Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
File: VZhirROQ5Nv4grUie8kzUPLYBxM.mft (raw, json)
Hash identifier: WMaCvXmN2dPPiDmZ0lOhC6lXp+Y6zRlBs29l9VVLMSk=
Subject key identifier: 24:78:19:69:04:BE:6F:1A:C0:3F:FF:9E:8D:39:79:A8:94:71:92:E7
Authority key identifier: 55:98:62:AD:13:90:E4:DB:F8:82:B5:22:7B:C9:33:50:F2:D8:07:13
Certificate issuer: /CN=559862ad1390e4dbf882b5227bc93350f2d80713
Certificate serial: 019659B9AFED19AE4BDE53639C21AD20F95B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZhirROQ5Nv4grUie8kzUPLYBxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
Manifest number: 062F
Signing time: Mon 21 Apr 2025 19:01:03 +0000
Manifest this update: Mon 21 Apr 2025 19:01:03 +0000
Manifest next update: Tue 22 Apr 2025 19:01:03 +0000
Files and hashes: 1: VZhirROQ5Nv4grUie8kzUPLYBxM.crl (hash: ZmVv4DOxsOaKkg8ASCpkh6Wv1E7TeKZT3m3S79w7srI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZhirROQ5Nv4grUie8kzUPLYBxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:b9:af:ed:19:ae:4b:de:53:63:9c:21:ad:20:f9:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559862ad1390e4dbf882b5227bc93350f2d80713
Validity
Not Before: Apr 21 19:01:03 2025 GMT
Not After : Apr 22 19:01:03 2025 GMT
Subject: CN=2478196904be6f1ac03fff9e8d3979a8947192e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:60:11:42:1f:f3:59:0c:ac:52:e2:40:02:4b:
1c:e0:45:81:41:cb:a4:9c:41:d2:b8:4d:19:f4:ed:
49:0a:62:d9:6b:8c:65:2c:25:27:06:25:07:49:22:
42:fe:14:73:95:25:8a:08:9b:29:6a:4e:92:af:cc:
1d:23:59:73:2b:9e:26:16:93:c1:88:97:d4:24:54:
f5:f0:d8:7f:5c:1d:d9:44:a7:22:51:36:77:89:aa:
a4:e5:30:01:d6:96:0f:b6:a4:91:16:d6:39:06:7e:
46:a0:5e:fb:4f:52:76:d5:ec:ed:a9:86:36:77:ae:
d2:bd:85:cb:c3:1d:c0:38:6d:13:29:f4:2a:3e:e2:
75:7d:f4:c6:75:f1:d5:4b:b2:35:0d:cc:5d:1c:bc:
61:b8:2a:fd:57:a1:7a:8c:07:73:b8:53:26:97:2f:
1c:70:06:7b:e3:cc:70:38:f6:1c:f1:c6:b8:a9:86:
5d:22:ed:6f:01:1d:c0:83:3f:3a:46:59:34:e8:8e:
e4:b0:dc:f8:05:fe:71:cb:46:59:af:0e:54:b5:fd:
fc:1b:dc:26:02:7a:0a:b8:e1:f9:41:f0:23:99:67:
87:1a:47:00:cc:07:99:57:e0:9e:83:21:15:ce:99:
39:97:2e:6b:cd:7a:a9:66:c5:a4:7a:4e:f1:f4:ae:
d3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:78:19:69:04:BE:6F:1A:C0:3F:FF:9E:8D:39:79:A8:94:71:92:E7
X509v3 Authority Key Identifier:
keyid:55:98:62:AD:13:90:E4:DB:F8:82:B5:22:7B:C9:33:50:F2:D8:07:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZhirROQ5Nv4grUie8kzUPLYBxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a2:d7:ec:3d:37:1a:9c:7e:a7:a3:fb:19:c7:b9:60:3b:96:
e8:8c:a3:7f:e8:71:ef:1f:02:ef:8e:a9:88:d0:40:50:a0:ee:
fd:ce:13:41:27:0f:a4:0d:2c:bb:96:79:eb:5c:be:d7:a5:55:
66:88:7a:05:8a:fb:91:d1:56:88:19:e2:45:3c:c7:c8:df:e0:
3f:0b:e8:1f:2a:eb:90:5a:71:c6:8c:67:13:43:b7:1d:08:04:
3e:0c:28:c5:85:f5:63:fb:9c:f4:dc:56:d5:8e:b5:d0:ea:6b:
b7:c0:38:b9:cd:63:c8:11:4e:a3:ca:92:94:64:d6:3d:75:80:
4c:48:e6:79:79:02:c4:c2:e1:9f:83:ea:ad:b5:c8:4f:fa:84:
b9:23:f2:ee:ed:d8:9c:4a:b2:f9:98:08:be:2e:c5:cb:3a:06:
e3:77:b6:5e:9d:01:64:b6:72:89:b3:a9:91:61:9f:e0:23:67:
31:1c:d9:dd:47:42:3c:8b:24:00:ba:38:8c:40:8b:95:6c:5a:
0f:ab:9c:b3:82:a7:ae:18:22:1d:76:46:48:ed:ad:a1:27:fc:
8c:cb:4e:dd:7f:28:62:15:9e:f9:3b:84:ae:9d:31:0c:14:66:
0b:44:35:24:fd:9b:83:bb:03:c6:4c:ce:80:db:a9:39:ad:02:
73:99:68:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:58:38 2025 by rpki-client