Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
File: VuhSHoDy8HGjE4W837wxpiHGj5Q.mft (raw, json)
Hash identifier: gmynpdTjuUj49RZbtfvI3AzSdR0JItbkzQeEqYbGjoc=
Subject key identifier: 3A:6E:CE:32:9D:E7:26:8F:E9:F9:93:33:4D:FB:AB:F9:D0:42:5C:52
Authority key identifier: 56:E8:52:1E:80:F2:F0:71:A3:13:85:BC:DF:BC:31:A6:21:C6:8F:94
Certificate issuer: /CN=56e8521e80f2f071a31385bcdfbc31a621c68f94
Certificate serial: 0199FCC665EDA70A83C15BE3C99D6E0B204B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
Manifest number: 02FC
Signing time: Sun 19 Oct 2025 14:01:24 +0000
Manifest this update: Sun 19 Oct 2025 14:01:24 +0000
Manifest next update: Mon 20 Oct 2025 14:01:24 +0000
Files and hashes: 1: VuhSHoDy8HGjE4W837wxpiHGj5Q.crl (hash: wamx6kIzORswdQ/cmtlp9ZSonr6XbOOTnXpJ40qoXZE=)
2: gz5Fn0iYS2J-2PWlXPOubZS66_c.roa (hash: 3ZNULpIUwqK52p1xdQUbvRyZUixjUvhEv6tYcx6J92Y=)
3: zfYBzyR4XCbBgM1ilkxfdwCQIbQ.roa (hash: ZQ37lZflawjbgxhO2eI1Uv+5KVEl1Uecz8BJ0COt2xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:65:ed:a7:0a:83:c1:5b:e3:c9:9d:6e:0b:20:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56e8521e80f2f071a31385bcdfbc31a621c68f94
Validity
Not Before: Oct 19 14:01:24 2025 GMT
Not After : Oct 20 14:01:24 2025 GMT
Subject: CN=3a6ece329de7268fe9f993334dfbabf9d0425c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:10:f1:bf:5e:01:8a:6e:42:7e:e0:d4:c8:9b:
7c:97:f6:db:f2:0f:83:a0:55:67:0f:28:81:4b:2e:
55:a9:53:b0:26:ee:95:7c:a4:68:ae:a2:32:37:55:
74:67:ef:a8:b1:0d:24:4b:6a:31:34:38:3d:bd:08:
b6:32:eb:e9:2e:ea:f2:d6:82:8b:cd:0d:08:2c:8e:
89:43:77:bd:99:6b:b8:21:a7:19:65:a2:55:e6:55:
0b:f1:f8:73:1a:5a:b0:08:5e:38:74:2f:18:ee:6e:
be:21:bd:16:00:4c:aa:65:9e:89:88:ae:33:50:8c:
15:75:87:51:d6:fd:06:68:b7:a1:f6:63:70:32:94:
99:cd:39:2a:35:a0:f9:d7:98:45:dc:96:cb:d6:c4:
6e:ca:c1:86:30:e5:63:cb:d6:de:4c:ad:38:d4:6d:
23:92:6d:7b:b7:e9:e3:96:d5:27:97:e6:3f:dd:ec:
08:36:32:28:00:c1:9a:cf:b4:5d:c2:61:0f:6c:15:
78:dc:e7:d4:f0:d8:ed:e1:a2:ac:36:d2:01:db:a7:
e3:d8:25:5b:a8:7f:62:7d:1f:be:0e:77:49:11:c8:
ad:ed:cc:ba:f6:0a:08:55:9a:82:89:f9:ea:8b:42:
48:0f:a7:1e:6e:40:9e:1a:22:27:06:c9:2a:e9:c5:
ed:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6E:CE:32:9D:E7:26:8F:E9:F9:93:33:4D:FB:AB:F9:D0:42:5C:52
X509v3 Authority Key Identifier:
keyid:56:E8:52:1E:80:F2:F0:71:A3:13:85:BC:DF:BC:31:A6:21:C6:8F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:35:50:e8:44:b9:87:04:8a:b1:61:d6:72:9b:35:b3:7a:8d:
1d:6e:1b:30:ec:8a:16:3e:27:8c:7b:b0:09:c2:d0:f7:73:54:
6d:bd:50:b5:ff:cd:75:69:90:25:5a:04:ac:b2:a1:c8:00:f2:
35:a0:be:36:a7:6c:f8:f7:3f:da:56:30:37:ee:22:1f:87:eb:
07:0f:1a:84:59:23:31:8e:1c:4a:4e:78:b5:88:f4:d4:e1:76:
b9:94:d0:49:ea:b9:f5:a2:2a:2a:f3:71:02:79:e7:58:94:fd:
cd:42:74:44:2d:ec:66:23:b6:c2:d7:73:5e:b3:de:a2:ab:d0:
bc:2c:f6:33:38:f0:b0:94:2c:15:a6:0e:9e:cb:fc:07:0f:23:
29:35:d2:58:3d:88:32:cc:f4:68:b4:a2:4b:8f:78:17:c2:07:
95:12:5b:d7:bd:77:8c:7d:56:51:22:70:4e:99:4a:bf:9e:b9:
12:44:cd:1a:24:b9:95:a4:0e:23:6c:dc:74:50:1d:de:36:c2:
33:f7:b1:22:42:f2:a4:36:9f:d5:11:b8:e2:63:e6:fc:74:88:
e3:29:f6:9f:24:c5:66:00:f5:98:aa:a5:b8:f9:04:34:7e:06:
eb:ce:8e:ed:11:f7:db:55:77:c6:f0:9b:8e:5c:3d:3d:77:85:
35:19:91:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:45:02 2025 by rpki-client