
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
File: VZnll39h5z8wSC2usaXy33LV7UY.mft (raw, json)
Hash identifier: c7CM8q3d2rtMqD123sEMHnjkuaXZ68IG/EbPPLg0euc=
Subject key identifier: 02:9B:48:EF:0A:94:A4:B4:2E:14:D7:12:56:27:22:08:64:B5:8D:9C
Authority key identifier: 55:99:E5:97:7F:61:E7:3F:30:48:2D:AE:B1:A5:F2:DF:72:D5:ED:46
Certificate issuer: /CN=5599e5977f61e73f30482daeb1a5f2df72d5ed46
Certificate serial: 01974EFC014A9C4DA6FFA88EFCD4981D2D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZnll39h5z8wSC2usaXy33LV7UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
Manifest number: 13FE
Signing time: Sun 08 Jun 2025 10:00:27 +0000
Manifest this update: Sun 08 Jun 2025 10:00:27 +0000
Manifest next update: Mon 09 Jun 2025 10:00:27 +0000
Files and hashes: 1: VZnll39h5z8wSC2usaXy33LV7UY.crl (hash: wfL49JclQI1RnPoeKGao9fsQOKL8HVxZuETERjN8YMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZnll39h5z8wSC2usaXy33LV7UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:01:4a:9c:4d:a6:ff:a8:8e:fc:d4:98:1d:2d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5599e5977f61e73f30482daeb1a5f2df72d5ed46
Validity
Not Before: Jun 8 10:00:27 2025 GMT
Not After : Jun 9 10:00:27 2025 GMT
Subject: CN=029b48ef0a94a4b42e14d7125627220864b58d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a6:c7:af:db:ea:59:02:1f:76:39:80:b5:41:
b8:ec:45:32:32:f9:b8:17:c8:97:a5:c1:d8:37:d5:
5b:4a:c1:30:c8:b8:5d:32:22:d2:6f:03:85:d1:2a:
f7:a9:64:dd:dd:c7:c0:b0:cf:af:7b:fa:f5:0e:a7:
8e:bc:0f:ca:42:56:85:c9:fb:26:2f:19:08:2b:23:
97:6f:58:f1:9d:09:64:a6:7c:4d:9a:0f:bd:21:e2:
a7:c8:1b:73:f3:3f:8d:d5:80:c9:2c:26:fa:7f:4f:
07:6d:b6:48:d4:70:94:eb:96:1e:ea:71:de:c9:0a:
7f:bf:92:fb:de:d9:26:07:90:2b:80:b2:c1:9e:0c:
6c:18:8e:3b:ec:b2:d1:56:b8:b4:5a:40:e2:66:d4:
7e:04:ac:ec:32:35:a3:80:9f:cb:21:ff:7d:52:32:
73:e6:bf:74:f5:41:49:35:c6:3e:24:ab:ac:54:73:
60:3d:54:4e:ac:39:b0:76:18:5f:9a:97:25:27:cc:
5b:df:18:66:5a:98:73:c5:6f:2b:5b:97:e8:5f:4c:
b0:ea:6b:4f:1d:2d:12:78:6e:67:08:e3:e8:14:36:
36:12:5c:5a:bf:2f:b1:a8:a1:1a:c1:2e:f8:79:8b:
b9:53:2c:8e:e4:80:c7:ff:91:41:f9:d4:13:fb:1c:
0c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:9B:48:EF:0A:94:A4:B4:2E:14:D7:12:56:27:22:08:64:B5:8D:9C
X509v3 Authority Key Identifier:
keyid:55:99:E5:97:7F:61:E7:3F:30:48:2D:AE:B1:A5:F2:DF:72:D5:ED:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZnll39h5z8wSC2usaXy33LV7UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:9f:c5:50:e6:30:08:45:73:63:17:88:3c:94:59:dc:25:10:
b1:e9:8e:29:67:69:62:9d:b9:94:e6:44:ed:b0:26:ed:4a:61:
e5:79:07:20:39:5f:cb:fc:2a:a3:e2:ee:0a:27:d5:b2:13:35:
89:d4:ea:08:8f:80:46:4f:dd:8b:59:12:94:a0:f1:65:11:bd:
35:36:c6:ed:3c:07:80:28:20:bc:64:93:42:78:55:bc:32:26:
79:50:cb:be:94:11:7c:10:f1:59:ea:be:aa:e7:33:f5:11:6d:
46:b9:22:5d:70:2c:dc:d9:49:7e:9d:3d:6a:39:d3:bf:09:70:
dd:e3:7f:f2:ea:17:8a:15:63:4d:0b:c2:6a:ee:dd:93:4a:eb:
fe:b2:80:7e:c3:bf:dc:c2:cf:8b:d5:a9:a5:0f:8c:84:24:38:
af:ff:86:ab:a7:c2:97:78:5e:58:25:33:6f:1f:94:b1:95:69:
7a:39:0f:d1:a1:15:f4:7c:51:02:7d:b4:a5:91:59:03:90:3c:
8c:1c:17:62:41:ee:56:32:ab:52:6e:78:33:d6:7a:31:4f:9f:
c1:92:6d:20:59:2b:a0:20:fd:71:3f:66:e9:0f:ad:99:fd:c7:
71:64:2d:a6:1a:11:64:bd:ac:5b:45:bc:e0:11:78:68:76:a7:
91:04:09:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:42:47 2025 by rpki-client