Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
File: VzCjLzFiRs4LFHu4lejN8K7UPtY.mft (raw, json)
Hash identifier: XmpK3ysloiO/xqo6kPd02D9TIzH3oTVl31wbrQRK3ZQ=
Subject key identifier: B0:DF:CA:B0:BF:B8:27:1D:F7:13:77:65:16:DD:AB:7C:73:4B:50:52
Authority key identifier: 57:30:A3:2F:31:62:46:CE:0B:14:7B:B8:95:E8:CD:F0:AE:D4:3E:D6
Certificate issuer: /CN=5730a32f316246ce0b147bb895e8cdf0aed43ed6
Certificate serial: 019A7112C9EE8CC3B793C697E76D3A03B805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
Manifest number: 09CD
Signing time: Tue 11 Nov 2025 04:00:47 +0000
Manifest this update: Tue 11 Nov 2025 04:00:47 +0000
Manifest next update: Wed 12 Nov 2025 04:00:47 +0000
Files and hashes: 1: JdnQsGvdkhLMYKHimmIYbcmtu_4.roa (hash: XQ8/SW7MphrctHqH7PZ0NzqyE28ii273Q0FygBQXgEo=)
2: VzCjLzFiRs4LFHu4lejN8K7UPtY.crl (hash: RpgkBmoOsiAL8cGDEAj9Wb8YM5s4okawChfQUHG67Yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:c9:ee:8c:c3:b7:93:c6:97:e7:6d:3a:03:b8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5730a32f316246ce0b147bb895e8cdf0aed43ed6
Validity
Not Before: Nov 11 04:00:47 2025 GMT
Not After : Nov 12 04:00:47 2025 GMT
Subject: CN=b0dfcab0bfb8271df713776516ddab7c734b5052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:fe:95:24:e7:27:dc:9a:60:99:9f:04:59:
bb:86:69:07:6e:8e:2d:19:d7:e6:72:0e:a6:9d:71:
47:f1:41:c3:02:aa:f3:06:f2:e0:88:76:8a:9c:8a:
f1:b5:61:39:e1:24:c2:b1:43:f2:1e:08:64:42:42:
e3:2e:64:2b:76:d7:11:ba:6f:e1:a7:a3:75:22:21:
6f:90:e3:03:aa:e2:6b:ab:a9:74:00:43:b6:30:1b:
12:2b:0f:b6:eb:00:9b:55:0f:d2:8e:55:a9:c5:8a:
91:39:dc:6d:21:be:ce:a5:77:81:1a:cc:86:62:d0:
cb:6d:6b:03:ac:0f:29:c7:c1:49:bb:d4:78:fb:ba:
f8:2c:30:f1:20:e8:b4:8c:96:76:37:ae:bc:6e:30:
09:49:fe:f5:5f:bf:90:94:e1:15:63:f7:f1:8a:d4:
13:c2:9b:bb:79:ea:94:0f:a8:77:ce:08:89:2c:44:
c1:86:18:43:f5:99:86:51:ad:fa:66:d2:97:df:d7:
87:9b:5b:45:d5:5f:e6:a9:4f:d6:9d:ab:a3:e3:a1:
cd:05:8a:96:b5:d5:8a:0d:de:1c:d7:08:dd:2c:43:
10:bf:fe:e0:d1:8d:d5:24:67:47:4f:5b:40:93:45:
71:c2:d6:83:81:70:f7:8d:75:d0:f5:b7:29:7c:42:
ca:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DF:CA:B0:BF:B8:27:1D:F7:13:77:65:16:DD:AB:7C:73:4B:50:52
X509v3 Authority Key Identifier:
keyid:57:30:A3:2F:31:62:46:CE:0B:14:7B:B8:95:E8:CD:F0:AE:D4:3E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ec:40:c4:7f:63:b4:bf:09:19:69:2d:e8:52:4e:2f:91:02:
ec:3a:88:60:23:1d:79:c3:15:5b:3a:af:03:84:cd:8c:dc:01:
54:b0:03:ad:e3:da:36:2e:a8:3b:54:07:26:e3:6b:b5:11:0f:
de:b2:12:49:03:61:f6:30:50:62:4f:7f:aa:55:36:56:dd:c2:
6b:85:e6:e6:ae:dd:f2:5f:6d:6f:4e:2b:d8:fd:ee:cf:2f:96:
49:41:cb:83:10:77:73:7a:b6:13:5a:1c:96:b8:1d:47:21:7a:
1b:f3:65:64:f1:2f:66:dd:77:3a:c0:91:bc:de:7e:ef:04:e5:
64:df:e6:d4:36:a2:d9:48:47:9d:07:d9:ac:90:4d:38:97:8f:
73:84:10:bb:1b:0c:9a:5d:dc:a3:55:28:76:a3:e9:63:37:b9:
6b:24:a8:b4:bc:8a:26:3c:f3:24:0b:2f:56:69:58:7a:cb:fd:
14:05:9c:83:53:27:4a:0f:45:47:cf:63:cd:dd:52:ab:88:27:
5e:af:1d:0b:f6:7e:94:85:1e:2a:1e:a4:ff:cf:27:ae:6e:02:
27:d2:43:e4:c5:aa:ec:2e:a7:2a:88:f2:73:52:3e:53:d2:78:
90:0f:8e:66:03:7b:d7:a0:b0:58:30:06:f7:7a:00:21:f0:07:
a6:2c:83:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:59 2025 by rpki-client