Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
File: Vzm709YFZftZWALsfGl-ohq9l-Q.mft (raw, json)
Hash identifier: U57wS56rjSYZASVcb32mTNdI8AW0jUNcj4J5Dtp1Kj0=
Subject key identifier: D7:09:14:51:FD:DC:E8:9A:40:70:D1:67:90:84:A8:E9:D3:9B:21:B8
Authority key identifier: 57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
Certificate issuer: /CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Certificate serial: 019A4E86AF7B721079429866F96BEC51F7FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
Manifest number: 081B
Signing time: Tue 04 Nov 2025 11:00:40 +0000
Manifest this update: Tue 04 Nov 2025 11:00:40 +0000
Manifest next update: Wed 05 Nov 2025 11:00:40 +0000
Files and hashes: 1: Vzm709YFZftZWALsfGl-ohq9l-Q.crl (hash: oaB0PegBmiidup2Q0Bfdv0JCa4Y+m3nfzx4fr0E9r5o=)
2: gAmwtWdBAiGd9eGeDhh_4U76Qd4.roa (hash: dWZpajXQdBvyOcKFRctLEmEP4L6KG6ufnnlUSRMSxks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:af:7b:72:10:79:42:98:66:f9:6b:ec:51:f7:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Validity
Not Before: Nov 4 11:00:40 2025 GMT
Not After : Nov 5 11:00:40 2025 GMT
Subject: CN=d7091451fddce89a4070d1679084a8e9d39b21b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a4:3a:03:70:bb:c5:ea:7f:77:e8:82:a1:d2:
5f:92:ea:ed:f6:73:79:96:27:d4:bb:bc:05:83:86:
10:b3:39:6a:f1:6d:bb:79:2c:e9:c9:57:6c:30:36:
fa:24:a8:48:b5:32:05:4a:d0:90:71:ca:1f:0b:bb:
6b:75:ff:c8:b4:90:fc:80:d7:20:5f:bd:a5:51:1f:
2c:15:dd:21:93:8c:40:bf:1d:5f:34:de:56:52:d2:
db:e6:ac:ff:9a:82:e8:cf:db:f4:68:06:04:3e:5d:
fe:c1:54:b9:3c:36:32:a9:63:3a:3f:02:11:81:5d:
db:89:78:1c:56:02:2b:c8:3f:b9:b1:cd:c2:c7:91:
c8:fe:9c:90:e5:23:b3:0e:07:a7:43:a6:91:f4:b5:
61:a0:9a:38:6f:61:07:f7:56:dc:98:53:6d:56:bb:
bd:98:36:ac:cc:1a:82:2c:03:e1:98:af:25:56:e8:
82:43:dd:65:43:8b:9d:af:03:b3:e1:38:5f:9a:6c:
ae:78:f9:57:77:5f:72:4d:54:3b:db:28:08:68:bc:
0d:eb:46:34:b1:29:ff:0a:55:96:38:11:66:f6:24:
78:bf:f1:13:64:d4:3f:12:50:41:38:fe:5c:5d:ed:
19:b1:a0:81:31:33:60:08:ae:ba:c2:73:53:a6:3b:
4a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:09:14:51:FD:DC:E8:9A:40:70:D1:67:90:84:A8:E9:D3:9B:21:B8
X509v3 Authority Key Identifier:
keyid:57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:71:9e:c0:de:7e:53:52:cb:40:6e:b2:90:11:5c:48:45:f1:
e9:38:d3:e6:a9:1f:9f:31:42:bc:63:db:10:fd:b8:98:88:25:
36:fa:84:99:93:f5:d8:fb:e1:f3:43:8f:f8:95:25:1c:b1:f4:
c5:f5:95:2b:e1:a5:52:97:db:a0:05:bd:bd:63:d2:8d:35:c2:
f9:e9:2a:03:f0:01:2b:b1:b0:20:03:ad:0e:9b:0e:4e:34:f6:
50:25:4f:69:dc:b1:01:f8:fb:81:74:0f:49:b3:88:0f:22:1f:
a5:fb:c0:3a:fc:c8:6a:49:6a:13:33:21:8f:64:70:ef:1b:d1:
77:80:66:79:67:a2:f6:75:d8:ca:c6:b8:44:dd:49:11:49:ec:
fe:3f:85:7b:69:66:88:06:c2:15:a5:68:f7:92:7f:f9:b1:ad:
96:e1:f9:cf:02:55:7b:93:59:9a:41:14:54:04:42:52:79:76:
0a:84:2c:3b:f5:89:cf:b1:be:e5:55:d6:bc:dc:0c:30:16:33:
c8:a6:71:8f:71:e1:b0:8d:9a:9f:b1:d9:1e:7d:ba:14:b9:52:
98:9c:90:2b:18:96:0d:9b:0a:9e:a5:12:56:38:dc:9a:51:38:
1a:87:12:24:7d:f7:94:53:0e:7c:5e:3d:3e:23:f7:2c:00:9c:
33:e0:3c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:45 2025 by rpki-client