Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
File: VZnll39h5z8wSC2usaXy33LV7UY.mft (raw, json)
Hash identifier: gtmYSqOmgOpv1NwdOmtWrfxwHFvzhBEGVgi2dGO7+8E=
Subject key identifier: 04:F9:84:4C:26:EF:F1:6A:17:2E:6E:F8:9F:C6:A6:4F:A5:27:1B:60
Authority key identifier: 55:99:E5:97:7F:61:E7:3F:30:48:2D:AE:B1:A5:F2:DF:72:D5:ED:46
Certificate issuer: /CN=5599e5977f61e73f30482daeb1a5f2df72d5ed46
Certificate serial: 01988DA1C47D2AC86AE7FAE6C2531668DB2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZnll39h5z8wSC2usaXy33LV7UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
Manifest number: 14A3
Signing time: Sat 09 Aug 2025 07:00:45 +0000
Manifest this update: Sat 09 Aug 2025 07:00:45 +0000
Manifest next update: Sun 10 Aug 2025 07:00:45 +0000
Files and hashes: 1: VZnll39h5z8wSC2usaXy33LV7UY.crl (hash: vdA/dirxUQv9txm8T3jTDUutIkZE7TsuOvLAW/V2+B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZnll39h5z8wSC2usaXy33LV7UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a1:c4:7d:2a:c8:6a:e7:fa:e6:c2:53:16:68:db:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5599e5977f61e73f30482daeb1a5f2df72d5ed46
Validity
Not Before: Aug 9 07:00:45 2025 GMT
Not After : Aug 10 07:00:45 2025 GMT
Subject: CN=04f9844c26eff16a172e6ef89fc6a64fa5271b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:68:1f:64:e5:06:db:b7:8d:6a:ca:08:f0:27:
2f:6a:42:68:28:40:ff:d8:75:69:4c:32:55:be:7a:
74:19:94:9c:52:8d:b9:89:c1:9d:a2:9a:2b:43:70:
5a:e9:67:47:46:0d:22:95:f7:0c:74:ad:f5:1d:aa:
46:8d:a8:f0:79:85:b7:e0:58:81:a1:a7:b2:b5:42:
18:fa:09:43:49:e4:29:63:94:62:57:40:77:61:b7:
f2:9b:f7:cf:c0:96:62:27:23:2b:12:2a:7e:e5:6d:
f8:bd:10:3d:b4:ec:0f:ce:b1:15:8f:14:ed:02:c7:
30:25:54:ba:c4:5a:87:c4:4c:63:d9:6a:b1:9d:3a:
65:13:02:e5:16:3d:92:ab:79:3d:bb:5d:c6:3a:2b:
fa:c1:6f:a3:a0:b8:bb:1e:1c:4c:21:26:20:70:ff:
ee:23:da:d2:17:2c:c7:a8:c3:6f:22:6a:c7:66:ed:
1a:86:e8:2d:6e:9c:74:f5:38:d2:af:e4:13:73:a2:
f3:65:48:63:56:e0:43:18:ce:68:2b:a5:ef:ed:d8:
f2:f3:a0:dd:27:44:4c:af:9b:10:1d:26:ba:d4:f7:
4f:6c:91:4e:76:42:d7:21:c9:71:44:3d:aa:4d:64:
fd:fd:f1:e6:2c:c4:81:44:55:2e:d5:72:f3:97:de:
16:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F9:84:4C:26:EF:F1:6A:17:2E:6E:F8:9F:C6:A6:4F:A5:27:1B:60
X509v3 Authority Key Identifier:
keyid:55:99:E5:97:7F:61:E7:3F:30:48:2D:AE:B1:A5:F2:DF:72:D5:ED:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZnll39h5z8wSC2usaXy33LV7UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:99:f7:b8:ba:84:39:87:42:d0:8e:9e:1a:d6:c3:c8:eb:da:
ea:7d:b8:b9:92:bb:5a:e7:a0:57:0f:74:b4:ff:ec:70:a0:e6:
6a:fa:41:be:d9:ed:04:90:fb:04:d0:a2:4a:74:b8:39:13:e3:
c7:a3:0b:ba:53:6e:3a:a7:5b:8f:5d:a8:53:4c:af:08:5f:17:
14:3c:23:66:aa:11:a2:15:2d:d3:ff:28:91:82:8a:05:92:ab:
f8:3f:9b:6b:62:ed:7e:10:a2:f9:e2:d6:51:84:36:ba:39:24:
0e:0d:b2:48:c1:ad:c2:81:6d:cb:34:61:81:b1:fe:f0:c0:26:
10:8f:80:99:bb:3d:37:67:f7:69:b5:32:cc:e5:96:e2:3f:c0:
3f:36:61:e8:1d:8c:51:c0:40:46:64:f3:45:e5:c8:fc:31:ab:
38:1c:1f:89:95:ef:9c:5b:32:7d:8d:13:6f:3f:52:91:7b:fe:
8d:bb:99:77:8b:d0:3f:a2:62:9c:4e:a2:43:be:5e:50:39:87:
85:48:86:0a:dd:a3:86:f2:40:18:e9:0d:22:22:39:92:6f:7a:
88:a9:a9:40:83:5c:f0:f2:2a:8e:f2:15:2b:d2:69:01:b4:5d:
de:44:0f:39:4f:f8:95:13:d4:58:33:02:60:98:ee:c7:11:2b:
4f:ac:3d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:58 2025 by rpki-client