Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
File: VZhirROQ5Nv4grUie8kzUPLYBxM.mft (raw, json)
Hash identifier: dSzRfv9P48ZCqur4SGzeZj6Vy6O00Ch6gHN0ZO9fN+Y=
Subject key identifier: D4:35:0C:96:34:4A:61:68:AA:D5:D7:42:3B:25:F4:3D:37:53:94:08
Authority key identifier: 55:98:62:AD:13:90:E4:DB:F8:82:B5:22:7B:C9:33:50:F2:D8:07:13
Certificate issuer: /CN=559862ad1390e4dbf882b5227bc93350f2d80713
Certificate serial: 019872983F1E027E4100E877871F64A9D32C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZhirROQ5Nv4grUie8kzUPLYBxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
Manifest number: 0745
Signing time: Mon 04 Aug 2025 01:00:36 +0000
Manifest this update: Mon 04 Aug 2025 01:00:36 +0000
Manifest next update: Tue 05 Aug 2025 01:00:36 +0000
Files and hashes: 1: VZhirROQ5Nv4grUie8kzUPLYBxM.crl (hash: qmwB8V1+h6usWon+skwF+p3uAeO/hc4ofqECFUnDdaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZhirROQ5Nv4grUie8kzUPLYBxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:3f:1e:02:7e:41:00:e8:77:87:1f:64:a9:d3:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559862ad1390e4dbf882b5227bc93350f2d80713
Validity
Not Before: Aug 4 01:00:36 2025 GMT
Not After : Aug 5 01:00:36 2025 GMT
Subject: CN=d4350c96344a6168aad5d7423b25f43d37539408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c2:58:57:0d:6a:19:17:fd:19:38:ff:e1:30:
53:ae:fb:ac:d4:1a:bc:bc:4e:cf:ca:66:76:c9:60:
c2:4d:07:96:45:5c:69:12:20:ed:a1:32:2e:80:d0:
44:19:04:97:7a:94:99:df:5e:28:c5:f3:ce:b7:f6:
72:9c:54:7d:82:3b:53:82:e1:9f:08:7e:48:c0:5e:
ea:73:8d:ff:73:65:24:50:a6:fe:f0:3a:d7:74:02:
bf:03:d8:f3:3f:ae:61:b4:a0:ac:9e:d6:ea:cb:ca:
a6:e5:43:9d:e9:7c:55:d2:72:c6:bb:fe:1c:cb:3b:
90:f6:3b:d8:3f:7c:cf:9b:04:cc:07:7a:77:64:13:
2f:cd:a9:a5:de:cc:34:ce:10:11:af:d1:de:68:ea:
de:82:8b:f2:28:46:c5:3a:79:c1:3c:2c:6d:42:af:
34:c6:b5:fd:89:9d:96:fe:ce:14:66:23:c7:cd:03:
e2:44:2e:d3:61:7d:a1:b0:f6:4c:2f:98:ae:3c:66:
97:89:d3:a9:c1:a3:28:19:1e:2a:86:cf:f3:fc:ae:
da:7e:d7:f7:44:51:e4:9e:2c:20:cc:16:dc:39:18:
3c:75:04:cb:71:fc:57:bb:dd:1b:2b:88:e4:60:7d:
60:c6:c8:86:6c:30:6e:d0:cc:e0:3b:f0:f9:ed:f7:
82:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:35:0C:96:34:4A:61:68:AA:D5:D7:42:3B:25:F4:3D:37:53:94:08
X509v3 Authority Key Identifier:
keyid:55:98:62:AD:13:90:E4:DB:F8:82:B5:22:7B:C9:33:50:F2:D8:07:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZhirROQ5Nv4grUie8kzUPLYBxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:87:95:b6:ca:cc:aa:ce:a3:38:94:d0:0b:5f:75:90:a4:66:
d4:b4:17:8c:70:c4:c8:1a:5e:2b:5d:e9:3d:c9:2c:9f:30:39:
7b:23:e8:bc:97:67:bd:05:69:8d:27:d0:f1:ed:50:c7:73:f4:
c3:44:bf:11:60:66:8d:60:d1:6e:03:cc:07:02:88:ea:b7:65:
d2:30:a6:56:ca:6d:0d:7c:cd:59:11:41:19:e4:e3:9b:84:bd:
9e:af:2c:97:2b:5c:3e:74:b6:4b:9f:07:23:6d:1d:43:09:47:
72:db:70:10:a3:76:09:32:fa:66:6b:1c:78:71:0c:8c:39:53:
09:79:0a:78:e7:b7:4f:bb:2d:4f:2d:15:61:41:95:6a:41:e2:
3d:bf:db:9a:b3:e4:67:1c:8b:13:1b:fe:0d:44:8b:37:da:91:
ca:49:71:72:8e:b1:42:fc:b7:5a:46:91:a3:d4:da:dc:b1:ac:
5f:85:02:43:ae:e3:2d:da:4f:ce:8d:09:c9:de:02:f8:e5:2b:
d1:86:a7:c5:f2:ee:4a:ea:af:34:94:02:01:20:1a:79:46:83:
74:b9:a2:e9:d3:26:84:f5:9c:81:ec:8c:0b:ce:c4:61:c9:a4:
ab:16:3b:0e:4c:83:db:2d:b7:b4:ee:09:f5:35:1b:0a:a2:a8:
fb:93:a3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:43 2025 by rpki-client