Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
File: VZxkpqxMSXatNiFBKhN0WeZJq54.mft (raw, json)
Hash identifier: Ceut0B6+p25HBtgoU5BBRDXsLsPQVPbaP/koTNOD034=
Subject key identifier: 64:00:BD:A0:2B:20:0B:6E:A1:9C:3D:0C:AC:6F:64:60:68:06:21:40
Authority key identifier: 55:9C:64:A6:AC:4C:49:76:AD:36:21:41:2A:13:74:59:E6:49:AB:9E
Certificate issuer: /CN=559c64a6ac4c4976ad3621412a137459e649ab9e
Certificate serial: 019A706E3C44AB9368E94DD208C76C6764D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
Manifest number: 12B6
Signing time: Tue 11 Nov 2025 01:01:03 +0000
Manifest this update: Tue 11 Nov 2025 01:01:03 +0000
Manifest next update: Wed 12 Nov 2025 01:01:03 +0000
Files and hashes: 1: VZxkpqxMSXatNiFBKhN0WeZJq54.crl (hash: vcBvQcdgbYP9n+G3kgb0FFmmS5aL5txLCubKkrvDTqI=)
2: kC_Q9FQ-J4DvH1bNDORMySN0tt0.roa (hash: VKlodJ8xjH2Yq58gYH0eZlUzy+prTwBQnlcgP5DbpSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:3c:44:ab:93:68:e9:4d:d2:08:c7:6c:67:64:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559c64a6ac4c4976ad3621412a137459e649ab9e
Validity
Not Before: Nov 11 01:01:03 2025 GMT
Not After : Nov 12 01:01:03 2025 GMT
Subject: CN=6400bda02b200b6ea19c3d0cac6f646068062140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:07:6f:26:fb:34:de:29:54:49:25:dc:4a:a8:
7d:24:8d:fa:82:20:32:64:8d:07:0f:b3:50:f4:6c:
7f:98:0f:81:c7:40:96:91:1b:c7:1e:03:3b:70:af:
62:fb:e5:c8:e0:f7:e2:8b:74:5f:24:ee:df:1e:07:
1a:d0:d6:e2:ea:93:34:58:0f:5b:20:e9:26:ad:1c:
68:33:b6:28:aa:cb:52:f6:cd:71:f2:32:0f:64:1d:
a3:b8:7d:51:2c:14:7e:52:f9:fa:b4:c6:ee:2a:e2:
08:f7:8b:cc:85:9d:b6:08:de:6b:8a:e6:80:38:5f:
ec:3d:63:82:a2:62:33:e2:71:ae:52:a6:ce:64:6c:
50:b3:ab:1b:3f:27:bd:19:43:4b:c8:fd:59:fd:b0:
0a:b6:c8:65:e7:2e:ca:35:a7:c5:b2:e2:fc:24:06:
01:97:ad:50:2a:6f:3f:9e:f2:d7:90:d2:5d:11:2d:
37:fc:c1:67:15:4b:e8:e8:24:10:fb:b0:a6:66:55:
ac:6e:ac:ff:f5:23:4b:5d:00:e2:bf:df:75:49:56:
66:92:73:04:e8:77:ab:45:8d:e2:65:2e:2d:b8:f9:
7b:d7:be:32:01:21:92:ab:97:64:36:10:4f:02:0d:
9d:a5:e3:d1:ae:5c:c9:ea:77:b5:10:17:82:b1:74:
a7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:00:BD:A0:2B:20:0B:6E:A1:9C:3D:0C:AC:6F:64:60:68:06:21:40
X509v3 Authority Key Identifier:
keyid:55:9C:64:A6:AC:4C:49:76:AD:36:21:41:2A:13:74:59:E6:49:AB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:03:75:ec:4c:da:08:71:3f:ea:0d:3a:c2:2f:4c:ad:7c:03:
ee:70:8e:9d:a9:ab:9a:5d:f6:cf:7c:13:d9:11:b7:ba:91:07:
85:57:02:96:52:ce:29:6f:0c:5e:48:ea:7f:13:6f:7a:e1:56:
e5:2f:69:73:bf:90:a4:1e:9b:26:ff:4f:b4:94:91:2b:8b:37:
68:a7:b9:12:fd:2e:16:73:97:16:4e:37:09:87:d2:3c:e9:46:
03:76:78:7d:8f:92:e8:25:c2:51:02:47:a0:75:79:3d:da:e0:
8e:7f:13:39:bb:0f:65:d1:d3:5e:59:30:64:7c:d4:0b:80:7e:
28:15:44:79:1c:26:47:70:55:3a:66:35:bf:89:a5:f8:6c:b0:
ee:0b:b4:ce:f8:31:63:3c:2b:b0:b6:05:64:a2:73:bc:9e:64:
c7:32:94:4b:cc:ba:0b:8a:65:02:75:93:ba:d9:82:61:95:2b:
59:04:86:e7:4d:15:54:3a:b1:99:4b:98:e9:b1:c6:ed:f6:23:
6f:14:80:52:68:f4:8f:d1:32:c8:ee:85:8e:23:b3:4b:6e:ed:
f1:5d:1d:43:c7:21:21:b9:55:37:6f:8a:a2:f4:79:00:18:5f:
26:f0:54:b9:36:bf:55:da:bb:b7:52:3b:a2:03:78:e9:10:f7:
c2:ee:44:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:34 2025 by rpki-client