Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft
File: vzrHIKEXt01NE8Jj95R3kp7btLw.mft (raw, json)
Hash identifier: QONQPBjMOKgvmDjIpLy1u5OB2uTn4h6hkxg63MllkJQ=
Subject key identifier: D7:A2:D7:27:C8:1E:20:84:FF:70:15:CB:25:31:E9:8C:AC:BD:A3:13
Authority key identifier: BF:3A:C7:20:A1:17:B7:4D:4D:13:C2:63:F7:94:77:92:9E:DB:B4:BC
Certificate issuer: /CN=bf3ac720a117b74d4d13c263f79477929edbb4bc
Certificate serial: 0197B7457D81FE5CF14B4556661B7883D8AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vzrHIKEXt01NE8Jj95R3kp7btLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft
Manifest number: 039F
Signing time: Sat 28 Jun 2025 16:01:13 +0000
Manifest this update: Sat 28 Jun 2025 16:01:13 +0000
Manifest next update: Sun 29 Jun 2025 16:01:13 +0000
Files and hashes: 1: vzrHIKEXt01NE8Jj95R3kp7btLw.crl (hash: BSVSEXz2X1p22W02/8onUCQeKYg4M7eMB6gShPN6ORA=)
2: y3g1z7Zmigqej1DGQ1gx3ilZaM8.roa (hash: ce+FeJaNssRXQv9hff7wkEZwcN/xUnX9DV6JIGk2oTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/vzrHIKEXt01NE8Jj95R3kp7btLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 16:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:7d:81:fe:5c:f1:4b:45:56:66:1b:78:83:d8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf3ac720a117b74d4d13c263f79477929edbb4bc
Validity
Not Before: Jun 28 16:01:13 2025 GMT
Not After : Jun 29 16:01:13 2025 GMT
Subject: CN=d7a2d727c81e2084ff7015cb2531e98cacbda313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d2:fc:da:35:50:de:e9:31:ad:3b:8d:46:e5:
d8:84:eb:24:00:7b:a9:3d:44:7b:86:aa:03:4b:18:
ac:63:e3:bc:86:c3:f7:aa:8d:25:e1:ce:8f:aa:52:
fb:30:b1:8b:01:d8:ee:c2:8f:26:5d:89:1c:ab:35:
1a:88:60:50:ac:b1:b4:20:41:24:dc:9f:fd:4b:3c:
1c:24:b6:8d:9d:d0:ae:23:67:97:0f:6c:54:19:49:
72:5b:ce:4d:f0:c6:78:88:4d:37:77:0d:9f:bf:00:
52:ae:5a:e4:0b:8e:13:45:67:3c:d5:c8:ff:87:64:
ef:65:91:33:dc:7b:43:b1:3b:85:66:e8:60:99:36:
db:af:16:20:c1:ce:d0:72:78:c4:a1:73:44:c2:ca:
e1:b7:9b:76:d0:3e:0d:35:16:11:bd:ef:30:dd:1b:
04:38:ab:4e:cf:b6:33:f2:1f:f8:c9:f0:1e:63:da:
e8:58:af:76:ac:8d:6a:57:d2:9d:89:14:8c:43:81:
e0:da:71:d8:74:6e:ae:f3:48:be:61:46:f2:ff:ea:
d2:04:cf:03:43:4a:a6:2b:09:c7:2e:c5:e3:81:87:
f0:5a:40:c2:65:4f:c4:29:d0:1e:c8:ef:82:2d:30:
27:92:10:04:ea:94:c7:72:8a:5c:9d:a5:71:75:43:
f5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A2:D7:27:C8:1E:20:84:FF:70:15:CB:25:31:E9:8C:AC:BD:A3:13
X509v3 Authority Key Identifier:
keyid:BF:3A:C7:20:A1:17:B7:4D:4D:13:C2:63:F7:94:77:92:9E:DB:B4:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vzrHIKEXt01NE8Jj95R3kp7btLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:32:c9:ab:e8:5b:d0:d8:66:01:b0:5e:1b:5a:f1:85:85:d5:
4a:e2:d3:a5:5a:49:e1:e4:9f:46:c8:01:15:bb:2e:e5:a4:f4:
ee:c9:cd:f3:b7:23:11:10:71:88:60:0c:6f:47:92:ec:83:6a:
6b:3f:9e:61:1f:41:8b:74:09:b8:08:1f:f9:70:ca:f4:75:e7:
b9:77:81:11:db:0d:02:6b:ea:63:f6:da:9b:7f:db:87:9f:01:
19:c0:e1:8a:76:f1:47:e6:5f:8b:09:28:2b:db:08:71:ab:97:
4d:ec:3f:2d:f3:e5:78:47:ac:33:76:6a:9d:5a:bc:a0:60:15:
8f:40:ae:4b:ff:49:9f:5d:d4:55:10:97:93:71:cf:35:1c:90:
23:b8:ba:19:43:d3:0d:a9:8a:60:e4:0e:e7:8d:09:9c:76:c2:
a9:da:7b:70:63:54:95:22:70:b1:b9:1f:a6:61:2c:6b:40:2f:
fb:50:9f:29:8a:bd:ba:87:bf:30:cb:b7:bd:d7:e8:23:3f:f4:
18:82:14:f9:b3:f4:c2:81:38:0f:01:d1:0c:e6:f7:29:0e:10:
0b:70:d3:7c:48:df:dc:bb:4a:a2:22:bd:f8:37:63:a3:40:94:
94:f0:f3:52:1c:f9:88:0f:78:a9:0f:81:07:ad:8a:d6:69:42:
81:21:22:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:21:59 2025 by rpki-client