Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
File: VZhirROQ5Nv4grUie8kzUPLYBxM.mft (raw, json)
Hash identifier: BzSPGALtCAolzGZ12x8tu82817qtjpQx5B+uEyGM+us=
Subject key identifier: D3:65:D0:21:CB:DB:57:8E:DB:81:EE:E0:12:6C:40:A2:68:B0:95:F2
Authority key identifier: 55:98:62:AD:13:90:E4:DB:F8:82:B5:22:7B:C9:33:50:F2:D8:07:13
Certificate issuer: /CN=559862ad1390e4dbf882b5227bc93350f2d80713
Certificate serial: 019924438D7CAC5681C56DA98FEAF0CC8F97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZhirROQ5Nv4grUie8kzUPLYBxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
Manifest number: 07A1
Signing time: Sun 07 Sep 2025 13:00:30 +0000
Manifest this update: Sun 07 Sep 2025 13:00:30 +0000
Manifest next update: Mon 08 Sep 2025 13:00:30 +0000
Files and hashes: 1: VZhirROQ5Nv4grUie8kzUPLYBxM.crl (hash: uIHtP98qPxCkwSzUJlNAKCVmy+RB0YQedeS3n1Yqe+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZhirROQ5Nv4grUie8kzUPLYBxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:43:8d:7c:ac:56:81:c5:6d:a9:8f:ea:f0:cc:8f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559862ad1390e4dbf882b5227bc93350f2d80713
Validity
Not Before: Sep 7 13:00:30 2025 GMT
Not After : Sep 8 13:00:30 2025 GMT
Subject: CN=d365d021cbdb578edb81eee0126c40a268b095f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e3:18:f7:18:bb:92:42:3c:8f:28:10:99:0a:
71:ba:fc:32:50:b0:09:c7:42:8f:4f:e0:f1:55:a6:
2b:14:69:7c:ba:dc:04:35:1a:84:30:3c:97:9c:c5:
52:18:a6:a3:49:04:14:1a:39:63:12:fc:09:29:c3:
c7:78:5b:e2:2b:b6:b4:48:bf:80:9b:85:97:49:33:
82:d0:e1:55:3f:8c:39:88:9d:39:cf:b6:19:46:8b:
9d:22:ad:e5:ac:ce:2e:2b:ba:72:86:67:87:fc:e9:
2a:cf:60:55:d1:74:f1:3d:05:7b:14:2f:6a:5c:4c:
99:9c:47:02:27:7a:4f:dc:d2:2c:50:96:b8:7b:19:
51:b0:13:00:77:16:81:8e:ff:c4:33:72:91:7a:5c:
23:63:77:a7:d5:e4:f5:f7:db:b7:0b:82:2a:85:d0:
83:a7:d8:57:01:ca:09:39:d8:4e:65:e9:ff:e9:be:
33:0a:00:3b:45:0b:1e:b7:c5:16:84:ac:16:2c:8b:
a8:54:48:3f:e0:b9:52:ae:f9:cc:3e:6c:48:c4:3e:
04:be:fe:79:51:42:02:37:28:c5:c6:27:9c:74:c3:
24:db:c1:ce:34:03:88:91:a0:bc:83:ef:05:0e:c4:
58:e9:06:e9:62:ae:41:25:c4:24:54:84:e4:27:84:
53:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:65:D0:21:CB:DB:57:8E:DB:81:EE:E0:12:6C:40:A2:68:B0:95:F2
X509v3 Authority Key Identifier:
keyid:55:98:62:AD:13:90:E4:DB:F8:82:B5:22:7B:C9:33:50:F2:D8:07:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZhirROQ5Nv4grUie8kzUPLYBxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:38:c4:79:c3:75:12:62:91:84:e3:92:86:cd:73:c0:67:70:
b1:a9:43:c9:c4:3d:c8:7c:51:d3:0b:ae:3e:90:f7:12:8d:51:
71:46:52:cd:b9:5e:e3:de:93:ab:d0:83:b6:fc:50:7b:79:57:
dc:96:dc:e6:34:7f:28:41:b0:e9:d9:40:8f:dc:f7:a9:3f:b6:
85:7e:96:d4:f3:6a:a7:f9:2a:71:aa:f1:e6:07:ff:21:6a:0d:
ba:44:a1:14:48:c5:55:06:15:77:d2:80:f2:4a:01:ad:4e:46:
8b:90:96:eb:32:28:45:15:de:e6:c6:4b:88:06:b2:b7:7b:6f:
1a:51:c5:21:c1:32:cc:c9:df:e3:56:92:ee:c0:9d:99:c5:c5:
bc:bf:c2:5c:27:93:2f:08:07:29:28:6f:97:af:e8:ac:97:5e:
fe:66:62:19:cb:e1:5d:1e:ed:88:29:52:40:5a:53:a5:3e:91:
c5:c7:03:96:fe:ac:43:1b:8d:f6:62:ec:69:3a:b6:8c:35:e1:
a9:5a:49:13:4b:fe:26:e2:ae:70:28:5b:21:14:b6:47:e7:46:
de:e1:94:3d:08:53:0d:aa:fb:52:9d:89:37:8f:48:d2:a2:36:
a7:6b:73:8f:79:27:ff:b5:12:80:6b:c7:d7:8a:5b:c7:6a:8b:
1a:b1:98:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:37:07 2025 by rpki-client