Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft
File: VZcyBKNpaAWG3if5RvyBZlYyqoM.mft (raw, json)
Hash identifier: /rjfYiJH0WXY4rLlz4yoXQkyTT+BXQSIuty8Vd5Z1B8=
Subject key identifier: 1A:9A:83:D4:F4:AB:2B:E2:3E:15:5F:68:4D:A0:64:02:BE:A3:A4:D5
Authority key identifier: 55:97:32:04:A3:69:68:05:86:DE:27:F9:46:FC:81:66:56:32:AA:83
Certificate issuer: /CN=55973204a369680586de27f946fc81665632aa83
Certificate serial: 019A71EEB705A4485576E70A72627D0CC744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZcyBKNpaAWG3if5RvyBZlYyqoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft
Manifest number: 023F
Signing time: Tue 11 Nov 2025 08:01:01 +0000
Manifest this update: Tue 11 Nov 2025 08:01:01 +0000
Manifest next update: Wed 12 Nov 2025 08:01:01 +0000
Files and hashes: 1: VZcyBKNpaAWG3if5RvyBZlYyqoM.crl (hash: JKtZEPVUvjx0v1avKrymxMqCpCATl8swo+Jxwyfi3A4=)
2: mSTn9O6BnESLT6h3yoW1YArpQb4.roa (hash: 7y3jZgmc8JKyp1pmRABgyXmd8BIDMBzt7/dcJJXvkSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZcyBKNpaAWG3if5RvyBZlYyqoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b7:05:a4:48:55:76:e7:0a:72:62:7d:0c:c7:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55973204a369680586de27f946fc81665632aa83
Validity
Not Before: Nov 11 08:01:01 2025 GMT
Not After : Nov 12 08:01:01 2025 GMT
Subject: CN=1a9a83d4f4ab2be23e155f684da06402bea3a4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:43:2a:73:98:25:b8:e2:86:4c:48:59:8d:cd:
1a:6e:79:34:25:c8:fb:16:20:c9:43:07:fc:6f:0a:
c5:13:56:6e:4c:d9:61:1d:0c:8b:7f:f3:f8:23:b9:
98:ad:64:cc:7e:23:8e:56:e3:9a:40:19:6c:50:b2:
11:93:b6:80:5f:2f:4c:4f:25:48:bb:35:0d:25:22:
66:16:6e:04:d9:9a:c1:5a:13:f9:7a:a4:53:6a:a4:
9f:13:eb:0f:7f:05:f3:24:df:9a:4c:c9:89:b3:df:
ed:a2:45:f4:5d:cc:6f:41:8f:96:28:91:ef:98:d4:
a8:95:c6:8a:33:3f:57:cf:5e:70:4f:a7:9d:50:e2:
54:3e:11:3a:ac:35:a6:6d:b8:3d:43:ff:2e:f3:de:
76:75:6b:5b:6c:62:78:92:55:fb:fd:8e:d3:95:bb:
14:1d:95:96:44:fa:f1:ec:c0:9e:cc:e9:6f:a5:c4:
93:bf:03:bb:c7:2e:2c:6a:2b:99:da:77:46:99:c2:
1a:a8:ca:f8:27:c1:81:18:3c:c5:b5:93:61:a8:d0:
42:c2:df:5f:25:9f:6c:d4:32:78:ed:7c:4a:f1:52:
1d:e6:9b:db:e7:42:80:4a:0c:0e:46:e4:3a:45:ab:
0d:97:84:4d:33:66:5a:d5:21:30:d8:84:18:37:ef:
fa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9A:83:D4:F4:AB:2B:E2:3E:15:5F:68:4D:A0:64:02:BE:A3:A4:D5
X509v3 Authority Key Identifier:
keyid:55:97:32:04:A3:69:68:05:86:DE:27:F9:46:FC:81:66:56:32:AA:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZcyBKNpaAWG3if5RvyBZlYyqoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:78:c0:3d:bc:ef:88:ca:87:62:e5:0c:be:3d:bf:57:6d:43:
94:8f:00:91:4b:85:9b:db:23:d1:66:26:81:6c:1a:9b:5b:80:
97:b7:0a:50:85:b9:6d:ff:3c:92:e2:f5:56:7c:82:42:69:9e:
ba:cc:98:64:7f:4c:07:d8:2a:0c:e5:cc:af:f7:5d:70:cd:95:
d3:68:69:f8:ec:75:39:35:b6:ee:f7:84:21:9b:aa:be:d1:7b:
6f:21:be:41:73:57:22:d1:29:f8:82:53:a3:ab:11:49:f8:9b:
c8:64:25:e7:7f:d3:1b:af:6e:3d:e3:db:e4:4e:4d:6f:6c:49:
8b:e7:da:af:3a:8b:6e:53:b3:b0:e3:78:39:f7:1c:82:37:9f:
ea:da:fa:6c:94:fe:99:e2:5d:d5:1b:fe:d4:e2:1e:3f:e4:e0:
cd:f7:7f:a4:13:17:84:ed:a9:8a:38:f7:5a:9b:b5:94:ff:88:
a0:92:2f:b8:b8:5a:07:15:4b:0c:a7:22:3a:7a:92:9a:bb:0a:
38:cb:f1:6b:a4:6b:99:4c:f6:ec:4b:0e:7f:8b:34:49:ce:71:
9c:7c:8e:b7:b4:dd:f0:c9:f3:6f:66:0d:2f:20:b3:5f:5f:05:
d4:04:93:3c:83:0b:78:ad:57:04:f9:4b:91:09:45:eb:ca:09:
b7:e0:4f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:50 2025 by rpki-client