Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
File: VZhirROQ5Nv4grUie8kzUPLYBxM.mft (raw, json)
Hash identifier: FnE4Q3D/bb2OMde9gwE3YDayAwyFwsORtzbIUx/U2zU=
Subject key identifier: D5:F3:FA:C7:E1:96:34:77:F0:41:DA:14:1F:2F:85:C3:34:21:37:31
Authority key identifier: 55:98:62:AD:13:90:E4:DB:F8:82:B5:22:7B:C9:33:50:F2:D8:07:13
Certificate issuer: /CN=559862ad1390e4dbf882b5227bc93350f2d80713
Certificate serial: 0199FC587A1CA754596BD25649B817483BA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZhirROQ5Nv4grUie8kzUPLYBxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
Manifest number: 0811
Signing time: Sun 19 Oct 2025 12:01:20 +0000
Manifest this update: Sun 19 Oct 2025 12:01:20 +0000
Manifest next update: Mon 20 Oct 2025 12:01:20 +0000
Files and hashes: 1: VZhirROQ5Nv4grUie8kzUPLYBxM.crl (hash: TaWOij3u8JvEyRi5O/g3rozhNaW/ly3mdm2j/qAlo9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZhirROQ5Nv4grUie8kzUPLYBxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:7a:1c:a7:54:59:6b:d2:56:49:b8:17:48:3b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559862ad1390e4dbf882b5227bc93350f2d80713
Validity
Not Before: Oct 19 12:01:20 2025 GMT
Not After : Oct 20 12:01:20 2025 GMT
Subject: CN=d5f3fac7e1963477f041da141f2f85c334213731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:89:89:42:9b:33:fb:f3:44:33:1c:c3:54:50:
53:1b:2a:d2:5f:78:24:b6:09:d2:80:fd:a8:be:c0:
cf:1b:29:85:54:4c:f2:ed:e2:86:3f:78:d9:96:7e:
06:7e:ec:fb:88:79:90:85:90:9a:a3:80:55:01:19:
7e:1e:0c:13:3b:f0:62:f5:73:f7:1e:18:28:4e:3f:
0c:80:6e:4c:8a:4e:8e:9b:f7:c0:56:b4:27:1b:20:
64:1a:4b:e1:1c:fb:f4:b0:5c:1f:90:60:92:f5:4e:
95:03:c1:d0:5c:b4:31:f0:4d:3b:bc:a3:7c:e3:15:
ad:2e:47:1b:a1:d1:fd:a8:44:8e:3f:75:1b:70:cf:
09:59:93:f7:92:28:03:37:d8:24:a8:94:a3:a0:1a:
03:90:81:61:f4:f4:bd:a2:18:e7:3c:62:bf:5c:23:
36:00:d3:98:4b:06:09:98:12:07:5a:8a:6f:ac:47:
cf:3f:13:39:ab:1f:dd:6e:d4:70:66:e3:1c:95:83:
f3:9a:85:d2:56:17:b8:c4:ba:df:ff:b2:b6:44:7f:
3c:11:d5:2b:55:86:71:f1:f3:20:34:58:35:09:79:
1f:43:c4:c4:ab:7a:be:d9:4a:20:20:00:b1:78:a1:
ba:9d:ab:54:e2:ed:fc:01:d1:e2:b5:d3:32:4e:dd:
50:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F3:FA:C7:E1:96:34:77:F0:41:DA:14:1F:2F:85:C3:34:21:37:31
X509v3 Authority Key Identifier:
keyid:55:98:62:AD:13:90:E4:DB:F8:82:B5:22:7B:C9:33:50:F2:D8:07:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZhirROQ5Nv4grUie8kzUPLYBxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:77:14:30:c2:ef:6d:9d:84:24:5d:71:9c:62:1d:3c:16:9f:
78:24:d6:4d:1e:f0:34:60:04:32:8b:fe:40:13:90:fa:be:f1:
4c:26:7a:86:18:14:98:c0:68:39:6c:21:ef:12:29:87:3f:56:
25:a0:f0:17:23:1b:28:f1:e4:13:2d:43:d6:25:b2:57:20:c4:
80:7a:62:de:93:a2:ed:7f:05:b9:a0:27:6e:91:be:7a:0e:47:
68:02:f6:53:71:4e:10:94:9b:f0:79:90:a0:d3:1b:b1:6b:42:
07:db:09:64:d6:71:57:e8:56:d4:be:b3:1a:58:26:4f:65:bc:
91:a0:c8:50:70:8e:fd:57:1c:46:2b:c2:31:01:3c:31:7d:25:
87:55:3c:57:30:90:f6:a1:57:92:3c:25:47:75:2c:ba:18:83:
21:40:e6:c6:d9:7d:5b:a1:2d:c7:0e:cc:48:56:f8:05:9b:a1:
09:d8:b7:ee:25:07:2b:7b:8f:45:be:e6:54:db:a0:f8:d3:72:
b9:f6:bc:40:33:aa:6f:73:74:66:97:da:33:f0:50:3f:51:89:
b8:02:f0:d1:86:6d:bf:19:56:5a:0e:4e:44:93:d1:d6:22:16:
28:99:7f:24:19:18:de:5c:89:b8:bf:eb:07:8c:cf:c3:95:ae:
cb:75:54:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:35 2025 by rpki-client