Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
File: VZNJZEMjMV-AbcZMpNntlVd2J1c.mft (raw, json)
Hash identifier: L8sdFmC1enRVZhfsHCwPCTeOlSgkESY95jcPEqrdtKA=
Subject key identifier: C8:EF:FF:4C:A8:31:3B:FE:47:59:7B:AA:BB:1E:3C:7F:69:4B:DF:CD
Authority key identifier: 55:93:49:64:43:23:31:5F:80:6D:C6:4C:A4:D9:ED:95:57:76:27:57
Certificate issuer: /CN=559349644323315f806dc64ca4d9ed9557762757
Certificate serial: 01984965769BDC8282D7CE969296FADEB9C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
Manifest number: 0A5B
Signing time: Sun 27 Jul 2025 01:00:42 +0000
Manifest this update: Sun 27 Jul 2025 01:00:42 +0000
Manifest next update: Mon 28 Jul 2025 01:00:42 +0000
Files and hashes: 1: VZNJZEMjMV-AbcZMpNntlVd2J1c.crl (hash: yhjNQ44ejcGK1z1ZyrJ0p7sOZRSOuizA2LC8wStJuYw=)
2: ZRax88V5p4U88t_b2oPo8_w8EVw.roa (hash: wbdz2WKZbk8YP6i6XOpsIsE71ar5pDtmK77QBUlEFwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:76:9b:dc:82:82:d7:ce:96:92:96:fa:de:b9:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559349644323315f806dc64ca4d9ed9557762757
Validity
Not Before: Jul 27 01:00:42 2025 GMT
Not After : Jul 28 01:00:42 2025 GMT
Subject: CN=c8efff4ca8313bfe47597baabb1e3c7f694bdfcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:67:b8:59:36:ac:2a:fd:56:46:80:45:fe:32:
42:41:01:e7:3d:02:b9:2a:b5:96:f3:f3:4c:b0:04:
ab:16:78:22:50:74:a8:be:0c:59:d5:12:fd:b2:c3:
5c:ec:b5:56:3e:4c:2e:a8:d4:f3:52:c1:e3:0e:ba:
2e:c5:14:b5:66:2f:5e:47:ac:cc:81:ba:81:68:49:
04:e4:d9:c3:80:37:37:86:be:61:b8:22:dc:38:d6:
69:0b:99:bc:df:96:74:52:aa:ed:6a:34:89:26:50:
87:a0:97:27:8b:f9:32:a5:18:dc:61:e3:3b:5a:f7:
65:a1:6c:2d:ad:70:14:d8:c9:e8:46:0a:bb:2f:f0:
47:58:00:bc:68:74:02:68:e4:bd:9d:64:71:25:10:
6a:03:b9:eb:28:b6:9a:36:eb:65:ec:38:2f:8b:e2:
64:d1:69:60:d1:16:85:c7:de:80:57:41:49:74:df:
91:4c:f2:8a:7c:73:4a:17:b0:eb:d7:50:26:5b:2b:
f4:1a:be:73:2e:49:b4:bc:39:04:08:b2:90:87:9c:
90:03:15:e7:f0:7c:78:28:51:58:1e:94:3c:b2:4d:
3b:f0:46:4e:37:4d:e3:f2:0e:a2:9e:b9:81:35:40:
1b:d9:0e:c0:91:50:91:89:d0:3f:8f:41:41:1c:75:
8c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EF:FF:4C:A8:31:3B:FE:47:59:7B:AA:BB:1E:3C:7F:69:4B:DF:CD
X509v3 Authority Key Identifier:
keyid:55:93:49:64:43:23:31:5F:80:6D:C6:4C:A4:D9:ED:95:57:76:27:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:59:69:c2:67:a5:2b:9e:a8:a4:dc:9f:96:7e:ae:12:3d:60:
3f:9e:7c:26:29:51:72:b0:49:e0:2b:88:92:4e:eb:a1:b5:41:
43:53:1f:15:9b:2d:4d:a9:70:21:8e:79:19:6a:17:da:2d:15:
89:0e:f7:fb:96:ee:46:f2:3b:ba:fb:58:32:af:95:86:12:4e:
d2:a3:66:98:1a:42:d3:41:ba:e6:d3:de:b9:d5:38:6a:40:7e:
8a:70:6b:78:de:e5:81:f3:60:4d:3e:a3:9d:7c:f6:cc:23:a4:
d4:fb:36:42:03:fc:17:e4:28:9b:68:2b:c1:ef:43:8c:c7:72:
5f:f7:fb:e0:f2:c5:1e:e2:c8:e7:12:85:09:38:a6:34:cf:fc:
21:e0:d1:12:fd:06:dc:18:13:e3:12:3d:5e:b7:4e:a4:3f:54:
97:64:c3:bd:66:f9:db:45:6d:e9:9c:d4:1e:f0:92:34:ca:57:
58:09:3a:cc:1c:37:c4:fc:c9:aa:15:d8:04:ba:05:68:aa:5a:
ff:00:ed:ba:d2:15:68:dc:f6:7c:32:ae:b9:46:45:2a:59:f3:
66:89:a2:8f:5e:13:53:f9:73:5f:17:bf:4b:08:d5:fe:4d:0c:
16:9b:2f:34:a8:7f:64:dc:bf:7f:4b:7a:95:6e:27:f4:a1:53:
cd:b6:dc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:41:49 2025 by rpki-client