Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
File: VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft (raw, json)
Hash identifier: QT2TCmoVBNn2Fbyc5crNhQUbwpc5V6hlZViMoIAG2OY=
Subject key identifier: 95:16:D1:12:17:A8:CB:99:4F:BB:B2:EB:08:B5:74:F2:FE:D8:8C:CB
Authority key identifier: 55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06
Certificate issuer: /CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
Certificate serial: 019A01B52C8FFBD40A5A1B56A9F70BB31BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
Manifest number: 059D
Signing time: Mon 20 Oct 2025 13:00:41 +0000
Manifest this update: Mon 20 Oct 2025 13:00:41 +0000
Manifest next update: Tue 21 Oct 2025 13:00:41 +0000
Files and hashes: 1: VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl (hash: t/612SbcdEW9DITbkB/zI4Q7Y2yw4dedNnO20QD02nA=)
2: zG1LsNOebUzuPc00J0IFIKriwG4.roa (hash: eQXTqod6VUNMvJMdBIHtPJpSpipS6FsaoAARJhSyhHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:2c:8f:fb:d4:0a:5a:1b:56:a9:f7:0b:b3:1b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
Validity
Not Before: Oct 20 13:00:41 2025 GMT
Not After : Oct 21 13:00:41 2025 GMT
Subject: CN=9516d11217a8cb994fbbb2eb08b574f2fed88ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0b:24:79:3c:db:35:31:48:5b:0f:6f:f1:25:
e2:fd:c3:40:46:82:5c:98:e5:64:cf:c5:ec:ed:2b:
cd:f4:45:ae:c7:f5:fe:94:b9:33:8c:d0:bd:1d:5d:
d9:24:82:c8:7c:98:fc:9c:0c:e5:61:a4:0d:70:d8:
13:6f:86:54:ae:1a:6b:86:b6:7b:73:7f:bb:60:8c:
14:7a:22:90:59:90:97:9d:bf:1a:2d:49:1f:85:f7:
ad:1a:57:1c:7a:a6:2a:3e:46:cf:5b:7d:75:39:c2:
41:23:6f:47:95:bb:ce:28:64:51:52:7c:49:0c:ce:
40:7e:c3:da:2d:56:72:19:b8:97:dd:b5:9f:76:33:
26:3b:5f:e1:ed:14:89:bc:ba:90:35:ad:c8:17:3c:
e4:93:aa:c0:65:3e:7c:2b:b8:5c:9f:f4:52:28:7c:
6d:61:aa:4a:88:ba:b9:f8:ce:43:07:c1:d7:bf:1b:
e0:01:73:31:16:6f:5e:db:e7:ce:b5:6f:e6:09:19:
a4:39:e4:63:5a:e6:f4:76:9b:d7:d3:0d:cc:ec:15:
78:0b:4c:28:49:01:00:8b:7f:3d:ac:64:05:8d:0c:
77:4f:5a:05:1d:67:24:46:e0:18:27:3d:8a:26:46:
2a:a5:db:96:cb:8b:38:21:c0:88:b9:2c:da:8f:b9:
66:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:16:D1:12:17:A8:CB:99:4F:BB:B2:EB:08:B5:74:F2:FE:D8:8C:CB
X509v3 Authority Key Identifier:
keyid:55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b2:77:88:2f:79:d0:3b:49:73:93:e3:8a:06:7d:a1:8e:19:
b3:08:24:90:5c:41:94:5f:14:ff:61:74:57:0e:f9:0b:ad:49:
1a:a6:fd:61:4f:b7:21:d8:e3:25:b0:14:98:c9:6a:4a:9a:0b:
85:ec:66:16:44:d6:76:4a:93:f1:ac:6f:6f:2d:fe:bb:c9:57:
79:c8:c7:02:22:2c:c5:6a:65:13:7b:e2:94:47:2e:da:45:aa:
27:81:c3:2f:12:cc:22:0f:90:0e:45:ee:60:1e:0c:e8:3d:24:
8b:09:de:f7:d7:27:14:53:cf:f1:45:39:c9:db:5e:11:fc:f6:
10:fd:51:36:16:ba:b6:bf:7f:b2:60:ac:92:1a:2e:31:99:b5:
b9:5d:e0:eb:84:c9:d2:f2:77:9b:37:4f:2b:a0:52:15:aa:66:
ab:24:d2:75:0f:9d:e3:23:d6:a2:b0:1c:d7:05:96:89:f0:ab:
23:18:ea:d3:eb:1e:58:da:13:ea:8a:2f:ee:aa:0a:eb:0d:18:
3f:1a:90:1d:f8:cd:48:b8:30:56:66:0d:0d:7d:ec:54:50:a2:
66:0c:90:2e:66:90:9c:20:1f:e3:50:72:96:1e:66:7e:ef:84:
f4:69:f1:f9:30:96:30:14:20:0c:3f:29:b6:e3:cc:a0:a5:b2:
2c:bf:0e:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBtSyP+9QKWhtWqfcLsxvTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NDJiNzY2ZWY1N2Q2OWNmNGZiZGU0YmNiNmYwYWYwNmEz
YjIyMDYwHhcNMjUxMDIwMTMwMDQxWhcNMjUxMDIxMTMwMDQxWjAzMTEwLwYDVQQD
Eyg5NTE2ZDExMjE3YThjYjk5NGZiYmIyZWIwOGI1NzRmMmZlZDg4Y2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwskeTzbNTFIWw9v8SXi/cNARoJc
mOVkz8Xs7SvN9EWux/X+lLkzjNC9HV3ZJILIfJj8nAzlYaQNcNgTb4ZUrhprhrZ7
c3+7YIwUeiKQWZCXnb8aLUkfhfetGlcceqYqPkbPW311OcJBI29HlbvOKGRRUnxJ
DM5AfsPaLVZyGbiX3bWfdjMmO1/h7RSJvLqQNa3IFzzkk6rAZT58K7hcn/RSKHxt
YapKiLq5+M5DB8HXvxvgAXMxFm9e2+fOtW/mCRmkOeRjWub0dpvX0w3M7BV4C0wo
SQEAi389rGQFjQx3T1oFHWckRuAYJz2KJkYqpduWy4s4IcCIuSzaj7lmFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJUW0RIXqMuZT7uy6wi1dPL+2IzLMB8GA1UdIwQY
MBaAFFVCt2bvV9ac9PveS8tvCvBqOyIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlVLM1p1OVgxcHowLTk1THkyOEs4R283SWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NDZlYmEtOWMwZC00NzY1LWIzZGMt
NzgzMDhiMmY1MjM0LzEvVlVLM1p1OVgxcHowLTk1THkyOEs4R283SWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80NDZlYmEtOWMwZC00NzY1LWIzZGMtNzgzMDhiMmY1MjM0
LzEvVlVLM1p1OVgxcHowLTk1THkyOEs4R283SWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgbJ3iC95
0DtJc5PjigZ9oY4ZswgkkFxBlF8U/2F0Vw75C61JGqb9YU+3IdjjJbAUmMlqSpoL
hexmFkTWdkqT8axvby3+u8lXecjHAiIsxWplE3vilEcu2kWqJ4HDLxLMIg+QDkXu
YB4M6D0kiwne99cnFFPP8UU5ydteEfz2EP1RNha6tr9/smCskhouMZm1uV3g64TJ
0vJ3mzdPK6BSFapmqyTSdQ+d4yPWorAc1wWWifCrIxjq0+seWNoT6oov7qoK6w0Y
PxqQHfjNSLgwVmYNDX3sVFCiZgyQLmaQnCAf41Bylh5mfu+E9Gnx+TCWMBQgDD8p
tuPMoKWyLL8Oew==
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:49:46 2025 by rpki-client