Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
File: VZNJZEMjMV-AbcZMpNntlVd2J1c.mft (raw, json)
Hash identifier: 7NwSL3uAkK2f5CAZY9DEJKX7AA8DF7lMy20XLfBt7Vc=
Subject key identifier: D3:CF:B5:21:09:78:9D:B9:AF:27:4B:0A:33:CF:1D:4E:BE:60:C7:81
Authority key identifier: 55:93:49:64:43:23:31:5F:80:6D:C6:4C:A4:D9:ED:95:57:76:27:57
Certificate issuer: /CN=559349644323315f806dc64ca4d9ed9557762757
Certificate serial: 0199FDD98645274607DA72AC06939D93DB12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
Manifest number: 0B3D
Signing time: Sun 19 Oct 2025 19:01:55 +0000
Manifest this update: Sun 19 Oct 2025 19:01:55 +0000
Manifest next update: Mon 20 Oct 2025 19:01:55 +0000
Files and hashes: 1: VZNJZEMjMV-AbcZMpNntlVd2J1c.crl (hash: jo3lBZ+eGSCyXk5jZU2ZsZbRXjLOU60C+5mJf7GsKXU=)
2: ZRax88V5p4U88t_b2oPo8_w8EVw.roa (hash: wbdz2WKZbk8YP6i6XOpsIsE71ar5pDtmK77QBUlEFwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:86:45:27:46:07:da:72:ac:06:93:9d:93:db:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559349644323315f806dc64ca4d9ed9557762757
Validity
Not Before: Oct 19 19:01:55 2025 GMT
Not After : Oct 20 19:01:55 2025 GMT
Subject: CN=d3cfb52109789db9af274b0a33cf1d4ebe60c781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f1:a9:0d:02:fc:61:ac:0d:69:c8:01:56:fc:
2c:be:33:79:3c:f8:b7:f1:3c:18:9e:e2:8d:48:1b:
21:13:a8:ce:db:d5:bc:64:36:05:f0:29:25:c4:a3:
89:d4:8d:f4:36:68:b5:d6:fd:78:90:47:30:9c:66:
86:c7:6e:1b:7e:85:9f:55:2b:51:a3:cb:bd:79:f6:
f9:f1:07:66:79:c5:d5:8c:5a:92:5f:49:1e:8c:0f:
ab:4c:e3:f1:96:7d:0f:d8:a7:0b:a5:37:a7:c7:19:
71:81:36:81:88:31:ec:66:23:ee:29:7a:7e:22:b8:
1b:9e:ef:22:76:f9:9c:56:79:6d:90:0a:51:fb:32:
8a:31:5e:30:a6:ec:43:72:14:84:4b:bb:d2:57:99:
06:a9:67:52:11:54:bd:c8:41:93:bb:ca:2b:2e:a2:
4c:87:29:a5:25:a7:76:0f:77:19:13:26:f8:73:ee:
93:2c:df:b9:1f:82:ab:a1:d3:c4:d6:96:b2:e2:d6:
00:ef:10:13:89:40:4e:87:e9:b5:0d:11:b1:3f:dc:
30:14:7d:f2:6e:45:ec:d0:12:5f:87:81:04:b2:fc:
4f:88:e2:1a:c4:cd:5e:b2:f8:e7:3d:e6:48:e9:74:
5d:b8:b2:9a:9b:d6:dc:6c:df:2b:d3:d1:34:ef:38:
33:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CF:B5:21:09:78:9D:B9:AF:27:4B:0A:33:CF:1D:4E:BE:60:C7:81
X509v3 Authority Key Identifier:
keyid:55:93:49:64:43:23:31:5F:80:6D:C6:4C:A4:D9:ED:95:57:76:27:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:67:46:65:6a:04:99:d6:76:ee:f2:5c:36:9e:d8:fa:38:c9:
28:83:ce:2e:b2:00:a4:d2:fe:20:e5:97:1d:6e:27:93:ed:d8:
f6:d7:05:20:9c:e1:06:1f:d4:f0:e2:b8:38:a4:3a:1c:64:6b:
1d:41:ee:11:ec:b0:f2:b1:f5:b7:3a:7e:be:da:32:22:b7:eb:
80:5a:6e:97:69:42:b7:ab:37:47:fe:29:47:3d:67:ac:9d:1c:
74:b6:28:cd:11:45:03:ad:86:3a:f7:be:f1:33:b3:76:30:c6:
12:c0:84:c0:cb:18:58:78:ce:b1:f9:2a:c8:e0:4b:c0:9b:4c:
1f:12:55:60:f8:4e:78:dc:20:ff:75:b3:ff:86:27:3c:df:84:
81:13:43:8d:c6:64:8d:0b:c3:ad:5d:a7:3b:bd:f8:92:82:aa:
a1:a9:91:6a:54:7a:d7:df:47:1f:be:c0:5b:b3:4f:40:bf:ac:
8a:cc:a9:73:ec:32:4e:4f:3f:29:7d:61:9a:bf:48:4d:26:41:
07:88:4e:92:9d:de:01:76:36:d5:31:6d:3a:11:80:2f:78:64:
ab:c1:2b:b6:57:15:82:8b:16:a2:f4:f3:5a:fe:ec:f6:42:77:
99:b9:b0:e3:32:3b:32:aa:8c:ae:1e:0d:17:e7:60:25:72:16:
14:17:c8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:17 2025 by rpki-client