Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
File: Vzm709YFZftZWALsfGl-ohq9l-Q.mft (raw, json)
Hash identifier: MqHsVwZjNQAqTuu/pXlvxtUcDLccHUyv6veIN/vA490=
Subject key identifier: 79:28:76:24:0A:DA:92:0F:AE:17:78:62:F3:E1:EA:8F:2A:4F:4A:46
Authority key identifier: 57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
Certificate issuer: /CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Certificate serial: 01993681352700060A0682208A2AD998E3B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
Manifest number: 078A
Signing time: Thu 11 Sep 2025 02:01:01 +0000
Manifest this update: Thu 11 Sep 2025 02:01:01 +0000
Manifest next update: Fri 12 Sep 2025 02:01:01 +0000
Files and hashes: 1: Vzm709YFZftZWALsfGl-ohq9l-Q.crl (hash: enOaU8DM7qKOCuaBEdgEuluYD1YfmQOmfpSr6p+US3k=)
2: gAmwtWdBAiGd9eGeDhh_4U76Qd4.roa (hash: dWZpajXQdBvyOcKFRctLEmEP4L6KG6ufnnlUSRMSxks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:81:35:27:00:06:0a:06:82:20:8a:2a:d9:98:e3:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Validity
Not Before: Sep 11 02:01:01 2025 GMT
Not After : Sep 12 02:01:01 2025 GMT
Subject: CN=792876240ada920fae177862f3e1ea8f2a4f4a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5f:80:35:9e:02:3d:e6:24:b4:3e:c0:98:1c:
ea:23:06:95:dc:55:e7:cf:7f:25:e0:4e:a8:99:d8:
41:a6:fd:1c:ec:ca:f6:96:d8:f4:2b:fb:c4:72:6f:
c1:ae:aa:c8:8d:27:2f:aa:73:2b:2d:f9:f3:50:ad:
8f:be:f1:31:ad:2a:5c:93:42:e2:35:be:74:39:f5:
1b:e2:20:84:24:45:87:95:ce:8c:c2:01:89:b6:af:
99:4e:4d:dd:18:7c:b6:d7:18:79:2c:c8:6c:98:30:
d8:45:3a:9e:d4:fe:28:15:7a:2e:da:af:1e:98:f9:
8e:4d:8a:1d:95:68:b1:2e:34:1a:d4:3c:f4:80:9d:
81:2c:11:19:8f:9a:55:a7:3b:77:dc:b6:61:9c:69:
23:af:29:5e:c8:37:8a:68:b8:14:b0:95:e2:26:0f:
e1:c4:3f:0d:a5:15:bd:98:a2:59:96:16:d2:e4:6a:
c7:58:1d:bb:6e:59:22:79:1a:30:52:1e:bf:09:f6:
4d:29:f5:17:fb:51:d0:32:d8:8c:86:c7:fa:17:40:
ce:e8:10:43:f6:bd:07:d3:9c:24:1b:e2:57:d7:bd:
e2:e6:eb:80:b6:c8:f7:1a:5d:87:9e:32:e8:e3:cc:
64:28:5c:3a:8f:7e:21:50:55:d4:56:8e:35:9a:4e:
d5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:28:76:24:0A:DA:92:0F:AE:17:78:62:F3:E1:EA:8F:2A:4F:4A:46
X509v3 Authority Key Identifier:
keyid:57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:77:65:4f:12:23:ba:ac:d6:d4:a8:00:55:60:ff:d8:d7:18:
0b:fc:9c:4d:42:fa:43:15:34:d4:a4:26:9f:67:90:9e:bb:e5:
d1:3f:48:bf:e7:96:a0:a1:01:0d:17:2b:3e:3c:66:2f:35:9f:
16:c6:43:d0:96:5d:03:ed:09:df:03:24:85:e7:a0:e9:ff:dd:
f7:7b:a9:72:af:20:c2:f7:77:94:ce:1d:9b:c4:b8:73:b9:c4:
b5:c3:29:c1:a3:50:e0:02:9d:4f:7a:55:87:20:f5:fb:c6:f7:
a7:28:3b:24:b4:3e:4b:d6:af:40:9a:31:b1:4d:c1:e5:a4:6e:
35:ba:93:ef:83:22:e6:ac:c2:3e:d4:ad:ea:00:1e:8e:2a:56:
d1:41:a3:31:78:89:9e:e3:24:be:ad:a2:b6:38:e1:fe:7f:fc:
b5:38:a8:29:71:04:24:f0:a9:da:92:9d:a3:d7:1d:a9:87:37:
e0:b4:73:b6:f5:f6:af:42:76:7a:4f:9c:9e:63:d8:67:14:12:
57:a3:d6:ee:dd:eb:c9:01:36:a2:a1:f3:c9:51:0e:56:c4:63:
1e:da:42:90:fb:f2:38:fe:93:1c:24:24:f1:06:7c:a2:35:96:
90:e9:68:00:33:a7:f4:ef:0c:34:35:a3:9b:e0:7d:a7:45:72:
af:2a:5f:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk2gTUnAAYKBoIgiirZmOO0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MzliYmQzZDYwNTY1ZmI1OTU4MDJlYzdjNjk3ZWEyMWFi
ZDk3ZTQwHhcNMjUwOTExMDIwMTAxWhcNMjUwOTEyMDIwMTAxWjAzMTEwLwYDVQQD
Eyg3OTI4NzYyNDBhZGE5MjBmYWUxNzc4NjJmM2UxZWE4ZjJhNGY0YTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyF+ANZ4CPeYktD7AmBzqIwaV3FXn
z38l4E6omdhBpv0c7Mr2ltj0K/vEcm/BrqrIjScvqnMrLfnzUK2PvvExrSpck0Li
Nb50OfUb4iCEJEWHlc6MwgGJtq+ZTk3dGHy21xh5LMhsmDDYRTqe1P4oFXou2q8e
mPmOTYodlWixLjQa1Dz0gJ2BLBEZj5pVpzt33LZhnGkjryleyDeKaLgUsJXiJg/h
xD8NpRW9mKJZlhbS5GrHWB27blkieRowUh6/CfZNKfUX+1HQMtiMhsf6F0DO6BBD
9r0H05wkG+JX173i5uuAtsj3Gl2HnjLo48xkKFw6j34hUFXUVo41mk7V8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkodiQK2pIPrhd4YvPh6o8qT0pGMB8GA1UdIwQY
MBaAFFc5u9PWBWX7WVgC7HxpfqIavZfkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnptNzA5WUZaZnRaV0FMc2ZHbC1vaHE5bC1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85YTI2ZjEtM2FiNS00OWY2LWJjNTct
NWQ2Mjk1OWQxMDViLzEvVnptNzA5WUZaZnRaV0FMc2ZHbC1vaHE5bC1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS85YTI2ZjEtM2FiNS00OWY2LWJjNTctNWQ2Mjk1OWQxMDVi
LzEvVnptNzA5WUZaZnRaV0FMc2ZHbC1vaHE5bC1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYHdlTxIj
uqzW1KgAVWD/2NcYC/ycTUL6QxU01KQmn2eQnrvl0T9Iv+eWoKEBDRcrPjxmLzWf
FsZD0JZdA+0J3wMkheeg6f/d93upcq8gwvd3lM4dm8S4c7nEtcMpwaNQ4AKdT3pV
hyD1+8b3pyg7JLQ+S9avQJoxsU3B5aRuNbqT74Mi5qzCPtSt6gAejipW0UGjMXiJ
nuMkvq2itjjh/n/8tTioKXEEJPCp2pKdo9cdqYc34LRztvX2r0J2ek+cnmPYZxQS
V6PW7t3ryQE2oqHzyVEOVsRjHtpCkPvyOP6THCQk8QZ8ojWWkOloADOn9O8MNDWj
m+B9p0VyrypfYw==
-----END CERTIFICATE-----
Generated at Thu Sep 11 08:56:50 2025 by rpki-client