Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
File: VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft (raw, json)
Hash identifier: kiUHCaF67c9yYeL+ZnVTS1310qAhKBxsaK4YgQdeB9g=
Subject key identifier: F1:4E:68:68:8D:3D:AD:14:E2:A0:C8:98:23:98:01:46:8C:6F:27:E3
Authority key identifier: 57:30:E2:F7:03:F6:98:B9:DC:EA:C6:3F:1E:86:91:D8:79:C0:B2:A7
Certificate issuer: /CN=5730e2f703f698b9dceac63f1e8691d879c0b2a7
Certificate serial: 019A4E86A76C239F3B4F84750E948357E86E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
Manifest number: 0611
Signing time: Tue 04 Nov 2025 11:00:38 +0000
Manifest this update: Tue 04 Nov 2025 11:00:38 +0000
Manifest next update: Wed 05 Nov 2025 11:00:38 +0000
Files and hashes: 1: VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl (hash: ROg7tlquafnnEAQuPfSX7TTlF51JhCjTHLHqeRtECw4=)
2: yDB5GRHHAS-xe1GzTw2-ZinAODM.roa (hash: fhKYPu+IotrC2SQI+fYAsjSkwcHk2X3TQ/wuBYgtCU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:a7:6c:23:9f:3b:4f:84:75:0e:94:83:57:e8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5730e2f703f698b9dceac63f1e8691d879c0b2a7
Validity
Not Before: Nov 4 11:00:38 2025 GMT
Not After : Nov 5 11:00:38 2025 GMT
Subject: CN=f14e68688d3dad14e2a0c898239801468c6f27e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5a:e6:d8:b6:50:3e:3f:ee:a3:3c:94:1e:b5:
c0:27:7d:ba:e2:e0:fa:b8:4b:43:93:46:9d:36:a9:
88:7b:2d:e3:29:b8:ed:b4:5e:37:3e:a8:42:71:36:
11:88:01:64:7c:eb:4d:48:25:8a:76:b8:7c:db:91:
53:e5:83:38:db:ba:1f:35:4a:5e:9d:b8:40:06:aa:
0a:57:88:fb:4f:b9:ce:c6:77:f4:61:38:7b:5b:4c:
bd:58:9a:59:e7:2a:5d:82:7f:83:51:84:b2:f5:55:
d8:a1:72:aa:e8:e5:43:73:eb:2e:03:12:39:10:43:
8a:d6:d8:2f:69:e7:93:0a:06:13:08:d6:37:c4:8b:
da:c4:64:c3:ec:66:f2:ef:03:95:39:76:83:87:0a:
46:6e:80:c9:5f:cf:dd:ac:f7:29:9e:b5:a0:3f:11:
48:d7:b5:73:e5:44:2e:c1:ff:03:bc:97:65:54:24:
22:13:4e:af:a2:84:15:8f:83:86:b4:c2:91:ca:85:
40:4d:46:39:6a:16:ac:16:76:77:ed:3e:be:42:00:
10:b3:b7:c0:97:0d:84:f8:7d:4e:93:3a:d6:f3:1f:
f9:b2:a7:6a:83:19:44:80:ec:25:28:f6:b9:64:e5:
c3:53:6c:a9:b6:65:df:2a:96:99:c0:ec:15:97:92:
0a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4E:68:68:8D:3D:AD:14:E2:A0:C8:98:23:98:01:46:8C:6F:27:E3
X509v3 Authority Key Identifier:
keyid:57:30:E2:F7:03:F6:98:B9:DC:EA:C6:3F:1E:86:91:D8:79:C0:B2:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:7a:ed:5f:6a:b5:42:70:2f:dc:83:a2:e2:a9:e4:8f:8d:ab:
99:77:88:a6:4e:2e:92:c7:c2:b5:67:e7:8c:b1:93:ac:0c:87:
c5:a8:c8:04:fe:5e:ae:72:3d:ec:30:11:32:be:01:a0:e7:54:
aa:ce:00:7f:36:49:f6:c3:2e:d7:c8:eb:5f:41:a7:4a:1f:16:
eb:ce:4d:4b:bd:93:17:24:6c:d6:49:e2:91:79:7d:82:b0:b5:
06:31:91:6d:ef:11:95:57:c6:66:1c:97:88:00:22:bc:6d:97:
a0:b5:be:4c:28:61:ef:6c:ac:fc:01:b4:53:0c:61:76:42:46:
fe:fd:13:31:94:61:61:fe:6a:1d:e2:94:7c:97:8e:f3:5c:c1:
3c:58:d7:c5:d9:f1:e8:a9:5d:58:ff:8d:54:72:aa:6d:12:30:
61:c5:90:5a:34:b3:b2:0d:2b:d8:b1:93:42:40:51:b3:b6:e1:
14:e7:16:a3:22:c2:1f:fb:03:a7:d1:f8:ad:31:ef:a4:83:12:
de:33:69:3f:a5:24:03:50:35:db:b1:b2:07:14:f7:cf:f4:16:
6b:73:2f:a1:18:cf:e9:17:76:70:fd:ba:5b:5f:8a:60:cb:bc:
80:27:b6:8e:38:d8:61:69:8f:05:16:a4:cf:6c:0e:74:8b:72:
bb:c6:d7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:11 2025 by rpki-client