Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
File: VzDFDI_UStGWvxBX7ipvpAQcfk4.mft (raw, json)
Hash identifier: +jv+pm5pkUCLBOazuEzWJ3cZizNhxk5R4JNl9ONmCDE=
Subject key identifier: CA:11:5D:81:B8:C5:9C:74:74:C1:54:99:20:87:AF:91:C3:E7:E4:D5
Authority key identifier: 57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
Certificate issuer: /CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Certificate serial: 019875D1536488AA2256255705B64C16B0A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
Manifest number: 0A78
Signing time: Mon 04 Aug 2025 16:01:49 +0000
Manifest this update: Mon 04 Aug 2025 16:01:49 +0000
Manifest next update: Tue 05 Aug 2025 16:01:49 +0000
Files and hashes: 1: VzDFDI_UStGWvxBX7ipvpAQcfk4.crl (hash: DS4tS0//4lW6zXLLb57dxku1GdWjmNZlby/CAOk73CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d1:53:64:88:aa:22:56:25:57:05:b6:4c:16:b0:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Validity
Not Before: Aug 4 16:01:49 2025 GMT
Not After : Aug 5 16:01:49 2025 GMT
Subject: CN=ca115d81b8c59c7474c154992087af91c3e7e4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e6:ac:5b:c8:78:1a:d1:a5:1f:40:4a:4a:4a:
e2:ca:9c:7e:45:cb:05:d7:9a:23:72:93:18:1d:e7:
89:7a:fb:60:74:9c:b2:d5:9e:c2:87:85:f5:e1:20:
d1:3f:9e:86:95:3c:fa:7f:14:d5:38:fc:1e:1a:80:
0c:2e:fd:90:bd:30:6a:ff:a3:59:36:e1:8a:13:45:
31:3d:41:fc:d6:2b:17:46:19:51:d2:65:b8:93:cc:
9a:cf:9b:e5:57:d1:e1:24:ce:db:d2:40:12:07:38:
bd:9c:0d:ec:c5:62:ba:d7:5e:9a:52:7d:93:01:58:
85:1a:8d:39:04:5f:bf:d3:d2:bc:cf:cb:a3:c5:00:
b8:7e:cd:5d:1c:0f:b1:c2:fb:50:0b:c1:1a:db:d4:
dd:8b:05:1d:94:67:30:c5:58:f1:ad:8b:63:ea:4b:
98:5c:48:9a:28:3f:fc:a4:76:75:6e:b8:e9:28:14:
78:dd:82:fd:7a:7b:1f:5a:f6:85:d2:ff:4c:cf:80:
6b:58:49:62:b1:7a:3e:9a:68:de:d6:a6:52:14:a4:
13:e8:4b:b3:18:8d:ef:03:61:c0:05:09:27:a9:04:
12:76:9f:ad:7d:db:be:2f:ed:9e:1c:19:70:cd:8e:
29:f0:9a:d6:cf:87:24:bb:6a:2f:60:3e:40:9c:e9:
ca:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:11:5D:81:B8:C5:9C:74:74:C1:54:99:20:87:AF:91:C3:E7:E4:D5
X509v3 Authority Key Identifier:
keyid:57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:5e:6d:4f:4f:e0:46:2d:37:59:91:df:9e:9b:36:1d:f7:1a:
ab:df:29:63:a3:19:6d:00:f2:97:0d:c6:7d:69:be:55:70:d5:
a5:7a:67:e3:04:19:43:e0:57:7e:66:45:34:c4:66:84:0f:e1:
3d:ab:3b:29:a7:99:bf:0e:ab:b8:5c:75:5e:c9:2a:7a:2e:25:
46:1a:36:a7:cb:c3:34:86:5e:d7:d3:1f:45:28:a4:36:8c:d9:
3b:74:57:52:7b:de:f3:65:ac:1b:ed:ba:d7:fa:d3:ce:8f:ea:
90:ca:0a:e3:ba:ac:fb:42:13:3f:ed:52:66:f4:02:35:60:de:
a2:d1:2b:e9:98:0d:c7:a6:96:02:be:26:4a:2a:fe:87:96:61:
22:a2:ce:65:5f:b9:79:6b:e4:0c:64:51:eb:8d:94:3b:42:7a:
9c:05:d4:59:24:b8:53:3e:c2:92:87:10:4b:2a:60:f3:1a:9b:
2b:c7:a0:61:71:23:1d:63:75:cd:7a:07:ac:59:f8:fe:f1:cb:
f8:25:64:a3:7f:da:6a:07:78:77:7b:ca:3f:d1:9c:10:07:37:
44:2c:83:70:d3:dc:9b:5e:29:9e:c9:43:a4:fe:41:fb:6e:41:
38:c0:62:5b:02:43:08:2d:67:c6:a5:35:e7:ae:ac:4f:af:ce:
24:df:57:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh10VNkiKoiViVXBbZMFrCmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MzBjNTBjOGZkNDRhZDE5NmJmMTA1N2VlMmE2ZmE0MDQx
YzdlNGUwHhcNMjUwODA0MTYwMTQ5WhcNMjUwODA1MTYwMTQ5WjAzMTEwLwYDVQQD
EyhjYTExNWQ4MWI4YzU5Yzc0NzRjMTU0OTkyMDg3YWY5MWMzZTdlNGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+asW8h4GtGlH0BKSkriypx+RcsF
15ojcpMYHeeJevtgdJyy1Z7Ch4X14SDRP56GlTz6fxTVOPweGoAMLv2QvTBq/6NZ
NuGKE0UxPUH81isXRhlR0mW4k8yaz5vlV9HhJM7b0kASBzi9nA3sxWK6116aUn2T
AViFGo05BF+/09K8z8ujxQC4fs1dHA+xwvtQC8Ea29TdiwUdlGcwxVjxrYtj6kuY
XEiaKD/8pHZ1brjpKBR43YL9ensfWvaF0v9Mz4BrWElisXo+mmje1qZSFKQT6Euz
GI3vA2HABQknqQQSdp+tfdu+L+2eHBlwzY4p8JrWz4cku2ovYD5AnOnKLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMoRXYG4xZx0dMFUmSCHr5HD5+TVMB8GA1UdIwQY
MBaAFFcwxQyP1ErRlr8QV+4qb6QEHH5OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnpERkRJX1VTdEdXdnhCWDdpcHZwQVFjZms0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9mNTZjMGMtNGFlNy00ZWVjLTljZWQt
Zjc1YzExNjNmYjFlLzEvVnpERkRJX1VTdEdXdnhCWDdpcHZwQVFjZms0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9mNTZjMGMtNGFlNy00ZWVjLTljZWQtZjc1YzExNjNmYjFl
LzEvVnpERkRJX1VTdEdXdnhCWDdpcHZwQVFjZms0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwV5tT0/g
Ri03WZHfnps2Hfcaq98pY6MZbQDylw3GfWm+VXDVpXpn4wQZQ+BXfmZFNMRmhA/h
Pas7KaeZvw6ruFx1Xskqei4lRho2p8vDNIZe19MfRSikNozZO3RXUnve82WsG+26
1/rTzo/qkMoK47qs+0ITP+1SZvQCNWDeotEr6ZgNx6aWAr4mSir+h5ZhIqLOZV+5
eWvkDGRR642UO0J6nAXUWSS4Uz7CkocQSypg8xqbK8egYXEjHWN1zXoHrFn4/vHL
+CVko3/aagd4d3vKP9GcEAc3RCyDcNPcm14pnslDpP5B+25BOMBiWwJDCC1nxqU1
566sT6/OJN9X6w==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:59:10 2025 by rpki-client