Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
File: VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft (raw, json)
Hash identifier: 3zlYtlLs6n3YhWBzjg0bublpqCZ8QqIX/1aVuR7HFnU=
Subject key identifier: D1:F1:7B:E7:A0:4E:1E:0C:B3:EA:8E:1A:14:4A:65:95:2B:86:58:4D
Authority key identifier: 55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
Certificate issuer: /CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Certificate serial: 0199FDD9D90B5478E77FB54AD3E35A6E0827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
Manifest number: 1263
Signing time: Sun 19 Oct 2025 19:02:16 +0000
Manifest this update: Sun 19 Oct 2025 19:02:16 +0000
Manifest next update: Mon 20 Oct 2025 19:02:16 +0000
Files and hashes: 1: DXmFl68ZzKbqEncxK9EZHxIqylM.roa (hash: N3mENR29mNKtOOFkrl0wNAecJurlbOILfUHUa/gdTXA=)
2: VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl (hash: 2zW0nUPMgXNCzk7LsoW98e3y8+WAKoe2AxfLlZ8hw3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:d9:0b:54:78:e7:7f:b5:4a:d3:e3:5a:6e:08:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Validity
Not Before: Oct 19 19:02:16 2025 GMT
Not After : Oct 20 19:02:16 2025 GMT
Subject: CN=d1f17be7a04e1e0cb3ea8e1a144a65952b86584d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:db:ca:c3:59:41:f0:76:5b:ee:8f:7c:3d:a9:
82:d5:3b:4f:f7:3b:cb:01:a7:0c:b3:8a:ca:e6:6c:
33:80:71:3c:07:f1:07:b7:f7:f9:4f:7b:16:b8:8a:
67:d1:ac:b2:69:bd:ae:36:39:dd:63:89:32:66:19:
85:f3:bc:b7:b4:8b:62:70:b4:b5:6d:1c:0f:d8:77:
fd:c7:3b:7b:56:74:24:95:b6:84:4c:a5:81:ef:2b:
5d:ee:64:41:63:3f:cc:6a:a1:f8:c1:68:97:81:0f:
c0:8c:27:f5:ac:9c:2b:55:0d:ec:c0:27:70:a1:c6:
30:0c:01:36:9f:8f:bf:0d:da:23:cc:7d:ae:85:a3:
4a:37:8c:0b:0e:c8:67:7c:a5:fb:b4:a1:c9:ba:07:
9b:b3:83:11:be:5d:3a:af:2f:c6:1e:68:7d:6a:5f:
7d:7c:83:a9:12:b1:63:fd:35:b8:f5:7a:d0:d0:42:
54:04:e7:b7:b9:01:cb:65:9b:7d:87:90:b4:ed:65:
19:46:bb:b3:ff:33:f5:d8:39:53:db:8e:6d:27:0c:
da:3d:9f:e1:c7:f7:29:14:f2:6c:7c:6d:30:a7:40:
18:1b:07:fa:a6:a5:09:05:79:8e:c4:2d:27:1e:54:
fc:b3:63:52:60:66:fd:7d:db:68:5f:d4:c4:87:b7:
75:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F1:7B:E7:A0:4E:1E:0C:B3:EA:8E:1A:14:4A:65:95:2B:86:58:4D
X509v3 Authority Key Identifier:
keyid:55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:6e:c9:8b:15:36:25:5d:6f:66:bd:34:e1:41:9c:da:d7:99:
73:10:a9:74:c1:63:a3:3c:33:80:b0:40:b2:35:9a:7d:fe:f1:
48:99:56:ab:be:55:ef:b5:c3:d3:80:e5:2d:f0:90:9a:d7:c2:
91:e9:86:16:01:2b:74:0b:53:d3:21:f5:a0:e0:a7:60:90:8c:
af:ba:93:76:e1:ae:e1:ca:19:0f:d4:25:1c:2c:1b:90:5d:90:
70:a0:d0:b7:05:4a:f0:b7:2b:66:96:d9:e2:f6:6a:9d:62:6c:
3f:1d:c0:3c:e8:a1:d9:8b:37:f2:42:18:4b:de:82:4f:78:54:
05:69:35:43:6b:e6:5b:be:43:59:0d:86:46:13:18:e7:e9:ce:
14:b8:ff:2f:5b:76:ea:54:51:b9:8b:e9:a4:23:74:e0:a7:01:
61:0b:a5:95:61:69:51:7f:69:82:c9:f6:14:d6:7d:a8:42:28:
85:c4:f8:d4:28:95:9e:c2:c5:13:ca:74:22:45:78:92:55:88:
57:a6:ad:a4:0b:7d:31:49:56:8a:24:43:1f:02:33:5f:d1:62:
1d:8c:03:a5:dd:c8:a1:0a:0b:29:e4:5e:d4:0e:c6:7f:4b:63:
77:ee:d1:38:85:69:6b:fa:2d:a5:03:17:cd:83:aa:09:f5:f5:
7b:19:03:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:13:13 2025 by rpki-client