
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
File: vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft (raw, json)
Hash identifier: t99PPTfmxF8tARd+vp8/LZucptPPhDg9RgtNDEqse14=
Subject key identifier: 41:B1:44:94:9C:E7:34:CD:BD:A4:67:C2:43:BF:20:20:61:4C:97:AC
Authority key identifier: BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
Certificate issuer: /CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Certificate serial: 0198D58362ED85BC926402613E4C7028E126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 06:00:14 +0000
Manifest this update: Sat 23 Aug 2025 06:00:14 +0000
Manifest next update: Sun 24 Aug 2025 06:00:14 +0000
Files and hashes: 1: SReOpAhCLmuOcAyk55_tk_b6gzU.roa (hash: HeVQ3nZoCRM6Iyc21jnOVqYiR72eDfZp5jwY3EJ/nAk=)
2: vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl (hash: ATEbIo68gbBSeCKNGYAWGxcW1UJe3afL3iMU2XieFPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:62:ed:85:bc:92:64:02:61:3e:4c:70:28:e1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Validity
Not Before: Aug 23 06:00:14 2025 GMT
Not After : Aug 24 06:00:14 2025 GMT
Subject: CN=41b144949ce734cdbda467c243bf2020614c97ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:35:d3:95:85:db:98:fb:a4:e3:d4:f0:a9:18:
e5:32:2c:84:8d:ee:d3:96:af:32:21:ef:cd:1b:af:
a4:8f:45:39:c7:46:44:71:2c:f0:9d:46:0d:a7:43:
01:54:e0:7b:3b:bf:6c:f3:be:a1:fe:66:30:ea:95:
e9:62:99:de:8a:3d:da:f8:e4:33:03:9e:45:97:fa:
c4:5b:f7:6e:43:90:1b:a7:0d:5d:01:7d:df:f4:c0:
68:23:a0:23:4b:2a:de:dd:f1:11:49:7e:39:f5:00:
a8:42:be:bd:37:24:5d:1b:a0:e0:20:57:7e:8f:b7:
4d:16:e2:a0:86:11:04:a8:a7:c1:df:4d:1f:eb:dd:
ab:ed:37:da:40:c6:46:07:d8:03:d1:92:0b:8d:01:
bf:ba:a7:d0:20:7a:11:f0:52:fe:6c:1a:4c:f7:92:
92:5b:6f:46:e2:cb:5f:3c:9f:21:24:25:a6:c1:37:
2a:ae:36:df:8f:8d:13:8b:0a:46:57:01:7d:7c:d8:
f8:69:8e:96:35:b9:42:2e:4d:4b:4a:31:35:fe:2b:
52:18:4b:5b:8c:8a:b9:23:ac:57:f8:32:6b:3f:66:
26:1f:81:56:0d:13:75:67:ce:ff:68:b8:6d:fb:e6:
f5:57:0f:54:be:66:0c:b6:c3:c0:73:2a:ca:1e:ec:
03:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B1:44:94:9C:E7:34:CD:BD:A4:67:C2:43:BF:20:20:61:4C:97:AC
X509v3 Authority Key Identifier:
keyid:BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c1:2a:43:a2:a8:be:38:b1:c4:d2:18:a5:52:11:5e:c8:34:
34:a7:97:60:98:a3:d5:00:61:88:c6:a0:e2:62:c9:5e:47:46:
c4:e0:cb:14:23:33:e9:8d:01:07:ef:6f:dc:94:5f:62:44:e3:
90:bc:bc:3d:62:ea:6a:6a:7f:a3:5c:a2:93:22:c9:c9:d5:40:
e5:b7:e3:2a:d1:21:c7:8f:f2:08:92:1e:06:c1:a7:b4:5c:94:
3c:30:de:86:05:91:45:aa:79:f9:dd:f1:87:99:47:b0:98:1c:
84:68:2c:59:38:f5:61:4f:17:52:95:2a:ae:db:9b:18:a2:94:
c5:68:cd:a8:f4:8f:fd:ff:24:b3:4a:0d:b0:fc:c1:6d:75:16:
03:01:b1:24:e7:7a:ae:c1:7a:6b:23:68:a0:13:16:ca:ed:5e:
02:6b:85:e5:8d:ea:4e:ca:02:2d:44:32:d2:12:de:78:7f:31:
6b:3d:e5:97:e2:10:46:9f:20:47:98:8b:95:9d:ca:1d:5a:0a:
89:e0:a3:34:bf:9b:b4:a9:ff:a2:14:7d:7b:c3:d3:c1:a2:22:
f5:e2:43:7d:08:aa:dc:e8:78:e1:60:50:54:fc:3a:a5:1a:b1:
2e:46:9e:88:a7:72:9c:25:55:b1:32:0f:02:c9:3c:58:bf:e1:
e2:8b:43:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:41:41 2025 by rpki-client