Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
File: vpxSiWGxCzIPR-i3BlTurtLyRNM.mft (raw, json)
Hash identifier: SBQ86BPK0szyUMk6+IKiEPelslLbJ+TkpD9EBrwz/h8=
Subject key identifier: 24:44:4F:03:1B:5B:C9:FE:C5:88:57:36:C5:0A:20:39:4D:E0:BB:67
Authority key identifier: BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3
Certificate issuer: /CN=be9c528961b10b320f47e8b70654eeaed2f244d3
Certificate serial: 0198D705CF5FA04946400ED9FC34C758743D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
Manifest number: 0C3B
Signing time: Sat 23 Aug 2025 13:02:18 +0000
Manifest this update: Sat 23 Aug 2025 13:02:18 +0000
Manifest next update: Sun 24 Aug 2025 13:02:18 +0000
Files and hashes: 1: vpxSiWGxCzIPR-i3BlTurtLyRNM.crl (hash: FeToItRjzcfg12WwV5AU8xT31qOqtBiNoOIOh4kXC4U=)
2: wtrOxy-Cqrf4yPJ92NbD-E33BP8.roa (hash: HZVqoFJ1fSxzdnoOFKLqW1LRpp7/mkZ4xgc+aQGadyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:cf:5f:a0:49:46:40:0e:d9:fc:34:c7:58:74:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9c528961b10b320f47e8b70654eeaed2f244d3
Validity
Not Before: Aug 23 13:02:18 2025 GMT
Not After : Aug 24 13:02:18 2025 GMT
Subject: CN=24444f031b5bc9fec5885736c50a20394de0bb67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3d:67:4c:08:6f:1a:21:7e:54:ba:ff:38:9e:
e9:06:60:e1:30:aa:d5:47:cd:1c:ea:0b:69:f6:98:
79:2e:3d:36:63:dd:1c:be:cf:49:64:de:a7:9e:20:
c3:5b:46:9f:7f:f8:2b:38:b3:14:9d:54:f0:f4:9b:
9a:01:f9:fe:4e:98:4d:27:bf:e1:ed:3e:09:d8:83:
66:73:f3:a9:0a:c1:77:32:65:92:8b:12:3d:eb:88:
8a:93:64:61:d3:42:a7:a4:66:af:c1:4c:79:07:b6:
55:7d:0f:42:07:02:15:9c:be:5e:bf:95:17:3d:02:
5c:aa:e3:fb:e7:2b:40:56:2c:bc:70:39:8d:6a:4a:
a8:d4:32:ad:6e:1e:db:26:09:20:fd:92:9d:90:0b:
28:36:aa:47:50:99:d2:60:d7:54:d1:8b:b0:f5:aa:
e2:ac:2f:fb:2e:3e:a3:56:53:c3:31:b6:95:59:15:
8e:3d:5d:cb:7a:a6:56:6c:19:13:82:9e:4d:22:65:
c9:34:25:62:9d:fb:5c:42:83:a1:aa:ff:47:c4:39:
34:ae:b7:32:77:63:e6:d5:2a:5f:7d:8a:ae:e2:69:
ac:c0:ec:d7:e4:8b:f2:8f:b1:26:15:58:f6:16:47:
41:60:86:ba:9c:ae:86:c0:f3:a9:7d:c1:dd:31:55:
2b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:44:4F:03:1B:5B:C9:FE:C5:88:57:36:C5:0A:20:39:4D:E0:BB:67
X509v3 Authority Key Identifier:
keyid:BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:27:77:64:78:f9:cf:cb:76:c0:38:93:ed:ca:7a:af:f7:4d:
84:4c:33:62:06:e6:b6:cb:21:85:6f:32:dc:63:85:72:b3:ec:
00:c7:12:f4:80:cb:d6:42:18:40:1f:d4:0e:e2:c7:d4:2f:eb:
48:8e:4e:5e:20:03:f3:1e:0b:ed:8e:60:7e:ec:50:47:c3:aa:
5a:04:e9:43:de:37:7a:b1:0d:47:27:19:fb:96:a1:5b:5b:26:
62:96:16:3c:e3:9e:e6:40:69:dc:ac:9e:41:6e:68:be:7c:31:
38:63:7f:0e:5f:1f:35:38:2c:a4:01:a3:56:9f:80:1b:59:50:
2a:ad:d4:c9:6b:5c:aa:b8:73:ff:6d:d7:74:f7:2f:18:b1:c2:
6b:a2:ee:b2:eb:5a:ca:62:f3:12:46:97:00:cd:13:52:a4:df:
f2:74:2d:df:2f:f9:1e:bf:e5:66:be:a2:f6:d7:42:81:c5:61:
6d:6b:15:e3:94:f2:15:0f:cb:45:9c:b2:a6:72:23:c6:b2:b3:
1d:f8:b1:43:e2:f3:2e:68:94:c3:e8:8a:50:4c:e4:6d:c1:7f:
ca:71:4a:74:92:8f:16:0e:f2:9f:59:6e:a7:22:92:cc:3b:1b:
bb:9b:fc:3d:9d:67:5f:73:27:a5:b1:ac:ac:2d:5d:81:6c:a4:
12:63:89:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:54 2025 by rpki-client