Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
File: VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft (raw, json)
Hash identifier: s4AcP4j/Hc+bYQ8Z0a48v9qtCO0toEbl56DKXvJd3Y4=
Subject key identifier: D3:43:C4:06:12:D2:07:2B:80:AC:7B:6E:3B:B6:F7:2D:2A:20:65:FA
Authority key identifier: 55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
Certificate issuer: /CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Certificate serial: 019A2C3184535E5C63E2DA64E8658A2864F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
Manifest number: 127B
Signing time: Tue 28 Oct 2025 19:00:33 +0000
Manifest this update: Tue 28 Oct 2025 19:00:33 +0000
Manifest next update: Wed 29 Oct 2025 19:00:33 +0000
Files and hashes: 1: DXmFl68ZzKbqEncxK9EZHxIqylM.roa (hash: N3mENR29mNKtOOFkrl0wNAecJurlbOILfUHUa/gdTXA=)
2: VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl (hash: NcFGlj35UO3R/yWZ5tT829rIw5CPXhCS5m2sze449pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:31:84:53:5e:5c:63:e2:da:64:e8:65:8a:28:64:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Validity
Not Before: Oct 28 19:00:33 2025 GMT
Not After : Oct 29 19:00:33 2025 GMT
Subject: CN=d343c40612d2072b80ac7b6e3bb6f72d2a2065fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6c:f5:9e:99:d7:c6:45:37:6a:74:fc:8f:6b:
fd:ef:29:0f:9c:fc:ed:dd:46:a4:c5:d2:cc:d1:9c:
c4:1c:84:55:b4:f2:19:fc:95:f4:29:75:40:ab:64:
ad:76:a6:62:e2:68:40:2e:81:e7:1a:83:db:cd:10:
e1:16:08:b3:d6:24:d7:e0:6b:a9:f7:9f:b7:3c:05:
f2:a6:f6:ee:90:61:ab:94:9a:c1:ad:c4:89:48:b9:
56:e1:2c:ad:6c:4a:4e:4d:f1:06:dc:8c:87:0d:bd:
ac:91:96:3e:9f:a7:8f:34:6e:a2:80:e1:80:5e:2d:
a7:38:dd:d9:a0:c8:55:4b:42:5f:cd:21:32:e1:af:
6e:e4:6f:4e:af:6e:59:b9:64:37:68:0c:e3:ee:53:
5d:65:ac:1a:69:8c:9b:8a:07:48:35:53:43:3d:81:
b6:c3:b6:8e:5f:1d:1d:03:f0:e1:26:d3:c3:8a:3e:
9b:27:da:92:e1:92:f6:fd:4b:45:7a:78:2a:11:3e:
c3:3d:20:91:59:77:66:42:cd:61:a7:dd:0c:0a:2d:
ff:85:42:25:a1:3d:44:dd:a1:e6:ac:7f:bf:28:81:
09:a0:5b:86:31:fe:15:15:4a:b9:ba:a1:34:f6:64:
98:67:1e:b9:db:9c:32:36:af:21:e0:9a:80:91:35:
56:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:43:C4:06:12:D2:07:2B:80:AC:7B:6E:3B:B6:F7:2D:2A:20:65:FA
X509v3 Authority Key Identifier:
keyid:55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:08:74:79:d8:4f:68:ed:89:54:8a:34:0d:2a:9d:c3:28:36:
f2:b6:1c:92:0e:e7:2a:11:7a:97:a8:82:8c:b4:05:59:32:1c:
f9:26:40:4b:29:3c:9d:54:fc:ce:92:22:7a:f0:49:1f:6a:8a:
a1:c4:b4:99:0d:26:bc:4b:1a:7d:c3:b7:dd:a1:de:e2:17:90:
0e:a3:81:e7:95:a5:34:1a:36:66:6d:cd:f0:57:c2:81:3c:c8:
7a:5b:c8:04:9e:f0:0c:64:60:fa:57:ab:13:f1:92:ba:a6:f9:
c7:45:09:08:03:e0:82:77:f1:26:e0:cd:c0:08:40:c2:01:60:
ba:00:19:e1:9d:5e:cc:c9:f6:f9:66:c0:e2:5e:8b:3c:e8:4c:
5c:e4:17:5f:f4:2c:85:51:6a:c7:44:23:e6:fb:d2:99:70:40:
39:ef:18:73:79:f2:ca:f3:c6:0e:e3:23:af:55:74:4c:f9:f1:
63:33:0f:3f:0d:e0:e8:c1:0e:b6:3b:b6:b6:96:0e:84:02:1e:
a7:c1:cb:23:cb:70:3b:c6:ad:30:6c:c5:0c:bc:d6:ce:b5:0d:
17:bb:25:6f:1f:e0:46:50:58:96:43:e5:83:ed:c8:ac:63:33:
3e:e1:a2:31:12:95:b3:83:47:92:11:1a:ed:d4:ce:8f:3c:80:
c6:b0:58:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 04:45:26 2025 by rpki-client