Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
File: vlULjv-QzM7p-NMTS2Q4mWt9J80.mft (raw, json)
Hash identifier: YxbIZ3kTLdXkey4A/7TuBjYbiJh/FS6Vq27b+JCrPgQ=
Subject key identifier: C0:DB:11:EA:6F:92:CE:C3:54:A8:DE:C1:26:F3:2A:B2:41:0F:77:29
Authority key identifier: BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
Certificate issuer: /CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Certificate serial: 0197B8C5B58550F271C2EB7E2DAE3BD2D31D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
Manifest number: 12FB
Signing time: Sat 28 Jun 2025 23:00:54 +0000
Manifest this update: Sat 28 Jun 2025 23:00:54 +0000
Manifest next update: Sun 29 Jun 2025 23:00:54 +0000
Files and hashes: 1: IJsuPHEjRD5U3Gv14sc7K0m3CaI.roa (hash: 9xaSijx/J+UcS287yiWqygtaW2+asOVi313BpTLMGG0=)
2: vlULjv-QzM7p-NMTS2Q4mWt9J80.crl (hash: Uot3MV9aO3An0sA4QQOGkqoo4cpGqOx/HdnJ5QaAhVg=)
3: zP5R8a3op0AinKANwtJJCIKO-GU.roa (hash: sqncdyyLwGH/z3iOAF+o4ESAH5+bPPTw9cDS/1fHdJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:b5:85:50:f2:71:c2:eb:7e:2d:ae:3b:d2:d3:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Validity
Not Before: Jun 28 23:00:54 2025 GMT
Not After : Jun 29 23:00:54 2025 GMT
Subject: CN=c0db11ea6f92cec354a8dec126f32ab2410f7729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c2:66:c5:72:18:d3:bc:62:94:b2:91:5f:34:
22:d5:4a:90:2f:67:76:94:c2:a0:fc:b5:be:91:3f:
9f:db:0a:bb:61:b6:59:13:80:63:25:fb:d2:38:77:
c0:2e:82:b2:05:db:7b:3a:8f:25:f6:4d:2a:c3:8e:
bd:d2:bc:12:44:09:03:84:2d:2e:6c:43:d6:11:25:
70:99:4c:e3:99:8c:c1:8e:a4:a9:63:09:25:5e:9b:
0b:cf:4d:50:ab:ac:86:8b:a7:73:b4:1d:3d:a9:d4:
c4:8f:2c:09:db:f1:84:45:bb:47:f9:4e:45:75:e9:
69:3d:0c:97:3a:91:a0:73:5b:0d:a0:f4:81:c8:84:
9c:9d:f3:5e:6e:ea:f5:62:60:ac:d3:ba:7b:4c:1d:
52:46:33:3c:99:a9:4b:30:20:a9:e8:cc:b3:4b:48:
7c:ed:21:64:05:be:ae:c1:f9:79:5a:d5:1c:44:ae:
23:fb:84:c6:27:56:e9:34:4f:ed:ba:be:8b:a1:be:
a9:61:4f:03:f5:49:24:72:4b:4f:5e:0a:07:7d:3d:
df:8d:c1:db:a4:eb:4c:50:80:58:86:f2:9f:c7:da:
0f:1f:a4:50:6c:72:b3:e0:5a:98:1a:37:a7:92:c1:
8f:b7:b9:70:89:9b:13:40:0c:fe:0d:da:ef:57:c5:
46:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DB:11:EA:6F:92:CE:C3:54:A8:DE:C1:26:F3:2A:B2:41:0F:77:29
X509v3 Authority Key Identifier:
keyid:BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:03:ba:73:cb:3e:76:7f:e1:97:40:4c:d4:4a:12:2f:a5:93:
b1:e1:df:3c:5e:ba:97:94:32:4a:0a:76:0a:ca:4c:a5:e6:ce:
f8:9e:8c:2d:45:f9:7c:b5:5a:bf:3c:ac:a9:d3:62:b1:31:d5:
2e:e8:29:fb:58:55:1c:76:db:59:e5:5f:a6:aa:7e:97:10:d1:
ee:2e:24:0c:bf:1a:2b:af:71:53:a6:f1:27:60:fa:60:b2:ef:
20:c2:c3:11:94:08:fb:ec:4f:f3:84:51:89:f4:b3:84:e0:25:
d7:fd:4f:1f:2a:75:9a:0b:03:6e:52:d5:7c:56:af:e6:54:66:
93:68:34:fb:99:a4:67:1d:a3:ee:27:7b:b1:10:9f:55:91:12:
9c:bf:6e:93:16:c9:fe:59:ae:00:8d:be:49:5f:b9:76:a3:57:
ac:6a:94:dc:2c:67:af:ad:42:35:91:ff:60:de:83:1f:c3:66:
0f:dd:84:12:03:26:79:5e:86:75:8f:b5:26:e0:b1:34:06:49:
fc:8a:3f:1c:0e:4c:9a:17:98:18:40:d8:6a:75:20:95:dd:0c:
a8:d6:54:2e:33:4e:1d:74:6c:cc:a1:a3:c9:af:56:58:58:d5:
d5:1b:bc:d4:8f:5d:aa:c1:61:1e:d4:56:a5:0b:5a:8b:44:4c:
59:e0:b6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:08:28 2025 by rpki-client