Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
File: VZhirROQ5Nv4grUie8kzUPLYBxM.mft (raw, json)
Hash identifier: Uw4kpJjadZFdl/klY2km+EEPx0nhOzx8BhARjgOTB5c=
Subject key identifier: FA:1F:BC:1A:B1:53:24:EF:FF:1E:89:E4:33:2F:1D:EC:D5:BE:E2:AF
Authority key identifier: 55:98:62:AD:13:90:E4:DB:F8:82:B5:22:7B:C9:33:50:F2:D8:07:13
Certificate issuer: /CN=559862ad1390e4dbf882b5227bc93350f2d80713
Certificate serial: 019749318C2FEDFB13AFB41FD0AF74D1BE0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZhirROQ5Nv4grUie8kzUPLYBxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
Manifest number: 06AB
Signing time: Sat 07 Jun 2025 07:01:13 +0000
Manifest this update: Sat 07 Jun 2025 07:01:13 +0000
Manifest next update: Sun 08 Jun 2025 07:01:13 +0000
Files and hashes: 1: VZhirROQ5Nv4grUie8kzUPLYBxM.crl (hash: sdHS1HPNsltZtT9Cak+9/X9pCYeEHKOLB9+V3KjvyaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZhirROQ5Nv4grUie8kzUPLYBxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:8c:2f:ed:fb:13:af:b4:1f:d0:af:74:d1:be:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559862ad1390e4dbf882b5227bc93350f2d80713
Validity
Not Before: Jun 7 07:01:13 2025 GMT
Not After : Jun 8 07:01:13 2025 GMT
Subject: CN=fa1fbc1ab15324efff1e89e4332f1decd5bee2af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:73:34:6e:0f:00:1c:9a:f0:93:2c:53:ad:c5:
3f:8c:3a:06:28:9e:de:a3:3d:c1:02:a5:10:05:d9:
23:1c:bc:85:3d:a1:a8:4e:d0:00:29:b3:64:bb:9c:
7f:74:48:e5:2a:f1:cb:c4:f1:da:f6:c8:1b:c1:0a:
2e:31:09:e1:ab:3f:d6:25:72:d7:a3:33:1c:69:4e:
d3:de:01:5a:88:83:99:76:88:d3:32:ce:a1:39:7a:
32:de:01:73:a9:45:1b:b4:45:4d:3c:78:50:98:be:
c8:43:28:d6:59:de:50:d4:66:6a:2f:92:7b:b9:d0:
e7:99:0d:f2:86:e1:4e:2a:6b:d3:ca:99:14:89:eb:
64:33:b5:de:b9:50:36:d6:24:cb:7b:a3:de:61:2d:
63:fe:fb:7d:11:da:80:05:0f:27:79:79:b4:2f:44:
0b:e0:4b:eb:9b:eb:e2:65:58:96:f8:ee:99:7f:c7:
46:d0:05:70:47:08:6d:61:f4:f9:52:d1:d2:e4:66:
d2:0c:52:d3:38:6d:0f:59:19:34:77:0e:b7:94:24:
63:7a:84:3f:dd:47:2f:4a:02:66:33:78:e9:b7:45:
b7:4b:e5:a4:90:ab:c0:79:cf:79:84:93:d7:13:81:
37:8c:9c:0f:a4:1a:29:1a:e7:04:b6:ea:e2:f0:b2:
c6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1F:BC:1A:B1:53:24:EF:FF:1E:89:E4:33:2F:1D:EC:D5:BE:E2:AF
X509v3 Authority Key Identifier:
keyid:55:98:62:AD:13:90:E4:DB:F8:82:B5:22:7B:C9:33:50:F2:D8:07:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZhirROQ5Nv4grUie8kzUPLYBxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:46:20:fd:44:a9:1e:fd:8e:35:29:09:29:c6:55:8c:47:ba:
71:50:13:61:95:5b:82:75:4f:13:74:e7:59:d2:c7:d3:79:25:
ba:7e:f6:fc:de:07:75:e3:0a:ad:c7:4a:db:fb:be:d2:22:0d:
8f:46:c7:6c:91:59:3a:96:2d:4c:f6:33:f5:20:7f:3d:20:b5:
b0:40:99:4f:4e:81:0a:08:3d:66:9f:ab:c0:6a:51:56:33:f6:
eb:59:13:b6:fb:96:73:28:83:5a:45:52:b9:6f:83:4b:7a:5a:
9c:df:e2:e4:71:26:28:eb:ab:e4:0d:3b:5f:4c:70:74:41:4e:
e0:1c:2f:fd:fe:71:27:da:7f:71:e8:9d:e3:17:e5:9d:b5:d0:
ec:63:2c:95:46:3c:75:14:05:40:13:fd:b6:94:66:28:fe:61:
52:1e:85:fa:3b:ea:14:20:a5:36:eb:77:45:37:70:a3:5c:d0:
3e:03:c1:fe:2b:73:ea:d4:72:d3:13:fc:bf:7c:d2:67:5c:e0:
73:ea:05:9c:aa:c8:d8:98:88:67:6a:64:c1:02:02:14:bc:85:
56:b5:74:8b:b3:fc:2a:2d:3c:ca:40:c4:72:8c:69:39:6e:8a:
20:7f:71:7f:84:85:5e:e9:4b:72:98:25:48:18:8e:59:3b:d7:
4d:bf:95:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:59:07 2025 by rpki-client