Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
File: VwzdFzLlZDoV7tnud-E5S4AkJUg.mft (raw, json)
Hash identifier: VKLOya5o/n71oM1lw8sUMhmEk5cfH48VEpwInsWFsaQ=
Subject key identifier: 06:25:E5:44:BB:A7:D4:FD:8F:C3:DF:F1:C1:A8:2F:8F:4D:80:83:BD
Authority key identifier: 57:0C:DD:17:32:E5:64:3A:15:EE:D9:EE:77:E1:39:4B:80:24:25:48
Certificate issuer: /CN=570cdd1732e5643a15eed9ee77e1394b80242548
Certificate serial: 0199FFC768CFC27F10844C72866D21557E44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
Manifest number: 0BDA
Signing time: Mon 20 Oct 2025 04:01:22 +0000
Manifest this update: Mon 20 Oct 2025 04:01:22 +0000
Manifest next update: Tue 21 Oct 2025 04:01:22 +0000
Files and hashes: 1: VwzdFzLlZDoV7tnud-E5S4AkJUg.crl (hash: EH6cF94HKq5f+1FrGUlnZG0YfuFchrx2MXhGFPkZ98E=)
2: t3EOhCqhRV2WckdeZdMmZde2sco.roa (hash: 9YigDUievW+JnsoS3fARTo39jCVhAjMEThq2WY+OCkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:68:cf:c2:7f:10:84:4c:72:86:6d:21:55:7e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570cdd1732e5643a15eed9ee77e1394b80242548
Validity
Not Before: Oct 20 04:01:22 2025 GMT
Not After : Oct 21 04:01:22 2025 GMT
Subject: CN=0625e544bba7d4fd8fc3dff1c1a82f8f4d8083bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:71:ca:01:bc:fd:41:26:e8:30:45:35:8b:70:
d0:88:19:6d:43:94:f6:fe:64:4e:63:4a:10:d7:5f:
f7:c5:56:86:0e:a7:39:3f:b8:1c:73:7c:d5:85:f2:
ef:0f:f0:e8:3c:32:a4:f0:da:e9:eb:2a:82:70:9b:
f8:12:0c:75:e8:24:6d:d8:0a:28:26:3b:ad:6b:fc:
8a:47:9e:66:e3:c5:12:a4:db:03:4b:17:19:75:b7:
62:ab:a6:fc:6a:c3:e1:f2:48:12:79:3c:15:4b:cb:
b2:c0:61:cb:1a:b7:0f:cc:b5:b5:91:41:0e:f3:84:
eb:c4:6a:0a:73:28:26:68:54:96:92:81:19:13:3b:
25:11:2d:c2:4d:3a:ab:b4:b1:14:c4:57:1c:d2:94:
31:19:69:88:59:03:2e:fa:96:d6:51:60:c7:4d:5a:
af:51:06:b5:63:b5:1f:11:ec:a6:4c:90:2a:85:e6:
e5:ac:1d:1c:00:2f:8b:28:cb:27:05:4c:bf:8f:a4:
10:bc:4f:b5:eb:50:ee:71:98:e3:12:a0:36:a9:bb:
ee:c2:c7:4c:80:ee:69:56:c4:9e:be:3e:b6:25:f5:
04:e5:66:c0:81:a7:41:41:47:42:ad:e1:29:04:14:
e1:8d:0a:53:40:37:6f:5b:eb:d5:b2:af:f2:7b:df:
a7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:25:E5:44:BB:A7:D4:FD:8F:C3:DF:F1:C1:A8:2F:8F:4D:80:83:BD
X509v3 Authority Key Identifier:
keyid:57:0C:DD:17:32:E5:64:3A:15:EE:D9:EE:77:E1:39:4B:80:24:25:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:82:d5:96:0a:03:cc:24:bf:03:dd:bf:4b:38:18:bb:41:92:
f3:1f:88:a8:94:f1:08:a5:05:33:dd:5c:f7:5d:62:18:53:12:
c0:4d:32:0a:b5:ed:de:02:36:cc:95:c7:9d:ed:19:8b:81:c0:
7e:5b:08:ef:aa:85:45:a7:73:85:08:87:78:37:3e:21:50:ed:
57:a3:ba:14:0e:2c:0b:f6:87:ca:56:b7:e0:e1:7e:92:4b:2a:
b8:0f:5b:7c:a8:93:87:17:14:44:9c:64:fb:8c:56:87:1b:91:
72:97:21:a4:6a:4f:6c:39:b7:57:a1:4e:6f:ad:df:11:42:37:
6a:76:73:91:ae:d8:56:33:5f:66:93:c1:40:06:c0:38:02:53:
1d:c5:18:7e:3a:84:d9:17:fa:53:11:63:5c:cc:db:56:33:0e:
08:50:de:36:52:0e:28:77:ea:31:a4:70:64:29:25:27:bc:a3:
4d:3f:83:0d:71:01:a8:bd:24:e0:21:5a:83:dc:0b:76:0f:48:
22:fa:25:bf:ba:43:bc:42:8a:ac:b5:92:d2:7a:eb:79:c7:73:
d3:3b:18:bb:72:cc:80:f8:d9:27:d5:80:17:3c:23:a4:5c:03:
74:39:17:1e:cc:92:41:12:65:61:bf:b1:9d:45:35:3e:82:47:
ef:85:a6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:33:35 2025 by rpki-client