Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
File: vln_z7TGm3nZrNy-apTbidUjYI4.mft (raw, json)
Hash identifier: O6cldEKGXhyB6g7IQuJnVRMhI1NXIEVoYyTUu5S2Xto=
Subject key identifier: FF:72:F0:79:97:A3:A4:7F:EE:DA:97:67:8C:E1:75:10:05:48:49:A2
Authority key identifier: BE:59:FF:CF:B4:C6:9B:79:D9:AC:DC:BE:6A:94:DB:89:D5:23:60:8E
Certificate issuer: /CN=be59ffcfb4c69b79d9acdcbe6a94db89d523608e
Certificate serial: 019A4D074769BD081411047F4460B6BB85DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
Manifest number: 09A4
Signing time: Tue 04 Nov 2025 04:01:53 +0000
Manifest this update: Tue 04 Nov 2025 04:01:53 +0000
Manifest next update: Wed 05 Nov 2025 04:01:53 +0000
Files and hashes: 1: vln_z7TGm3nZrNy-apTbidUjYI4.crl (hash: yOTr9ug2CAubtgiL1bJmv8R5BLM0I5ZtcFTWh1MnNTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:47:69:bd:08:14:11:04:7f:44:60:b6:bb:85:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be59ffcfb4c69b79d9acdcbe6a94db89d523608e
Validity
Not Before: Nov 4 04:01:53 2025 GMT
Not After : Nov 5 04:01:53 2025 GMT
Subject: CN=ff72f07997a3a47feeda97678ce17510054849a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d8:b2:37:31:9b:28:4d:d8:48:7b:db:32:78:
0f:f7:c4:3f:27:2d:33:09:76:60:f6:ba:3b:ec:74:
6e:f0:18:1c:50:5a:6b:e8:8f:26:6a:e6:b2:3d:be:
a3:c3:5f:4d:6d:3d:cd:55:6d:bc:85:57:e3:8f:6f:
3f:86:7d:f7:e1:91:a9:88:5a:25:37:7d:5e:b3:15:
44:09:f7:48:00:93:91:ad:e2:ae:9b:cf:50:c4:ee:
9d:89:e2:2b:c4:8e:e8:8f:c2:84:ad:78:46:a6:c6:
06:5b:c9:4b:19:bc:f3:df:54:a4:67:d7:e7:36:65:
5c:13:5a:e2:07:e5:ea:e6:7e:28:13:c7:ba:39:ad:
f8:08:bc:9c:1a:be:e8:f3:b2:e8:ab:a9:96:df:28:
53:5a:e7:f7:a5:0e:63:32:5c:80:f6:c7:e9:1a:e6:
88:39:34:c0:ca:bd:ef:a2:72:ba:19:4d:fd:2c:3a:
1a:fc:f8:ae:5e:44:08:c0:25:4f:60:b6:82:69:b3:
50:3d:68:32:35:d5:eb:5e:fe:2e:e1:c3:eb:f9:76:
4f:d3:86:bd:70:96:92:1c:69:5f:ad:bc:d9:a0:1e:
af:9e:71:e0:95:9a:1f:13:c5:9d:95:f8:46:df:1e:
21:79:a0:fa:27:a1:b4:12:44:80:0d:90:39:3a:05:
07:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:72:F0:79:97:A3:A4:7F:EE:DA:97:67:8C:E1:75:10:05:48:49:A2
X509v3 Authority Key Identifier:
keyid:BE:59:FF:CF:B4:C6:9B:79:D9:AC:DC:BE:6A:94:DB:89:D5:23:60:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3b:5a:a8:50:2b:30:98:29:5c:da:66:5e:1f:3e:34:ee:ee:
2d:94:b1:82:05:43:e4:aa:9b:4d:63:1b:1a:cf:10:1c:18:3a:
55:ca:dd:29:6a:7e:cf:87:02:d5:dd:71:1b:de:5e:7c:1a:25:
f3:70:84:ad:5b:c1:f5:7f:c6:df:f5:c7:ca:dd:f1:3e:54:dc:
1b:9e:ee:68:43:a1:b0:eb:6c:5f:57:59:dc:f1:a6:49:fa:9d:
55:e1:ee:9a:b3:22:d5:25:43:38:28:fb:1f:7b:98:8f:6b:22:
95:73:db:b5:3c:d2:84:da:89:89:9b:30:88:44:d3:bc:c7:dd:
b9:da:8e:f6:2d:44:ac:77:9a:2f:aa:ee:77:f8:85:59:c7:32:
d7:8d:52:6a:3b:3c:9f:57:fd:f2:8c:9d:68:3b:f3:f0:34:45:
aa:d8:6e:7e:da:3b:9c:16:1c:33:32:b6:97:80:d8:63:5d:99:
73:95:96:bd:b7:9e:53:51:25:77:b2:d1:8a:37:05:9d:fd:bb:
2b:d5:6e:d9:63:88:6e:11:06:3e:d8:f2:46:e3:23:29:14:fa:
b0:80:2e:02:65:3e:6e:02:f3:e1:12:cc:95:9d:d9:89:aa:60:
32:2f:f4:31:8c:e1:3f:45:e7:cb:a9:b2:d0:95:77:b2:28:12:
fc:be:17:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNB0dpvQgUEQR/RGC2u4XfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNTlmZmNmYjRjNjliNzlkOWFjZGNiZTZhOTRkYjg5ZDUy
MzYwOGUwHhcNMjUxMTA0MDQwMTUzWhcNMjUxMTA1MDQwMTUzWjAzMTEwLwYDVQQD
EyhmZjcyZjA3OTk3YTNhNDdmZWVkYTk3Njc4Y2UxNzUxMDA1NDg0OWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9iyNzGbKE3YSHvbMngP98Q/Jy0z
CXZg9ro77HRu8BgcUFpr6I8mauayPb6jw19NbT3NVW28hVfjj28/hn334ZGpiFol
N31esxVECfdIAJORreKum89QxO6dieIrxI7oj8KErXhGpsYGW8lLGbzz31SkZ9fn
NmVcE1riB+Xq5n4oE8e6Oa34CLycGr7o87Loq6mW3yhTWuf3pQ5jMlyA9sfpGuaI
OTTAyr3vonK6GU39LDoa/PiuXkQIwCVPYLaCabNQPWgyNdXrXv4u4cPr+XZP04a9
cJaSHGlfrbzZoB6vnnHglZofE8WdlfhG3x4heaD6J6G0EkSADZA5OgUHAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9y8HmXo6R/7tqXZ4zhdRAFSEmiMB8GA1UdIwQY
MBaAFL5Z/8+0xpt52azcvmqU24nVI2COMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmxuX3o3VEdtM25ack55LWFwVGJpZFVqWUk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8xY2NjNjktOTg2YS00YmFkLWJkM2Et
OWI2YTBmMzY5YmNkLzEvdmxuX3o3VEdtM25ack55LWFwVGJpZFVqWUk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8xY2NjNjktOTg2YS00YmFkLWJkM2EtOWI2YTBmMzY5YmNk
LzEvdmxuX3o3VEdtM25ack55LWFwVGJpZFVqWUk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGjtaqFAr
MJgpXNpmXh8+NO7uLZSxggVD5KqbTWMbGs8QHBg6VcrdKWp+z4cC1d1xG95efBol
83CErVvB9X/G3/XHyt3xPlTcG57uaEOhsOtsX1dZ3PGmSfqdVeHumrMi1SVDOCj7
H3uYj2silXPbtTzShNqJiZswiETTvMfdudqO9i1ErHeaL6rud/iFWccy141Sajs8
n1f98oydaDvz8DRFqthufto7nBYcMzK2l4DYY12Zc5WWvbeeU1Eld7LRijcFnf27
K9Vu2WOIbhEGPtjyRuMjKRT6sIAuAmU+bgLz4RLMlZ3ZiapgMi/0MYzhP0Xny6my
0JV3sigS/L4XaQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:11 2025 by rpki-client