Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft
File: vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft (raw, json)
Hash identifier: xpIDKjwK0O0OIlcNVXsRMSCkYR3cifj9tDxZEOemo20=
Subject key identifier: 3C:1C:DA:26:FC:4C:95:80:17:CD:5A:4C:95:B0:AF:0E:0A:27:17:22
Authority key identifier: BE:ED:14:BF:4E:46:B1:35:79:58:3F:97:FF:85:91:0D:10:3A:53:F8
Certificate issuer: /CN=beed14bf4e46b13579583f97ff85910d103a53f8
Certificate serial: 0198D5F150D1F6BEFDD821662194A150A119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft
Manifest number: 15DD
Signing time: Sat 23 Aug 2025 08:00:18 +0000
Manifest this update: Sat 23 Aug 2025 08:00:18 +0000
Manifest next update: Sun 24 Aug 2025 08:00:18 +0000
Files and hashes: 1: YWfBB1A6AsyoVHWPYh_PG8Oqc7Y.roa (hash: 5j8p5mvaO4of1g1DTD7WjWWwx2W9IRdFQlgp9hnSnts=)
2: vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl (hash: 1q0X4C31SJ86LT29uvJ75JwP5gsv1EaXKstAXog519I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:50:d1:f6:be:fd:d8:21:66:21:94:a1:50:a1:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beed14bf4e46b13579583f97ff85910d103a53f8
Validity
Not Before: Aug 23 08:00:18 2025 GMT
Not After : Aug 24 08:00:18 2025 GMT
Subject: CN=3c1cda26fc4c958017cd5a4c95b0af0e0a271722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:68:cd:78:d9:a4:ee:dc:52:fd:85:e2:63:29:
e8:3a:10:d1:a5:b9:1b:bb:9e:aa:a4:20:e4:2d:a8:
7a:ce:1a:31:c3:a5:4c:fd:85:2b:5d:f3:44:40:5c:
73:c2:e0:f2:3a:9c:e3:b1:1d:7d:02:55:1a:3f:1a:
9e:50:5f:3e:5c:02:7b:d0:0b:00:64:a9:d7:87:ed:
00:9e:95:8f:7a:75:88:1b:27:c6:6b:89:53:06:8d:
5f:a3:6c:1f:98:3a:74:3b:79:c1:b8:36:89:0d:bc:
c2:9e:0d:a8:f9:03:12:ff:ba:22:4c:15:3b:0f:18:
6a:ad:2f:25:fa:be:45:fe:44:04:f7:83:3d:1b:37:
fd:cf:5b:e4:f2:36:ea:05:a6:36:8f:06:71:17:c7:
56:fd:84:6f:43:21:19:63:a3:10:1a:29:0d:47:ad:
e8:99:d2:8d:5d:3c:b9:8c:ae:5a:32:76:77:8b:5b:
63:a4:54:d8:66:9a:73:7c:92:0e:aa:b9:39:41:4e:
b1:76:ad:38:9e:b4:00:cb:6d:9a:27:f9:71:91:60:
ab:d8:66:b4:37:ec:05:7e:21:2a:f3:e1:e6:76:03:
cd:32:16:86:25:36:47:6e:4b:bb:c4:d0:45:5c:0b:
c3:a0:d0:73:e1:5e:2a:51:06:32:a0:2d:1e:e4:3c:
d8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1C:DA:26:FC:4C:95:80:17:CD:5A:4C:95:B0:AF:0E:0A:27:17:22
X509v3 Authority Key Identifier:
keyid:BE:ED:14:BF:4E:46:B1:35:79:58:3F:97:FF:85:91:0D:10:3A:53:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:96:53:52:b3:86:d6:86:7a:b6:f2:ba:bd:3f:60:ee:34:92:
c3:e4:32:2e:59:e7:89:87:01:15:b7:b6:d6:cf:43:f8:7a:33:
21:7e:ca:42:04:83:ab:56:f5:87:19:0f:3b:9b:60:b2:32:34:
a0:0d:e2:26:cd:ac:70:ce:52:90:a5:df:a7:9e:4d:54:3e:13:
58:2d:f2:c5:6c:ad:12:9c:f9:ce:82:27:14:98:89:9e:46:27:
9d:d6:19:8d:2b:72:06:ff:dc:c5:31:e4:83:ed:43:10:17:a9:
e0:49:07:73:24:54:72:67:d4:cb:74:8f:dd:24:70:64:60:2f:
a0:ca:19:0c:5c:c4:fc:47:fd:84:08:29:d8:c1:e6:c5:92:25:
2e:2f:21:ae:47:f8:bb:c6:55:70:a9:ff:c0:3e:70:55:99:4f:
de:cb:c8:98:3a:9c:d8:01:8f:11:3f:21:d7:89:ed:4e:7f:16:
f3:a4:8f:2a:88:5d:f0:bf:d9:01:ee:96:fb:59:11:01:30:f4:
f0:2b:24:91:94:72:af:e7:99:aa:02:60:1f:64:af:d4:43:73:
bb:2a:8e:14:c4:9e:71:69:09:cf:0c:d1:c5:89:c7:14:ca:87:
ce:0f:a2:09:78:a2:85:ce:8d:c0:aa:53:65:d6:0e:1e:cb:4e:
72:7e:e3:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8VDR9r792CFmIZShUKEZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlZWQxNGJmNGU0NmIxMzU3OTU4M2Y5N2ZmODU5MTBkMTAz
YTUzZjgwHhcNMjUwODIzMDgwMDE4WhcNMjUwODI0MDgwMDE4WjAzMTEwLwYDVQQD
EygzYzFjZGEyNmZjNGM5NTgwMTdjZDVhNGM5NWIwYWYwZTBhMjcxNzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomjNeNmk7txS/YXiYynoOhDRpbkb
u56qpCDkLah6zhoxw6VM/YUrXfNEQFxzwuDyOpzjsR19AlUaPxqeUF8+XAJ70AsA
ZKnXh+0AnpWPenWIGyfGa4lTBo1fo2wfmDp0O3nBuDaJDbzCng2o+QMS/7oiTBU7
DxhqrS8l+r5F/kQE94M9Gzf9z1vk8jbqBaY2jwZxF8dW/YRvQyEZY6MQGikNR63o
mdKNXTy5jK5aMnZ3i1tjpFTYZppzfJIOqrk5QU6xdq04nrQAy22aJ/lxkWCr2Ga0
N+wFfiEq8+HmdgPNMhaGJTZHbku7xNBFXAvDoNBz4V4qUQYyoC0e5DzYHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwc2ib8TJWAF81aTJWwrw4KJxciMB8GA1UdIwQY
MBaAFL7tFL9ORrE1eVg/l/+FkQ0QOlP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnUwVXYwNUdzVFY1V0QtWF80V1JEUkE2VV9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wMDQ3YjctZjFlNi00MWE4LWE4ZDIt
NDgwMTE5OGU3NWNhLzEvdnUwVXYwNUdzVFY1V0QtWF80V1JEUkE2VV9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8wMDQ3YjctZjFlNi00MWE4LWE4ZDItNDgwMTE5OGU3NWNh
LzEvdnUwVXYwNUdzVFY1V0QtWF80V1JEUkE2VV9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj5ZTUrOG
1oZ6tvK6vT9g7jSSw+QyLlnniYcBFbe21s9D+HozIX7KQgSDq1b1hxkPO5tgsjI0
oA3iJs2scM5SkKXfp55NVD4TWC3yxWytEpz5zoInFJiJnkYnndYZjStyBv/cxTHk
g+1DEBep4EkHcyRUcmfUy3SP3SRwZGAvoMoZDFzE/Ef9hAgp2MHmxZIlLi8hrkf4
u8ZVcKn/wD5wVZlP3svImDqc2AGPET8h14ntTn8W86SPKohd8L/ZAe6W+1kRATD0
8CskkZRyr+eZqgJgH2Sv1ENzuyqOFMSecWkJzwzRxYnHFMqHzg+iCXiihc6NwKpT
ZdYOHstOcn7jrw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:52:37 2025 by rpki-client