Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
File: VzDFDI_UStGWvxBX7ipvpAQcfk4.mft (raw, json)
Hash identifier: 8utlgL7YLp7EzqHTZRrTwUzmq8VwSOd0b42AuN87Uy0=
Subject key identifier: CA:2F:A2:E4:08:71:EE:7F:F6:76:10:24:C9:70:E2:4B:BA:74:6A:C4
Authority key identifier: 57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
Certificate issuer: /CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Certificate serial: 019921B27A412825D223BD5F4182FB1F2350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
Manifest number: 0AD1
Signing time: Sun 07 Sep 2025 01:02:48 +0000
Manifest this update: Sun 07 Sep 2025 01:02:48 +0000
Manifest next update: Mon 08 Sep 2025 01:02:48 +0000
Files and hashes: 1: VzDFDI_UStGWvxBX7ipvpAQcfk4.crl (hash: ifit2TCLuPTrVD+6k4MIzUaeUk4btZQCX/yH4zhpu3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:7a:41:28:25:d2:23:bd:5f:41:82:fb:1f:23:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Validity
Not Before: Sep 7 01:02:48 2025 GMT
Not After : Sep 8 01:02:48 2025 GMT
Subject: CN=ca2fa2e40871ee7ff6761024c970e24bba746ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:df:b6:a9:17:f4:4a:15:79:24:8c:dd:84:5e:
f9:57:42:08:d9:bb:6d:b4:6f:79:dc:3f:3b:0a:cd:
79:67:c9:be:e6:22:c7:51:e4:f6:85:8b:5c:2d:15:
de:07:61:d4:2c:03:ea:ff:6a:bb:89:50:97:c6:61:
d9:0c:0a:a1:1e:5a:9c:20:68:a4:7b:f9:77:cf:b5:
6d:c0:56:c1:c3:ce:28:df:e6:bf:30:1d:26:bf:f7:
ea:07:03:0a:b7:68:ae:e4:3e:0b:f9:b2:c7:6e:1a:
28:34:3a:27:f7:22:75:07:23:cf:f6:28:c2:32:79:
ed:e3:7c:73:43:0f:02:2b:fc:9d:94:2b:d3:80:c5:
e6:b7:af:15:44:72:b4:ac:ea:bb:3a:cd:da:a3:9a:
12:1d:d9:8c:7b:fe:1d:dd:81:90:dd:ba:42:48:d5:
f3:10:d5:e6:13:f6:c9:ab:f1:f4:26:73:e6:64:28:
81:9e:51:e7:03:bd:32:4e:c3:98:84:c4:67:2d:9c:
fd:bb:f9:56:42:60:00:14:d9:e5:f3:81:1c:e8:09:
ca:db:be:bf:d0:d5:c2:5a:5c:15:20:54:68:40:7f:
7f:e9:7e:02:7f:c4:1f:12:b6:bd:e6:79:54:bc:23:
8a:48:b6:59:30:68:ba:63:ba:d9:fe:f4:0a:17:ba:
9d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2F:A2:E4:08:71:EE:7F:F6:76:10:24:C9:70:E2:4B:BA:74:6A:C4
X509v3 Authority Key Identifier:
keyid:57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:2e:78:cd:ad:f3:ce:27:ac:5b:61:f2:3a:8e:d6:ec:75:03:
47:8e:0e:28:2a:74:ad:b0:6b:57:d7:37:32:18:38:62:6b:3e:
a8:9e:14:76:f2:68:03:d9:f3:9a:32:28:34:24:2b:a3:1c:c1:
d4:f8:6b:03:66:2c:36:ba:a5:47:13:dc:5c:6d:e7:e6:be:dc:
df:95:92:ec:71:5c:36:9a:e1:9a:60:14:1f:3e:2f:df:b0:aa:
45:e3:a2:3e:55:92:54:e8:cb:19:bc:6f:2e:c6:5f:13:ca:2e:
2c:60:e8:df:98:8b:2a:a3:29:41:ab:bc:37:14:7d:b7:19:2b:
55:b8:9c:e6:c7:3a:9c:7f:34:54:d8:11:4e:d5:14:70:b4:0e:
32:f9:5b:a5:a3:18:fa:c8:89:18:9a:06:57:2d:b6:4a:7c:0c:
fe:a3:fa:84:ac:2a:df:fc:13:1f:cc:cf:92:4e:d3:4e:aa:62:
f0:5f:ab:ac:07:d3:c6:59:12:62:49:ae:5c:be:80:ed:5d:5b:
6b:ce:0a:cd:09:12:9f:3f:9f:8d:c5:8f:44:03:3e:c7:c7:a1:
7c:21:9e:b7:ea:13:27:91:9d:8b:c5:81:14:ce:7a:dc:42:27:
2f:e0:33:b9:62:1c:ba:98:5e:36:67:2b:bd:7e:b7:1a:ec:d3:
d9:eb:16:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:29 2025 by rpki-client