Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
File: vSX3G6QTFIO7m4I92IZR06_UTns.mft (raw, json)
Hash identifier: QJeIyMoDQhIL3jwO694aa2RMyYUCzNVVchbQMDsZ2kA=
Subject key identifier: 3F:8C:86:E2:F8:E8:E9:B7:67:27:E5:6E:1D:9C:A1:F2:E2:82:CB:D3
Authority key identifier: BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
Certificate issuer: /CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Certificate serial: 0198D73B1EA884F22DA44D2BFED0D29AF1BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
Manifest number: 131C
Signing time: Sat 23 Aug 2025 14:00:32 +0000
Manifest this update: Sat 23 Aug 2025 14:00:32 +0000
Manifest next update: Sun 24 Aug 2025 14:00:32 +0000
Files and hashes: 1: VTzQEre1LOW5un0PlYn-CvmDAKI.roa (hash: fUzpWZIo72ujZLDiYOULGotM+6e+u6e7TR9QhDLmQyE=)
2: uOlfWw_ot1GNz-xDs0HfE8f0GXg.roa (hash: p6HLTz97eUfObx31ZQ7fD3+tg4SDQ5VAA/i07H3/8o4=)
3: vSX3G6QTFIO7m4I92IZR06_UTns.crl (hash: L9xMtf16Wze47hN5WSwITJWD+toWu2znoiMyUh2SsiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:1e:a8:84:f2:2d:a4:4d:2b:fe:d0:d2:9a:f1:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Validity
Not Before: Aug 23 14:00:32 2025 GMT
Not After : Aug 24 14:00:32 2025 GMT
Subject: CN=3f8c86e2f8e8e9b76727e56e1d9ca1f2e282cbd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7a:2e:0d:6e:e1:2b:0c:78:bd:9c:15:10:d3:
a7:7a:97:02:67:23:e0:ab:9a:ec:84:dc:9f:09:ce:
73:ee:29:dc:df:92:ff:48:fc:4f:fc:aa:7a:30:86:
30:2b:53:eb:b2:53:7e:83:68:2f:2d:a4:02:a0:bc:
45:f7:7d:4e:18:6e:0e:9d:ae:da:6d:a6:62:1e:3c:
92:09:cf:29:16:6a:87:bb:a4:42:9b:28:32:8c:cd:
92:01:aa:47:2b:48:05:c3:aa:2a:22:b4:71:a9:75:
2c:63:c0:af:e0:36:5a:71:7d:96:56:69:de:78:07:
af:6f:df:3b:b2:bc:95:75:d3:fb:05:36:a6:f4:1e:
91:ec:ef:50:da:a3:9c:41:a1:3a:ad:30:bd:57:ae:
cb:2c:82:86:99:1b:61:a2:5e:4f:df:a0:c3:e2:88:
1b:76:38:a1:6c:60:39:55:bd:92:e0:06:02:e6:f2:
af:3a:85:81:54:fe:4c:c5:17:64:79:f8:16:8e:e3:
95:8d:73:19:64:1e:8c:56:67:a6:4a:09:72:be:e2:
a9:8e:a2:d7:6a:b4:2b:35:67:4d:61:43:d6:c5:09:
5a:83:4f:4f:9d:ab:b3:24:f3:3b:f7:1f:d9:4e:d4:
d7:07:5d:09:f4:2d:11:39:ea:c4:e8:49:8b:b0:c2:
ce:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8C:86:E2:F8:E8:E9:B7:67:27:E5:6E:1D:9C:A1:F2:E2:82:CB:D3
X509v3 Authority Key Identifier:
keyid:BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:19:89:00:bb:0c:3b:73:3c:25:7a:75:ff:98:2c:ec:8c:7e:
8f:4a:f2:aa:86:b0:34:3f:f1:c3:bf:d0:7b:07:d4:08:c0:f7:
7c:aa:a7:4a:0f:5f:64:45:e1:41:97:ae:4f:75:1c:d9:ab:4b:
ad:49:ba:5d:e9:db:f7:27:a6:9d:76:a7:d8:47:6e:2e:0a:f9:
f2:18:f9:9d:73:bb:96:bb:b9:3a:2d:a4:7a:2a:c1:bb:2e:f6:
cb:ec:12:cb:dd:48:43:2b:a5:fd:4e:7c:4a:e2:64:ab:ef:e0:
91:b1:14:b2:80:be:ab:b7:e4:85:dd:91:c2:84:4e:e2:e5:b0:
3b:fa:9d:5a:91:6e:49:f8:8d:1f:57:80:bd:f8:59:c9:a9:64:
48:30:04:f2:5e:de:ce:68:37:31:b7:47:cc:8b:37:2d:8d:8e:
04:8b:af:24:7d:5c:32:c9:b2:3a:cf:8c:e3:fa:9f:8e:aa:c8:
11:9b:e3:6a:12:69:1c:8b:ec:21:7a:9c:ac:6a:68:d1:3a:4a:
eb:a2:3b:cb:b2:32:a2:3a:71:0a:a4:1d:2f:83:68:75:89:0a:
4d:41:70:ce:78:f4:ff:2c:72:d9:3e:a3:4b:4b:74:9f:df:f1:
ad:6e:38:2a:59:0a:c7:b5:f8:dd:97:92:57:19:5e:bf:c5:ab:
1e:eb:fd:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:39:56 2025 by rpki-client