Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
File: VzDFDI_UStGWvxBX7ipvpAQcfk4.mft (raw, json)
Hash identifier: 4RQRfGCscO3eUEwn+zsNRBRo47GFldGj0j8j0+FDscI=
Subject key identifier: 1B:29:36:C9:B6:92:4C:AA:9A:7C:AF:87:7B:4D:D6:89:88:E2:BD:5F
Authority key identifier: 57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
Certificate issuer: /CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Certificate serial: 01976960DB1CB23783119A6BC227DC3AD8C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
Manifest number: 09ED
Signing time: Fri 13 Jun 2025 13:00:44 +0000
Manifest this update: Fri 13 Jun 2025 13:00:44 +0000
Manifest next update: Sat 14 Jun 2025 13:00:44 +0000
Files and hashes: 1: VzDFDI_UStGWvxBX7ipvpAQcfk4.crl (hash: AOK1uPycBMBRQNQWxaCWRzTbIoclnDO55Ocs8Ky+Zwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:db:1c:b2:37:83:11:9a:6b:c2:27:dc:3a:d8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Validity
Not Before: Jun 13 13:00:44 2025 GMT
Not After : Jun 14 13:00:44 2025 GMT
Subject: CN=1b2936c9b6924caa9a7caf877b4dd68988e2bd5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0a:eb:9f:e9:88:99:d2:26:f3:b6:d7:56:b1:
79:e5:66:e1:d2:52:5f:0b:79:62:1e:f5:b2:18:b6:
4d:9c:00:5e:99:e5:49:ec:b2:f5:3f:bf:a6:97:ca:
fa:5e:a7:c1:cb:94:63:94:9e:d9:a7:d7:33:ce:31:
7a:0e:16:ab:b7:8d:c0:78:38:40:c2:a1:08:4e:7a:
9d:ca:d8:8d:60:3c:8b:7f:4d:60:2b:83:e6:53:83:
f3:93:67:e4:ad:d5:25:a3:c6:dd:b8:36:ad:3a:fc:
f9:30:53:ea:da:9b:77:fc:94:6e:96:05:bc:4c:11:
56:ab:08:66:77:ec:ee:5a:66:d2:d4:46:1d:a4:61:
f0:f2:db:ea:56:3b:d1:47:03:7b:38:9c:a5:7b:95:
9c:c7:96:a7:f6:54:fa:51:bc:02:e9:f5:29:90:85:
14:b6:6c:d5:8b:2c:28:fa:c2:c6:93:8b:f0:fa:56:
15:a8:6f:5d:3b:f2:6a:8a:dd:d8:75:01:06:18:cb:
69:ea:08:db:b7:dc:5b:8c:8e:de:e3:ab:e8:a2:d6:
f8:ff:8e:65:49:c9:0d:1d:05:4c:6b:e0:22:4a:66:
ed:e5:dd:fb:41:21:b2:86:6b:a1:74:1f:e3:73:92:
a7:da:43:3f:ca:a3:2a:64:28:ea:de:ab:e4:08:6c:
8e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:29:36:C9:B6:92:4C:AA:9A:7C:AF:87:7B:4D:D6:89:88:E2:BD:5F
X509v3 Authority Key Identifier:
keyid:57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:4b:d3:70:e8:12:55:04:d3:e9:6e:78:d9:73:ec:ca:a3:0f:
27:27:96:1a:62:13:1f:7f:53:8c:52:8d:8c:e9:01:62:b8:9e:
94:9a:70:8a:34:85:69:82:2d:72:84:de:de:ca:8b:8b:63:07:
cd:5c:90:ad:5e:1a:28:8e:b0:9a:3b:fb:70:f2:74:85:2a:4b:
78:52:ca:4c:eb:dc:94:d0:b8:35:1f:75:57:d1:e6:6c:d0:bd:
c5:f5:96:9a:a2:62:72:82:9b:b0:9b:a2:8f:17:e2:cf:97:2c:
69:d6:f3:39:47:b4:b5:93:5a:d6:c3:a1:73:c0:c4:23:9c:a6:
dd:c7:19:eb:24:60:be:42:d8:c6:16:b2:65:53:26:e8:7a:43:
20:1c:cc:d7:20:ab:24:a4:11:83:fc:74:70:75:37:fd:3d:75:
ea:2c:24:8c:dd:e4:38:5c:5a:9e:5e:4a:7d:7d:0d:de:3b:d5:
42:5e:be:18:e0:9f:47:1c:a1:4d:be:53:a5:81:ab:bd:8b:10:
3c:45:b1:2e:60:ca:a5:86:11:0a:7f:cc:16:37:c8:bf:15:38:
f7:0f:ac:dc:f6:eb:f1:f8:72:0a:d7:b1:dc:f7:21:58:c7:6a:
08:c1:c8:68:3e:2c:c8:97:11:ef:97:f4:50:45:46:20:ca:4b:
f5:80:76:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYNscsjeDEZprwifcOtjBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MzBjNTBjOGZkNDRhZDE5NmJmMTA1N2VlMmE2ZmE0MDQx
YzdlNGUwHhcNMjUwNjEzMTMwMDQ0WhcNMjUwNjE0MTMwMDQ0WjAzMTEwLwYDVQQD
EygxYjI5MzZjOWI2OTI0Y2FhOWE3Y2FmODc3YjRkZDY4OTg4ZTJiZDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQrrn+mImdIm87bXVrF55Wbh0lJf
C3liHvWyGLZNnABemeVJ7LL1P7+ml8r6XqfBy5RjlJ7Zp9czzjF6Dhart43AeDhA
wqEITnqdytiNYDyLf01gK4PmU4Pzk2fkrdUlo8bduDatOvz5MFPq2pt3/JRulgW8
TBFWqwhmd+zuWmbS1EYdpGHw8tvqVjvRRwN7OJyle5Wcx5an9lT6UbwC6fUpkIUU
tmzViywo+sLGk4vw+lYVqG9dO/Jqit3YdQEGGMtp6gjbt9xbjI7e46vootb4/45l
SckNHQVMa+AiSmbt5d37QSGyhmuhdB/jc5Kn2kM/yqMqZCjq3qvkCGyOfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBspNsm2kkyqmnyvh3tN1omI4r1fMB8GA1UdIwQY
MBaAFFcwxQyP1ErRlr8QV+4qb6QEHH5OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnpERkRJX1VTdEdXdnhCWDdpcHZwQVFjZms0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9mNTZjMGMtNGFlNy00ZWVjLTljZWQt
Zjc1YzExNjNmYjFlLzEvVnpERkRJX1VTdEdXdnhCWDdpcHZwQVFjZms0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9mNTZjMGMtNGFlNy00ZWVjLTljZWQtZjc1YzExNjNmYjFl
LzEvVnpERkRJX1VTdEdXdnhCWDdpcHZwQVFjZms0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn0vTcOgS
VQTT6W542XPsyqMPJyeWGmITH39TjFKNjOkBYrielJpwijSFaYItcoTe3sqLi2MH
zVyQrV4aKI6wmjv7cPJ0hSpLeFLKTOvclNC4NR91V9HmbNC9xfWWmqJicoKbsJui
jxfiz5csadbzOUe0tZNa1sOhc8DEI5ym3ccZ6yRgvkLYxhayZVMm6HpDIBzM1yCr
JKQRg/x0cHU3/T116iwkjN3kOFxanl5KfX0N3jvVQl6+GOCfRxyhTb5TpYGrvYsQ
PEWxLmDKpYYRCn/MFjfIvxU49w+s3Pbr8fhyCtex3PchWMdqCMHIaD4syJcR75f0
UEVGIMpL9YB2fg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:54 2025 by rpki-client