Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
File: VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft (raw, json)
Hash identifier: 9YtURr/GDu94cgK8+Z7HzCaeXAkeAhNJlCEBDuN5+8c=
Subject key identifier: 0E:87:6E:1C:68:B6:34:FE:44:32:DD:84:94:38:5C:39:CC:C8:82:A7
Authority key identifier: 55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06
Certificate issuer: /CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
Certificate serial: 019894B7E1C67AB4A320BE8B660552B33A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
Manifest number: 04E0
Signing time: Sun 10 Aug 2025 16:02:15 +0000
Manifest this update: Sun 10 Aug 2025 16:02:15 +0000
Manifest next update: Mon 11 Aug 2025 16:02:15 +0000
Files and hashes: 1: VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl (hash: fQnLlB1GIol32MHcxfDI9wGUbaC8TLFvsiAPOW8+Sk8=)
2: zG1LsNOebUzuPc00J0IFIKriwG4.roa (hash: eQXTqod6VUNMvJMdBIHtPJpSpipS6FsaoAARJhSyhHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b7:e1:c6:7a:b4:a3:20:be:8b:66:05:52:b3:3a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
Validity
Not Before: Aug 10 16:02:15 2025 GMT
Not After : Aug 11 16:02:15 2025 GMT
Subject: CN=0e876e1c68b634fe4432dd8494385c39ccc882a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a2:5e:a6:a3:44:e3:fe:c9:75:12:51:0f:a0:
92:ca:4a:6a:33:c0:93:8e:ed:9a:d5:46:94:c6:97:
47:42:e1:9d:1f:92:05:b4:78:c2:04:00:1d:03:ea:
f7:ce:c5:f6:52:34:8c:d5:13:3e:46:1d:90:f4:b9:
fe:3e:c2:2d:26:a7:ec:5e:07:97:88:6e:ef:cc:86:
ec:5d:1e:9e:03:40:4c:9c:a6:37:7f:90:e3:8f:77:
a7:27:17:81:7e:6f:80:d7:5a:3f:0e:49:ae:0f:13:
a3:11:58:c4:d9:1d:66:e1:00:0d:18:ef:02:28:13:
df:90:3b:2f:d6:ae:34:9d:2b:e4:33:aa:de:1f:c2:
b0:d1:b2:90:8f:a5:3a:94:53:45:1f:e9:92:d4:fd:
f4:62:a0:0c:0a:ab:0b:28:ac:45:e0:02:19:05:1b:
b5:33:36:bd:2b:22:8d:4f:35:2e:10:3c:28:9a:4d:
dd:f1:64:b9:aa:60:b7:89:cf:e4:37:8f:63:8b:f4:
71:9e:85:65:cb:7a:45:bf:36:1f:fc:1b:3f:84:56:
ae:b5:b6:43:18:3b:7f:2d:64:6e:8f:53:c0:33:f1:
fa:21:cc:39:04:7a:ec:f6:02:4c:d9:92:cd:90:af:
42:68:02:49:25:20:24:0b:57:00:0e:f8:6d:aa:1c:
0c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:87:6E:1C:68:B6:34:FE:44:32:DD:84:94:38:5C:39:CC:C8:82:A7
X509v3 Authority Key Identifier:
keyid:55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:2b:49:0c:93:2a:07:a3:a6:af:26:29:7f:66:c4:65:f6:24:
94:4e:c2:65:04:4c:7b:8b:76:e1:96:98:b6:6a:d2:ae:cf:f3:
7a:61:14:3f:45:e8:c7:60:09:69:48:02:46:7b:df:ff:40:0b:
40:13:49:93:7f:10:02:75:0d:30:88:86:b2:30:28:bf:0f:c5:
43:ed:bb:92:54:d6:80:14:0a:d0:db:ad:3d:75:27:9f:70:df:
bb:de:37:70:d6:31:23:85:0d:52:4b:96:ce:d0:f9:ff:20:39:
78:f8:2b:60:25:93:e4:94:0c:bb:1f:f5:0c:13:19:71:ca:3d:
90:e1:d0:0d:3f:1a:c9:12:c4:3d:a1:47:fa:0c:5c:91:10:14:
a5:98:af:7d:53:82:40:c5:a3:b9:9e:0f:be:bb:0e:1e:89:4c:
23:ec:d9:96:bc:c8:fa:9d:47:05:e8:79:61:55:71:95:f7:53:
4b:06:ef:8a:9b:29:a4:c5:1d:20:7a:60:84:cd:b4:8c:42:c4:
8b:89:89:28:15:27:00:2a:85:ca:9a:28:a0:64:d3:91:bb:5c:
17:67:dd:a7:b9:85:38:73:da:c7:52:73:aa:ac:96:e8:a4:5e:
f6:31:b7:8f:bf:99:1c:da:40:8f:26:40:bc:b2:6c:d7:6a:fa:
9d:86:47:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiUt+HGerSjIL6LZgVSszpXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NDJiNzY2ZWY1N2Q2OWNmNGZiZGU0YmNiNmYwYWYwNmEz
YjIyMDYwHhcNMjUwODEwMTYwMjE1WhcNMjUwODExMTYwMjE1WjAzMTEwLwYDVQQD
EygwZTg3NmUxYzY4YjYzNGZlNDQzMmRkODQ5NDM4NWMzOWNjYzg4MmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKJepqNE4/7JdRJRD6CSykpqM8CT
ju2a1UaUxpdHQuGdH5IFtHjCBAAdA+r3zsX2UjSM1RM+Rh2Q9Ln+PsItJqfsXgeX
iG7vzIbsXR6eA0BMnKY3f5Djj3enJxeBfm+A11o/DkmuDxOjEVjE2R1m4QANGO8C
KBPfkDsv1q40nSvkM6reH8Kw0bKQj6U6lFNFH+mS1P30YqAMCqsLKKxF4AIZBRu1
Mza9KyKNTzUuEDwomk3d8WS5qmC3ic/kN49ji/RxnoVly3pFvzYf/Bs/hFautbZD
GDt/LWRuj1PAM/H6Icw5BHrs9gJM2ZLNkK9CaAJJJSAkC1cADvhtqhwMlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6HbhxotjT+RDLdhJQ4XDnMyIKnMB8GA1UdIwQY
MBaAFFVCt2bvV9ac9PveS8tvCvBqOyIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlVLM1p1OVgxcHowLTk1THkyOEs4R283SWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NDZlYmEtOWMwZC00NzY1LWIzZGMt
NzgzMDhiMmY1MjM0LzEvVlVLM1p1OVgxcHowLTk1THkyOEs4R283SWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80NDZlYmEtOWMwZC00NzY1LWIzZGMtNzgzMDhiMmY1MjM0
LzEvVlVLM1p1OVgxcHowLTk1THkyOEs4R283SWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVStJDJMq
B6OmryYpf2bEZfYklE7CZQRMe4t24ZaYtmrSrs/zemEUP0Xox2AJaUgCRnvf/0AL
QBNJk38QAnUNMIiGsjAovw/FQ+27klTWgBQK0NutPXUnn3Dfu943cNYxI4UNUkuW
ztD5/yA5ePgrYCWT5JQMux/1DBMZcco9kOHQDT8ayRLEPaFH+gxckRAUpZivfVOC
QMWjuZ4PvrsOHolMI+zZlrzI+p1HBeh5YVVxlfdTSwbvipsppMUdIHpghM20jELE
i4mJKBUnACqFypoooGTTkbtcF2fdp7mFOHPax1JzqqyW6KRe9jG3j7+ZHNpAjyZA
vLJs12r6nYZHsA==
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:29:26 2025 by rpki-client