Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
File: VuhSHoDy8HGjE4W837wxpiHGj5Q.mft (raw, json)
Hash identifier: kPQ1Tr+9E50KHCV416aJVLl4lGpaSVde808IfyjmT60=
Subject key identifier: 21:76:2C:37:A5:DF:66:8C:00:69:E2:CA:33:C4:F6:98:0D:75:53:05
Authority key identifier: 56:E8:52:1E:80:F2:F0:71:A3:13:85:BC:DF:BC:31:A6:21:C6:8F:94
Certificate issuer: /CN=56e8521e80f2f071a31385bcdfbc31a621c68f94
Certificate serial: 01984287909B7BA11E9DB5E5118BA1E122C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
Manifest number: 0217
Signing time: Fri 25 Jul 2025 17:00:37 +0000
Manifest this update: Fri 25 Jul 2025 17:00:37 +0000
Manifest next update: Sat 26 Jul 2025 17:00:37 +0000
Files and hashes: 1: VuhSHoDy8HGjE4W837wxpiHGj5Q.crl (hash: t3Jpm1bRVxc1ZXWmE4MfoKtIaLUcd1UCUiVJfVzsCY0=)
2: gz5Fn0iYS2J-2PWlXPOubZS66_c.roa (hash: 3ZNULpIUwqK52p1xdQUbvRyZUixjUvhEv6tYcx6J92Y=)
3: zfYBzyR4XCbBgM1ilkxfdwCQIbQ.roa (hash: ZQ37lZflawjbgxhO2eI1Uv+5KVEl1Uecz8BJ0COt2xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:87:90:9b:7b:a1:1e:9d:b5:e5:11:8b:a1:e1:22:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56e8521e80f2f071a31385bcdfbc31a621c68f94
Validity
Not Before: Jul 25 17:00:37 2025 GMT
Not After : Jul 26 17:00:37 2025 GMT
Subject: CN=21762c37a5df668c0069e2ca33c4f6980d755305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:87:60:05:c5:fd:2c:e9:ca:00:97:36:66:64:
71:86:ec:59:1d:da:7f:01:74:0f:4c:89:cd:e7:10:
1d:ee:64:ce:b6:83:77:de:4f:49:ce:95:4d:ea:14:
52:ba:03:e4:bc:7c:0c:ec:56:f3:86:7f:27:70:d9:
19:49:6c:bb:1f:28:ec:33:68:52:46:9e:8e:6e:3c:
cb:be:cd:de:0f:7c:ff:39:0a:12:f8:66:92:a9:b5:
24:5d:3b:43:34:2d:43:99:95:51:e4:46:38:f8:ec:
c3:85:6a:a1:0e:9e:4c:7d:fa:f4:f6:50:93:d9:e1:
0b:2f:e4:52:9e:bb:b7:21:3c:aa:6e:36:7c:70:83:
17:0d:fe:56:85:f8:12:84:77:98:94:ac:00:6c:ee:
86:4b:5e:30:87:aa:b2:9b:38:fc:48:0d:a8:43:36:
29:b6:93:9b:dc:50:96:5e:21:12:c9:ec:9a:ab:16:
e7:29:6b:ed:ed:a9:3f:10:20:2f:14:3d:3b:f7:23:
c3:29:80:cd:6b:3f:f8:43:32:4c:db:5a:53:b8:ae:
4a:2a:97:70:d3:5b:60:d8:d9:38:e8:22:5d:f7:1a:
a7:14:22:e0:7e:46:72:79:39:d2:59:02:03:9a:ed:
78:04:40:ba:80:5d:29:e0:07:8f:38:15:aa:aa:d3:
1a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:76:2C:37:A5:DF:66:8C:00:69:E2:CA:33:C4:F6:98:0D:75:53:05
X509v3 Authority Key Identifier:
keyid:56:E8:52:1E:80:F2:F0:71:A3:13:85:BC:DF:BC:31:A6:21:C6:8F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b8:cf:5a:03:7e:58:02:9b:b4:52:ab:1a:68:6a:3e:a1:be:
65:42:ef:c3:ef:06:8a:10:df:a3:c6:cf:92:13:ee:3e:39:0a:
f9:17:e3:e6:3c:ed:47:86:6e:75:70:89:c8:49:65:77:88:a1:
63:b4:ab:4c:c5:e1:8b:a9:16:f9:7f:f1:3d:65:44:9b:82:77:
6d:06:ce:c5:d8:ad:a7:09:27:6d:e2:61:fb:e7:68:96:ee:c4:
b0:da:47:f1:28:f7:a7:ec:43:53:69:ff:99:35:4a:44:03:a6:
5a:f3:50:a9:51:13:31:0e:a9:8d:f5:7f:16:bd:c6:c9:7e:3e:
67:6b:5d:e5:e1:24:b4:d2:3d:e8:8f:dc:23:da:08:0b:e4:29:
7b:f5:f2:49:fa:3c:c7:d1:80:e7:74:67:4b:96:6b:1e:ee:b0:
84:e5:cb:db:d4:14:29:87:57:4b:53:71:82:3a:d8:8f:be:b1:
30:aa:20:65:80:ce:5e:3d:08:7e:6e:45:00:33:30:99:8a:55:
ec:c2:3f:0a:10:15:32:26:26:5e:3b:3b:cd:ca:39:e6:e1:27:
f2:9b:d4:20:6a:b5:56:67:fe:89:ff:05:fe:e4:92:16:c6:2d:
8c:06:55:fd:35:cf:14:b4:60:e4:53:e3:42:81:15:15:91:33:
fa:77:ea:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhCh5Cbe6EenbXlEYuh4SLHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZTg1MjFlODBmMmYwNzFhMzEzODViY2RmYmMzMWE2MjFj
NjhmOTQwHhcNMjUwNzI1MTcwMDM3WhcNMjUwNzI2MTcwMDM3WjAzMTEwLwYDVQQD
EygyMTc2MmMzN2E1ZGY2NjhjMDA2OWUyY2EzM2M0ZjY5ODBkNzU1MzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4dgBcX9LOnKAJc2ZmRxhuxZHdp/
AXQPTInN5xAd7mTOtoN33k9JzpVN6hRSugPkvHwM7Fbzhn8ncNkZSWy7HyjsM2hS
Rp6ObjzLvs3eD3z/OQoS+GaSqbUkXTtDNC1DmZVR5EY4+OzDhWqhDp5Mffr09lCT
2eELL+RSnru3ITyqbjZ8cIMXDf5WhfgShHeYlKwAbO6GS14wh6qymzj8SA2oQzYp
tpOb3FCWXiESyeyaqxbnKWvt7ak/ECAvFD079yPDKYDNaz/4QzJM21pTuK5KKpdw
01tg2Nk46CJd9xqnFCLgfkZyeTnSWQIDmu14BEC6gF0p4AePOBWqqtMa1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCF2LDel32aMAGniyjPE9pgNdVMFMB8GA1UdIwQY
MBaAFFboUh6A8vBxoxOFvN+8MaYhxo+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnVoU0hvRHk4SEdqRTRXODM3d3hwaUhHajVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWYzOTktMGE4OS00OGNhLTk0NzMt
MGRhMGYyYWQ0Njg4LzEvVnVoU0hvRHk4SEdqRTRXODM3d3hwaUhHajVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWYzOTktMGE4OS00OGNhLTk0NzMtMGRhMGYyYWQ0Njg4
LzEvVnVoU0hvRHk4SEdqRTRXODM3d3hwaUhHajVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbjPWgN+
WAKbtFKrGmhqPqG+ZULvw+8GihDfo8bPkhPuPjkK+Rfj5jztR4ZudXCJyElld4ih
Y7SrTMXhi6kW+X/xPWVEm4J3bQbOxditpwknbeJh++dolu7EsNpH8Sj3p+xDU2n/
mTVKRAOmWvNQqVETMQ6pjfV/Fr3GyX4+Z2td5eEktNI96I/cI9oIC+Qpe/XySfo8
x9GA53RnS5ZrHu6whOXL29QUKYdXS1NxgjrYj76xMKogZYDOXj0Ifm5FADMwmYpV
7MI/ChAVMiYmXjs7zco55uEn8pvUIGq1Vmf+if8F/uSSFsYtjAZV/TXPFLRg5FPj
QoEVFZEz+nfqbQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:19:53 2025 by rpki-client