Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
File: Vzm709YFZftZWALsfGl-ohq9l-Q.mft (raw, json)
Hash identifier: qe7+In6NUFUoWurHOqyXwBC/3/gRXJLwSxF1/nQfkLQ=
Subject key identifier: CD:4C:B5:8D:A6:B1:2F:9B:E8:15:74:88:D8:47:BB:96:93:A3:21:10
Authority key identifier: 57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
Certificate issuer: /CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Certificate serial: 01976CCF974FCE87021AC853F24F645219F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
Manifest number: 069D
Signing time: Sat 14 Jun 2025 05:00:33 +0000
Manifest this update: Sat 14 Jun 2025 05:00:33 +0000
Manifest next update: Sun 15 Jun 2025 05:00:33 +0000
Files and hashes: 1: Vzm709YFZftZWALsfGl-ohq9l-Q.crl (hash: Yvs2eVg+dHdzp3DxE2cfkoSak4xCs5AFpLlffHq6Lec=)
2: gAmwtWdBAiGd9eGeDhh_4U76Qd4.roa (hash: dWZpajXQdBvyOcKFRctLEmEP4L6KG6ufnnlUSRMSxks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:97:4f:ce:87:02:1a:c8:53:f2:4f:64:52:19:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Validity
Not Before: Jun 14 05:00:33 2025 GMT
Not After : Jun 15 05:00:33 2025 GMT
Subject: CN=cd4cb58da6b12f9be8157488d847bb9693a32110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:57:e0:a5:2b:eb:33:09:0d:e9:93:66:62:69:
1f:09:12:14:d7:da:73:c2:e8:3a:10:9b:26:fb:b2:
f6:f2:7d:6a:0e:bb:f0:f8:99:8f:62:7f:1f:b4:12:
ca:4c:74:be:42:ab:0a:bc:b3:18:71:cc:4d:15:2f:
53:6f:5a:81:96:87:36:69:54:bb:72:4a:f5:f8:26:
6a:f7:62:14:ca:0f:53:e6:ce:0a:3e:d2:8d:45:49:
d4:40:25:8c:76:78:0d:be:2f:74:db:9c:f8:5b:a3:
39:3c:ba:d6:1b:29:45:81:04:7e:d0:a0:f4:ee:df:
9a:8d:94:bf:6b:01:10:e8:72:61:53:19:11:81:ad:
c3:48:7e:54:7c:7a:bb:9f:0f:81:74:10:1c:7c:e2:
97:e8:84:97:ae:db:08:a0:13:ef:b1:b0:45:07:39:
16:90:b1:53:1c:0b:44:b3:fd:b9:59:5b:ff:ce:62:
b2:88:3a:e9:e6:98:71:43:6c:93:c5:0d:18:d2:9c:
fd:a4:56:4c:25:ef:58:db:d3:93:1b:b7:b0:59:be:
18:c0:ea:78:04:89:b7:7b:77:45:d2:d6:51:a8:85:
91:1a:12:ff:fc:ac:9f:57:b8:0d:88:a9:36:55:05:
20:28:f6:66:3d:19:bd:f7:3f:c7:0f:1c:ea:0c:2c:
e1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4C:B5:8D:A6:B1:2F:9B:E8:15:74:88:D8:47:BB:96:93:A3:21:10
X509v3 Authority Key Identifier:
keyid:57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d6:73:b3:63:a7:ed:e3:0e:2b:51:a4:f4:7f:34:76:70:29:
f6:ef:21:77:8c:c9:0f:9e:92:ee:da:b4:00:53:7c:fc:2c:03:
70:f5:d3:8d:8e:4b:c3:11:2c:7a:45:0f:fe:0d:d6:f1:13:ad:
3c:eb:44:b0:7d:85:30:c6:91:50:78:78:62:4c:20:c4:6c:7e:
13:71:ba:2f:35:a6:61:a9:41:62:06:6f:af:a4:11:a7:dc:bc:
5f:8b:02:53:c3:90:3a:55:88:54:d2:87:75:19:c5:81:16:d2:
4c:e5:02:e2:ee:2d:0f:e0:9c:22:64:7c:d8:45:00:37:6c:d6:
8a:62:03:5a:1f:27:87:0a:26:fc:90:73:c2:3d:bf:41:24:e0:
8b:ae:eb:82:5a:7c:ad:3c:4a:c0:0b:2f:e0:7c:d4:57:ab:3e:
8b:7f:2e:d4:8d:a8:b3:5c:f2:03:1e:e9:3f:d7:9a:3b:33:8e:
21:b0:59:a0:3d:37:73:e5:67:88:36:ff:97:d1:68:69:50:40:
00:f3:67:a2:2b:30:9c:f5:73:9b:53:e4:96:9d:5c:0a:a3:6e:
0f:4e:b6:3e:ee:91:43:42:26:85:6c:31:7c:0e:f8:73:35:3c:
ec:9a:91:76:5b:a9:1b:46:23:ff:d1:83:17:a9:32:4a:08:9f:
61:ce:87:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:15:30 2025 by rpki-client