Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
File: Vzm709YFZftZWALsfGl-ohq9l-Q.mft (raw, json)
Hash identifier: VGGUNNAPzF/8Q5wMduN085w0Ih0GZPy2ryW5Mb8jV+w=
Subject key identifier: 6B:2A:5F:07:A6:F7:A6:68:23:AE:EA:67:0D:8A:78:D5:9D:45:E4:5D
Authority key identifier: 57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
Certificate issuer: /CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Certificate serial: 0199FD6B6324930AAA549D2510A7F01B95CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
Manifest number: 07F1
Signing time: Sun 19 Oct 2025 17:01:37 +0000
Manifest this update: Sun 19 Oct 2025 17:01:37 +0000
Manifest next update: Mon 20 Oct 2025 17:01:37 +0000
Files and hashes: 1: Vzm709YFZftZWALsfGl-ohq9l-Q.crl (hash: l36ioFIZouLjrXpiVIpIjxg/5bb52IKdeJV8LIkrICQ=)
2: gAmwtWdBAiGd9eGeDhh_4U76Qd4.roa (hash: dWZpajXQdBvyOcKFRctLEmEP4L6KG6ufnnlUSRMSxks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:63:24:93:0a:aa:54:9d:25:10:a7:f0:1b:95:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Validity
Not Before: Oct 19 17:01:37 2025 GMT
Not After : Oct 20 17:01:37 2025 GMT
Subject: CN=6b2a5f07a6f7a66823aeea670d8a78d59d45e45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ed:b5:0e:f8:87:d8:db:75:bb:56:c1:c2:eb:
2b:f1:90:a9:1b:43:37:06:e9:c7:94:5a:0e:22:f1:
1a:3c:04:74:87:68:5a:ea:83:5d:00:67:04:0d:91:
54:15:9e:a2:00:79:41:cb:94:ee:f8:6d:fe:98:8c:
59:fc:56:54:c9:e8:c1:a7:6c:6c:fc:24:a3:30:ca:
8a:a9:e3:62:a2:06:34:b2:2f:5e:e1:14:d8:64:57:
05:e3:4a:ca:7e:6b:6d:38:ea:69:4d:a7:21:20:d9:
ed:54:95:92:6c:c9:77:1b:c3:82:26:53:2a:a6:fe:
5e:8e:3a:45:0a:17:bb:20:20:48:75:ca:1c:e9:af:
f6:0d:6e:2e:6a:92:f7:70:e7:7e:dd:4e:0d:fb:3e:
15:0b:8b:c5:b2:ce:63:74:ac:36:d6:8e:a6:5e:21:
17:af:f8:b3:93:3c:ad:d2:ae:cf:3b:3c:a2:3a:31:
81:a8:1c:ce:0d:bf:db:84:7b:13:3a:9d:a5:7b:52:
3a:08:90:86:8f:bc:97:d2:7f:f6:f0:30:01:05:90:
ba:7a:df:07:66:8c:a6:cd:03:7c:b8:02:78:25:d3:
a6:42:b0:e6:2f:8c:80:e9:f9:43:40:a0:cd:b5:7b:
3b:0b:01:14:0e:30:22:d9:ce:e0:f6:4c:f3:61:f0:
6e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2A:5F:07:A6:F7:A6:68:23:AE:EA:67:0D:8A:78:D5:9D:45:E4:5D
X509v3 Authority Key Identifier:
keyid:57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:5e:30:23:34:a4:d6:e7:7f:2d:c2:fc:54:35:14:6f:9e:aa:
81:9d:d6:73:54:9c:bb:a0:e5:d9:4d:c2:68:81:95:2b:8c:7d:
48:f2:98:71:3e:d9:b1:7a:c4:15:3a:7a:51:c2:22:b4:c6:ae:
6c:2f:90:e0:d9:0b:fa:2f:b8:42:d2:66:fd:d7:10:d2:5f:66:
9c:35:b6:4b:cb:13:4d:b0:ed:ca:dc:db:1d:5a:fe:3a:6c:6a:
d7:87:de:48:41:f1:71:f4:62:87:5e:81:d5:94:e2:5b:ea:9c:
df:6d:54:3a:9a:6e:13:70:51:09:dc:cf:f9:11:38:9a:0f:92:
3f:09:fb:12:ac:65:20:61:de:d4:5f:72:66:f2:75:92:2f:20:
27:1c:0c:74:75:a2:d9:37:75:39:76:b3:fb:e3:ed:fb:9a:7a:
ef:02:4c:7b:fa:e5:72:0c:b6:25:50:4d:db:1f:b0:dd:3e:09:
6e:65:52:f8:d3:81:08:b3:a3:e5:3e:42:94:87:97:5c:0c:f1:
b7:37:35:75:df:15:72:da:8c:20:85:d9:67:ef:32:44:b7:99:
0b:73:a8:f1:97:df:68:a7:ae:d1:22:0a:93:ec:3d:96:77:df:
a7:74:2b:b7:34:0b:e8:2a:9b:00:55:16:15:60:68:4c:b0:e5:
5f:92:4c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:07:18 2025 by rpki-client