update: Wed 05 Nov 2025 03:00:24 +0000
Manifest next update: Thu 06 Nov 2025 03:00:24 +0000
Files and hashes: 1: ATQyeIdV9fi3WPbx9o-TPnaV-Cs.roa (hash: jBc2qvPiWiousJ3+W046TnnjJzmUqrlIXiofaB4Dj6M=)
2: vlULjv-QzM7p-NMTS2Q4mWt9J80.crl (hash: CcneYSPvHkDq21kKPwSWFtNJct/id1vob3Q37AANFfE=)
3: zP5R8a3op0AinKANwtJJCIKO-GU.roa (hash: sqncdyyLwGH/z3iOAF+o4ESAH5+bPPTw9cDS/1fHdJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:58:82:a1:17:10:72:c4:1c:0e:52:64:b7:af:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Validity
Not Before: Nov 5 03:00:24 2025 GMT
Not After : Nov 6 03:00:24 2025 GMT
Subject: CN=db2eab11bedf1bc9e75b8bb727cf9d1fd7ccfbe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:05:b0:3a:d7:01:f3:76:ca:97:bf:93:ef:01:
b7:42:69:c4:e7:55:fa:05:6d:9f:2f:28:78:5d:3c:
85:ef:69:cf:14:2a:4b:a4:22:43:14:95:dd:c9:d7:
25:2f:f2:1d:31:7b:9d:d6:e7:23:b3:82:20:0c:47:
76:1a:5a:98:20:f2:3e:c3:15:c4:7d:2a:ed:ba:c8:
a5:c4:a3:59:98:8d:84:89:a8:96:46:3d:8a:c0:83:
2d:8d:8b:9e:cc:b0:9a:85:83:c1:39:6c:bc:71:ed:
e3:87:23:df:b7:fc:4f:e1:8b:06:1e:c5:27:3e:ec:
f0:b5:19:52:0c:2b:9d:5f:b2:10:31:7d:e7:72:55:
1a:4c:56:31:cb:19:ad:7e:12:f4:10:0f:63:d3:04:
45:b8:34:a5:bb:e2:00:2a:34:29:ef:d2:80:50:28:
57:17:35:45:24:d0:74:04:1a:66:1b:39:c9:24:6f:
dd:f9:c8:59:88:a0:87:6a:ee:56:ee:11:66:76:7b:
7c:16:f0:63:fa:ad:35:39:db:74:ca:32:e7:44:d4:
3c:77:af:06:8a:11:bf:53:54:9d:42:de:71:72:dc:
dc:48:26:97:2a:81:dc:b4:eb:33:79:cd:47:fe:df:
5f:61:a6:da:b6:fa:4f:40:18:f1:bb:cf:fc:78:91:
55:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2E:AB:11:BE:DF:1B:C9:E7:5B:8B:B7:27:CF:9D:1F:D7:CC:FB:E5
X509v3 Authority Key Identifier:
keyid:BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:99:3f:11:fc:7b:84:78:8f:a8:f0:93:13:32:92:e0:2d:8b:
0d:38:a3:50:2a:67:c4:fb:3d:92:8c:e9:ce:ed:5b:29:48:a2:
ce:c8:b3:2d:61:d4:4a:dd:b7:cf:27:c7:f7:3a:ce:69:c5:6b:
a6:ec:8c:3e:0e:a8:22:9d:26:7c:f4:4f:1e:c3:cb:2f:e3:e5:
06:6a:86:28:ab:70:bb:10:fa:68:27:1b:bd:5b:7c:6f:66:f2:
ff:dd:c6:24:15:b8:d6:c1:6f:7c:94:05:fc:1a:c9:c8:d1:d7:
88:96:f2:5c:ac:6a:c2:a3:47:71:fe:4b:e1:61:be:93:30:2b:
fc:ae:d9:ca:30:e6:55:41:8b:5c:9b:eb:dc:a3:11:b0:5f:c7:
df:bd:89:90:75:98:d4:43:a0:2c:f0:b5:7d:f4:6f:86:39:c8:
c3:31:b6:13:e0:01:4e:f2:5e:ac:6b:29:3e:47:e6:f6:7b:a0:
27:3d:1f:53:43:91:cc:b2:03:13:d9:ce:d3:d7:52:72:0c:ce:
1a:ff:b4:70:3f:a9:58:e5:e9:e7:b1:ea:02:5d:61:fc:5c:88:
35:bb:25:05:c7:33:b1:48:b0:1e:80:72:8d:20:65:b9:78:4b:
16:a9:03:fc:55:e9:e5:5f:5f:ba:48:4e:cf:42:89:04:fc:f7:
f8:35:3b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:58:34 2025 by rpki-client