Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
File: VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft (raw, json)
Hash identifier: lZAW30x0b2n+SB5nfl4B7o89/x85eKmkyLBYfMwRhQs=
Subject key identifier: AC:BC:BB:25:BF:BA:FD:A2:51:9E:CB:8E:AE:01:44:F6:E6:AD:DE:3E
Authority key identifier: 55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06
Certificate issuer: /CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
Certificate serial: 019A52D1C920B6A2EB14DC13778EF17E298D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
Manifest number: 05C7
Signing time: Wed 05 Nov 2025 07:01:11 +0000
Manifest this update: Wed 05 Nov 2025 07:01:11 +0000
Manifest next update: Thu 06 Nov 2025 07:01:11 +0000
Files and hashes: 1: VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl (hash: qWIUfYIynKuMju1A0GHfHNTIXvUGE6/Y75IsSI6Cj0o=)
2: zG1LsNOebUzuPc00J0IFIKriwG4.roa (hash: eQXTqod6VUNMvJMdBIHtPJpSpipS6FsaoAARJhSyhHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:c9:20:b6:a2:eb:14:dc:13:77:8e:f1:7e:29:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
Validity
Not Before: Nov 5 07:01:11 2025 GMT
Not After : Nov 6 07:01:11 2025 GMT
Subject: CN=acbcbb25bfbafda2519ecb8eae0144f6e6adde3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c9:79:94:b5:52:50:31:2e:bd:30:40:c2:17:
24:8e:f5:94:8e:58:46:06:f5:fe:6b:1e:2a:df:a1:
4c:31:a3:e2:a0:c7:f8:93:99:1b:63:89:96:81:49:
36:08:4d:46:ee:61:b0:a1:54:47:e9:81:83:9b:36:
25:34:5e:4e:fd:d1:bc:42:0d:fd:bb:10:70:4f:9e:
cc:f0:f1:4b:9a:85:a1:a1:5f:0c:51:8f:b3:40:0c:
2a:25:b0:0a:07:9a:b4:e7:72:5e:b2:ba:8b:61:30:
21:ac:e9:e8:10:5c:ea:ce:c0:48:92:34:85:10:33:
10:0f:1e:b9:a3:a8:46:5f:3c:71:e5:3c:a4:b6:39:
68:d3:61:28:c6:de:4c:27:39:84:89:35:32:70:e1:
5f:81:c8:a8:0e:d8:2a:6b:21:5d:dc:e3:da:2e:10:
e3:1c:42:75:1d:f4:8e:6a:64:c7:c1:eb:03:45:b7:
57:70:21:7b:b3:cc:45:6c:cc:45:87:d3:3c:ba:14:
c2:c1:7b:9b:81:04:2f:6f:9c:db:84:52:00:91:e4:
06:bc:f0:a9:aa:44:91:55:99:0b:9d:97:50:99:da:
f2:44:ca:bd:37:10:b9:5d:7b:53:2e:d9:96:a9:6b:
c0:e0:d4:e7:40:2e:24:90:ff:f6:ce:a7:9c:b7:da:
e8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BC:BB:25:BF:BA:FD:A2:51:9E:CB:8E:AE:01:44:F6:E6:AD:DE:3E
X509v3 Authority Key Identifier:
keyid:55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:cc:25:bd:1f:9c:f7:ef:bc:83:58:8e:06:cc:31:0e:4e:99:
53:50:d0:36:53:0f:30:9a:82:62:42:e8:d3:65:ea:f1:fa:1e:
6e:3f:cb:39:6a:de:25:71:f5:f0:6d:d1:f3:ee:c6:2b:d1:97:
2c:0b:a6:8d:e3:ef:24:74:d7:05:44:22:94:51:ec:8b:e7:e8:
63:9b:30:f4:91:8d:79:a4:19:ea:34:2c:4d:e0:ce:72:fd:84:
45:be:e9:24:5f:a2:69:3d:c7:d3:65:7c:7b:76:c5:12:59:4f:
b1:85:7b:d5:67:3b:82:d6:8e:ab:bd:ba:9f:e9:a5:22:4f:ab:
bd:98:5c:ac:ec:5b:c0:9c:2e:41:09:4b:a3:36:ec:03:82:69:
fb:61:3f:59:02:cc:b5:5e:67:20:21:26:54:66:b4:b8:c2:52:
d6:a8:f3:4f:ea:40:f0:a7:35:8e:80:61:f8:d7:3d:27:e2:fc:
15:0f:4b:03:d3:a9:e5:1d:b9:e2:67:73:63:5e:db:35:5e:c3:
75:fe:84:63:ce:fa:5b:65:cc:fe:7c:69:d8:7d:4e:85:47:81:
ea:2a:11:ae:34:4b:96:8e:69:24:1f:d9:b8:ba:68:d4:54:36:
55:0f:a1:02:17:28:2b:8b:a7:42:a6:11:41:a3:93:31:54:e2:
21:9f:6d:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0ckgtqLrFNwTd47xfimNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NDJiNzY2ZWY1N2Q2OWNmNGZiZGU0YmNiNmYwYWYwNmEz
YjIyMDYwHhcNMjUxMTA1MDcwMTExWhcNMjUxMTA2MDcwMTExWjAzMTEwLwYDVQQD
EyhhY2JjYmIyNWJmYmFmZGEyNTE5ZWNiOGVhZTAxNDRmNmU2YWRkZTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycl5lLVSUDEuvTBAwhckjvWUjlhG
BvX+ax4q36FMMaPioMf4k5kbY4mWgUk2CE1G7mGwoVRH6YGDmzYlNF5O/dG8Qg39
uxBwT57M8PFLmoWhoV8MUY+zQAwqJbAKB5q053JesrqLYTAhrOnoEFzqzsBIkjSF
EDMQDx65o6hGXzxx5Tyktjlo02Eoxt5MJzmEiTUycOFfgcioDtgqayFd3OPaLhDj
HEJ1HfSOamTHwesDRbdXcCF7s8xFbMxFh9M8uhTCwXubgQQvb5zbhFIAkeQGvPCp
qkSRVZkLnZdQmdryRMq9NxC5XXtTLtmWqWvA4NTnQC4kkP/2zqect9ro+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKy8uyW/uv2iUZ7Ljq4BRPbmrd4+MB8GA1UdIwQY
MBaAFFVCt2bvV9ac9PveS8tvCvBqOyIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlVLM1p1OVgxcHowLTk1THkyOEs4R283SWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NDZlYmEtOWMwZC00NzY1LWIzZGMt
NzgzMDhiMmY1MjM0LzEvVlVLM1p1OVgxcHowLTk1THkyOEs4R283SWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80NDZlYmEtOWMwZC00NzY1LWIzZGMtNzgzMDhiMmY1MjM0
LzEvVlVLM1p1OVgxcHowLTk1THkyOEs4R283SWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAncwlvR+c
9++8g1iOBswxDk6ZU1DQNlMPMJqCYkLo02Xq8foebj/LOWreJXH18G3R8+7GK9GX
LAumjePvJHTXBUQilFHsi+foY5sw9JGNeaQZ6jQsTeDOcv2ERb7pJF+iaT3H02V8
e3bFEllPsYV71Wc7gtaOq726n+mlIk+rvZhcrOxbwJwuQQlLozbsA4Jp+2E/WQLM
tV5nICEmVGa0uMJS1qjzT+pA8Kc1joBh+Nc9J+L8FQ9LA9Op5R254mdzY17bNV7D
df6EY876W2XM/nxp2H1OhUeB6ioRrjRLlo5pJB/ZuLpo1FQ2VQ+hAhcoK4unQqYR
QaOTMVTiIZ9t4A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:36:03 2025 by rpki-client