Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
File: VzCjLzFiRs4LFHu4lejN8K7UPtY.mft (raw, json)
Hash identifier: 6Lw6oxKX34pqYOkDJhrv91rr+qJToKYVMGFPYqnRT44=
Subject key identifier: 19:86:87:D7:1E:CF:AD:AB:1B:8F:C7:94:E9:0A:60:EA:D4:70:3E:5D
Authority key identifier: 57:30:A3:2F:31:62:46:CE:0B:14:7B:B8:95:E8:CD:F0:AE:D4:3E:D6
Certificate issuer: /CN=5730a32f316246ce0b147bb895e8cdf0aed43ed6
Certificate serial: 019A4E4F62135A33BAFAB51722BEBAD330BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
Manifest number: 09BB
Signing time: Tue 04 Nov 2025 10:00:16 +0000
Manifest this update: Tue 04 Nov 2025 10:00:16 +0000
Manifest next update: Wed 05 Nov 2025 10:00:16 +0000
Files and hashes: 1: JdnQsGvdkhLMYKHimmIYbcmtu_4.roa (hash: XQ8/SW7MphrctHqH7PZ0NzqyE28ii273Q0FygBQXgEo=)
2: VzCjLzFiRs4LFHu4lejN8K7UPtY.crl (hash: V0Z9unh9FOzy23zfwV1eht1W1Pu+EfsVe/kW/Q69nMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:62:13:5a:33:ba:fa:b5:17:22:be:ba:d3:30:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5730a32f316246ce0b147bb895e8cdf0aed43ed6
Validity
Not Before: Nov 4 10:00:16 2025 GMT
Not After : Nov 5 10:00:16 2025 GMT
Subject: CN=198687d71ecfadab1b8fc794e90a60ead4703e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:04:1f:e8:34:b4:30:93:4d:3e:25:14:7d:4f:
98:97:32:1e:71:9a:a1:7e:cc:d1:6f:d4:c4:ff:31:
fe:76:b7:cd:2a:41:28:ca:a1:6c:0a:4f:b9:e8:18:
0e:01:70:f8:a0:f1:fd:24:6d:49:82:6a:86:09:27:
5f:ac:a8:80:e4:09:4d:ad:ce:d2:84:ce:6e:af:79:
ef:c5:8b:3e:2f:87:98:7a:6f:0b:ed:84:39:71:5f:
a0:5c:22:35:ea:26:a8:14:11:62:59:5b:cf:42:72:
95:45:97:7f:71:49:e9:35:bf:e6:f5:f0:e7:ab:90:
10:d0:a3:ca:06:33:97:29:f7:b7:72:79:69:d7:ec:
a3:8f:4f:46:c8:19:9d:6e:8d:3b:aa:20:4b:40:5f:
38:23:a4:bb:6d:a6:7d:10:da:ab:8f:d0:25:77:6c:
ea:6c:f8:53:96:7b:a8:9b:0c:f3:3d:17:11:26:3e:
3f:16:cb:2f:91:c8:a9:c3:fc:07:30:3e:b8:2d:a5:
c6:14:16:46:74:01:d7:3f:72:1f:54:bc:7e:07:2d:
91:12:c6:01:df:5b:b8:6a:04:8f:73:77:40:50:c3:
61:fc:d9:c0:fe:12:1b:99:48:ea:c9:95:e7:3b:be:
fd:8e:17:73:73:35:d0:49:97:cd:dd:a9:6c:4d:12:
b0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:86:87:D7:1E:CF:AD:AB:1B:8F:C7:94:E9:0A:60:EA:D4:70:3E:5D
X509v3 Authority Key Identifier:
keyid:57:30:A3:2F:31:62:46:CE:0B:14:7B:B8:95:E8:CD:F0:AE:D4:3E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f6:ab:f5:c8:7a:44:7b:dc:1f:0e:f4:9f:71:bf:75:00:7f:
d1:e8:bd:5b:a0:25:f9:23:1d:72:90:3d:eb:ea:d7:6b:c2:d1:
44:1a:15:5e:f7:5f:1a:34:ea:b9:38:20:0d:c4:74:51:56:c4:
f1:16:ab:fe:e4:27:9e:fa:ae:d9:4a:fa:75:6b:b2:54:68:d7:
00:5b:da:21:ff:39:a1:7f:15:f0:41:59:06:48:c3:09:92:24:
df:f0:ff:55:8f:e4:f7:9e:a2:c3:f9:14:a5:cf:47:18:97:5f:
f3:ba:71:86:1a:ec:69:77:33:1a:6c:c5:e2:d6:8b:3b:96:8d:
fe:11:01:98:c4:79:87:a0:55:5f:80:32:ab:c5:24:95:be:44:
32:fe:03:a1:dd:62:27:0d:66:99:21:11:af:26:0d:85:1c:d5:
76:f1:e3:39:61:ea:48:4a:10:8e:b4:53:66:f5:9e:52:1a:a1:
ca:9c:ea:89:10:de:a2:68:39:ae:39:a5:64:d4:33:7b:fb:5c:
7d:a2:26:90:0c:4d:a2:19:9e:91:65:f5:39:d5:d2:15:ea:2b:
b6:06:15:77:47:cd:76:ec:90:27:e2:40:45:ea:01:f3:84:cf:
b0:f8:3d:2a:b8:79:09:f3:bd:e1:9e:10:90:0b:ad:c4:a6:c5:
49:cc:b1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:48 2025 by rpki-client