
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
File: VZnll39h5z8wSC2usaXy33LV7UY.mft (raw, json)
Hash identifier: qo0T8BAFUdGKDIWblubxwPt1iiP6imqjJuG2dBZxSRs=
Subject key identifier: 80:1B:94:DD:E0:CE:29:DB:64:AE:E7:41:D3:67:C6:05:6B:D6:17:52
Authority key identifier: 55:99:E5:97:7F:61:E7:3F:30:48:2D:AE:B1:A5:F2:DF:72:D5:ED:46
Certificate issuer: /CN=5599e5977f61e73f30482daeb1a5f2df72d5ed46
Certificate serial: 01976BF468618DB51102D9BA99A087825848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZnll39h5z8wSC2usaXy33LV7UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
Manifest number: 140D
Signing time: Sat 14 Jun 2025 01:01:08 +0000
Manifest this update: Sat 14 Jun 2025 01:01:08 +0000
Manifest next update: Sun 15 Jun 2025 01:01:08 +0000
Files and hashes: 1: VZnll39h5z8wSC2usaXy33LV7UY.crl (hash: rZt7hEHDWGys6tioEIjhvC0SYctfKyh3DWgGQ/58g2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZnll39h5z8wSC2usaXy33LV7UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:68:61:8d:b5:11:02:d9:ba:99:a0:87:82:58:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5599e5977f61e73f30482daeb1a5f2df72d5ed46
Validity
Not Before: Jun 14 01:01:08 2025 GMT
Not After : Jun 15 01:01:08 2025 GMT
Subject: CN=801b94dde0ce29db64aee741d367c6056bd61752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:61:7d:a0:4c:40:d8:48:82:4a:79:0e:37:02:
9f:d8:be:8f:b2:d6:c9:09:68:3d:cc:88:1d:a0:64:
e1:9e:f7:d5:03:04:fd:ee:49:9c:0b:a9:8f:56:a0:
e5:e0:e9:c9:ca:d1:4c:ad:b5:15:a3:4d:ee:be:12:
4f:a2:69:b2:78:95:b1:df:66:09:e4:4d:15:ae:ce:
c0:1f:cc:de:3b:ea:e5:f6:54:ea:1e:4e:2a:8d:ef:
8c:53:32:61:80:c4:2b:19:df:63:ae:e0:1f:3d:12:
44:38:45:a5:84:f1:87:09:35:25:4b:da:47:fc:aa:
53:b0:d0:9d:f1:cb:43:18:b0:66:5a:fb:3a:d5:7c:
c1:73:d9:9f:c5:d2:5b:4c:65:48:47:06:a1:c7:fc:
64:4f:bc:38:1c:ce:6d:62:ce:ef:85:59:83:5c:45:
c8:fd:cd:13:4f:d7:22:cd:15:32:a9:8a:0d:15:28:
62:a1:d2:b7:77:f3:c0:e9:e0:df:a4:3e:7e:94:91:
b0:fb:01:a7:6b:5c:bb:b7:aa:37:e5:bf:3f:df:64:
b1:7e:91:59:d4:25:13:08:5d:e7:ac:38:7d:5f:2f:
e4:08:8e:9b:a8:27:29:67:49:6f:7f:4a:db:ca:ba:
11:cc:4b:a5:94:b4:38:de:35:e3:d9:af:23:7c:cd:
89:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1B:94:DD:E0:CE:29:DB:64:AE:E7:41:D3:67:C6:05:6B:D6:17:52
X509v3 Authority Key Identifier:
keyid:55:99:E5:97:7F:61:E7:3F:30:48:2D:AE:B1:A5:F2:DF:72:D5:ED:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZnll39h5z8wSC2usaXy33LV7UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:be:71:d6:a7:7c:7b:4a:4c:bc:70:63:68:c1:42:64:12:31:
32:8b:d1:13:25:63:43:d9:17:d1:16:e4:79:56:ea:53:16:56:
a7:a3:75:02:a6:77:de:eb:0a:90:3f:13:a9:17:61:19:08:2b:
3d:78:30:ea:42:78:3d:af:84:e0:de:d9:0c:bf:79:c6:9e:72:
7f:d8:61:5a:0f:f1:75:80:64:2f:09:f4:6d:13:af:4e:33:d8:
d2:7c:06:6c:77:4f:32:67:1d:3d:04:0c:ff:c9:c8:01:85:a8:
32:79:fc:b9:5c:93:1e:39:ab:36:53:27:e3:35:f0:80:90:79:
d9:21:2c:39:3d:ff:a4:9f:b1:c3:6f:93:4c:23:3a:e4:27:68:
87:2a:88:cc:34:2a:84:7b:f1:25:d3:1f:23:ca:d9:ab:c6:f7:
12:94:d2:6b:f7:87:db:f8:cc:a9:8e:59:88:bb:8d:e7:9a:79:
a2:0d:f0:9f:3a:ac:39:b3:4d:5a:84:47:8a:4b:0f:99:4e:8d:
09:53:dc:e6:d3:0b:02:db:3e:ec:2b:5c:77:e9:49:99:6c:dc:
cb:d5:03:8b:cd:96:7b:cc:1e:80:f6:be:0f:48:28:5d:40:78:
7e:4a:3e:a0:48:8d:a7:83:88:1c:58:12:47:37:0d:56:cd:56:
10:21:d2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:16:49 2025 by rpki-client