Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft
File: vzrHIKEXt01NE8Jj95R3kp7btLw.mft (raw, json)
Hash identifier: /jvDvTjlYRhIfcnCp9J3Bk9E6K3cWqO0GWbcz5CeGL8=
Subject key identifier: 3F:08:B4:7E:39:22:5D:FC:69:7E:50:EB:1E:A9:53:C2:42:69:66:10
Authority key identifier: BF:3A:C7:20:A1:17:B7:4D:4D:13:C2:63:F7:94:77:92:9E:DB:B4:BC
Certificate issuer: /CN=bf3ac720a117b74d4d13c263f79477929edbb4bc
Certificate serial: 0196C5DEF4F8015FA3B4FA8BF54BE82191FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vzrHIKEXt01NE8Jj95R3kp7btLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft
Manifest number: 0322
Signing time: Mon 12 May 2025 19:00:45 +0000
Manifest this update: Mon 12 May 2025 19:00:45 +0000
Manifest next update: Tue 13 May 2025 19:00:45 +0000
Files and hashes: 1: vzrHIKEXt01NE8Jj95R3kp7btLw.crl (hash: QEUQ8SnzoftPODTZUlQBmcSKOEniQ66JBPDG17rNjKk=)
2: y3g1z7Zmigqej1DGQ1gx3ilZaM8.roa (hash: ce+FeJaNssRXQv9hff7wkEZwcN/xUnX9DV6JIGk2oTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/vzrHIKEXt01NE8Jj95R3kp7btLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:de:f4:f8:01:5f:a3:b4:fa:8b:f5:4b:e8:21:91:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf3ac720a117b74d4d13c263f79477929edbb4bc
Validity
Not Before: May 12 19:00:45 2025 GMT
Not After : May 13 19:00:45 2025 GMT
Subject: CN=3f08b47e39225dfc697e50eb1ea953c242696610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:42:f7:46:79:02:b4:13:d0:fe:27:2b:cb:70:
52:cd:68:d8:fc:db:93:75:3a:83:8e:90:78:f2:b1:
55:71:2f:91:38:aa:d7:aa:ec:78:6e:46:81:7a:34:
61:a3:d3:ec:17:e1:61:59:3b:95:29:d2:99:49:62:
b9:bf:38:ff:73:1d:66:7f:2a:5a:46:e2:20:fb:80:
11:ad:fc:1d:69:c7:e5:2f:16:52:73:fd:32:f3:be:
f2:d2:e5:27:19:69:f2:f0:11:2c:29:17:3a:ae:6b:
6c:7b:d4:7b:72:00:16:85:85:16:8d:14:17:26:aa:
31:20:28:97:9d:ff:83:30:f5:5f:68:a9:1b:cc:53:
cc:3c:bc:e9:33:5c:bd:65:fd:14:3d:37:cb:36:b0:
e0:5e:b6:1f:50:08:b1:55:25:a8:90:72:19:c0:ba:
61:a6:90:e5:a3:a3:6f:7d:13:59:76:8e:fb:59:e1:
5c:ea:c8:11:d8:64:bb:ae:e3:45:2c:3b:07:1d:48:
56:a8:8c:94:a8:2d:65:7d:d1:1f:1f:7f:91:6b:83:
8f:85:f3:0c:fc:59:47:a6:a2:f6:fd:76:c9:7b:5f:
d2:b5:33:2e:3f:a4:03:38:df:ae:b1:a2:43:59:e2:
cd:31:d1:80:d9:e9:84:6d:9a:3d:dd:1a:f2:27:83:
ec:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:08:B4:7E:39:22:5D:FC:69:7E:50:EB:1E:A9:53:C2:42:69:66:10
X509v3 Authority Key Identifier:
keyid:BF:3A:C7:20:A1:17:B7:4D:4D:13:C2:63:F7:94:77:92:9E:DB:B4:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vzrHIKEXt01NE8Jj95R3kp7btLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:47:d9:07:ee:5e:b9:ee:ad:4e:36:8e:da:10:de:26:08:57:
db:0f:06:ab:03:7c:9a:45:43:cb:fb:60:57:cd:10:30:6c:f2:
df:74:f1:c4:9d:e5:95:28:c6:d5:ac:7d:a9:a1:2c:b1:e8:cd:
f8:4c:0d:0c:9a:ca:f9:6d:e2:0b:68:71:1a:45:69:a0:b1:5a:
3c:da:c8:34:ac:46:76:f8:44:71:68:2b:30:48:9e:b9:15:b7:
7d:cc:91:a4:77:0e:e5:28:7a:a9:20:4d:c2:00:e0:8e:ad:58:
95:51:f9:42:4c:f7:a3:76:ab:8b:fe:6a:bd:5a:a8:cc:65:3d:
6e:76:92:fa:b6:2a:d4:ad:ff:ba:65:5b:42:af:42:0b:ea:0e:
e1:ad:67:78:97:8b:15:aa:7c:5e:73:38:28:dd:2f:5d:50:63:
e3:64:82:22:d2:68:bf:2e:c5:16:2c:1c:c3:dc:e2:48:b3:aa:
17:0d:48:e0:f7:5d:b8:37:83:2a:b8:e6:66:1b:01:bc:d1:d4:
96:fa:55:38:5e:84:af:5e:f2:5e:60:69:de:c0:b0:e7:ba:76:
dd:ab:13:34:a4:46:f2:f1:cf:43:d7:19:08:05:53:7e:71:05:
fc:4f:f3:3f:88:51:02:6c:31:2f:2f:c5:a7:e1:2b:e4:66:f8:
00:e1:bd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:12:51 2025 by rpki-client