Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft
File: VzzskGOoh0GEGQiwxSl_zbtDlTA.mft (raw, json)
Hash identifier: lWlmwPXErTfO0x2lMD2hIsZ38lw9E876qV58VEjnWAY=
Subject key identifier: AF:42:D9:24:6F:00:39:01:86:47:17:C9:81:57:E6:47:7E:0E:10:09
Authority key identifier: 57:3C:EC:90:63:A8:87:41:84:19:08:B0:C5:29:7F:CD:BB:43:95:30
Certificate issuer: /CN=573cec9063a88741841908b0c5297fcdbb439530
Certificate serial: 019A70A5430BD4116BAAA9EE47692AAC4189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft
Manifest number: 34
Signing time: Tue 11 Nov 2025 02:01:09 +0000
Manifest this update: Tue 11 Nov 2025 02:01:09 +0000
Manifest next update: Wed 12 Nov 2025 02:01:09 +0000
Files and hashes: 1: VzzskGOoh0GEGQiwxSl_zbtDlTA.crl (hash: HGTryQ8Y7jTq8JCLrHPzZIaT8Q1EsM1gXWGgtImh5oI=)
2: sL2NSlZMFdAYtXpmUtMsUTVxj5U.roa (hash: xcmnsmi1DtWtpZIXUGx0RyP3Q0L6fGwH3VyxN8K/Zro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:43:0b:d4:11:6b:aa:a9:ee:47:69:2a:ac:41:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=573cec9063a88741841908b0c5297fcdbb439530
Validity
Not Before: Nov 11 02:01:09 2025 GMT
Not After : Nov 12 02:01:09 2025 GMT
Subject: CN=af42d9246f003901864717c98157e6477e0e1009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c7:cd:fa:b0:c3:e7:62:c9:46:88:39:08:28:
5c:ea:6b:02:a2:10:64:b4:7f:87:df:87:77:3e:98:
68:ef:b3:ee:82:5e:c9:a3:08:f6:bd:2e:57:78:91:
f4:7d:8e:8e:9b:af:4c:b5:84:e9:03:20:22:8f:e5:
03:cb:23:15:3a:64:de:03:54:00:16:68:24:d3:36:
3f:75:1a:d5:d2:18:d0:51:d0:b0:b0:fc:26:b4:4e:
47:6d:b1:b0:79:ed:7b:a7:df:f8:84:13:ec:fd:ac:
9d:eb:1b:cc:33:51:db:09:1a:9f:3d:71:b3:04:5f:
b6:fd:55:b4:18:d8:0a:9a:86:29:50:cf:0e:a1:ca:
e0:3d:31:6f:d1:a0:e5:01:c3:4d:62:f2:84:08:dd:
74:bc:9c:d3:de:96:75:c4:e7:44:62:22:18:7a:df:
0c:84:f4:04:ab:54:45:43:9d:65:45:ff:56:7e:a9:
25:a9:47:29:7e:02:cf:fc:8a:46:43:78:13:0d:f9:
17:1c:58:a5:fe:46:f3:64:80:58:89:40:f6:71:a6:
89:79:c2:a9:4d:dc:22:1f:7b:cc:95:53:5e:4e:37:
50:18:3b:78:44:84:38:68:7f:86:bf:13:4f:28:a8:
c6:38:b8:91:d0:68:49:8a:33:0d:de:63:a7:73:8c:
77:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:42:D9:24:6F:00:39:01:86:47:17:C9:81:57:E6:47:7E:0E:10:09
X509v3 Authority Key Identifier:
keyid:57:3C:EC:90:63:A8:87:41:84:19:08:B0:C5:29:7F:CD:BB:43:95:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:37:df:2b:26:16:8c:8c:20:f5:17:1f:74:29:71:8b:d8:84:
7b:c9:02:a0:08:b6:26:de:bf:2a:7d:d9:7d:28:bb:8f:e1:ef:
69:99:b4:7f:f1:e5:51:03:96:97:f1:d8:63:b4:2d:93:7b:e9:
d2:69:b4:9a:8a:c2:7c:71:56:8f:24:35:bd:b7:e4:be:54:52:
cc:61:3e:59:b9:41:23:cd:3c:b4:b1:98:60:8d:44:31:18:a5:
fd:bc:d6:6e:b3:31:19:9e:01:56:18:1e:d0:33:a8:74:15:85:
13:12:aa:81:25:98:7f:4b:f1:7e:17:ec:87:0d:97:b3:43:e9:
fb:08:e1:e0:26:3f:62:fa:1d:80:8a:f5:f7:8a:76:0b:9a:b4:
6a:e3:d8:ff:81:44:55:17:54:e3:06:1d:e8:39:60:82:5d:8e:
bc:93:62:b3:39:29:27:f6:b6:3b:e5:5f:9f:d7:2b:01:bf:06:
6b:2d:69:8a:0d:b4:ea:2b:5b:37:34:d4:30:bf:6a:92:ac:42:
86:36:30:6c:5e:91:d9:80:3c:31:b5:fe:1d:0d:f0:59:d8:4f:
0b:2d:68:38:8f:61:45:63:b5:69:8e:cc:49:b6:39:8a:39:7e:
49:b8:b9:a2:a5:bd:ae:b6:4c:a6:0a:9e:25:00:59:c2:a0:29:
dc:89:41:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpUML1BFrqqnuR2kqrEGJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3M2NlYzkwNjNhODg3NDE4NDE5MDhiMGM1Mjk3ZmNkYmI0
Mzk1MzAwHhcNMjUxMTExMDIwMTA5WhcNMjUxMTEyMDIwMTA5WjAzMTEwLwYDVQQD
EyhhZjQyZDkyNDZmMDAzOTAxODY0NzE3Yzk4MTU3ZTY0NzdlMGUxMDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28fN+rDD52LJRog5CChc6msCohBk
tH+H34d3Ppho77Pugl7Jowj2vS5XeJH0fY6Om69MtYTpAyAij+UDyyMVOmTeA1QA
Fmgk0zY/dRrV0hjQUdCwsPwmtE5HbbGwee17p9/4hBPs/ayd6xvMM1HbCRqfPXGz
BF+2/VW0GNgKmoYpUM8OocrgPTFv0aDlAcNNYvKECN10vJzT3pZ1xOdEYiIYet8M
hPQEq1RFQ51lRf9WfqklqUcpfgLP/IpGQ3gTDfkXHFil/kbzZIBYiUD2caaJecKp
TdwiH3vMlVNeTjdQGDt4RIQ4aH+GvxNPKKjGOLiR0GhJijMN3mOnc4x3fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9C2SRvADkBhkcXyYFX5kd+DhAJMB8GA1UdIwQY
MBaAFFc87JBjqIdBhBkIsMUpf827Q5UwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnp6c2tHT29oMEdFR1Fpd3hTbF96YnREbFRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wN2RkNTgtMmQyZS00MjZlLTllMWEt
NTQ1NGU1YTE2ZjQyLzEvVnp6c2tHT29oMEdFR1Fpd3hTbF96YnREbFRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8wN2RkNTgtMmQyZS00MjZlLTllMWEtNTQ1NGU1YTE2ZjQy
LzEvVnp6c2tHT29oMEdFR1Fpd3hTbF96YnREbFRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqTffKyYW
jIwg9RcfdClxi9iEe8kCoAi2Jt6/Kn3ZfSi7j+HvaZm0f/HlUQOWl/HYY7Qtk3vp
0mm0morCfHFWjyQ1vbfkvlRSzGE+WblBI808tLGYYI1EMRil/bzWbrMxGZ4BVhge
0DOodBWFExKqgSWYf0vxfhfshw2Xs0Pp+wjh4CY/YvodgIr194p2C5q0auPY/4FE
VRdU4wYd6Dlggl2OvJNiszkpJ/a2O+Vfn9crAb8Gay1pig206itbNzTUML9qkqxC
hjYwbF6R2YA8MbX+HQ3wWdhPCy1oOI9hRWO1aY7MSbY5ijl+Sbi5oqW9rrZMpgqe
JQBZwqAp3IlBMg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:56 2025 by rpki-client