Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
File: VZnll39h5z8wSC2usaXy33LV7UY.mft (raw, json)
Hash identifier: oB7YBmv5bN91vjgL05hGQ9XEU+HcFWgmNoQtV+G/u2U=
Subject key identifier: 6F:83:48:35:2A:B0:55:AB:84:CC:A4:2C:2C:58:FA:76:91:96:E9:53
Authority key identifier: 55:99:E5:97:7F:61:E7:3F:30:48:2D:AE:B1:A5:F2:DF:72:D5:ED:46
Certificate issuer: /CN=5599e5977f61e73f30482daeb1a5f2df72d5ed46
Certificate serial: 019A706E71A62F3D1BCB46E86187740C7ECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZnll39h5z8wSC2usaXy33LV7UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
Manifest number: 159D
Signing time: Tue 11 Nov 2025 01:01:17 +0000
Manifest this update: Tue 11 Nov 2025 01:01:17 +0000
Manifest next update: Wed 12 Nov 2025 01:01:17 +0000
Files and hashes: 1: VZnll39h5z8wSC2usaXy33LV7UY.crl (hash: SE2ynkkM7B4U02o8lu73GPe1Sjf8JotiGzz4BASXX18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZnll39h5z8wSC2usaXy33LV7UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:71:a6:2f:3d:1b:cb:46:e8:61:87:74:0c:7e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5599e5977f61e73f30482daeb1a5f2df72d5ed46
Validity
Not Before: Nov 11 01:01:17 2025 GMT
Not After : Nov 12 01:01:17 2025 GMT
Subject: CN=6f8348352ab055ab84cca42c2c58fa769196e953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:23:61:44:d9:56:46:10:7f:e7:fc:cb:b5:dc:
20:80:74:32:da:71:43:24:39:ca:83:08:5d:d3:2d:
9c:8e:43:31:ee:eb:bd:4c:1c:4b:02:04:19:ee:6c:
1b:3b:9d:f3:58:82:01:30:43:d6:89:ec:87:0e:b8:
75:97:1b:47:be:c6:e8:20:ec:49:9b:0a:74:55:25:
a9:33:09:ca:54:f3:18:02:b6:d6:15:02:2a:5a:c9:
5f:35:f9:6f:46:d0:18:01:af:c5:3c:6d:a4:4a:b2:
eb:f6:72:ed:4b:30:69:e2:22:3c:51:c7:33:0d:20:
1d:cf:25:6e:12:4a:86:02:51:cc:0f:3b:4a:e1:9e:
94:5e:b9:87:7f:66:c7:8c:94:87:7c:3c:18:3d:d0:
93:60:e4:dc:be:8e:7c:47:ce:55:4b:72:9d:24:24:
3d:1b:e7:c6:c3:22:89:e0:0d:f9:ea:d5:cc:a1:33:
ca:ef:78:78:ea:eb:e2:36:43:f5:a4:7f:0b:ef:26:
46:59:61:b1:53:24:73:71:b8:dc:6d:c9:91:28:ca:
18:8f:43:d5:fe:1f:e3:df:30:5d:3d:85:21:7a:f5:
4a:b5:cd:fe:c6:17:7e:8f:75:0e:2c:d2:1c:f8:ed:
d9:01:de:88:d2:06:0e:b5:48:3c:f0:fc:93:c1:ea:
34:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:83:48:35:2A:B0:55:AB:84:CC:A4:2C:2C:58:FA:76:91:96:E9:53
X509v3 Authority Key Identifier:
keyid:55:99:E5:97:7F:61:E7:3F:30:48:2D:AE:B1:A5:F2:DF:72:D5:ED:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZnll39h5z8wSC2usaXy33LV7UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c6:ae:17:92:0d:6a:e0:d6:66:d0:61:47:37:95:0d:20:93:
ab:12:e7:d7:08:28:46:db:89:35:71:a3:bf:8b:da:b0:d9:57:
7b:cb:4f:f2:4c:eb:d9:f3:5a:67:48:c3:5c:00:2c:18:07:61:
a5:35:e7:69:11:64:6d:35:7d:30:19:c1:0c:c9:30:55:bd:ed:
49:66:22:a9:09:f4:86:f3:54:ce:09:9e:83:c3:d2:1d:ac:99:
c5:5f:55:a9:ad:2a:82:f4:bb:04:57:d3:c6:af:21:a3:da:36:
3d:8b:ca:08:b7:b5:46:ca:44:b4:db:5c:67:7e:da:cf:52:37:
92:35:fc:2c:2c:45:00:88:1a:71:c9:9f:8d:21:f9:92:e7:ce:
b4:25:2b:ba:ff:5a:ff:ef:f5:32:0c:81:2b:8c:81:d9:26:3c:
af:f4:28:28:c1:27:7c:af:0b:a0:99:0d:08:0e:89:a0:3e:0b:
e0:13:85:98:43:60:c1:a3:d5:8a:d2:84:cf:fa:2d:41:98:ca:
ed:d1:42:3e:27:5c:0c:18:67:78:ba:6a:4c:46:a9:64:c3:29:
18:f7:d3:af:0a:e7:3d:ab:fe:14:12:ad:ff:ea:84:41:5d:63:
d4:b4:44:16:aa:e0:96:6e:fd:cd:ff:2a:55:a7:7f:2d:20:a2:
b4:f1:e9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:42 2025 by rpki-client