Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
File: VzDFDI_UStGWvxBX7ipvpAQcfk4.mft (raw, json)
Hash identifier: Ajzj7ZSfgQLTPmWwfSdx5I8R6y5qPTB07jk7FViroSA=
Subject key identifier: 41:9D:93:A0:11:04:4A:04:24:6C:19:2C:67:90:1F:A6:16:A5:00:6C
Authority key identifier: 57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
Certificate issuer: /CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Certificate serial: 0197488D29BE120CC3A1EA620D594BF5D3ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
Manifest number: 09DC
Signing time: Sat 07 Jun 2025 04:01:40 +0000
Manifest this update: Sat 07 Jun 2025 04:01:40 +0000
Manifest next update: Sun 08 Jun 2025 04:01:40 +0000
Files and hashes: 1: VzDFDI_UStGWvxBX7ipvpAQcfk4.crl (hash: d589+lt+YJqbitpBj65HgnEZMlPwvIMuPBEGUDQBTDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:29:be:12:0c:c3:a1:ea:62:0d:59:4b:f5:d3:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Validity
Not Before: Jun 7 04:01:40 2025 GMT
Not After : Jun 8 04:01:40 2025 GMT
Subject: CN=419d93a011044a04246c192c67901fa616a5006c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:61:55:76:ed:ba:0a:ca:f5:cb:70:dc:7d:
72:59:bf:3d:d8:0c:d3:e5:f0:2b:b3:d3:73:5e:b9:
64:34:4d:d3:28:b4:2f:65:99:b8:e7:e3:d6:9d:e6:
14:2e:e6:07:5b:78:b2:d1:41:cf:53:fa:84:e7:94:
79:1f:0b:8f:0a:3c:c2:96:71:f7:d9:8a:0b:f3:ba:
2c:57:fc:88:f5:97:81:de:70:e8:77:86:43:cb:01:
ed:7f:f0:3e:b0:f2:b1:4b:00:17:9f:8f:ca:82:2e:
92:82:03:50:07:1d:3d:5e:90:e9:87:77:86:83:a9:
30:77:01:2f:b7:15:42:d6:c5:53:35:55:6b:77:19:
91:46:03:76:cc:00:36:7e:89:51:2e:2c:2d:9b:6b:
18:08:eb:38:27:d8:df:08:6d:35:eb:22:7b:25:c5:
80:85:aa:e5:0f:a2:c6:04:f1:04:e6:bd:9f:d1:e1:
8d:bd:e9:bc:56:33:b7:21:a2:e5:54:7e:0c:b4:19:
50:c7:f5:f9:0e:07:8b:2a:36:ba:1d:cf:a6:81:bf:
1c:71:b1:20:48:c5:39:3e:95:de:3c:23:95:46:18:
99:bb:ce:81:e6:76:cf:e3:1f:a8:2f:8e:c6:c3:a7:
63:f3:3c:42:a7:40:cd:f4:06:fc:ef:b9:41:20:d9:
1e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9D:93:A0:11:04:4A:04:24:6C:19:2C:67:90:1F:A6:16:A5:00:6C
X509v3 Authority Key Identifier:
keyid:57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:57:74:55:57:68:fb:74:95:c1:c2:1b:d4:e6:bd:8d:ac:75:
72:19:84:91:9e:fd:4b:e4:4b:92:bd:c3:77:90:3e:ee:24:ed:
fa:dc:1b:6a:bd:a1:c7:7a:f9:54:fb:04:3f:43:bf:0f:3b:cc:
83:f9:5f:14:f2:d4:d3:cf:29:60:11:ed:0a:8c:32:a6:91:97:
ad:bc:d2:41:31:d0:a9:95:72:5e:d2:05:ea:66:e0:80:81:a3:
05:8f:5d:e0:1f:6f:7c:f4:92:bb:51:f6:9b:b2:49:d2:d0:59:
6b:0b:2d:64:ff:7c:c9:3d:9a:08:fb:65:f1:03:80:33:48:58:
fd:c5:a4:b5:12:82:df:56:26:21:4d:6b:f3:fd:19:30:c4:cb:
6f:2b:c9:77:f2:8a:58:9b:1a:18:08:b3:a1:c3:07:a1:c7:b3:
24:21:dc:1e:20:30:94:f7:1c:8b:8a:d6:d1:3e:dc:a2:5c:2e:
0a:0f:b1:d7:49:7f:8a:6a:80:41:1f:ab:d5:0d:e8:30:02:fd:
e4:c2:95:82:73:ba:b2:7e:70:15:64:c6:5a:78:a2:ef:a7:c1:
50:1e:2f:5f:7e:34:76:95:18:b5:b7:ec:b8:95:a7:d2:5a:9c:
ea:c4:8a:44:d3:03:40:22:85:d3:6f:c1:24:2d:f9:b6:fc:d6:
76:a7:5f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:06:43 2025 by rpki-client