Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
File: VZNJZEMjMV-AbcZMpNntlVd2J1c.mft (raw, json)
Hash identifier: asPy2tUYpYDLVy4F/2+WRImP4uQhcgowCOIuK4S098E=
Subject key identifier: A5:E5:09:87:5D:F7:1E:2E:E0:3F:56:B0:35:D9:B5:BF:9E:C5:75:6E
Authority key identifier: 55:93:49:64:43:23:31:5F:80:6D:C6:4C:A4:D9:ED:95:57:76:27:57
Certificate issuer: /CN=559349644323315f806dc64ca4d9ed9557762757
Certificate serial: 019679B1F64D1A50C5564DA66A16D455BD66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
Manifest number: 096B
Signing time: Mon 28 Apr 2025 00:00:27 +0000
Manifest this update: Mon 28 Apr 2025 00:00:27 +0000
Manifest next update: Tue 29 Apr 2025 00:00:27 +0000
Files and hashes: 1: VZNJZEMjMV-AbcZMpNntlVd2J1c.crl (hash: CVjgJZvy5hbm1820NPQCE9rONgf1N9UkaERPkF+Y2ts=)
2: ZRax88V5p4U88t_b2oPo8_w8EVw.roa (hash: wbdz2WKZbk8YP6i6XOpsIsE71ar5pDtmK77QBUlEFwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b1:f6:4d:1a:50:c5:56:4d:a6:6a:16:d4:55:bd:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559349644323315f806dc64ca4d9ed9557762757
Validity
Not Before: Apr 28 00:00:27 2025 GMT
Not After : Apr 29 00:00:27 2025 GMT
Subject: CN=a5e509875df71e2ee03f56b035d9b5bf9ec5756e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a3:ab:7b:42:28:4a:48:77:17:ab:81:1f:08:
2c:bb:b8:2c:cf:6d:8f:08:9c:70:fe:c6:f5:b1:8c:
42:90:e7:56:2a:e7:6d:d2:aa:27:cb:f5:7b:e7:a2:
e1:b9:55:4c:54:61:6f:1d:5b:65:12:94:cf:f6:cf:
e8:61:b5:4c:e8:33:c6:0f:bc:cc:96:1f:cd:e5:46:
f7:95:8c:92:fe:2f:96:9d:e0:ca:3d:83:20:1f:a5:
2a:6d:9f:c7:17:0f:fb:17:92:47:40:95:2d:22:2f:
78:f8:cf:a0:7d:7e:79:08:8c:c8:74:9e:0a:5a:18:
ec:b6:b5:7a:37:fa:8f:47:60:74:6e:bd:d8:1c:55:
7f:58:6b:06:fb:b7:eb:c2:9d:1e:13:c4:86:77:34:
8c:30:98:79:cd:08:b3:77:0d:22:89:cb:78:c6:fd:
7f:cc:eb:16:da:60:c8:95:02:99:71:2c:2d:47:59:
06:6e:63:3f:5d:b0:0a:93:03:06:1d:c5:0d:2d:af:
09:2d:fc:1a:7e:98:d7:a5:35:56:9c:e2:d2:cd:af:
fe:27:5a:dc:fa:f0:5c:c0:f2:c8:1d:6e:7e:f7:f1:
c6:01:6f:1e:ba:6e:5f:16:08:d2:1b:84:71:a3:d8:
55:56:f3:9e:bc:1d:7b:45:28:5f:81:14:d5:5d:61:
25:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E5:09:87:5D:F7:1E:2E:E0:3F:56:B0:35:D9:B5:BF:9E:C5:75:6E
X509v3 Authority Key Identifier:
keyid:55:93:49:64:43:23:31:5F:80:6D:C6:4C:A4:D9:ED:95:57:76:27:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:c7:2d:dd:6c:70:0f:b1:29:6a:d4:52:a2:e7:0b:dc:ef:d3:
bf:6c:6b:f2:4c:97:a6:14:09:13:c4:1d:d8:57:eb:74:a5:4f:
29:3a:aa:9c:72:db:fe:e9:04:e1:27:3a:cd:27:a9:cb:cb:64:
89:f4:60:68:ad:9f:a5:ec:88:b2:7a:b2:7f:ea:49:0f:0c:df:
79:03:ed:f9:4a:2c:10:c7:3f:15:fc:32:84:e8:63:08:23:37:
b9:19:70:e2:e6:a2:b8:07:70:3f:b4:24:e9:cd:90:fb:69:2c:
8a:c1:98:7d:38:f2:2e:08:85:94:95:53:2e:26:07:c3:c6:40:
92:f3:9b:50:b1:27:fb:bc:e6:e1:b4:be:78:57:02:1d:43:23:
78:b6:b5:76:d3:fc:11:ce:11:a4:9c:f0:c2:59:ae:e7:b4:9f:
8e:a6:82:81:02:4b:01:ee:5f:d3:21:0c:93:79:ff:1f:40:a3:
3e:4e:43:c1:da:f3:dd:b0:d3:a0:86:92:5a:43:49:d9:63:b0:
84:19:97:6a:dd:1f:f0:3c:ca:e1:17:67:a5:f7:cc:53:91:24:
cc:d5:4b:62:27:10:64:fc:a8:43:4b:6b:09:0b:c2:21:65:32:
b6:cb:4d:ee:89:0f:de:e2:2d:25:6d:2b:3b:20:d2:cb:fe:4b:
16:c5:a5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:58:49 2025 by rpki-client