Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
File: VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft (raw, json)
Hash identifier: j7q+x7k6gB09eHc8KlWkmL8vjecHLYD4quqwXbpMmWg=
Subject key identifier: CA:84:76:94:AA:96:21:5B:6E:27:5A:D9:6C:3C:83:95:59:44:27:A0
Authority key identifier: 57:30:E2:F7:03:F6:98:B9:DC:EA:C6:3F:1E:86:91:D8:79:C0:B2:A7
Certificate issuer: /CN=5730e2f703f698b9dceac63f1e8691d879c0b2a7
Certificate serial: 0199FB7CC3AC4BAC8813B23405E2B7CDC7F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
Manifest number: 05E6
Signing time: Sun 19 Oct 2025 08:01:21 +0000
Manifest this update: Sun 19 Oct 2025 08:01:21 +0000
Manifest next update: Mon 20 Oct 2025 08:01:21 +0000
Files and hashes: 1: VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl (hash: 2gw+mlBeVabMwCmqULa1i3FnA1nnCpKQFZOce2OO52g=)
2: yDB5GRHHAS-xe1GzTw2-ZinAODM.roa (hash: fhKYPu+IotrC2SQI+fYAsjSkwcHk2X3TQ/wuBYgtCU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:c3:ac:4b:ac:88:13:b2:34:05:e2:b7:cd:c7:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5730e2f703f698b9dceac63f1e8691d879c0b2a7
Validity
Not Before: Oct 19 08:01:21 2025 GMT
Not After : Oct 20 08:01:21 2025 GMT
Subject: CN=ca847694aa96215b6e275ad96c3c8395594427a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:90:1a:25:19:76:8a:8f:c2:b4:db:0a:ad:96:
d7:5c:dc:c5:52:ee:75:c1:f9:b9:53:80:84:2b:24:
bd:e7:9b:aa:60:bb:35:7c:90:d4:5b:d9:00:8c:d3:
c3:0f:66:e3:30:6e:c9:4d:b2:17:c7:d2:c5:f1:d1:
0c:48:ae:2e:fd:1f:92:f8:04:2e:8f:0c:41:ba:21:
5f:e7:57:35:ea:36:2e:0a:5d:08:fb:93:e6:d4:ca:
a6:a9:67:53:00:a2:6b:b5:49:05:b0:0b:db:ce:b9:
b7:f4:dd:be:e5:e2:f1:ec:dd:10:95:47:ca:d7:68:
b5:33:af:0f:49:57:46:db:c2:91:27:f2:d0:75:6c:
67:96:36:f2:29:c7:6e:a2:ad:3a:11:e7:21:36:57:
32:b5:38:35:52:fa:9c:be:0b:d8:13:d5:29:73:66:
14:b5:a1:b9:0e:6c:ef:d5:ce:87:93:48:f8:00:7b:
c3:87:82:be:74:b9:ef:10:45:e0:10:73:3f:d2:27:
97:f7:79:9c:da:a6:22:46:11:77:4e:58:c4:de:ed:
5a:ff:5c:53:7a:6e:60:7a:df:0b:24:88:2f:15:70:
0c:8c:0f:e1:14:5a:2f:85:3c:1f:70:e2:99:e5:75:
4a:f2:9c:85:78:48:bb:ca:9b:36:e3:d6:a2:34:e8:
ad:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:84:76:94:AA:96:21:5B:6E:27:5A:D9:6C:3C:83:95:59:44:27:A0
X509v3 Authority Key Identifier:
keyid:57:30:E2:F7:03:F6:98:B9:DC:EA:C6:3F:1E:86:91:D8:79:C0:B2:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f6:f0:bb:19:3e:cd:86:fc:51:30:d0:bd:f1:59:f8:94:bc:
80:93:6d:20:aa:9b:ca:01:a9:bd:a6:0a:68:84:ec:2c:52:ce:
b8:80:ec:58:20:5b:3b:36:96:21:c9:cf:10:aa:b3:b0:64:c4:
d2:92:6a:25:58:c3:2a:01:0f:e7:c2:33:95:81:f4:be:4b:fd:
87:56:b7:72:9f:95:be:cc:7a:e8:02:06:5d:e1:61:a6:05:ca:
3b:9d:b8:79:0e:28:c2:14:0b:92:b1:d5:d9:c7:4d:a6:0f:b0:
91:58:fd:3d:7c:26:b9:5e:b5:1a:a3:9f:e5:ad:37:27:6d:f7:
19:17:67:f7:b5:5d:86:45:c4:0c:c4:95:15:64:b0:d1:7e:86:
97:73:2f:00:62:24:96:a4:d2:31:71:76:78:75:cc:b5:d5:59:
c4:0f:d9:d1:40:f1:4d:79:e1:90:4b:c7:98:cb:86:b2:b9:92:
7f:30:79:87:51:5a:3a:50:2d:34:6e:66:f3:a9:d4:f6:d4:f6:
9a:75:9f:08:70:16:49:65:8f:df:c2:d0:3b:10:6e:68:d4:d7:
4d:a5:c9:a6:c0:72:19:2c:b6:af:97:87:51:4a:e6:c1:5d:be:
df:e2:9b:27:4c:a1:fe:fc:ee:76:23:64:a0:64:90:9f:7f:ac:
ae:a9:46:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:43 2025 by rpki-client