Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
File: vu8TjGK4F0xqgIMG7aV-koBd6YU.mft (raw, json)
Hash identifier: hHwMnO0tjJS5Xu9nf7t+wk8WxhufNIRVWXLbdqDDlMI=
Subject key identifier: C0:53:4A:28:C6:68:66:30:C8:7E:21:76:24:0C:EC:01:6B:72:D6:F8
Authority key identifier: BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85
Certificate issuer: /CN=beef138c62b8174c6a808306eda57e92805de985
Certificate serial: 019A00A33FAB5EA3621C7B40FB77A97D1B91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
Manifest number: 02FF
Signing time: Mon 20 Oct 2025 08:01:29 +0000
Manifest this update: Mon 20 Oct 2025 08:01:29 +0000
Manifest next update: Tue 21 Oct 2025 08:01:29 +0000
Files and hashes: 1: l_d8GmTWs7fC-DqkKIN-YYLDZHQ.roa (hash: bn8+7DUFYeBX/KvUpOKKsXGjyr0Z1jGCfiXQ85NTHVY=)
2: vu8TjGK4F0xqgIMG7aV-koBd6YU.crl (hash: alg/chwyLVdhKOPK5XI4uur2TBUU5SP+4IRcT/VxKig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:3f:ab:5e:a3:62:1c:7b:40:fb:77:a9:7d:1b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beef138c62b8174c6a808306eda57e92805de985
Validity
Not Before: Oct 20 08:01:29 2025 GMT
Not After : Oct 21 08:01:29 2025 GMT
Subject: CN=c0534a28c6686630c87e2176240cec016b72d6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:44:21:65:0d:c2:7a:df:13:dd:b8:c9:0e:b7:
a9:1c:b9:c6:9b:bc:b8:e1:00:7f:f7:2e:30:8d:75:
89:2e:bc:cd:33:32:e0:a8:8f:8a:53:97:12:13:18:
6d:83:63:35:34:03:15:1a:2c:51:da:72:f4:90:13:
55:e4:07:3c:6d:4d:c4:5d:5b:a3:56:cf:14:dc:62:
09:3b:a7:44:a8:e8:22:2f:aa:48:d0:f8:3d:bd:27:
b2:eb:56:69:d2:dc:a6:f6:9a:5b:db:ae:fe:7f:ac:
dc:2e:94:8c:92:67:37:14:cd:2a:b3:e2:c9:43:a7:
2e:a4:ef:1d:a7:4c:1f:e4:d9:24:39:9f:83:fc:05:
2f:84:de:d4:d1:a1:02:9b:66:47:ba:cd:25:6f:bb:
62:20:cf:8a:05:fe:b9:d8:d6:16:90:c5:69:a1:9b:
29:aa:0d:19:5e:ae:ab:14:c1:b5:9f:db:04:8a:c2:
17:17:f4:2a:57:20:4f:80:8b:91:9c:48:36:5a:b2:
c1:76:2a:90:35:7a:d7:a1:25:aa:ec:4c:47:71:50:
c4:c1:3f:cf:e5:ff:9f:cc:50:fc:ec:d5:66:75:34:
9b:39:b3:7a:9d:2a:e8:2b:de:4a:75:18:73:08:94:
31:3b:82:0f:12:fe:20:0e:ca:bc:32:81:b5:cd:4a:
aa:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:53:4A:28:C6:68:66:30:C8:7E:21:76:24:0C:EC:01:6B:72:D6:F8
X509v3 Authority Key Identifier:
keyid:BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:69:47:08:a3:ce:b9:2f:19:20:dc:14:90:91:1e:12:02:56:
2a:e6:7a:3a:e8:75:a6:16:03:56:c1:8f:dc:38:9d:eb:cc:21:
52:66:6f:48:b3:c6:e1:bd:35:7b:37:52:b9:5d:ab:bf:28:d0:
11:ff:6a:e8:b1:9c:78:ea:d7:0d:b9:d8:d3:8b:d7:09:d0:87:
45:86:4c:94:df:47:b1:5e:73:2a:cf:10:0b:ee:70:ac:81:af:
aa:a5:1e:d1:df:07:03:bb:3d:d8:be:ab:9e:a4:dc:93:67:71:
54:b8:9e:ff:68:77:91:54:16:1f:72:84:30:d1:43:9e:09:68:
dc:d4:49:9a:e1:10:be:dc:20:62:6b:16:9a:1a:0f:fe:3a:c5:
34:ab:2e:e6:90:e5:fe:f3:8c:0b:dc:8b:05:f8:7b:cb:d1:81:
98:f8:8d:1b:d8:57:44:4d:92:b8:f2:4b:c1:0a:8e:df:b4:90:
20:af:4b:56:97:75:f9:97:a7:32:eb:8b:0e:0e:c2:d9:67:d7:
0c:38:49:25:a3:04:3c:9b:e6:9c:bf:6a:2d:82:73:a0:57:bb:
f6:f2:a3:19:78:69:33:0b:89:0b:e2:20:f5:fd:af:c8:85:12:
86:45:15:24:d5:36:d5:d0:af:fe:94:36:77:d7:29:2d:64:2b:
c5:28:0c:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAoz+rXqNiHHtA+3epfRuRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlZWYxMzhjNjJiODE3NGM2YTgwODMwNmVkYTU3ZTkyODA1
ZGU5ODUwHhcNMjUxMDIwMDgwMTI5WhcNMjUxMDIxMDgwMTI5WjAzMTEwLwYDVQQD
EyhjMDUzNGEyOGM2Njg2NjMwYzg3ZTIxNzYyNDBjZWMwMTZiNzJkNmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkQhZQ3Cet8T3bjJDrepHLnGm7y4
4QB/9y4wjXWJLrzNMzLgqI+KU5cSExhtg2M1NAMVGixR2nL0kBNV5Ac8bU3EXVuj
Vs8U3GIJO6dEqOgiL6pI0Pg9vSey61Zp0tym9ppb267+f6zcLpSMkmc3FM0qs+LJ
Q6cupO8dp0wf5NkkOZ+D/AUvhN7U0aECm2ZHus0lb7tiIM+KBf652NYWkMVpoZsp
qg0ZXq6rFMG1n9sEisIXF/QqVyBPgIuRnEg2WrLBdiqQNXrXoSWq7ExHcVDEwT/P
5f+fzFD87NVmdTSbObN6nSroK95KdRhzCJQxO4IPEv4gDsq8MoG1zUqqbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBTSijGaGYwyH4hdiQM7AFrctb4MB8GA1UdIwQY
MBaAFL7vE4xiuBdMaoCDBu2lfpKAXemFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnU4VGpHSzRGMHhxZ0lNRzdhVi1rb0JkNllVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mNGU0ZjEtYjdmZi00NzgxLWI5NzYt
NTcyNzAwODJmZTBiLzEvdnU4VGpHSzRGMHhxZ0lNRzdhVi1rb0JkNllVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9mNGU0ZjEtYjdmZi00NzgxLWI5NzYtNTcyNzAwODJmZTBi
LzEvdnU4VGpHSzRGMHhxZ0lNRzdhVi1rb0JkNllVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAWlHCKPO
uS8ZINwUkJEeEgJWKuZ6Ouh1phYDVsGP3Did68whUmZvSLPG4b01ezdSuV2rvyjQ
Ef9q6LGceOrXDbnY04vXCdCHRYZMlN9HsV5zKs8QC+5wrIGvqqUe0d8HA7s92L6r
nqTck2dxVLie/2h3kVQWH3KEMNFDnglo3NRJmuEQvtwgYmsWmhoP/jrFNKsu5pDl
/vOMC9yLBfh7y9GBmPiNG9hXRE2SuPJLwQqO37SQIK9LVpd1+ZenMuuLDg7C2WfX
DDhJJaMEPJvmnL9qLYJzoFe79vKjGXhpMwuJC+Ig9f2vyIUShkUVJNU21dCv/pQ2
d9cpLWQrxSgMKQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:35:03 2025 by rpki-client