Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
File: VZNJZEMjMV-AbcZMpNntlVd2J1c.mft (raw, json)
Hash identifier: JPkNtdNJjMinlkPOWUM7qOb+X9JTPIN96RQp85avOxY=
Subject key identifier: C5:F8:EA:4E:B0:24:5C:C1:36:5F:6E:F6:F5:A5:97:10:91:9B:C8:B3
Authority key identifier: 55:93:49:64:43:23:31:5F:80:6D:C6:4C:A4:D9:ED:95:57:76:27:57
Certificate issuer: /CN=559349644323315f806dc64ca4d9ed9557762757
Certificate serial: 019A2478070C55F92BCA64781154786B620C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
Manifest number: 0B51
Signing time: Mon 27 Oct 2025 07:00:37 +0000
Manifest this update: Mon 27 Oct 2025 07:00:37 +0000
Manifest next update: Tue 28 Oct 2025 07:00:37 +0000
Files and hashes: 1: VZNJZEMjMV-AbcZMpNntlVd2J1c.crl (hash: 9tipUIQmDZljXg1E7U3ovmouv8CWfPWa175gC8p8FuI=)
2: ZRax88V5p4U88t_b2oPo8_w8EVw.roa (hash: wbdz2WKZbk8YP6i6XOpsIsE71ar5pDtmK77QBUlEFwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:07:0c:55:f9:2b:ca:64:78:11:54:78:6b:62:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559349644323315f806dc64ca4d9ed9557762757
Validity
Not Before: Oct 27 07:00:37 2025 GMT
Not After : Oct 28 07:00:37 2025 GMT
Subject: CN=c5f8ea4eb0245cc1365f6ef6f5a59710919bc8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:69:28:21:a3:a9:8d:bd:0f:ff:be:5e:6d:10:
82:45:f7:d4:fb:a7:fe:be:20:49:60:92:80:b7:ef:
db:3b:5c:48:49:3a:45:f9:e0:92:e3:fb:7e:26:91:
3d:19:76:06:46:98:fa:e5:91:24:2f:26:ef:9b:74:
75:46:c2:8f:68:c0:1b:e2:f5:c8:dc:60:65:43:73:
5f:2f:f8:ee:56:ed:65:a8:68:af:ae:eb:2e:f5:cb:
42:5f:9a:e4:f1:51:74:df:74:79:0d:48:04:92:b9:
e6:26:20:8e:4e:d6:dc:f0:b3:7c:e8:fe:24:30:04:
99:3d:af:3b:51:00:43:25:28:ad:45:34:e1:6c:7c:
e9:62:ea:1b:f6:79:4a:71:3d:94:f0:77:40:f2:ff:
b9:a7:33:ef:02:ac:7d:dc:23:88:39:0c:9e:84:87:
05:89:ae:51:3d:f2:0a:65:3e:56:d3:fe:a7:14:e7:
aa:1f:c2:f2:8a:9b:87:25:23:3d:2f:53:87:3b:6a:
ea:de:de:8d:b3:8e:f5:63:dc:de:0d:6d:58:f6:e3:
35:3d:e2:3c:e9:35:bb:45:d7:07:4c:00:0e:34:fb:
45:1c:e6:69:89:ae:98:e1:6e:f5:1d:57:5d:79:66:
c8:40:f8:30:9f:de:1a:48:5b:c4:2d:a5:c8:f8:4b:
cc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F8:EA:4E:B0:24:5C:C1:36:5F:6E:F6:F5:A5:97:10:91:9B:C8:B3
X509v3 Authority Key Identifier:
keyid:55:93:49:64:43:23:31:5F:80:6D:C6:4C:A4:D9:ED:95:57:76:27:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d2:f2:21:3c:50:2b:2e:0d:5c:7c:df:3f:a5:0b:31:f4:e3:
10:b0:80:d5:fd:28:65:d1:f4:6c:ba:00:87:eb:93:48:ff:75:
87:c8:06:fb:73:c6:05:00:2d:6e:ef:d1:d6:2b:27:99:10:71:
aa:b9:9a:a1:68:3d:be:9e:bb:e1:65:fe:12:00:50:06:3c:f9:
7c:a5:62:fe:3e:c5:e6:b8:1b:15:96:fa:4f:3b:72:eb:66:30:
db:e1:27:a4:fe:95:b5:58:e7:ca:b6:46:8c:44:39:5f:39:69:
16:08:72:da:78:25:bc:a7:3c:52:ca:04:e4:65:07:92:6e:04:
14:be:17:2f:aa:2b:90:9b:69:3a:0f:e0:50:26:a4:99:ab:ce:
a3:b5:29:33:92:1a:43:04:82:3c:02:ae:07:bb:1d:22:56:7e:
53:82:04:6a:31:fa:11:f9:77:f0:79:b0:70:7f:c2:6c:8b:f3:
5b:6a:94:90:b4:49:af:30:cf:59:b5:1f:5c:cc:88:7f:4c:07:
9f:57:6b:f1:3d:12:b5:78:b5:ee:3c:00:e1:fa:dd:70:3f:7c:
9e:c6:e7:f8:dc:82:00:9d:9e:19:c7:2f:5f:84:6a:28:ed:6b:
77:bf:c3:7d:4c:8c:b4:0a:26:f3:c3:7b:63:20:4c:1f:50:ef:
13:04:ae:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZokeAcMVfkrymR4EVR4a2IMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1OTM0OTY0NDMyMzMxNWY4MDZkYzY0Y2E0ZDllZDk1NTc3
NjI3NTcwHhcNMjUxMDI3MDcwMDM3WhcNMjUxMDI4MDcwMDM3WjAzMTEwLwYDVQQD
EyhjNWY4ZWE0ZWIwMjQ1Y2MxMzY1ZjZlZjZmNWE1OTcxMDkxOWJjOGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWkoIaOpjb0P/75ebRCCRffU+6f+
viBJYJKAt+/bO1xISTpF+eCS4/t+JpE9GXYGRpj65ZEkLybvm3R1RsKPaMAb4vXI
3GBlQ3NfL/juVu1lqGivrusu9ctCX5rk8VF033R5DUgEkrnmJiCOTtbc8LN86P4k
MASZPa87UQBDJSitRTThbHzpYuob9nlKcT2U8HdA8v+5pzPvAqx93COIOQyehIcF
ia5RPfIKZT5W0/6nFOeqH8LyipuHJSM9L1OHO2rq3t6Ns471Y9zeDW1Y9uM1PeI8
6TW7RdcHTAAONPtFHOZpia6Y4W71HVddeWbIQPgwn94aSFvELaXI+EvM6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMX46k6wJFzBNl9u9vWllxCRm8izMB8GA1UdIwQY
MBaAFFWTSWRDIzFfgG3GTKTZ7ZVXdidXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlpOSlpFTWpNVi1BYmNaTXBObnRsVmQySjFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kZjk3ZWYtMzQzNS00NjU3LWExYTIt
NjA2NmQ4OWYwNWI4LzEvVlpOSlpFTWpNVi1BYmNaTXBObnRsVmQySjFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9kZjk3ZWYtMzQzNS00NjU3LWExYTItNjA2NmQ4OWYwNWI4
LzEvVlpOSlpFTWpNVi1BYmNaTXBObnRsVmQySjFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAItLyITxQ
Ky4NXHzfP6ULMfTjELCA1f0oZdH0bLoAh+uTSP91h8gG+3PGBQAtbu/R1isnmRBx
qrmaoWg9vp674WX+EgBQBjz5fKVi/j7F5rgbFZb6Tzty62Yw2+EnpP6VtVjnyrZG
jEQ5XzlpFghy2nglvKc8UsoE5GUHkm4EFL4XL6orkJtpOg/gUCakmavOo7UpM5Ia
QwSCPAKuB7sdIlZ+U4IEajH6Efl38HmwcH/CbIvzW2qUkLRJrzDPWbUfXMyIf0wH
n1dr8T0StXi17jwA4frdcD98nsbn+NyCAJ2eGccvX4RqKO1rd7/DfUyMtAom88N7
YyBMH1DvEwSuxg==
-----END CERTIFICATE-----
Generated at Mon Oct 27 15:09:04 2025 by rpki-client