Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
File: VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft (raw, json)
Hash identifier: 4Qdvw+ymFjStISUvp0FyGRcDoOVCVZClkR7EXA4dr4Y=
Subject key identifier: C1:FB:D2:B5:14:71:13:18:BD:A9:AA:39:7F:55:E7:B0:9A:DA:A1:CB
Authority key identifier: 57:30:E2:F7:03:F6:98:B9:DC:EA:C6:3F:1E:86:91:D8:79:C0:B2:A7
Certificate issuer: /CN=5730e2f703f698b9dceac63f1e8691d879c0b2a7
Certificate serial: 0199233181E008EEA69F2912B8861B865AE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
Manifest number: 0576
Signing time: Sun 07 Sep 2025 08:01:10 +0000
Manifest this update: Sun 07 Sep 2025 08:01:10 +0000
Manifest next update: Mon 08 Sep 2025 08:01:10 +0000
Files and hashes: 1: VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl (hash: 0pSu/OU/SlkL8K7DkMfiPVhATTbgTnf8rIx7U/k3Mmg=)
2: yDB5GRHHAS-xe1GzTw2-ZinAODM.roa (hash: fhKYPu+IotrC2SQI+fYAsjSkwcHk2X3TQ/wuBYgtCU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:81:e0:08:ee:a6:9f:29:12:b8:86:1b:86:5a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5730e2f703f698b9dceac63f1e8691d879c0b2a7
Validity
Not Before: Sep 7 08:01:10 2025 GMT
Not After : Sep 8 08:01:10 2025 GMT
Subject: CN=c1fbd2b514711318bda9aa397f55e7b09adaa1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:db:f1:49:d2:8c:f9:bb:3b:a6:12:6e:ce:71:
1e:22:73:cb:fd:71:ba:7a:7a:15:9d:1a:4f:8b:87:
94:2d:52:8d:fc:e7:68:60:fb:d2:60:0b:b1:30:10:
fb:cc:71:33:dc:06:83:83:4e:fb:96:69:fd:7e:2a:
87:c5:e8:f3:31:a8:a1:f6:cc:71:85:fe:fb:4d:f8:
4b:51:a7:5b:a1:33:79:eb:39:8c:e1:fb:5a:78:55:
b8:3e:26:a2:12:79:07:47:49:2c:74:6c:09:82:e5:
c1:5e:93:e5:b0:d0:e6:09:e4:32:4a:f1:a8:aa:64:
58:29:c6:87:2a:71:f2:f8:a5:fc:58:b6:60:8f:0a:
de:67:84:c6:e2:92:1b:d7:ce:18:7e:d9:4c:90:4e:
f9:3b:04:53:fb:59:1d:d6:42:98:90:f3:67:e7:d8:
42:37:6f:df:b1:36:a4:e9:8d:93:46:c2:66:22:34:
63:40:f8:da:9b:a4:f6:b5:11:76:42:b5:f8:42:7f:
78:6a:39:a6:b4:5d:b3:2d:22:94:e1:70:12:32:21:
38:a4:74:0d:ce:8b:42:e4:5f:70:e9:00:51:cb:3c:
32:9a:4a:cd:e5:4d:91:9b:d6:07:e2:09:43:bc:83:
25:8f:55:ec:cf:b7:a8:05:5c:5c:b9:ce:6b:b5:37:
ba:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FB:D2:B5:14:71:13:18:BD:A9:AA:39:7F:55:E7:B0:9A:DA:A1:CB
X509v3 Authority Key Identifier:
keyid:57:30:E2:F7:03:F6:98:B9:DC:EA:C6:3F:1E:86:91:D8:79:C0:B2:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:dc:c2:01:7c:ef:1c:88:cd:7e:b8:8d:30:50:c4:d6:6e:49:
49:e0:0d:85:fc:f9:8f:c1:4a:85:e5:59:b8:8d:fe:89:e9:1e:
25:29:60:46:77:4b:4f:f6:e2:55:9a:ac:dd:37:7e:30:9a:53:
c9:cc:b1:02:ba:cf:dc:b5:76:6b:bb:0d:3f:37:e6:dc:c2:d9:
9d:90:30:0a:79:5d:2e:0b:c4:2d:e9:41:25:bf:47:65:e3:31:
a3:ec:fd:4f:d9:45:d8:a8:ca:88:e9:a4:c1:bc:c3:e8:e2:7e:
60:4a:ab:98:da:b8:e3:c3:30:ba:46:45:8a:00:c2:28:42:ba:
3c:f5:83:7c:c7:42:b0:48:c6:b5:b0:62:25:92:c8:7e:9b:ce:
ea:98:fc:9e:8d:f3:e9:e1:c2:a6:37:3c:55:5d:43:a7:85:7b:
c3:9b:9d:a8:02:93:af:a2:da:b0:7a:06:c8:6b:77:65:be:eb:
14:0e:22:f7:4e:c1:05:28:3d:7b:96:88:c4:de:44:95:29:a0:
45:3b:ae:e4:37:1c:1b:e1:9b:14:15:f5:d1:5a:89:75:6b:7c:
b0:7c:65:2c:df:36:e9:81:05:45:f2:42:3f:bb:e1:4a:a4:7a:
f0:0c:a9:7c:8b:e2:6f:b8:3c:63:d5:ae:c4:e7:63:29:9f:df:
2b:d8:60:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMYHgCO6mnykSuIYbhlrpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MzBlMmY3MDNmNjk4YjlkY2VhYzYzZjFlODY5MWQ4Nzlj
MGIyYTcwHhcNMjUwOTA3MDgwMTEwWhcNMjUwOTA4MDgwMTEwWjAzMTEwLwYDVQQD
EyhjMWZiZDJiNTE0NzExMzE4YmRhOWFhMzk3ZjU1ZTdiMDlhZGFhMWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9vxSdKM+bs7phJuznEeInPL/XG6
enoVnRpPi4eULVKN/OdoYPvSYAuxMBD7zHEz3AaDg077lmn9fiqHxejzMaih9sxx
hf77TfhLUadboTN56zmM4ftaeFW4PiaiEnkHR0ksdGwJguXBXpPlsNDmCeQySvGo
qmRYKcaHKnHy+KX8WLZgjwreZ4TG4pIb184YftlMkE75OwRT+1kd1kKYkPNn59hC
N2/fsTak6Y2TRsJmIjRjQPjam6T2tRF2QrX4Qn94ajmmtF2zLSKU4XASMiE4pHQN
zotC5F9w6QBRyzwymkrN5U2Rm9YH4glDvIMlj1Xsz7eoBVxcuc5rtTe6kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMH70rUUcRMYvamqOX9V57Ca2qHLMB8GA1UdIwQY
MBaAFFcw4vcD9pi53OrGPx6Gkdh5wLKnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnpEaTl3UDJtTG5jNnNZX0hvYVIySG5Bc3FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9lNjJjZGQtNmZmMC00MzkxLThiODIt
MTNkZjc1YzBkOWEzLzEvVnpEaTl3UDJtTG5jNnNZX0hvYVIySG5Bc3FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9lNjJjZGQtNmZmMC00MzkxLThiODItMTNkZjc1YzBkOWEz
LzEvVnpEaTl3UDJtTG5jNnNZX0hvYVIySG5Bc3FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvdzCAXzv
HIjNfriNMFDE1m5JSeANhfz5j8FKheVZuI3+iekeJSlgRndLT/biVZqs3Td+MJpT
ycyxArrP3LV2a7sNPzfm3MLZnZAwCnldLgvELelBJb9HZeMxo+z9T9lF2KjKiOmk
wbzD6OJ+YEqrmNq448MwukZFigDCKEK6PPWDfMdCsEjGtbBiJZLIfpvO6pj8no3z
6eHCpjc8VV1Dp4V7w5udqAKTr6LasHoGyGt3Zb7rFA4i907BBSg9e5aIxN5ElSmg
RTuu5DccG+GbFBX10VqJdWt8sHxlLN826YEFRfJCP7vhSqR68AypfIvib7g8Y9Wu
xOdjKZ/fK9hg4A==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:13 2025 by rpki-client