Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
File: VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft (raw, json)
Hash identifier: KLvIqWCaeqwDk4JJY9tw/xxUEWrCDvfwIhUBhBkbmgc=
Subject key identifier: D0:54:67:9D:6A:5B:C9:C0:83:F8:CD:AB:BE:37:00:5D:6C:EB:AD:D2
Authority key identifier: 55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
Certificate issuer: /CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Certificate serial: 019A4EF4F98D6DE61DCE23AB4A3B3841E9FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
Manifest number: 128D
Signing time: Tue 04 Nov 2025 13:01:08 +0000
Manifest this update: Tue 04 Nov 2025 13:01:08 +0000
Manifest next update: Wed 05 Nov 2025 13:01:08 +0000
Files and hashes: 1: DXmFl68ZzKbqEncxK9EZHxIqylM.roa (hash: N3mENR29mNKtOOFkrl0wNAecJurlbOILfUHUa/gdTXA=)
2: VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl (hash: yRf+rxooOQgnV2khw+DfFPOlSg7yMEEWfNgpge8wEPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:f9:8d:6d:e6:1d:ce:23:ab:4a:3b:38:41:e9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Validity
Not Before: Nov 4 13:01:08 2025 GMT
Not After : Nov 5 13:01:08 2025 GMT
Subject: CN=d054679d6a5bc9c083f8cdabbe37005d6cebadd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:eb:4b:2a:d3:f5:66:7f:c5:ec:b2:67:a6:16:
74:ce:6f:42:b0:f3:fe:54:9b:2d:f8:3e:c5:bd:0f:
8f:f4:92:cc:9b:a6:0e:69:a1:19:aa:8d:da:1a:f6:
63:e2:0a:35:36:01:a4:b9:1d:d9:32:19:e1:d2:fb:
f5:86:27:62:ae:dd:99:aa:05:f1:11:af:19:70:e3:
2d:52:83:c2:94:b9:b2:9f:36:49:f2:46:8e:ee:c6:
c1:7d:f6:8c:24:02:40:80:ed:52:90:24:69:61:88:
72:13:48:72:0a:3f:41:58:af:f9:6a:58:fe:a3:bc:
80:04:ae:d3:d5:dc:fd:f1:a5:ba:7a:7c:a8:b2:0c:
8f:c5:4e:7a:01:84:db:00:bf:ce:0d:cc:75:b1:06:
1e:4b:40:d3:40:e0:6a:b5:e2:9b:0d:fa:42:ca:3a:
b5:e6:47:d2:8f:0b:b0:d1:7f:28:a1:d2:37:a6:c2:
90:89:49:58:d1:ed:c2:07:4b:cf:31:ca:05:2e:c5:
0d:fb:fd:00:96:61:b2:28:60:15:df:8a:48:ce:33:
2d:99:d3:3d:56:1f:04:ff:a1:39:94:32:79:e1:01:
e8:27:2a:de:97:c0:a3:1c:ff:be:e8:b8:09:f9:8e:
de:6b:9b:72:53:2c:e0:60:9d:41:6b:3a:dd:67:ee:
7c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:54:67:9D:6A:5B:C9:C0:83:F8:CD:AB:BE:37:00:5D:6C:EB:AD:D2
X509v3 Authority Key Identifier:
keyid:55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ad:08:93:60:46:60:13:cf:bb:1a:ab:75:b4:b5:71:80:a7:
96:7f:99:9e:8c:2a:d0:db:c5:10:16:af:6f:19:ad:52:09:05:
7f:20:48:b0:13:03:e0:59:7e:50:4c:5c:9e:b4:06:78:d4:ef:
6b:c6:a2:24:ce:ee:e3:1b:e7:a1:df:da:5e:94:69:86:d0:dd:
7b:ba:aa:7e:3d:2f:34:2e:f4:77:af:ec:43:e8:cd:fa:f6:35:
6a:ee:a4:75:b5:9a:e9:66:05:ae:a8:bd:31:ba:b9:b8:9b:ec:
da:32:82:67:e2:18:13:7e:9f:e9:b4:eb:60:f1:ff:c3:8d:1f:
28:4a:d1:50:1e:be:94:ba:04:6f:42:39:e7:cf:cf:a7:0d:3f:
1b:13:a7:20:91:60:f9:ee:77:a0:5a:3e:47:29:8e:d2:c0:f8:
8f:30:6e:ca:c7:79:98:df:f0:6f:6f:c9:f5:49:88:89:17:78:
1d:1c:e2:fe:a0:12:45:c6:a8:4d:74:e5:27:ca:f3:08:85:0f:
4e:28:11:bc:19:ed:0e:f6:8a:61:17:67:9e:00:f4:b5:d4:74:
f1:b4:d2:a8:d9:73:dd:80:79:68:60:a5:ca:82:43:bc:25:94:
f1:a8:15:40:4e:37:43:58:1b:18:ee:c1:09:18:d5:92:b8:87:
6a:75:61:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:07 2025 by rpki-client