Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft
File: VutqX6PSF6LufUpi2EYaZ5PtXLM.mft (raw, json)
Hash identifier: pJM3kp+dpnu8SUh52N4C5bFVl41mggD2WjoTxnJICpc=
Subject key identifier: 01:B0:5D:9F:79:74:F4:16:00:1D:21:81:32:ED:C8:DF:B2:46:3B:FF
Authority key identifier: 56:EB:6A:5F:A3:D2:17:A2:EE:7D:4A:62:D8:46:1A:67:93:ED:5C:B3
Certificate issuer: /CN=56eb6a5fa3d217a2ee7d4a62d8461a6793ed5cb3
Certificate serial: 0199FF22569E34141F053D2517ED974F2A78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VutqX6PSF6LufUpi2EYaZ5PtXLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft
Manifest number: 0AA8
Signing time: Mon 20 Oct 2025 01:01:04 +0000
Manifest this update: Mon 20 Oct 2025 01:01:04 +0000
Manifest next update: Tue 21 Oct 2025 01:01:04 +0000
Files and hashes: 1: C1sfui3_F27EORD1FFTIF_PXuck.roa (hash: L6fwO735NsCUbgUMMTGbvgV3NoYMTpTeYzX/vL5LjfM=)
2: VutqX6PSF6LufUpi2EYaZ5PtXLM.crl (hash: m5OAkOpHtQuSE9WX0AS2Gstjq/c08PVyvPsjq60cfDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VutqX6PSF6LufUpi2EYaZ5PtXLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:56:9e:34:14:1f:05:3d:25:17:ed:97:4f:2a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56eb6a5fa3d217a2ee7d4a62d8461a6793ed5cb3
Validity
Not Before: Oct 20 01:01:04 2025 GMT
Not After : Oct 21 01:01:04 2025 GMT
Subject: CN=01b05d9f7974f416001d218132edc8dfb2463bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:42:7a:24:f6:8a:68:33:c1:0f:0b:e2:3b:51:
bb:97:67:68:41:b9:89:4a:63:a4:1e:fc:02:da:4d:
28:d4:5e:e7:83:be:0b:63:38:82:6c:c3:7a:b1:09:
26:10:6d:a2:cf:7a:e3:92:69:1b:5a:52:03:fa:31:
1e:e6:2c:0b:f6:5a:2f:5b:13:4f:94:39:a1:38:c7:
c7:88:88:7a:39:57:da:97:7a:50:1d:10:ac:c0:2f:
e5:eb:bd:5e:e9:8b:41:c2:43:f3:4f:06:72:08:64:
6d:56:48:e5:e9:47:31:d0:94:d7:34:8c:18:97:68:
16:34:ea:a1:03:15:05:2e:a0:f7:1b:03:ea:53:d6:
a4:f0:62:96:bc:79:9a:9d:b2:2d:7e:56:8f:3f:f7:
34:2c:8d:54:7e:2e:4b:80:53:8c:35:e0:a2:cd:47:
a3:8b:72:f9:93:7c:55:e4:96:34:3a:d7:99:cf:ea:
c2:ba:de:41:db:ce:35:1e:c6:a1:d3:eb:0f:d9:a0:
61:68:33:bf:3c:3d:0c:48:3c:a3:e2:51:19:56:36:
56:8c:64:0d:6b:9d:f6:6f:10:5a:ce:d5:3c:f6:52:
04:ac:07:3e:1d:3a:b8:58:ba:55:14:ba:35:42:a3:
57:00:34:b5:55:cd:2a:fb:e5:95:60:ab:d9:76:57:
08:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B0:5D:9F:79:74:F4:16:00:1D:21:81:32:ED:C8:DF:B2:46:3B:FF
X509v3 Authority Key Identifier:
keyid:56:EB:6A:5F:A3:D2:17:A2:EE:7D:4A:62:D8:46:1A:67:93:ED:5C:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VutqX6PSF6LufUpi2EYaZ5PtXLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2c:77:97:04:97:97:16:e5:98:64:99:00:0f:47:b9:6c:7e:
6d:af:fa:2c:34:d4:a5:3d:7d:f4:b7:94:c1:a6:39:f9:d8:68:
aa:03:5f:6a:ae:e5:e7:ea:fb:55:ec:30:b8:7d:c0:b4:1b:f2:
7e:4a:9b:e9:8d:7e:c4:b2:f0:fe:87:6a:16:2b:ef:00:99:c5:
82:79:e0:a4:aa:78:ed:e4:ab:e0:eb:ac:ad:2c:ae:a9:38:32:
c2:a6:f8:cb:a3:5f:6e:04:66:9c:a9:af:20:ba:16:fc:a9:f3:
f7:33:ef:de:6f:7e:dd:4e:76:39:b2:b2:e4:d4:1b:f7:d5:32:
8a:c2:69:b0:67:79:1a:2d:76:f3:1b:25:d6:d4:a4:e9:1e:52:
9b:aa:05:0b:64:7a:a5:97:88:dd:96:df:ea:20:b2:62:25:54:
b4:f8:5b:cd:c3:43:b3:5e:0f:ca:d8:92:24:f9:79:20:9f:b7:
91:80:69:d3:dc:ef:86:75:0c:2e:67:5a:33:6a:a2:a6:25:cc:
f9:8a:82:92:77:e1:1e:4c:25:46:39:de:51:7e:ca:2f:c4:65:
5a:60:10:b3:93:88:7f:8a:c2:e1:b1:2d:66:26:0d:0b:29:49:
53:1a:7d:fd:5b:18:84:df:d7:4d:5d:48:bc:eb:57:a2:ff:5f:
b8:23:a5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:44:25 2025 by rpki-client