Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
File: vlULjv-QzM7p-NMTS2Q4mWt9J80.mft (raw, json)
Hash identifier: /qZBtPqnc2oZNs+1ymszlCeHgJ7SbCqH+0G6ozX24b0=
Subject key identifier: B1:E4:9B:43:3B:E6:79:98:E9:2A:58:CF:8D:D3:E6:C1:D4:98:60:8F
Authority key identifier: BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
Certificate issuer: /CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Certificate serial: 0198D9608B493341E5AA2636F1EC9DFA8EA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
Manifest number: 1391
Signing time: Sun 24 Aug 2025 00:00:39 +0000
Manifest this update: Sun 24 Aug 2025 00:00:39 +0000
Manifest next update: Mon 25 Aug 2025 00:00:39 +0000
Files and hashes: 1: ATQyeIdV9fi3WPbx9o-TPnaV-Cs.roa (hash: jBc2qvPiWiousJ3+W046TnnjJzmUqrlIXiofaB4Dj6M=)
2: vlULjv-QzM7p-NMTS2Q4mWt9J80.crl (hash: 1bcvnmzDsfPi9crgGvH/RiiXPKnSI4b/zKO1/yAFrSg=)
3: zP5R8a3op0AinKANwtJJCIKO-GU.roa (hash: sqncdyyLwGH/z3iOAF+o4ESAH5+bPPTw9cDS/1fHdJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:60:8b:49:33:41:e5:aa:26:36:f1:ec:9d:fa:8e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Validity
Not Before: Aug 24 00:00:39 2025 GMT
Not After : Aug 25 00:00:39 2025 GMT
Subject: CN=b1e49b433be67998e92a58cf8dd3e6c1d498608f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:87:43:18:00:9c:93:18:35:02:28:23:0d:68:
59:96:0b:eb:69:4f:56:5e:15:4e:59:93:d7:23:81:
05:f7:ff:21:4f:f1:4f:f6:9f:3d:40:5b:30:52:75:
f8:5f:04:31:ed:4f:aa:dc:a3:56:28:d2:4d:78:5a:
cb:44:31:b5:bc:36:41:74:af:aa:55:06:f7:62:75:
be:ad:22:86:25:c8:33:7e:3b:87:3e:1f:a0:d8:cc:
09:b4:b8:13:cd:6d:73:8c:56:29:a0:98:97:48:86:
ec:71:50:4b:f7:b3:99:18:c9:12:e2:b8:a5:53:a7:
9f:57:a0:f9:aa:58:ac:cc:d0:33:8b:97:84:94:89:
3d:cf:ff:04:56:3e:1f:65:27:e6:bd:eb:4c:d9:eb:
8c:3a:a8:cf:22:b8:e9:ad:c4:ce:af:14:ee:b5:c6:
64:d0:9c:4a:2d:d4:92:e1:ef:23:69:df:87:43:1d:
4e:46:dd:a8:ae:6e:45:72:0d:9d:c1:77:d5:30:35:
57:b6:f8:8c:5d:1a:d6:28:fc:06:29:02:5a:22:d0:
80:1e:b3:96:74:81:b6:c0:fc:1a:d2:12:69:69:32:
a2:fa:85:62:ee:ec:43:73:b6:15:51:b2:ce:6c:f8:
17:73:13:04:fa:df:60:97:f4:80:29:df:b8:9f:bb:
6f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E4:9B:43:3B:E6:79:98:E9:2A:58:CF:8D:D3:E6:C1:D4:98:60:8F
X509v3 Authority Key Identifier:
keyid:BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:4d:0c:0b:d1:1b:5b:fe:dd:91:9e:49:a1:74:0d:3b:34:09:
fb:83:b5:e5:25:85:3d:47:61:b6:ec:05:3c:6d:87:b7:b9:5b:
fb:f7:95:80:f0:2b:5a:1e:03:d6:93:89:6e:60:d8:9e:2e:2f:
71:a3:b7:e9:41:31:a1:d5:57:d8:12:67:b6:76:06:51:81:fb:
d8:1b:96:0b:39:97:71:2c:50:82:37:3e:b4:22:7b:b1:5b:9a:
78:25:9e:71:56:62:fb:1d:83:6f:bd:66:91:3b:b1:e4:bb:6f:
6a:a6:41:86:c4:14:7e:f8:1c:44:8e:96:ec:6e:30:8f:27:aa:
dd:75:2a:2e:e3:2d:14:1b:a4:2f:6d:aa:89:f9:ce:97:78:ef:
aa:84:00:bc:a9:79:ae:7f:7f:64:4b:2b:c2:32:dc:cb:6c:56:
c1:08:e5:6e:f8:91:50:7e:ce:e8:7d:d5:d0:aa:53:a2:2d:b2:
0a:07:30:c1:35:a3:ae:4d:bf:6b:ff:6a:9e:52:df:89:89:a7:
a4:91:5e:d8:e0:3e:42:54:29:b3:f2:20:3c:26:62:b8:bc:17:
a5:2f:0f:67:f5:ed:92:72:18:91:cb:bd:d2:07:47:cc:55:83:
3e:19:8a:69:74:2b:a6:ad:57:b9:ff:2f:f9:3f:50:f0:96:db:
03:d3:90:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjZYItJM0HlqiY28eyd+o6gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNTUwYjhlZmY5MGNjY2VlOWY4ZDMxMzRiNjQzODk5NmI3
ZDI3Y2QwHhcNMjUwODI0MDAwMDM5WhcNMjUwODI1MDAwMDM5WjAzMTEwLwYDVQQD
EyhiMWU0OWI0MzNiZTY3OTk4ZTkyYTU4Y2Y4ZGQzZTZjMWQ0OTg2MDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IdDGACckxg1AigjDWhZlgvraU9W
XhVOWZPXI4EF9/8hT/FP9p89QFswUnX4XwQx7U+q3KNWKNJNeFrLRDG1vDZBdK+q
VQb3YnW+rSKGJcgzfjuHPh+g2MwJtLgTzW1zjFYpoJiXSIbscVBL97OZGMkS4ril
U6efV6D5qliszNAzi5eElIk9z/8EVj4fZSfmvetM2euMOqjPIrjprcTOrxTutcZk
0JxKLdSS4e8jad+HQx1ORt2orm5Fcg2dwXfVMDVXtviMXRrWKPwGKQJaItCAHrOW
dIG2wPwa0hJpaTKi+oVi7uxDc7YVUbLObPgXcxME+t9gl/SAKd+4n7tvZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLHkm0M75nmY6SpYz43T5sHUmGCPMB8GA1UdIwQY
MBaAFL5VC47/kMzO6fjTE0tkOJlrfSfNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmxVTGp2LVF6TTdwLU5NVFMyUTRtV3Q5SjgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8zNDBkY2QtM2FlZS00MDEyLTkyMzMt
YzE1NTMyYmFmZjdkLzEvdmxVTGp2LVF6TTdwLU5NVFMyUTRtV3Q5SjgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8zNDBkY2QtM2FlZS00MDEyLTkyMzMtYzE1NTMyYmFmZjdk
LzEvdmxVTGp2LVF6TTdwLU5NVFMyUTRtV3Q5SjgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJE0MC9Eb
W/7dkZ5JoXQNOzQJ+4O15SWFPUdhtuwFPG2Ht7lb+/eVgPArWh4D1pOJbmDYni4v
caO36UExodVX2BJntnYGUYH72BuWCzmXcSxQgjc+tCJ7sVuaeCWecVZi+x2Db71m
kTux5LtvaqZBhsQUfvgcRI6W7G4wjyeq3XUqLuMtFBukL22qifnOl3jvqoQAvKl5
rn9/ZEsrwjLcy2xWwQjlbviRUH7O6H3V0KpToi2yCgcwwTWjrk2/a/9qnlLfiYmn
pJFe2OA+QlQps/IgPCZiuLwXpS8PZ/XtknIYkcu90gdHzFWDPhmKaXQrpq1Xuf8v
+T9Q8JbbA9OQ9A==
-----END CERTIFICATE-----
Generated at Sun Aug 24 05:38:55 2025 by rpki-client