Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
File: VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft (raw, json)
Hash identifier: 2S2xhv6I4WwY/xFM1JxNduVEtvynju61WD0w1fNZR6U=
Subject key identifier: C1:FB:11:94:2D:7D:5C:C3:F6:BC:17:C1:8D:66:31:D6:72:B4:58:FD
Authority key identifier: 57:30:E2:F7:03:F6:98:B9:DC:EA:C6:3F:1E:86:91:D8:79:C0:B2:A7
Certificate issuer: /CN=5730e2f703f698b9dceac63f1e8691d879c0b2a7
Certificate serial: 019A7149FDA84CA133F0B2094284C3807D37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
Manifest number: 0623
Signing time: Tue 11 Nov 2025 05:01:05 +0000
Manifest this update: Tue 11 Nov 2025 05:01:05 +0000
Manifest next update: Wed 12 Nov 2025 05:01:05 +0000
Files and hashes: 1: VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl (hash: KYd2z8FG9hbT7s7jMVmMVikZIma1kh2sWCJf0ij5BiU=)
2: yDB5GRHHAS-xe1GzTw2-ZinAODM.roa (hash: fhKYPu+IotrC2SQI+fYAsjSkwcHk2X3TQ/wuBYgtCU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:fd:a8:4c:a1:33:f0:b2:09:42:84:c3:80:7d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5730e2f703f698b9dceac63f1e8691d879c0b2a7
Validity
Not Before: Nov 11 05:01:05 2025 GMT
Not After : Nov 12 05:01:05 2025 GMT
Subject: CN=c1fb11942d7d5cc3f6bc17c18d6631d672b458fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:07:39:31:2e:55:05:83:6b:e4:4b:32:7e:74:
dd:66:b6:1d:91:d0:2d:9a:61:9a:7e:df:d0:f8:3c:
f9:43:9e:fe:09:9f:61:48:70:08:42:9a:0f:69:77:
d0:44:98:49:76:37:f2:59:09:96:e9:9d:03:03:58:
81:d9:e6:02:a9:56:fe:1f:09:2c:44:88:3a:0e:18:
ba:f3:f8:51:bc:7f:f7:ef:2d:f6:42:e9:bc:59:76:
b4:e5:a6:cd:81:e3:20:69:84:5e:98:4c:14:3d:eb:
e7:b4:79:1b:7b:a3:45:5d:17:7a:61:4e:ba:9b:ad:
88:69:d0:84:00:c0:5e:75:27:54:17:02:7b:2c:9c:
94:71:55:7b:e0:fe:6d:10:ab:af:5a:a9:ef:0d:c4:
57:0d:5e:81:39:eb:eb:11:7a:f8:9c:3f:0a:a2:4c:
95:e2:26:0b:cd:72:b0:cb:9c:34:08:a0:00:83:35:
e6:aa:09:ad:cd:89:a0:26:e3:da:52:9e:0b:3e:c7:
a1:3e:5a:8b:84:9b:22:fe:c2:f0:40:d4:f7:b2:31:
30:85:c1:c4:53:75:7e:02:87:9a:eb:b0:a8:14:2c:
fe:8a:28:04:4b:7a:e0:85:45:8b:3f:51:3d:8a:8c:
73:44:2e:04:35:65:c5:c9:d7:a1:de:3e:8c:9a:61:
db:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FB:11:94:2D:7D:5C:C3:F6:BC:17:C1:8D:66:31:D6:72:B4:58:FD
X509v3 Authority Key Identifier:
keyid:57:30:E2:F7:03:F6:98:B9:DC:EA:C6:3F:1E:86:91:D8:79:C0:B2:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:46:e6:a1:36:9c:c2:50:e7:35:48:ac:c6:b2:d7:ab:72:59:
53:93:c0:96:5b:59:8c:19:fa:5e:0a:82:58:ca:b9:ad:33:da:
f3:21:83:64:21:c4:b7:a9:58:31:9a:47:65:c0:30:9c:67:3f:
a3:11:ab:5a:99:0a:e4:1d:7d:60:8c:ba:03:95:78:b9:57:f2:
34:2d:63:f5:79:2f:49:60:4c:e7:47:3d:96:84:b9:35:cb:de:
aa:f0:6f:fe:b6:f0:29:48:0f:5b:91:9a:05:f3:a5:da:c3:be:
eb:28:b7:23:2f:10:57:f2:cb:c3:9c:1a:3c:c8:6c:37:9e:f9:
79:7b:f2:ab:67:af:8a:c1:aa:07:4c:2d:e0:3c:32:76:69:aa:
ae:d3:53:e3:49:0a:25:b8:73:87:20:f6:60:bb:2a:0d:bb:ba:
97:1b:ea:77:7b:e8:eb:f1:54:8d:23:56:97:88:c9:0d:6a:1f:
5f:77:8b:7f:f0:bb:e9:ee:d9:c5:b1:fa:69:f7:99:24:99:2d:
34:61:c4:93:8d:ba:f4:c5:85:65:36:dc:59:4e:44:74:2a:10:
56:52:8f:99:70:cc:0c:04:69:9c:ae:2a:5c:a7:5a:47:43:4f:
91:33:90:e7:5a:c6:d1:aa:5a:09:f8:00:a3:61:90:69:4f:28:
33:0f:58:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:27 2025 by rpki-client