Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
File: VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft (raw, json)
Hash identifier: IoQSnem4o55jboxIZFScJLGYVZNpl4+JEcNVnCHk6ZU=
Subject key identifier: 58:C4:BF:2E:A9:4C:91:4E:54:DF:C1:DC:F3:B5:1E:66:30:4C:63:6E
Authority key identifier: 55:9A:76:94:12:D2:D9:63:B4:91:EB:E3:1D:44:11:1D:CA:FC:CC:94
Certificate issuer: /CN=559a769412d2d963b491ebe31d44111dcafccc94
Certificate serial: 019A4EF5908DEB8ED4F7E0BF9515A3D1976E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
Manifest number: 05F0
Signing time: Tue 04 Nov 2025 13:01:47 +0000
Manifest this update: Tue 04 Nov 2025 13:01:47 +0000
Manifest next update: Wed 05 Nov 2025 13:01:47 +0000
Files and hashes: 1: VZp2lBLS2WO0kevjHUQRHcr8zJQ.crl (hash: HZ0prYPaoOzUGUeR4uZq1pv1N1/bQudRdea4lTFgh38=)
2: r1lquQ-XjIWjOg1LAkyGn6KMjo0.roa (hash: wZhXEM3Xxa5+Fz5oyJ1++QkvfDJcpfPRAfCqMyTq70w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:90:8d:eb:8e:d4:f7:e0:bf:95:15:a3:d1:97:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559a769412d2d963b491ebe31d44111dcafccc94
Validity
Not Before: Nov 4 13:01:47 2025 GMT
Not After : Nov 5 13:01:47 2025 GMT
Subject: CN=58c4bf2ea94c914e54dfc1dcf3b51e66304c636e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4c:65:a6:17:05:ba:c5:6b:4b:96:46:53:64:
22:20:25:8c:a3:f9:b7:80:f2:39:0a:a8:a5:b5:35:
63:44:9c:24:55:e5:e4:c2:5b:fe:ab:e8:de:99:7a:
be:53:32:d7:3b:39:7e:30:82:1e:dc:98:68:cb:f5:
fe:ee:de:00:f4:80:f5:07:39:30:24:b0:0a:39:cc:
56:c1:8f:84:46:9d:2a:56:48:74:b2:24:49:bf:8e:
94:34:55:62:3f:e8:92:bf:ec:68:86:25:04:ba:04:
98:7a:c0:3f:64:6b:84:41:ee:5e:87:ba:be:6e:0e:
49:fe:2b:b6:a7:77:39:c8:3f:fe:0b:b8:3d:75:42:
d3:43:aa:a1:5c:89:0b:77:d7:6f:99:9e:d9:d2:7a:
2f:8a:85:85:9d:94:3f:e0:b1:3e:1a:9f:4a:9e:8b:
fa:77:6b:0d:83:54:42:4b:94:a4:ed:d2:37:fc:26:
8d:e7:aa:cd:ce:4d:43:98:76:e2:a8:5b:f3:f6:5f:
70:65:a1:42:08:ce:35:0a:4b:49:30:9c:a2:d2:d5:
f3:88:ac:a5:6c:f2:c1:06:67:a9:57:97:53:5e:0e:
35:a3:c4:62:f3:37:e9:f1:b5:94:0a:54:97:9b:4f:
1d:bf:18:70:b8:0c:3e:22:a7:28:cb:9e:6e:7e:1f:
c4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C4:BF:2E:A9:4C:91:4E:54:DF:C1:DC:F3:B5:1E:66:30:4C:63:6E
X509v3 Authority Key Identifier:
keyid:55:9A:76:94:12:D2:D9:63:B4:91:EB:E3:1D:44:11:1D:CA:FC:CC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:80:dc:4e:7c:c1:f3:ad:cb:4b:ea:16:fe:29:a3:88:d8:9e:
be:f0:15:20:97:a6:59:ca:83:db:4b:b1:a3:3e:a3:f7:2b:3b:
13:32:6d:de:eb:44:92:36:46:ad:24:5e:3c:8a:38:4d:ba:47:
4d:e7:f8:e2:78:e8:0b:51:6c:e4:68:94:ea:f4:73:55:5d:bd:
52:52:d0:8b:af:bf:8e:64:31:b0:ab:15:f1:1e:b6:b9:aa:41:
ff:8a:8a:ce:0a:be:1c:4f:83:96:e3:ed:c6:52:4c:84:db:67:
f6:66:c1:c9:aa:6a:ad:07:2d:6c:2a:80:ce:fd:42:80:25:ea:
24:d0:5a:1c:5a:70:83:e7:cd:0e:2e:a9:bf:5e:d8:f6:40:c2:
71:b5:f2:40:60:06:71:cf:7f:b8:b9:91:79:29:90:0f:d8:05:
bb:dc:0b:e7:0c:65:7f:37:c0:48:ca:fb:3b:34:ff:9a:84:92:
54:10:da:75:13:2e:f1:b0:cd:82:21:83:47:95:85:d7:7e:ae:
5e:82:8e:fb:20:44:39:6d:7d:92:4c:f2:07:93:03:65:e5:da:
a0:9b:07:ef:3c:49:f5:c8:a1:22:67:05:6b:90:e4:1d:39:a1:
9c:17:83:a6:bb:8f:22:c6:07:92:e8:0d:bf:ca:ad:a0:5e:dd:
a3:32:b3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:57:55 2025 by rpki-client