Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
File: vln_z7TGm3nZrNy-apTbidUjYI4.mft (raw, json)
Hash identifier: Ku5j40v4XD5cTKcTJ+lCp2nibLHTo4ehqznM3wiUWYU=
Subject key identifier: 09:C2:C9:05:0B:17:18:31:47:93:35:CA:CA:B4:29:B5:88:6F:D1:02
Authority key identifier: BE:59:FF:CF:B4:C6:9B:79:D9:AC:DC:BE:6A:94:DB:89:D5:23:60:8E
Certificate issuer: /CN=be59ffcfb4c69b79d9acdcbe6a94db89d523608e
Certificate serial: 0196741DE365837D6889F672E17166D52214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
Manifest number: 07A6
Signing time: Sat 26 Apr 2025 22:00:37 +0000
Manifest this update: Sat 26 Apr 2025 22:00:37 +0000
Manifest next update: Sun 27 Apr 2025 22:00:37 +0000
Files and hashes: 1: vln_z7TGm3nZrNy-apTbidUjYI4.crl (hash: 3Un01jzm+JTvRGYk9Ti3h43K4Qpfbbqu0wOn8QcuylM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:e3:65:83:7d:68:89:f6:72:e1:71:66:d5:22:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be59ffcfb4c69b79d9acdcbe6a94db89d523608e
Validity
Not Before: Apr 26 22:00:37 2025 GMT
Not After : Apr 27 22:00:37 2025 GMT
Subject: CN=09c2c9050b171831479335cacab429b5886fd102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f0:3d:71:77:8d:36:e6:a8:18:d4:22:08:0b:
81:44:d1:18:04:49:10:28:06:34:17:0a:88:72:02:
32:3e:4e:b4:c2:e2:23:ec:24:19:10:1f:53:ea:8b:
e1:de:e5:9c:21:1a:25:21:f6:cd:e5:44:15:c5:1f:
a6:a1:90:41:ab:2a:6c:c2:76:85:e0:98:08:da:ed:
4d:43:4d:02:2e:51:35:07:58:8d:3d:4a:e3:75:34:
9d:4b:90:ce:54:b7:1b:8c:5d:68:ad:41:5e:65:70:
06:e8:88:63:1a:b5:28:69:5c:29:05:dc:ec:6d:05:
a2:17:2a:8c:87:28:a6:f4:fd:ee:27:eb:6a:49:46:
f1:7a:58:40:14:82:3e:0d:30:93:d8:ae:fe:f1:30:
f0:1e:26:25:56:5f:8c:0b:7d:06:75:bd:00:c1:eb:
0e:fb:50:e4:a0:77:d3:c7:de:35:90:2c:a6:54:1c:
38:10:05:d2:de:c3:08:41:21:5f:3a:5d:c1:e9:9d:
f0:02:bf:98:d4:05:8c:9b:4b:33:13:c5:fc:c9:42:
c2:5d:00:3d:b8:ba:7d:39:3f:76:13:4d:a5:d8:a5:
47:b9:a2:86:ab:f5:06:07:5c:c8:2a:2b:a3:b1:08:
ed:94:a0:d1:ed:2d:8a:8a:7a:cc:24:95:f3:92:77:
6a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C2:C9:05:0B:17:18:31:47:93:35:CA:CA:B4:29:B5:88:6F:D1:02
X509v3 Authority Key Identifier:
keyid:BE:59:FF:CF:B4:C6:9B:79:D9:AC:DC:BE:6A:94:DB:89:D5:23:60:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:3a:12:40:c5:c7:d7:55:c8:ca:57:3c:84:a9:fe:df:51:07:
4d:2e:9a:36:9f:01:6c:63:ce:69:84:6d:b4:e5:ab:08:70:6f:
52:54:7f:78:fd:37:7b:76:a4:b8:07:12:aa:8d:7d:91:55:4e:
d9:0c:ae:65:b8:a1:91:55:5f:cf:67:c8:1f:9b:e4:e1:8f:6a:
d8:ab:08:6d:81:e1:bc:5a:77:bc:b9:3d:39:bb:61:20:46:1a:
cc:98:0c:ce:e9:6c:d4:c8:61:2c:43:00:77:c2:1e:9f:ef:34:
cb:e7:fb:1c:9b:1f:c0:30:ae:70:96:f3:4f:e6:f3:44:13:40:
24:dd:79:fe:8b:17:b3:2d:87:8d:44:bd:98:4a:8e:58:14:b1:
d9:be:2d:35:20:84:9f:66:b4:f0:0d:06:9e:bb:cc:81:49:39:
bb:fb:75:a7:a3:26:2a:d2:6b:2b:6e:75:bd:57:d6:91:a5:d2:
80:9d:da:12:48:93:4b:a1:9d:79:c5:12:e3:c7:88:b6:a5:ee:
dc:4c:72:f6:67:e6:73:03:5c:58:07:80:3d:1c:10:21:96:8d:
14:c6:8b:0a:b0:64:74:19:85:e2:88:5d:a0:81:88:b7:0c:8b:
4b:d0:16:35:33:d6:ad:bf:ea:fe:b6:72:e4:7c:f1:5b:80:f6:
6c:d2:3a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:49 2025 by rpki-client