Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
File: VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft (raw, json)
Hash identifier: f6ff5z8u0rB8+B6O6IldBTlkBjPoujPnl2iljF0El+s=
Subject key identifier: 3F:2B:A2:50:E4:B8:E0:11:5C:C1:AE:17:C7:37:2E:62:5B:7F:10:5A
Authority key identifier: 55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
Certificate issuer: /CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Certificate serial: 019923A082CA936847AD16F0384C4DD0F1F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
Manifest number: 11F2
Signing time: Sun 07 Sep 2025 10:02:25 +0000
Manifest this update: Sun 07 Sep 2025 10:02:25 +0000
Manifest next update: Mon 08 Sep 2025 10:02:25 +0000
Files and hashes: 1: DXmFl68ZzKbqEncxK9EZHxIqylM.roa (hash: N3mENR29mNKtOOFkrl0wNAecJurlbOILfUHUa/gdTXA=)
2: VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl (hash: BTFpv6nUFTrOflMdUZ2Vn+BAKpwmxczozaVeHeBjUF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:82:ca:93:68:47:ad:16:f0:38:4c:4d:d0:f1:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Validity
Not Before: Sep 7 10:02:25 2025 GMT
Not After : Sep 8 10:02:25 2025 GMT
Subject: CN=3f2ba250e4b8e0115cc1ae17c7372e625b7f105a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3c:2a:fe:4c:8e:c8:36:c0:c9:37:c5:db:5a:
db:25:ed:4d:2a:f6:7e:ea:d2:d6:57:8f:ce:c8:80:
a2:24:80:23:8a:28:d0:60:da:ce:ae:5d:48:a8:7f:
af:55:b2:1e:c2:ee:05:c2:9e:ff:af:54:d3:96:16:
b5:e0:58:6a:b6:dc:da:22:7c:a0:31:29:8e:b5:e9:
08:82:c6:3c:5c:f7:9c:be:a2:bf:5a:d2:f5:ff:e1:
b1:16:a8:fd:06:50:27:07:e4:76:ff:44:2d:27:9e:
4a:61:c7:0c:67:e2:0e:77:cf:dc:03:d9:8f:fe:a4:
06:59:f0:c2:80:6f:17:96:35:22:22:fe:51:0b:df:
45:6d:9e:e0:f0:15:7e:4f:0c:5a:4b:44:64:23:dd:
c0:64:79:31:30:5e:e7:30:06:77:0b:e5:a5:42:63:
1e:a5:74:c1:42:f3:be:f0:92:95:f9:92:0a:a2:8c:
30:da:47:1e:76:c0:d5:b0:6f:a8:8f:82:d4:3d:b0:
bc:83:54:9d:d1:f2:84:18:dd:d2:eb:d9:64:2e:bb:
37:2b:18:49:81:44:56:bb:70:b8:1f:02:02:a9:6d:
12:00:c0:5f:d9:82:e9:9f:a7:d7:b6:1c:ff:db:54:
a6:a0:e0:eb:06:f2:86:51:f6:84:b2:00:d3:66:59:
5d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2B:A2:50:E4:B8:E0:11:5C:C1:AE:17:C7:37:2E:62:5B:7F:10:5A
X509v3 Authority Key Identifier:
keyid:55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:d9:e9:1e:f8:34:95:08:55:47:22:f4:6a:05:cd:01:33:fd:
b2:6c:5e:bf:49:dd:6b:0d:f2:28:6b:c1:8c:a7:2b:f5:17:a9:
a7:b1:1b:01:83:c5:81:7e:69:79:e5:bf:7e:c3:c7:75:d2:56:
6b:db:db:43:c3:fa:7a:7b:3e:77:e7:fc:d6:63:c9:2f:8d:7e:
a1:9b:da:a2:5d:eb:63:21:6e:2b:98:9a:b7:f5:4b:09:85:30:
f4:6b:4b:fc:78:c4:5b:be:2a:f5:74:c0:00:41:15:55:05:24:
56:18:75:8e:82:70:58:89:0f:d3:44:c1:57:e3:e9:4b:05:8f:
4a:d9:d2:d8:9d:26:30:81:0d:a6:4f:5f:79:9d:c3:bc:3d:39:
02:e3:40:7d:77:be:0b:ba:26:e8:0a:0f:b2:f3:61:be:8e:1a:
99:11:85:36:33:63:b9:60:bc:91:49:06:74:1c:80:2b:3c:cf:
55:d7:22:08:a7:d7:d3:79:28:79:44:48:a5:0e:77:02:cb:16:
93:e6:c1:d4:e0:23:48:e6:6f:ef:31:0f:76:2e:7a:d4:38:75:
4c:85:b6:18:f5:01:51:dd:e8:fd:75:9e:23:65:c3:50:4a:b5:
bc:f8:2b:38:ca:0e:46:44:fd:63:d7:a0:97:91:1d:b9:5c:e6:
c2:a3:dd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:53:35 2025 by rpki-client