Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
File: VZNJZEMjMV-AbcZMpNntlVd2J1c.mft (raw, json)
Hash identifier: 7Y1FSvoo+auuYUvYL9/3E6D8/Jmdn2UAAgQrtoDUQr8=
Subject key identifier: 26:89:89:FD:B6:75:B6:9A:12:E5:AD:37:35:F7:42:EB:6F:D5:0B:A9
Authority key identifier: 55:93:49:64:43:23:31:5F:80:6D:C6:4C:A4:D9:ED:95:57:76:27:57
Certificate issuer: /CN=559349644323315f806dc64ca4d9ed9557762757
Certificate serial: 019A4EF4C153CB9E0BCA98EB50BB571478B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
Manifest number: 0B67
Signing time: Tue 04 Nov 2025 13:00:54 +0000
Manifest this update: Tue 04 Nov 2025 13:00:54 +0000
Manifest next update: Wed 05 Nov 2025 13:00:54 +0000
Files and hashes: 1: VZNJZEMjMV-AbcZMpNntlVd2J1c.crl (hash: vYbrUv0ejXRreoR1lBzGjBlTDWI3Kw/BNQemL4yuC9w=)
2: ZRax88V5p4U88t_b2oPo8_w8EVw.roa (hash: wbdz2WKZbk8YP6i6XOpsIsE71ar5pDtmK77QBUlEFwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:c1:53:cb:9e:0b:ca:98:eb:50:bb:57:14:78:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559349644323315f806dc64ca4d9ed9557762757
Validity
Not Before: Nov 4 13:00:54 2025 GMT
Not After : Nov 5 13:00:54 2025 GMT
Subject: CN=268989fdb675b69a12e5ad3735f742eb6fd50ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1f:e6:3a:7d:09:60:ea:ea:e3:26:71:88:f5:
9b:df:64:d0:30:a2:30:3d:13:91:4a:0c:3f:1f:62:
89:64:03:2b:dd:dc:5f:28:f1:28:3e:f0:95:4c:cd:
dd:dc:6e:af:01:8f:0e:9c:99:98:2c:6e:4b:2a:39:
5a:7e:73:a9:6a:8a:d3:17:27:96:43:57:87:1f:85:
84:5c:f3:af:40:36:fa:e0:0c:35:3d:55:cc:ec:ae:
93:42:6b:60:1b:20:55:c5:e7:80:4d:3d:1f:f4:bb:
c3:54:f6:be:79:69:c9:68:68:e3:da:f2:78:63:32:
a5:6c:1c:06:34:dd:4b:99:ee:2b:80:34:ff:60:b2:
0b:3b:4e:ea:cc:3c:d1:95:64:e5:ee:25:fd:da:b9:
18:0b:94:04:0c:5e:ce:eb:7e:79:eb:86:31:45:a0:
05:cc:57:8d:d0:64:82:8b:31:69:ae:62:74:7e:40:
dc:b1:6b:09:39:46:95:35:a7:2a:da:37:e2:61:44:
95:e9:58:8b:16:7a:2e:dd:c6:cd:ff:12:1d:41:87:
75:c3:b3:a7:29:de:c4:86:23:00:18:56:4a:db:84:
33:b6:cf:94:53:82:9b:65:07:70:0b:e6:15:25:4f:
79:cf:c3:0e:b4:74:a9:01:42:50:a7:dd:df:5c:cd:
e8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:89:89:FD:B6:75:B6:9A:12:E5:AD:37:35:F7:42:EB:6F:D5:0B:A9
X509v3 Authority Key Identifier:
keyid:55:93:49:64:43:23:31:5F:80:6D:C6:4C:A4:D9:ED:95:57:76:27:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:1e:2a:ac:70:01:2d:38:6d:31:18:99:7a:0e:11:b6:b2:37:
58:44:80:70:04:80:2c:75:53:7c:12:b5:f6:b7:bf:bc:3d:87:
4b:2e:e4:e1:53:b8:09:87:06:e9:ac:a3:a4:16:d5:8e:36:c1:
83:d3:b9:1c:5d:52:68:e6:ca:93:5e:ea:26:88:ec:10:5c:9d:
db:cf:25:63:8d:7f:f8:fe:05:94:60:b7:39:f6:ee:bc:89:6d:
cc:7e:28:cf:11:62:f0:d6:c1:e6:bb:17:3e:d1:68:9b:72:1d:
a8:f1:74:13:1d:26:ff:70:c1:b1:e2:e6:ca:3e:cc:62:60:ad:
0a:62:b7:16:b3:93:67:77:10:1c:bc:08:c8:08:18:a1:4d:81:
13:1d:7e:98:a9:54:73:e0:91:24:53:05:fe:04:5a:0d:0f:99:
23:d9:58:5b:a0:74:37:7b:87:7f:44:05:79:4a:3f:8e:5e:b0:
f3:93:53:97:cb:1c:bd:ac:a6:24:30:a3:85:87:0e:0f:5f:98:
30:67:b6:8d:61:a2:0c:15:f0:db:fd:39:16:15:e0:ab:b0:52:
59:cf:b4:b5:62:7a:bb:e2:00:83:c8:e1:e3:46:62:08:5c:6d:
b7:43:f8:ec:21:f8:96:24:a2:04:15:13:15:a4:c0:93:bf:23:
f4:a7:31:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:45 2025 by rpki-client