Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
File: VzDFDI_UStGWvxBX7ipvpAQcfk4.mft (raw, json)
Hash identifier: ci89rAC6D7ro+GGbIgWZB6HYBzB+SPA48a/eENavwBc=
Subject key identifier: 60:B1:59:80:9E:98:99:D7:D3:20:8C:82:A6:1A:6B:DF:82:2A:AC:05
Authority key identifier: 57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
Certificate issuer: /CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Certificate serial: 019A71B76DB800F59564ADB1577DBFE1AAA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
Manifest number: 0B7F
Signing time: Tue 11 Nov 2025 07:00:37 +0000
Manifest this update: Tue 11 Nov 2025 07:00:37 +0000
Manifest next update: Wed 12 Nov 2025 07:00:37 +0000
Files and hashes: 1: VzDFDI_UStGWvxBX7ipvpAQcfk4.crl (hash: e0JbP9kXtPGp21Py7mVDLQviwV42vqqxO3sNy4SFKhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:6d:b8:00:f5:95:64:ad:b1:57:7d:bf:e1:aa:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Validity
Not Before: Nov 11 07:00:37 2025 GMT
Not After : Nov 12 07:00:37 2025 GMT
Subject: CN=60b159809e9899d7d3208c82a61a6bdf822aac05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3f:44:40:bf:90:8a:78:ea:42:49:21:ce:e7:
ea:5e:73:45:45:60:22:83:ab:40:58:14:10:93:e0:
07:78:4d:86:a2:81:68:b9:e9:43:2f:43:b5:94:42:
39:f8:1c:18:ea:17:35:a0:dc:f5:03:54:6a:3b:31:
5e:1b:9b:71:23:1e:b4:a0:89:7f:cc:9c:ff:34:77:
a6:d6:e6:78:f1:6f:aa:65:23:bf:29:86:0d:c9:92:
8a:0a:89:43:35:b2:fd:5b:ca:01:02:be:d0:82:04:
14:19:35:f0:31:08:c3:03:5f:4a:e8:d2:e7:71:34:
d4:09:5d:11:a2:94:aa:76:6d:d1:83:b1:e5:9d:e3:
cf:15:00:49:fe:f1:26:fd:a6:55:ee:01:a4:3f:30:
b7:3e:8c:35:be:18:2f:49:aa:39:97:5e:b6:c2:47:
95:20:05:16:37:35:eb:60:fa:80:eb:6a:81:57:b8:
56:56:b6:64:84:cb:7d:d4:46:25:2c:e8:fe:ab:e1:
92:cf:10:cb:45:24:14:cb:74:04:87:29:49:02:e2:
98:46:f5:21:20:db:6c:c9:7f:7d:d3:85:a4:70:5a:
fa:e3:5e:d5:d6:fc:a0:e5:53:2e:e6:36:c9:1d:c9:
34:6b:98:55:99:80:c4:3c:8c:87:94:61:b8:de:f1:
19:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B1:59:80:9E:98:99:D7:D3:20:8C:82:A6:1A:6B:DF:82:2A:AC:05
X509v3 Authority Key Identifier:
keyid:57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:14:98:cd:cd:1a:90:ee:50:71:17:36:34:82:23:b9:89:27:
31:84:67:22:e9:8c:c5:4f:b5:43:5f:c8:e4:16:36:22:fe:2a:
29:08:ef:e0:45:b2:87:a6:ca:15:db:7f:d6:84:c3:8d:ad:f0:
71:38:c0:53:99:67:17:8d:a6:05:79:02:cf:77:26:e0:2d:b2:
df:40:8b:e3:40:b1:86:86:1e:4f:d2:10:b1:83:89:3b:f1:6b:
72:22:26:f7:ca:13:91:37:61:00:7e:a6:a5:a3:43:5a:ae:05:
3f:1a:25:fb:30:74:03:a0:7a:7f:0b:9b:26:a0:5b:9f:c6:03:
19:42:a2:10:b0:0d:b0:1e:02:ed:51:74:cb:67:65:92:84:1a:
ad:21:b0:26:03:5a:4b:0f:47:8a:bb:3c:70:58:55:c4:01:f1:
85:f5:09:f9:cc:46:36:a1:64:a2:4a:44:74:2a:c4:d6:47:32:
70:04:ec:15:5f:29:df:66:97:28:6b:4b:e3:75:c7:7c:16:60:
13:4b:d5:38:7c:8f:6d:43:7a:de:73:3a:05:db:f5:67:1c:61:
fd:fc:64:f2:06:af:93:de:2d:e8:d0:97:f7:81:bf:5b:5e:b6:
63:d4:18:2b:46:80:f1:9d:4a:39:30:fb:d8:ea:0f:e4:c3:8a:
8a:d9:bd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:47 2025 by rpki-client