Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
File: VzDFDI_UStGWvxBX7ipvpAQcfk4.mft (raw, json)
Hash identifier: B0/pUtjwZHlLc+XLFeQQ3JlmegsfQ21pIl+O9SpWJx4=
Subject key identifier: 39:20:58:54:80:4E:DE:0A:2E:56:0F:C8:CE:38:49:B9:33:3C:91:F2
Authority key identifier: 57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
Certificate issuer: /CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Certificate serial: 0199FBEAD8BFA5A1B669C4120BBA86E1C67D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
Manifest number: 0B42
Signing time: Sun 19 Oct 2025 10:01:36 +0000
Manifest this update: Sun 19 Oct 2025 10:01:36 +0000
Manifest next update: Mon 20 Oct 2025 10:01:36 +0000
Files and hashes: 1: VzDFDI_UStGWvxBX7ipvpAQcfk4.crl (hash: uNBQNIy8WhH4zNcPu16aH4jzm6NlT5nAfx4m2/lGs4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d8:bf:a5:a1:b6:69:c4:12:0b:ba:86:e1:c6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Validity
Not Before: Oct 19 10:01:36 2025 GMT
Not After : Oct 20 10:01:36 2025 GMT
Subject: CN=39205854804ede0a2e560fc8ce3849b9333c91f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8c:4d:55:6f:27:31:8b:31:04:f2:b9:e7:ff:
e3:8c:e4:5a:6f:ff:dd:38:09:40:85:05:1b:8f:17:
f8:f0:e4:f9:29:74:28:a3:91:33:7b:6b:d0:d1:78:
5f:5c:b9:e1:6a:87:5c:43:79:c6:8f:1a:b9:55:3f:
4e:bd:9f:b6:f5:6d:36:0a:c2:d4:c3:40:b7:98:de:
0f:ac:0d:a1:f6:f8:fa:9f:ac:f9:78:ba:20:d6:9b:
16:26:54:8a:9f:92:a2:23:7c:d6:da:64:5b:05:f8:
48:d7:be:17:81:96:e9:0f:b1:7e:55:bc:cc:3b:01:
9b:19:90:8f:8f:05:a8:6d:c2:c8:45:8a:23:39:d9:
62:55:2c:65:8b:f3:af:1f:05:b5:30:25:d4:aa:ec:
86:11:be:58:fb:17:3a:78:38:52:2d:fb:82:e5:93:
af:f3:9e:29:f5:40:4f:5e:a7:70:3a:19:67:9c:d7:
1d:fb:cb:64:52:25:9d:46:8e:83:09:94:bc:6d:21:
05:02:2a:61:fc:81:4b:c7:d5:2c:94:c5:21:ce:ad:
d0:a0:1f:a0:54:a9:08:32:af:83:b0:2b:ab:44:1a:
7a:6e:5b:2e:83:ef:9d:f8:cd:29:d6:aa:10:94:95:
cf:4b:32:6d:d7:49:d8:1d:6a:24:ad:75:19:fe:89:
ca:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:20:58:54:80:4E:DE:0A:2E:56:0F:C8:CE:38:49:B9:33:3C:91:F2
X509v3 Authority Key Identifier:
keyid:57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:65:67:3c:58:f4:0c:2f:df:65:81:74:6c:fb:e3:e5:a4:07:
87:fe:5f:eb:35:fe:e1:3e:ed:d1:8b:1e:be:65:26:16:eb:44:
11:92:56:f6:ea:c6:85:08:e1:b4:ff:47:f7:36:b8:99:96:31:
30:d2:50:17:ab:a6:e5:57:65:f2:49:54:ed:41:d8:3d:15:be:
95:dd:6c:c4:09:cf:a0:18:fb:80:ff:66:df:f4:bf:81:a6:46:
00:88:e9:17:39:90:f1:e9:e8:42:3c:7f:f5:d1:13:df:3b:7c:
ca:f2:fa:df:b8:28:ee:8b:2d:85:03:b8:13:8a:fc:a7:3d:f9:
1e:f1:d1:4b:14:8b:45:74:2f:2e:1e:26:d5:3e:e8:1f:20:2a:
a1:ec:e4:69:51:53:dd:64:cb:b9:de:dc:8d:ce:9a:00:04:62:
55:6e:ec:84:87:21:e8:b3:77:5b:0d:19:b6:da:ca:75:b9:b2:
29:06:d7:0b:e0:74:13:4e:9b:4d:73:12:f1:2b:11:4c:dc:b8:
d4:65:7b:27:33:90:48:c6:71:d7:3f:79:1f:0d:82:b2:dc:dd:
ad:9b:d6:c0:e2:79:69:cb:9d:b1:f8:5f:38:57:0e:d6:91:d2:
bc:57:27:ce:52:60:0a:9c:fa:ea:c4:48:f8:7e:0c:db:e5:c0:
99:0c:3a:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76ti/paG2acQSC7qG4cZ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MzBjNTBjOGZkNDRhZDE5NmJmMTA1N2VlMmE2ZmE0MDQx
YzdlNGUwHhcNMjUxMDE5MTAwMTM2WhcNMjUxMDIwMTAwMTM2WjAzMTEwLwYDVQQD
EygzOTIwNTg1NDgwNGVkZTBhMmU1NjBmYzhjZTM4NDliOTMzM2M5MWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oxNVW8nMYsxBPK55//jjORab//d
OAlAhQUbjxf48OT5KXQoo5Eze2vQ0XhfXLnhaodcQ3nGjxq5VT9OvZ+29W02CsLU
w0C3mN4PrA2h9vj6n6z5eLog1psWJlSKn5KiI3zW2mRbBfhI174XgZbpD7F+VbzM
OwGbGZCPjwWobcLIRYojOdliVSxli/OvHwW1MCXUquyGEb5Y+xc6eDhSLfuC5ZOv
854p9UBPXqdwOhlnnNcd+8tkUiWdRo6DCZS8bSEFAiph/IFLx9UslMUhzq3QoB+g
VKkIMq+DsCurRBp6blsug++d+M0p1qoQlJXPSzJt10nYHWokrXUZ/onKIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkgWFSATt4KLlYPyM44SbkzPJHyMB8GA1UdIwQY
MBaAFFcwxQyP1ErRlr8QV+4qb6QEHH5OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnpERkRJX1VTdEdXdnhCWDdpcHZwQVFjZms0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9mNTZjMGMtNGFlNy00ZWVjLTljZWQt
Zjc1YzExNjNmYjFlLzEvVnpERkRJX1VTdEdXdnhCWDdpcHZwQVFjZms0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9mNTZjMGMtNGFlNy00ZWVjLTljZWQtZjc1YzExNjNmYjFl
LzEvVnpERkRJX1VTdEdXdnhCWDdpcHZwQVFjZms0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWVnPFj0
DC/fZYF0bPvj5aQHh/5f6zX+4T7t0YsevmUmFutEEZJW9urGhQjhtP9H9za4mZYx
MNJQF6um5Vdl8klU7UHYPRW+ld1sxAnPoBj7gP9m3/S/gaZGAIjpFzmQ8enoQjx/
9dET3zt8yvL637go7osthQO4E4r8pz35HvHRSxSLRXQvLh4m1T7oHyAqoezkaVFT
3WTLud7cjc6aAARiVW7shIch6LN3Ww0ZttrKdbmyKQbXC+B0E06bTXMS8SsRTNy4
1GV7JzOQSMZx1z95Hw2CstzdrZvWwOJ5acudsfhfOFcO1pHSvFcnzlJgCpz66sRI
+H4M2+XAmQw67Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:00 2025 by rpki-client