Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
File: VZnll39h5z8wSC2usaXy33LV7UY.mft (raw, json)
Hash identifier: S8f5cwqTO9P6yTJqUcggd9jVxPBfM3Lh7k0tiCK/3ow=
Subject key identifier: 14:CC:91:87:BE:3F:42:AB:FC:25:1E:3E:1F:04:5A:38:B4:4D:62:9E
Authority key identifier: 55:99:E5:97:7F:61:E7:3F:30:48:2D:AE:B1:A5:F2:DF:72:D5:ED:46
Certificate issuer: /CN=5599e5977f61e73f30482daeb1a5f2df72d5ed46
Certificate serial: 0199FC8F721E8A1FD1475E145F99D3859F03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZnll39h5z8wSC2usaXy33LV7UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
Manifest number: 1561
Signing time: Sun 19 Oct 2025 13:01:23 +0000
Manifest this update: Sun 19 Oct 2025 13:01:23 +0000
Manifest next update: Mon 20 Oct 2025 13:01:23 +0000
Files and hashes: 1: VZnll39h5z8wSC2usaXy33LV7UY.crl (hash: N+5CzKx3+q7aAtuKIM/8YohSRVMu4uehRY4iFRF1nSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZnll39h5z8wSC2usaXy33LV7UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:72:1e:8a:1f:d1:47:5e:14:5f:99:d3:85:9f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5599e5977f61e73f30482daeb1a5f2df72d5ed46
Validity
Not Before: Oct 19 13:01:23 2025 GMT
Not After : Oct 20 13:01:23 2025 GMT
Subject: CN=14cc9187be3f42abfc251e3e1f045a38b44d629e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:df:11:31:d0:e6:34:6f:a0:77:6d:6f:3f:2e:
e4:20:74:ea:9e:5d:25:bb:48:af:dc:03:e7:4c:32:
5b:33:fb:9d:7c:f0:d4:fd:55:4a:3b:1e:ca:9a:69:
19:7b:86:bd:fd:1f:03:a5:3c:65:c2:ee:9e:d5:e1:
67:a9:0e:ad:59:57:92:ee:f3:ec:1e:5b:0a:de:d0:
c3:bf:42:ec:cf:65:9c:6d:ee:71:3d:b9:50:78:f2:
1b:ba:a5:63:39:9c:59:d1:47:1e:23:8c:98:ce:85:
8f:a4:2a:14:91:0d:93:fa:56:b2:4f:ed:82:78:fb:
66:90:d2:33:82:0d:f4:5c:29:7f:37:dd:85:bf:4c:
1f:3f:db:9a:ab:94:73:e3:38:4f:f4:a6:d4:91:0c:
b4:77:2b:04:bc:f3:fb:78:3e:75:13:46:3c:bc:b0:
6d:8f:19:a2:72:e0:09:c0:06:82:8a:ae:d3:13:8d:
ee:7a:b5:67:1d:d5:d7:cc:1f:63:fb:98:a0:d2:54:
c7:f6:fb:5e:2d:b4:07:7d:e7:bd:1c:62:07:02:9a:
d6:0e:61:96:40:9e:ca:56:35:8c:1d:4e:7c:23:f1:
43:d1:45:d6:fd:96:0b:24:ea:7f:90:84:62:c4:cc:
dc:60:11:7d:e5:b8:75:7b:bc:35:b3:ef:8d:38:27:
08:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CC:91:87:BE:3F:42:AB:FC:25:1E:3E:1F:04:5A:38:B4:4D:62:9E
X509v3 Authority Key Identifier:
keyid:55:99:E5:97:7F:61:E7:3F:30:48:2D:AE:B1:A5:F2:DF:72:D5:ED:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZnll39h5z8wSC2usaXy33LV7UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:4a:c2:d7:4f:98:b7:18:e9:66:c5:9c:8d:ee:3d:b7:96:bb:
c5:d4:20:6d:57:ce:f4:36:84:c8:96:19:99:a1:bc:b6:2f:f5:
be:0b:4f:70:33:98:b8:e5:98:c2:85:dd:28:b2:f0:c5:a8:66:
c6:25:c2:c8:ac:65:35:5a:8d:8a:05:ba:ce:ac:1e:2a:b6:91:
bb:dd:a1:af:77:54:a2:74:83:4b:b4:b1:b4:b2:a5:4a:56:75:
73:aa:2d:b0:54:35:75:c0:b6:6e:b7:2a:64:79:4c:70:7a:5c:
c7:f6:cb:99:ce:d0:e1:fa:89:73:6f:fe:e7:b5:87:f9:6e:cc:
63:17:09:28:f3:1f:c3:b6:df:db:c6:a1:5b:95:e8:c6:c6:22:
32:11:a9:11:cc:a0:ad:65:d9:90:42:2d:23:a7:df:39:62:01:
f7:62:e4:80:85:86:31:42:fa:ae:e4:06:cf:d9:3c:67:98:b6:
e6:e5:b9:97:e9:52:0a:26:fa:92:f2:28:3d:99:c7:5a:d3:c6:
e0:7a:1c:8f:38:ab:5d:92:e4:25:c2:2e:bb:08:c6:37:ee:ac:
7c:f1:43:fc:c7:54:34:2d:eb:be:6e:3f:60:85:c3:92:01:c0:
45:41:1c:5b:96:d2:86:1c:ba:a0:80:b5:87:b3:c2:c4:78:ed:
41:52:c2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:55 2025 by rpki-client