Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
File: vu8TjGK4F0xqgIMG7aV-koBd6YU.mft (raw, json)
Hash identifier: xplIZ6vp8DFLCKBVxBh8DDoPmJs5FzauN+NPJksGKGg=
Subject key identifier: AA:B1:F6:3B:13:3E:E6:B0:48:A0:DE:FF:EC:C2:7A:A1:47:21:A9:4F
Authority key identifier: BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85
Certificate issuer: /CN=beef138c62b8174c6a808306eda57e92805de985
Certificate serial: 019A4DE1EAC255D74BDC4E33BC970D68BA45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
Manifest number: 0327
Signing time: Tue 04 Nov 2025 08:00:42 +0000
Manifest this update: Tue 04 Nov 2025 08:00:42 +0000
Manifest next update: Wed 05 Nov 2025 08:00:42 +0000
Files and hashes: 1: l_d8GmTWs7fC-DqkKIN-YYLDZHQ.roa (hash: bn8+7DUFYeBX/KvUpOKKsXGjyr0Z1jGCfiXQ85NTHVY=)
2: vu8TjGK4F0xqgIMG7aV-koBd6YU.crl (hash: k2K3tR+E3VCXTL6ATKeI/1BwDgdrKSQ4lmfi/C84SuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:ea:c2:55:d7:4b:dc:4e:33:bc:97:0d:68:ba:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beef138c62b8174c6a808306eda57e92805de985
Validity
Not Before: Nov 4 08:00:42 2025 GMT
Not After : Nov 5 08:00:42 2025 GMT
Subject: CN=aab1f63b133ee6b048a0deffecc27aa14721a94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fe:f9:e2:e9:1b:79:70:6d:e7:3e:dd:65:e2:
8e:d0:b8:80:7c:0d:ce:70:a1:1e:45:cd:31:33:c3:
8e:9d:65:a2:60:b9:f0:e8:17:b1:3d:e6:84:ab:29:
ea:59:48:22:88:2f:e4:60:16:df:51:44:f6:00:73:
37:6d:af:4a:03:22:1d:af:54:a4:8e:e5:c4:c4:78:
99:f0:7e:d6:6f:fb:27:20:ae:29:48:ef:6d:59:15:
02:c7:24:03:f7:74:76:20:90:35:ae:7f:5d:fe:16:
c4:5f:8c:0e:8f:dd:1e:ea:6d:23:48:81:18:65:da:
e5:89:2f:a9:e8:ac:17:52:92:d4:c3:cb:4e:62:f2:
a3:00:9d:23:e8:3b:3f:88:f0:1d:ec:2c:3b:1a:58:
9a:37:58:9b:e4:30:28:76:2e:31:23:5d:b6:96:d2:
57:d0:e3:74:9d:22:45:77:04:69:5c:1d:51:fc:80:
d7:f9:df:6c:af:43:6d:6c:53:3f:32:f4:7d:ec:88:
ad:f6:d4:40:d2:03:aa:a3:b4:7a:8b:c5:05:60:b1:
b5:eb:1c:c2:79:a0:76:f2:6b:94:95:a9:89:3c:b0:
52:00:db:ec:0c:19:57:ad:5f:82:eb:b7:4f:7f:70:
e9:88:e3:65:56:c9:41:f9:02:dc:17:cc:ae:b4:18:
78:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B1:F6:3B:13:3E:E6:B0:48:A0:DE:FF:EC:C2:7A:A1:47:21:A9:4F
X509v3 Authority Key Identifier:
keyid:BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:65:33:90:02:46:63:6d:76:6a:ce:cd:6d:3e:92:94:c9:50:
9e:fd:43:3f:c0:3c:f3:68:2b:39:00:c7:a9:cb:2f:58:0b:14:
08:57:3a:09:ae:d6:cd:f9:a7:89:64:91:81:de:2a:5d:9f:31:
38:1d:20:1d:18:a4:eb:52:16:61:ba:31:4e:7c:8c:3a:0c:6b:
26:eb:78:95:2a:39:b9:70:83:a6:48:5f:a1:19:1c:72:f5:cd:
6b:1d:fb:f3:af:f6:a0:9e:69:e9:58:80:07:96:9e:c2:81:50:
8d:c4:19:b4:36:b7:d1:49:73:9e:e0:26:2f:cc:90:3d:dd:48:
ad:95:2d:b3:4d:03:dd:5a:13:4f:0c:58:55:07:3a:76:ee:e6:
65:60:7e:be:b9:3b:98:b5:ea:c6:6e:ce:f2:82:11:67:5c:77:
65:b9:e7:88:dd:76:bd:5f:2e:9b:79:0e:35:0f:2d:e0:fc:c7:
f2:08:b9:1b:04:e7:0a:7d:45:32:e6:83:58:52:4d:c4:93:7e:
13:83:d0:76:8d:d1:7f:85:30:03:13:35:33:80:06:ec:39:7d:
98:1e:86:8d:1b:77:3d:9b:e4:05:91:af:a9:21:0b:6c:97:d0:
ff:fa:45:b2:38:0b:8c:2f:e7:07:d5:13:f0:c6:b7:44:4e:91:
2b:b0:9d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:50 2025 by rpki-client