Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
File: vptUWMI322WEjLKsvsbblCP8s6Y.mft (raw, json)
Hash identifier: cBEiv7b/nckY8S+0qxE82NXSdaA1msx+Njp3SdBK3g8=
Subject key identifier: B1:7D:C8:B8:79:89:6C:DD:55:21:27:83:D6:02:D3:06:46:BD:D2:43
Authority key identifier: BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6
Certificate issuer: /CN=be9b5458c237db65848cb2acbec6db9423fcb3a6
Certificate serial: 01987418A7AF4258137497898F60B3CAC751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
Manifest number: 11B1
Signing time: Mon 04 Aug 2025 08:00:29 +0000
Manifest this update: Mon 04 Aug 2025 08:00:29 +0000
Manifest next update: Tue 05 Aug 2025 08:00:29 +0000
Files and hashes: 1: SPOdZUKsCzIXgJOCF_UL7n1RilU.roa (hash: AvcsY0IcsdeApRna15WxWc9F7nJGA8l55JTs96Qf9tg=)
2: vptUWMI322WEjLKsvsbblCP8s6Y.crl (hash: hOTNDz9m5qUK4kYW5KcRjUgWNBza2115l4lN50pA1Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:a7:af:42:58:13:74:97:89:8f:60:b3:ca:c7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9b5458c237db65848cb2acbec6db9423fcb3a6
Validity
Not Before: Aug 4 08:00:29 2025 GMT
Not After : Aug 5 08:00:29 2025 GMT
Subject: CN=b17dc8b879896cdd55212783d602d30646bdd243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7a:38:b7:9b:de:bb:68:8d:24:93:5f:14:91:
3d:b6:31:b7:da:27:88:07:11:ad:e6:ff:7a:fc:66:
db:ca:61:c7:d6:c9:4f:ff:0a:fe:5c:fb:97:9d:74:
67:56:8c:cd:7f:61:37:f9:17:8f:69:ab:41:7c:ea:
e4:6d:dc:0e:25:7d:65:65:fd:39:cc:0a:87:ba:2c:
5c:b4:24:df:e2:9e:77:f9:a0:8e:b0:4a:94:bf:40:
6a:df:47:ad:13:81:92:92:b2:a2:03:7d:26:e3:a0:
61:43:d0:49:5c:9d:36:b4:62:1a:db:15:3b:ad:95:
55:d5:b3:d6:53:4f:8d:71:00:8f:7d:dd:79:ac:d2:
e6:9a:bd:09:1c:e0:b8:9e:10:fd:b9:55:53:2f:ce:
86:d4:48:66:8d:41:cc:53:a7:33:6b:e4:4e:90:9c:
70:13:b3:82:6a:79:ed:a3:83:aa:ee:47:c1:7b:22:
9a:9b:03:6f:11:d7:71:b4:93:68:97:09:48:93:e1:
88:46:46:64:2a:14:4d:15:70:79:e7:8b:d0:9d:f9:
4f:7f:a7:8d:1a:bb:d8:93:cc:e3:5b:77:2e:ce:ae:
67:73:f3:0b:d6:dc:6a:f5:ea:c4:07:af:df:2f:e0:
12:3e:70:81:fd:f5:9e:0d:4b:e5:77:7f:fe:ee:bd:
3b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7D:C8:B8:79:89:6C:DD:55:21:27:83:D6:02:D3:06:46:BD:D2:43
X509v3 Authority Key Identifier:
keyid:BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:82:07:af:f1:f7:63:94:3f:d7:9b:c8:be:8a:c4:30:56:e5:
24:c7:0b:8f:7c:6a:75:38:be:7a:c8:1e:36:46:56:d7:85:9b:
25:b3:be:a7:f7:5d:b9:dc:6a:e6:8a:db:e8:e8:f9:50:be:7e:
e7:25:a6:98:64:07:27:f9:6b:56:03:19:33:70:ea:40:2d:39:
f0:fc:b0:20:b1:46:52:3f:71:7b:48:b4:c8:74:cd:7c:20:fe:
4d:09:1c:f5:f7:1a:4c:45:2f:6e:5d:db:9d:53:8d:32:1b:47:
95:bb:48:82:38:13:6f:94:9a:14:4f:4a:0c:18:e2:27:dd:78:
94:34:1e:e7:8f:06:68:40:02:fb:a8:0e:ad:72:0d:1f:ab:75:
da:51:de:75:ae:37:5f:f5:ad:ec:a7:ad:16:1f:15:d8:d8:21:
dc:f7:12:f5:0b:45:86:80:d6:dc:d8:5d:6a:f2:f3:06:23:4e:
2a:45:e3:76:14:ce:28:22:a2:eb:ad:31:5d:ab:13:63:4f:79:
89:df:b5:2c:b7:66:71:5c:6e:9b:8e:39:a7:7b:0b:59:93:1c:
86:7e:eb:b2:58:21:e0:30:5b:14:17:be:06:28:97:a0:ac:c1:
68:17:91:80:a7:82:fc:1c:df:18:e3:dd:43:36:7f:52:0c:87:
3f:30:d8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:52 2025 by rpki-client