
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
File: VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft (raw, json)
Hash identifier: ReGivhRL+OfjsQLs7L7iV4jGQF0TQ1DgIfX61aLrvUw=
Subject key identifier: B8:57:38:21:CA:2D:FF:7B:48:A6:0C:3E:0C:94:D8:CE:67:75:23:77
Authority key identifier: 55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06
Certificate issuer: /CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
Certificate serial: 01991BE56D0A4388D46435BCF97B7A5BC43A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
Manifest number: 0526
Signing time: Fri 05 Sep 2025 22:00:44 +0000
Manifest this update: Fri 05 Sep 2025 22:00:44 +0000
Manifest next update: Sat 06 Sep 2025 22:00:44 +0000
Files and hashes: 1: VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl (hash: lFVFmB3lB86xC3LjH3ON+6VY7ZE40G42gtXVFlclwa0=)
2: zG1LsNOebUzuPc00J0IFIKriwG4.roa (hash: eQXTqod6VUNMvJMdBIHtPJpSpipS6FsaoAARJhSyhHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1b:e5:6d:0a:43:88:d4:64:35:bc:f9:7b:7a:5b:c4:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
Validity
Not Before: Sep 5 22:00:44 2025 GMT
Not After : Sep 6 22:00:44 2025 GMT
Subject: CN=b8573821ca2dff7b48a60c3e0c94d8ce67752377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:19:f8:35:36:fc:2a:0e:7e:9c:22:21:af:c7:
55:25:8c:7e:a2:0a:50:6c:9a:b2:46:3e:4e:61:59:
32:d8:44:2a:01:be:11:e1:2d:e2:68:bf:e9:95:34:
59:49:63:ab:2c:55:e4:41:91:99:6d:42:6b:c8:d0:
40:68:0a:a1:cb:96:c1:24:a9:eb:a9:87:66:0c:2b:
4e:b0:83:a2:d2:68:c3:df:40:43:6b:36:96:24:f0:
ec:b9:fd:92:40:f6:db:6c:12:2b:4b:12:2b:fd:df:
51:53:d4:ff:d0:24:dc:85:12:0b:5c:2c:61:9b:c1:
b5:f3:ec:06:5c:e1:01:3b:5a:60:ec:51:8f:06:26:
9d:2c:a6:75:30:29:9c:a0:42:96:05:c8:e5:59:61:
29:c2:58:fc:33:76:99:bb:b4:62:de:33:3b:a5:07:
70:8c:bc:ad:3f:2d:07:2f:d3:9e:16:bb:46:74:db:
65:dd:3d:d8:cf:51:8e:2e:81:fb:fe:0d:c6:81:0c:
ae:eb:df:01:67:a1:21:d4:02:cd:c6:d8:f1:5d:07:
6c:f7:a2:26:b1:a9:ac:62:c1:f0:0a:f3:90:2f:2e:
1a:61:17:11:ea:eb:a1:3b:17:1d:d3:9a:6a:08:5c:
08:8e:6b:9a:73:4c:7c:9e:36:5c:c7:c2:08:b4:00:
7e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:57:38:21:CA:2D:FF:7B:48:A6:0C:3E:0C:94:D8:CE:67:75:23:77
X509v3 Authority Key Identifier:
keyid:55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ff:ee:77:21:1e:37:fb:47:24:10:e1:51:0d:53:ff:64:2d:
86:5b:f2:94:e9:99:ea:1e:4f:c7:4c:d8:00:76:06:fb:e8:25:
f8:a0:74:87:f7:2d:1d:1c:f2:d3:33:3b:8e:9a:51:5d:4f:ae:
93:dc:1e:59:2e:36:5c:a0:26:9b:77:ec:76:12:b9:53:33:ba:
13:4c:23:37:5e:e9:45:43:1d:9f:61:ff:c4:35:bb:67:fd:fc:
15:86:99:aa:5b:c0:49:e7:47:0c:e6:0f:40:5a:ec:97:7c:8e:
f3:fe:d1:9d:0f:86:fc:6a:8d:02:fd:6c:25:e9:cb:10:45:c2:
43:b7:64:13:ac:e3:12:42:c0:57:43:c9:6f:8b:c7:3c:72:3c:
8d:71:90:72:6b:75:9d:2e:2b:98:e4:32:60:49:e0:7c:27:1d:
b7:a1:38:1d:23:0f:f4:93:42:82:50:e5:d8:fe:a2:0a:a4:cb:
38:0f:ce:c2:3a:8e:a2:46:49:56:61:2e:a4:b6:9c:28:26:f2:
23:f9:29:42:96:d6:2d:74:63:06:44:7b:8f:2b:97:03:c4:da:
18:ed:41:34:81:0f:75:2c:dd:ee:48:d4:64:3c:b5:3b:4b:82:
b2:39:85:92:5c:ff:bb:28:f4:1c:c6:cf:0b:a4:0e:13:15:80:
73:3c:b5:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkb5W0KQ4jUZDW8+Xt6W8Q6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NDJiNzY2ZWY1N2Q2OWNmNGZiZGU0YmNiNmYwYWYwNmEz
YjIyMDYwHhcNMjUwOTA1MjIwMDQ0WhcNMjUwOTA2MjIwMDQ0WjAzMTEwLwYDVQQD
EyhiODU3MzgyMWNhMmRmZjdiNDhhNjBjM2UwYzk0ZDhjZTY3NzUyMzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hn4NTb8Kg5+nCIhr8dVJYx+ogpQ
bJqyRj5OYVky2EQqAb4R4S3iaL/plTRZSWOrLFXkQZGZbUJryNBAaAqhy5bBJKnr
qYdmDCtOsIOi0mjD30BDazaWJPDsuf2SQPbbbBIrSxIr/d9RU9T/0CTchRILXCxh
m8G18+wGXOEBO1pg7FGPBiadLKZ1MCmcoEKWBcjlWWEpwlj8M3aZu7Ri3jM7pQdw
jLytPy0HL9OeFrtGdNtl3T3Yz1GOLoH7/g3GgQyu698BZ6Eh1ALNxtjxXQds96Im
samsYsHwCvOQLy4aYRcR6uuhOxcd05pqCFwIjmuac0x8njZcx8IItAB+3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhXOCHKLf97SKYMPgyU2M5ndSN3MB8GA1UdIwQY
MBaAFFVCt2bvV9ac9PveS8tvCvBqOyIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlVLM1p1OVgxcHowLTk1THkyOEs4R283SWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NDZlYmEtOWMwZC00NzY1LWIzZGMt
NzgzMDhiMmY1MjM0LzEvVlVLM1p1OVgxcHowLTk1THkyOEs4R283SWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80NDZlYmEtOWMwZC00NzY1LWIzZGMtNzgzMDhiMmY1MjM0
LzEvVlVLM1p1OVgxcHowLTk1THkyOEs4R283SWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA//udyEe
N/tHJBDhUQ1T/2QthlvylOmZ6h5Px0zYAHYG++gl+KB0h/ctHRzy0zM7jppRXU+u
k9weWS42XKAmm3fsdhK5UzO6E0wjN17pRUMdn2H/xDW7Z/38FYaZqlvASedHDOYP
QFrsl3yO8/7RnQ+G/GqNAv1sJenLEEXCQ7dkE6zjEkLAV0PJb4vHPHI8jXGQcmt1
nS4rmOQyYEngfCcdt6E4HSMP9JNCglDl2P6iCqTLOA/OwjqOokZJVmEupLacKCby
I/kpQpbWLXRjBkR7jyuXA8TaGO1BNIEPdSzd7kjUZDy1O0uCsjmFklz/uyj0HMbP
C6QOExWAczy1pA==
-----END CERTIFICATE-----
Generated at Sat Sep 6 05:01:50 2025 by rpki-client