Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
File: VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft (raw, json)
Hash identifier: 8c2o58C7GFHmmmOumSGFAee7HCXWLCOaoxslXZkCa3k=
Subject key identifier: 99:30:C6:1C:3D:A3:D6:07:63:49:C7:A9:96:38:21:18:7B:DD:5C:31
Authority key identifier: 55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06
Certificate issuer: /CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
Certificate serial: 019A096E8B1D42CD0576F6115F0886DA94C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
Manifest number: 05A1
Signing time: Wed 22 Oct 2025 01:00:30 +0000
Manifest this update: Wed 22 Oct 2025 01:00:30 +0000
Manifest next update: Thu 23 Oct 2025 01:00:30 +0000
Files and hashes: 1: VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl (hash: URy+T8ApVKj5OZH61LZc1BazquKQgFPrNHtO4ma+Q9c=)
2: zG1LsNOebUzuPc00J0IFIKriwG4.roa (hash: eQXTqod6VUNMvJMdBIHtPJpSpipS6FsaoAARJhSyhHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:6e:8b:1d:42:cd:05:76:f6:11:5f:08:86:da:94:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
Validity
Not Before: Oct 22 01:00:30 2025 GMT
Not After : Oct 23 01:00:30 2025 GMT
Subject: CN=9930c61c3da3d6076349c7a9963821187bdd5c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:22:e3:e1:c1:48:05:28:97:83:db:6c:80:0b:
2e:3f:18:9d:75:9d:2b:c6:8d:93:b0:03:a6:2d:ad:
48:64:ad:bb:82:8e:09:55:d0:06:36:5f:39:60:68:
a2:d3:f8:2f:d3:ce:d7:18:01:5a:7a:57:32:c6:52:
78:26:ba:42:0e:5a:dd:43:bb:67:4f:7c:fb:ed:3a:
63:34:81:20:ec:9f:ae:d0:84:8c:cf:58:11:e5:5a:
7b:42:b1:a3:6c:8d:73:32:9f:47:87:e5:b0:84:01:
bc:7d:e7:4e:3e:01:73:c5:cd:40:9f:2d:8c:31:38:
af:ff:e9:8e:92:38:c1:55:82:73:b3:a9:d3:d8:6a:
b7:71:10:cf:61:de:a3:23:00:e8:80:26:0f:d1:cb:
04:8e:1e:69:fc:4e:80:88:e7:f9:dd:1d:f5:c1:4d:
3a:68:39:d9:7e:f8:07:08:5f:7e:65:cc:4d:30:f4:
6e:a6:22:54:21:ac:16:af:ab:e5:ed:fb:96:f8:59:
97:2b:f8:77:56:74:f5:19:2a:d7:a3:e2:a0:f3:41:
ba:96:e4:5c:0d:0e:a0:da:0c:66:36:7d:98:40:40:
ff:7a:4f:0b:db:bf:85:c1:51:96:b5:f6:93:e0:f9:
e5:b0:19:d5:cd:41:cc:19:23:aa:2c:ee:36:6d:82:
1b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:30:C6:1C:3D:A3:D6:07:63:49:C7:A9:96:38:21:18:7B:DD:5C:31
X509v3 Authority Key Identifier:
keyid:55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:cc:c4:4b:15:49:e6:2d:59:62:d0:38:39:69:36:fa:12:81:
92:19:b5:f7:91:ea:04:89:1b:6e:dd:9a:a9:9b:a1:3c:72:0f:
57:8e:86:85:87:60:a9:fb:e2:58:50:e4:c8:5e:41:21:3b:96:
b6:06:e1:d2:25:6d:f9:23:cd:c6:bb:ec:2b:c6:98:12:06:da:
b9:34:37:5a:07:cc:05:32:b3:ed:7b:23:77:24:c8:e2:ab:98:
e3:55:47:e6:88:81:fc:25:97:ef:a5:06:8f:42:f2:0c:54:9e:
7c:02:f3:33:1a:3c:aa:c4:7d:ed:9d:cd:24:4e:f7:be:1d:1c:
d1:35:71:e2:aa:02:22:00:41:9f:8b:b2:32:e3:b2:a6:b2:2e:
b7:6a:f4:1f:a7:e3:a3:5a:02:e1:8b:63:fc:bc:ea:ee:58:60:
56:e4:51:fb:14:09:25:61:f0:73:0f:ec:7a:b6:2c:63:99:ad:
21:14:eb:1e:b9:a7:1f:a3:8c:ae:f1:d1:48:65:6f:fe:dd:95:
39:65:14:92:5c:ea:ab:34:0d:4c:47:ce:f6:19:45:08:fb:fe:
2c:75:44:03:82:c7:5d:47:1d:55:05:e2:0c:aa:b7:e4:eb:1e:
0e:b6:c4:cf:48:d9:77:b1:c6:0a:fa:c7:21:d5:40:68:73:01:
46:a2:85:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 07:47:43 2025 by rpki-client