Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft
File: VzzskGOoh0GEGQiwxSl_zbtDlTA.mft (raw, json)
Hash identifier: iCjfbvC8ndWud5UcQQ0eSD0m8yqDbFPXwl8ZC3RA3x8=
Subject key identifier: C7:17:E7:0E:8C:A5:1F:0E:39:B2:E4:0B:1C:82:9C:68:3E:6C:3E:CF
Authority key identifier: 57:3C:EC:90:63:A8:87:41:84:19:08:B0:C5:29:7F:CD:BB:43:95:30
Certificate issuer: /CN=573cec9063a88741841908b0c5297fcdbb439530
Certificate serial: 019A53ACD114001482B4CD34F53C02CD6AA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft
Manifest number: 25
Signing time: Wed 05 Nov 2025 11:00:25 +0000
Manifest this update: Wed 05 Nov 2025 11:00:25 +0000
Manifest next update: Thu 06 Nov 2025 11:00:25 +0000
Files and hashes: 1: VzzskGOoh0GEGQiwxSl_zbtDlTA.crl (hash: NMsoJlYT6EkztUoiTUoCE2d8kvhfeAWB7LJ78+STf2o=)
2: sL2NSlZMFdAYtXpmUtMsUTVxj5U.roa (hash: xcmnsmi1DtWtpZIXUGx0RyP3Q0L6fGwH3VyxN8K/Zro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:d1:14:00:14:82:b4:cd:34:f5:3c:02:cd:6a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=573cec9063a88741841908b0c5297fcdbb439530
Validity
Not Before: Nov 5 11:00:25 2025 GMT
Not After : Nov 6 11:00:25 2025 GMT
Subject: CN=c717e70e8ca51f0e39b2e40b1c829c683e6c3ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6c:f1:01:54:43:ed:4f:f0:ab:2c:b4:e7:8a:
73:44:10:99:63:50:30:a5:0a:3e:c9:86:76:35:b5:
e4:1a:c3:10:46:08:be:f9:60:83:c8:84:c5:9a:bd:
92:6b:0c:c9:c5:ca:bf:58:c5:e7:6a:21:28:99:01:
11:0c:a6:ad:8f:75:99:4a:f4:7a:0b:f6:e3:9d:18:
1f:e4:14:12:52:68:9d:e1:42:61:8e:59:a0:0d:4e:
18:12:b5:46:da:23:61:ff:42:95:9a:58:be:2d:eb:
c9:50:9e:85:3a:ca:c7:a8:97:66:4d:49:41:99:01:
3a:ad:34:03:0d:b5:14:9b:dd:66:d1:55:38:81:e5:
c0:ef:9a:47:86:0e:8b:af:16:40:69:fe:01:36:89:
53:38:46:c8:51:29:46:17:6f:77:c2:99:5a:d1:1a:
41:d8:bf:70:67:2a:2a:ef:bd:0c:19:06:f7:70:07:
7a:1e:a2:59:f7:47:5c:96:b2:8b:44:ba:ae:3a:cd:
5d:49:ff:5b:02:57:ae:d2:dc:fc:62:ff:57:48:42:
dd:cb:15:0b:62:fe:ce:4e:b1:39:6e:99:04:8d:f3:
c0:1d:16:31:1a:e7:13:81:8a:40:3f:4d:20:7b:91:
ac:57:ed:a3:73:08:18:48:3e:fb:04:a9:5c:30:b8:
5d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:17:E7:0E:8C:A5:1F:0E:39:B2:E4:0B:1C:82:9C:68:3E:6C:3E:CF
X509v3 Authority Key Identifier:
keyid:57:3C:EC:90:63:A8:87:41:84:19:08:B0:C5:29:7F:CD:BB:43:95:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:e1:99:37:86:a0:d3:bb:b9:48:68:ba:25:56:47:2b:70:31:
32:85:41:51:11:32:af:c4:5e:f4:c0:71:e7:03:e8:5a:97:3f:
18:da:41:b1:af:39:14:68:e0:a0:a9:12:47:f6:1b:f1:0e:3e:
36:63:9c:d2:17:1a:ed:d3:33:2a:ac:1d:33:c1:ed:b7:d4:a5:
a6:95:2e:76:dd:11:df:d0:56:1d:da:2f:31:5e:07:cf:07:f3:
64:51:6a:a8:0d:92:92:c5:8d:5b:af:b0:88:9f:e9:07:b6:47:
c6:4b:7a:69:5f:58:44:fb:f1:6b:41:4a:fa:bf:ab:3a:6f:21:
2e:f0:c4:83:2f:19:89:32:30:92:bc:59:81:88:1f:9a:7b:e2:
c9:15:d4:04:c7:bc:93:24:ae:12:dd:62:17:ab:91:0d:1a:b2:
08:8b:bf:05:f3:39:7f:c0:5f:9e:ff:f8:53:86:8d:56:6c:26:
49:0f:a2:6c:42:65:bb:9b:c7:d8:a1:56:be:53:f4:70:32:50:
ca:79:93:3d:3f:2d:5c:1f:00:8f:43:1f:a4:21:db:cf:e7:0a:
a7:37:9e:8e:f2:f7:98:1e:c0:4a:81:35:c6:c2:00:1c:ab:81:
94:c3:e3:f3:bb:72:d3:b1:6a:6c:71:00:8a:c8:aa:a4:4b:77:
13:0f:c9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:56:14 2025 by rpki-client