Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
File: vu8TjGK4F0xqgIMG7aV-koBd6YU.mft (raw, json)
Hash identifier: zUTlpnS+mupTJs5MvKQpH9oOcu+msPg/66uW0TseMqk=
Subject key identifier: 0C:88:78:DA:29:92:45:E6:7C:0F:DB:69:E3:2C:19:CF:1B:BE:5B:53
Authority key identifier: BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85
Certificate issuer: /CN=beef138c62b8174c6a808306eda57e92805de985
Certificate serial: 019889FC200D5698C3642F93BE6017DC1B34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
Manifest number: 023D
Signing time: Fri 08 Aug 2025 14:00:58 +0000
Manifest this update: Fri 08 Aug 2025 14:00:58 +0000
Manifest next update: Sat 09 Aug 2025 14:00:58 +0000
Files and hashes: 1: l_d8GmTWs7fC-DqkKIN-YYLDZHQ.roa (hash: bn8+7DUFYeBX/KvUpOKKsXGjyr0Z1jGCfiXQ85NTHVY=)
2: vu8TjGK4F0xqgIMG7aV-koBd6YU.crl (hash: +eggb6S2DO3imY8wQS5fDGTdrZCWn/4q38sjPDCRaOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:fc:20:0d:56:98:c3:64:2f:93:be:60:17:dc:1b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beef138c62b8174c6a808306eda57e92805de985
Validity
Not Before: Aug 8 14:00:58 2025 GMT
Not After : Aug 9 14:00:58 2025 GMT
Subject: CN=0c8878da299245e67c0fdb69e32c19cf1bbe5b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:88:38:cf:17:ec:c0:9d:71:b8:1b:35:1f:7d:
e7:24:80:55:92:72:35:7b:e3:8d:20:59:7a:7c:84:
b1:46:35:63:1c:13:b2:5a:fb:cc:6b:e3:6c:21:a6:
de:45:e3:da:c7:36:27:dc:3c:c9:cd:64:e4:b5:6c:
12:c8:87:46:fb:e5:b7:55:7c:c7:34:81:4d:c8:a6:
61:fc:b0:dd:24:81:16:1c:69:77:84:d6:6a:95:4e:
30:ff:69:fa:56:99:f0:76:ed:0e:c8:c2:8e:7e:c6:
e7:77:3b:de:81:0d:5a:6a:c3:d5:5e:eb:c1:9a:e6:
2c:cf:0a:00:f3:26:70:9e:d6:91:fd:a7:61:db:5f:
e7:57:ad:28:4b:e6:be:93:3a:0d:26:70:dc:30:de:
f8:44:fd:69:b2:6a:74:9d:68:10:12:e8:6a:e6:98:
b9:3b:90:90:b2:e6:05:93:4b:e1:e5:a3:53:80:ad:
d0:39:b8:24:2c:af:87:bb:72:d5:a7:14:d4:50:ba:
a5:0b:90:dd:6b:3e:10:1c:66:67:ae:47:a5:1b:3d:
4e:b6:c3:99:3b:2c:18:ee:eb:c8:dd:44:a6:ff:fd:
d7:9e:0b:1d:5c:13:4d:28:0d:9e:36:be:df:42:cf:
fb:b3:4e:d0:fb:08:e9:6c:95:86:7d:94:0b:81:de:
f6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:88:78:DA:29:92:45:E6:7C:0F:DB:69:E3:2C:19:CF:1B:BE:5B:53
X509v3 Authority Key Identifier:
keyid:BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b1:2b:c5:e4:6b:ee:06:d8:b0:fa:c6:eb:b5:63:23:bd:07:
8c:46:09:22:81:17:d5:34:cb:84:c4:73:82:dd:1f:ee:1c:57:
2c:58:e9:2f:ea:9f:6a:d0:bc:1b:15:42:2a:7c:22:da:ec:4d:
9f:50:61:b9:ba:4f:31:1e:1d:e1:e9:e3:2e:5f:d0:7a:f6:a3:
07:0b:86:9e:6c:c5:9c:7b:23:c5:0e:16:44:ce:e8:47:e3:94:
fc:fe:43:41:6e:a0:97:2d:41:43:15:ce:bc:e6:a7:58:66:26:
3f:6d:90:39:46:43:ed:89:f9:70:aa:2f:4c:14:e5:4b:c3:6b:
f4:56:02:22:db:bd:c7:64:9e:5d:ca:4c:54:85:6d:39:ea:1c:
14:58:50:d1:32:e6:cd:29:e6:20:99:b0:83:0d:ff:96:8e:2e:
59:ce:b8:53:59:d4:64:09:cd:ca:b9:58:1c:38:4a:82:f8:34:
b4:3e:7d:f8:12:bf:67:a3:d2:f3:4e:b5:8a:3c:96:96:ba:53:
ec:67:9a:db:c7:ff:e5:44:42:e0:8e:e6:b9:25:75:8c:e0:67:
05:4b:7b:e2:e4:b6:f6:aa:c5:64:bb:22:6f:76:35:34:a1:ae:
20:9a:37:18:c2:d7:e3:a6:9a:74:57:1a:51:90:86:de:a3:fb:
1f:20:e1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:46:31 2025 by rpki-client