Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft
File: vzrHIKEXt01NE8Jj95R3kp7btLw.mft (raw, json)
Hash identifier: U6sV2rr8QUcbIWIoTfWpRnTxCskAQM01RGyKRtyJMec=
Subject key identifier: F3:C2:26:C7:41:4F:6E:91:C9:34:B3:02:E1:5E:C7:E5:AB:CC:97:6C
Authority key identifier: BF:3A:C7:20:A1:17:B7:4D:4D:13:C2:63:F7:94:77:92:9E:DB:B4:BC
Certificate issuer: /CN=bf3ac720a117b74d4d13c263f79477929edbb4bc
Certificate serial: 0199FC8FB57829B26E6706F7E5C220300185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vzrHIKEXt01NE8Jj95R3kp7btLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft
Manifest number: 04CC
Signing time: Sun 19 Oct 2025 13:01:40 +0000
Manifest this update: Sun 19 Oct 2025 13:01:40 +0000
Manifest next update: Mon 20 Oct 2025 13:01:40 +0000
Files and hashes: 1: vzrHIKEXt01NE8Jj95R3kp7btLw.crl (hash: wvjLlisgq+qJb5sXFWgREmL7OzzQ8qrC/H1ne7WeuXw=)
2: y3g1z7Zmigqej1DGQ1gx3ilZaM8.roa (hash: ce+FeJaNssRXQv9hff7wkEZwcN/xUnX9DV6JIGk2oTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/vzrHIKEXt01NE8Jj95R3kp7btLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b5:78:29:b2:6e:67:06:f7:e5:c2:20:30:01:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf3ac720a117b74d4d13c263f79477929edbb4bc
Validity
Not Before: Oct 19 13:01:40 2025 GMT
Not After : Oct 20 13:01:40 2025 GMT
Subject: CN=f3c226c7414f6e91c934b302e15ec7e5abcc976c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6e:61:f1:28:31:ba:a7:f5:99:8f:b7:fc:13:
c2:65:68:02:74:8d:0d:18:30:92:ea:55:8f:15:60:
ad:81:16:06:de:49:83:cc:30:b7:af:7b:71:04:5a:
23:99:9c:4c:b3:5c:f6:da:b1:4f:dc:29:11:68:04:
9c:d9:de:4f:29:5a:6a:1e:01:4d:e9:bf:66:ee:54:
20:12:78:b1:f8:6c:61:44:a5:46:82:15:ab:da:14:
33:ce:fd:11:5a:48:02:88:c7:66:c9:59:d9:fe:52:
04:09:cd:ac:31:0f:6d:f3:d3:45:b9:f4:13:73:cf:
22:23:15:b5:ad:a6:84:29:22:e2:f6:47:f3:48:41:
43:e1:63:a7:f3:54:82:99:f6:5e:3b:6d:8b:6b:8e:
ff:92:01:fe:18:9a:d2:e0:8a:ce:18:4d:a3:24:ab:
bb:a3:5b:c1:79:5e:c2:45:16:bc:19:2e:c5:4e:7c:
6b:1a:a9:b1:d9:e8:4c:e2:ab:b8:40:40:05:81:57:
7b:53:f5:73:d1:94:f8:a1:a1:60:12:64:8e:50:eb:
19:55:39:53:d5:63:0e:e3:59:a5:e3:24:c0:ec:aa:
28:d9:1c:9d:64:b6:ac:f2:ec:20:cb:c4:f5:4a:d2:
9d:de:13:4e:47:ff:fe:e2:aa:72:ca:4e:8b:7a:6e:
a9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C2:26:C7:41:4F:6E:91:C9:34:B3:02:E1:5E:C7:E5:AB:CC:97:6C
X509v3 Authority Key Identifier:
keyid:BF:3A:C7:20:A1:17:B7:4D:4D:13:C2:63:F7:94:77:92:9E:DB:B4:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vzrHIKEXt01NE8Jj95R3kp7btLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:cf:3f:e2:74:9f:6d:d0:80:4b:8c:fd:8c:d0:5a:50:2f:4d:
fa:18:c4:b7:82:28:4d:30:86:25:0e:e3:ac:96:09:8c:90:4e:
8c:f1:11:9c:86:2c:23:30:fa:1a:4b:bb:d7:4f:e9:7d:b1:ae:
6c:82:ee:67:75:a4:2f:ad:b5:7f:f8:4a:52:7c:98:af:31:f6:
52:f6:70:c1:87:c1:a3:5a:a2:2e:6c:6f:2c:80:80:a1:cb:73:
d2:55:1d:82:a8:d2:7f:d9:06:47:75:86:eb:bc:dc:50:75:b4:
a1:dd:f6:37:65:b3:93:04:1a:21:f4:b1:7f:1d:16:eb:11:fe:
21:42:62:13:cd:55:26:a9:f0:bd:6a:5a:27:a0:38:24:46:48:
f5:4d:78:5e:d0:e3:33:22:c6:5c:8d:2f:5d:66:fd:cd:78:b1:
f6:23:cc:c9:9c:98:ab:15:41:38:51:57:c4:97:59:23:f9:0b:
64:86:e0:d5:d6:b1:0c:e7:47:ae:09:c9:69:94:51:f3:6a:42:
6c:d3:70:97:5a:cf:ca:b5:05:9a:66:3f:97:7b:a8:a7:d2:14:
de:3b:99:c1:18:7a:ff:eb:79:22:9b:58:8d:36:68:67:1d:79:
2a:e5:1e:75:86:8f:6f:95:24:99:93:ab:aa:db:f9:b2:21:9e:
b6:64:36:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:00 2025 by rpki-client