Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.mft
File: Vz035lyCKPeT9IuOmiDxLC-AuIM.mft (raw, json)
Hash identifier: LrBXxBpqJ3ZK96bhEOAYP+JtViqc8bA7C5hMDZqpRaU=
Subject key identifier: B5:3A:38:1A:01:41:C5:14:5D:0C:8C:20:80:AA:7C:EF:77:DE:21:30
Authority key identifier: 57:3D:37:E6:5C:82:28:F7:93:F4:8B:8E:9A:20:F1:2C:2F:80:B8:83
Certificate issuer: /CN=573d37e65c8228f793f48b8e9a20f12c2f80b883
Certificate serial: 019A725CBF5C119F9A840D39FC8C3F36464C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vz035lyCKPeT9IuOmiDxLC-AuIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.mft
Manifest number: 0493
Signing time: Tue 11 Nov 2025 10:01:12 +0000
Manifest this update: Tue 11 Nov 2025 10:01:12 +0000
Manifest next update: Wed 12 Nov 2025 10:01:12 +0000
Files and hashes: 1: Vz035lyCKPeT9IuOmiDxLC-AuIM.crl (hash: eherG9anm30CWa/dqkj35nrF8VHBJ0I5ERmMsq4M6h0=)
2: me2Mm6iE4MmWqqMfeXBQWh9NVlw.roa (hash: KdRhruoB4ssCK1ecxTO4OFeivwA74VFCDUNtwELNI14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vz035lyCKPeT9IuOmiDxLC-AuIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:bf:5c:11:9f:9a:84:0d:39:fc:8c:3f:36:46:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=573d37e65c8228f793f48b8e9a20f12c2f80b883
Validity
Not Before: Nov 11 10:01:12 2025 GMT
Not After : Nov 12 10:01:12 2025 GMT
Subject: CN=b53a381a0141c5145d0c8c2080aa7cef77de2130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:14:2a:be:a6:ec:42:92:07:cb:0e:c2:46:09:
85:df:6a:d7:62:b6:5c:8f:1e:15:b2:f0:2e:eb:cf:
1c:0d:e9:8f:6e:95:5c:35:45:1d:b6:13:54:07:0f:
cc:67:46:e3:1f:ad:7b:93:10:dc:f3:4f:0b:d7:42:
c1:49:99:cf:b2:6d:6b:cc:ac:d9:c9:68:59:c1:22:
59:c0:93:7a:90:04:6e:72:9b:f5:68:08:ac:94:18:
57:af:ea:9b:00:22:e1:3f:13:55:e4:71:1b:02:b9:
de:af:10:f8:e0:7c:37:bd:8c:30:93:36:4b:94:a4:
02:96:c0:de:01:8a:81:2a:58:77:72:1f:e1:09:e9:
d9:c9:3f:29:88:5d:7e:db:f3:df:69:62:10:8f:34:
46:a9:ac:6a:4e:5a:59:f8:9a:45:2e:92:7e:0b:c1:
a5:c7:14:7c:00:d7:e6:e0:f4:98:9b:bb:33:bd:e4:
6e:cb:b9:cf:ac:e1:72:17:d9:39:7a:63:84:0c:33:
53:77:57:73:8d:ed:36:45:b8:3c:e8:67:95:97:db:
82:ee:6a:3a:99:f6:df:ee:87:4e:12:0a:24:53:8a:
b5:66:35:69:eb:49:9a:c5:22:49:66:20:51:5b:58:
26:f0:d9:bd:ee:59:37:bd:4e:9a:20:cf:42:0d:52:
47:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3A:38:1A:01:41:C5:14:5D:0C:8C:20:80:AA:7C:EF:77:DE:21:30
X509v3 Authority Key Identifier:
keyid:57:3D:37:E6:5C:82:28:F7:93:F4:8B:8E:9A:20:F1:2C:2F:80:B8:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vz035lyCKPeT9IuOmiDxLC-AuIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:19:42:2b:50:f1:a1:3d:1a:8a:a0:d3:3a:af:b7:75:ab:5b:
35:4c:92:e2:17:59:dd:49:d8:9f:66:f1:ba:32:f3:0e:86:be:
2f:fd:fb:d1:bf:88:38:55:3a:41:03:89:3d:ad:2a:86:e3:43:
b6:dd:e4:db:fd:69:30:0c:98:03:a9:90:21:f8:09:25:04:56:
cb:a5:ed:a6:17:14:87:14:5d:66:75:fb:af:05:47:6e:cd:5d:
8c:c2:64:64:50:10:71:25:49:0a:d8:01:0f:ee:b7:98:23:72:
c5:76:83:60:29:4a:56:b1:be:e2:0e:ce:db:55:8c:9a:3a:57:
ed:90:1b:ac:7a:cb:82:bc:6e:0f:6d:ef:5d:9e:7e:41:45:81:
86:0a:34:fc:73:6b:b0:9c:22:2a:ba:03:bb:c0:b6:5c:3b:3b:
c3:42:82:5b:0c:4e:b3:86:42:b3:19:15:11:c1:51:98:25:6e:
20:89:f1:cd:29:1a:ba:3b:10:ba:8c:a1:cd:12:89:65:42:f4:
96:1b:0b:3b:96:25:3d:57:8e:9b:71:06:cc:cf:4e:4a:d5:9e:
81:a2:1f:70:cd:7e:4e:b2:4d:32:c9:9a:93:69:ef:66:61:65:
af:5b:ce:63:8e:9d:74:28:1b:9e:36:08:bc:e7:3c:dc:31:d9:
d1:b2:4e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:23 2025 by rpki-client