Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
File: vlULjv-QzM7p-NMTS2Q4mWt9J80.mft (raw, json)
Hash identifier: 9hU5O0KWgXeG2TbQ692gVmolTPgLAsyVvE+aG2632d4=
Subject key identifier: BB:EB:2C:FA:71:A3:C3:25:03:29:5A:07:C1:4A:F8:61:B3:E9:15:99
Authority key identifier: BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
Certificate issuer: /CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Certificate serial: 0199FB0F41A431AA1950ACD2F4C96E2A87C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
Manifest number: 1427
Signing time: Sun 19 Oct 2025 06:01:45 +0000
Manifest this update: Sun 19 Oct 2025 06:01:45 +0000
Manifest next update: Mon 20 Oct 2025 06:01:45 +0000
Files and hashes: 1: ATQyeIdV9fi3WPbx9o-TPnaV-Cs.roa (hash: jBc2qvPiWiousJ3+W046TnnjJzmUqrlIXiofaB4Dj6M=)
2: vlULjv-QzM7p-NMTS2Q4mWt9J80.crl (hash: JyT9YeF6a4KIpWZsJn8DqZjxQOpYZrqQrn6nPsa8ZgA=)
3: zP5R8a3op0AinKANwtJJCIKO-GU.roa (hash: sqncdyyLwGH/z3iOAF+o4ESAH5+bPPTw9cDS/1fHdJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:41:a4:31:aa:19:50:ac:d2:f4:c9:6e:2a:87:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Validity
Not Before: Oct 19 06:01:45 2025 GMT
Not After : Oct 20 06:01:45 2025 GMT
Subject: CN=bbeb2cfa71a3c32503295a07c14af861b3e91599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:33:44:48:c0:a2:46:53:85:29:35:fc:fa:8a:
19:c1:e7:49:03:4d:c1:85:f5:50:34:9c:81:e6:8c:
bc:fc:46:d8:91:06:63:d6:17:57:ad:a7:fc:d1:3c:
37:ce:88:eb:2d:28:62:83:e2:16:c5:3a:97:01:87:
71:d8:4e:dd:dd:8a:81:87:f4:4d:3b:e4:cc:b6:36:
9d:c4:8f:cc:7e:5e:78:75:fe:03:9a:6b:b4:1b:97:
cd:d7:96:4e:2e:e6:0f:8d:ad:f2:c2:74:c5:f5:56:
39:fd:c2:18:e2:7b:1f:55:44:9d:c5:1c:31:90:84:
8c:18:66:b0:66:32:70:b0:98:5a:68:84:69:0d:59:
f4:11:b1:b3:cc:83:dc:3b:1d:75:3e:22:de:c1:9a:
49:a1:d5:20:4e:3d:d7:7f:71:1d:7f:cd:b0:8a:73:
3e:1f:84:b8:f0:31:37:4e:6f:c4:c3:d2:90:89:f8:
41:3e:7e:6a:04:24:77:f8:cf:9f:4b:d9:ca:ec:4b:
25:c8:aa:3b:d6:6e:a5:5c:64:fc:70:aa:20:72:0c:
36:79:fa:1c:1e:0c:84:5e:20:2f:d6:ec:ce:e7:e3:
68:41:34:a9:9c:73:e5:9d:d6:0f:97:23:20:ff:10:
43:08:cb:da:34:95:b6:4a:44:e9:7b:06:45:de:17:
26:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EB:2C:FA:71:A3:C3:25:03:29:5A:07:C1:4A:F8:61:B3:E9:15:99
X509v3 Authority Key Identifier:
keyid:BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:43:50:aa:17:b2:83:32:a1:56:9c:11:3d:00:54:41:a2:91:
61:63:00:ce:40:21:6f:b2:82:3f:5f:9b:70:0b:e6:8b:3f:00:
a7:3d:2b:30:8e:27:0d:4d:77:b8:77:11:36:de:27:ea:83:b9:
08:1b:62:62:f6:8d:33:78:0b:3a:da:fc:3c:50:26:9a:79:14:
2f:c0:cf:4d:56:a0:48:75:8e:0f:08:50:59:ad:78:91:55:50:
91:c4:0d:b2:06:93:9d:34:55:aa:84:df:e6:5a:0e:92:c7:10:
36:d0:d2:4f:5a:50:98:b7:2a:d7:c5:0c:b5:4c:3e:f5:2f:90:
ae:13:3b:29:4b:c1:60:68:43:ca:6f:64:ec:f7:84:d2:7d:0e:
98:38:1d:66:05:99:1f:8e:f6:26:b1:c9:f1:57:b8:2a:32:33:
d4:e1:4f:9e:5f:a7:dd:15:c8:b7:9d:4b:39:46:36:2e:ed:13:
df:c0:20:7d:6b:9f:00:44:f9:72:ab:83:e4:00:21:4d:82:35:
67:aa:21:ee:66:a4:eb:04:f7:5e:e4:fa:67:a0:51:60:a1:d3:
5a:95:1f:c9:24:8d:07:71:16:13:3e:90:e5:42:4d:41:ea:d7:
26:22:ab:87:78:54:92:ff:da:4c:85:3c:c1:ae:8a:f3:85:4e:
b7:77:8b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:54 2025 by rpki-client