Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
File: VZnll39h5z8wSC2usaXy33LV7UY.mft (raw, json)
Hash identifier: ZOobz3dnXg3JM9KFZyQsj8XdX5l9MDBSuoFYILCCHtM=
Subject key identifier: 00:74:D7:3E:BB:69:BC:DC:C2:7B:6D:6C:2E:8A:25:51:84:20:52:C4
Authority key identifier: 55:99:E5:97:7F:61:E7:3F:30:48:2D:AE:B1:A5:F2:DF:72:D5:ED:46
Certificate issuer: /CN=5599e5977f61e73f30482daeb1a5f2df72d5ed46
Certificate serial: 0196BC3720047904783406188F626D81B922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZnll39h5z8wSC2usaXy33LV7UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
Manifest number: 13B2
Signing time: Sat 10 May 2025 22:00:51 +0000
Manifest this update: Sat 10 May 2025 22:00:51 +0000
Manifest next update: Sun 11 May 2025 22:00:51 +0000
Files and hashes: 1: VZnll39h5z8wSC2usaXy33LV7UY.crl (hash: tmiyTCvQ56N6BbMQoZQDi44YMUPeyxaY9ihk+jWxshc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZnll39h5z8wSC2usaXy33LV7UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:37:20:04:79:04:78:34:06:18:8f:62:6d:81:b9:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5599e5977f61e73f30482daeb1a5f2df72d5ed46
Validity
Not Before: May 10 22:00:51 2025 GMT
Not After : May 11 22:00:51 2025 GMT
Subject: CN=0074d73ebb69bcdcc27b6d6c2e8a2551842052c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:88:02:d5:83:b9:07:1f:37:42:fa:d8:14:18:
7c:c6:de:c6:bb:77:c2:c0:81:21:90:f8:03:d3:6e:
38:46:a7:52:eb:a1:97:5f:79:74:e9:05:6f:f4:9e:
cf:2c:eb:bf:1a:87:36:4d:f4:58:14:49:54:38:6f:
ff:d5:5b:26:fb:b2:ba:a4:3c:20:58:3a:60:85:47:
ac:ad:65:a5:0d:f2:73:61:2a:0f:b9:df:69:f7:a5:
76:34:c1:2b:21:e8:e3:8e:82:3c:e8:f4:8c:4c:cf:
e0:48:7b:82:3c:70:d8:d4:5a:52:34:72:c0:83:1a:
88:81:b6:d0:21:93:71:3f:f8:03:4a:82:0a:69:58:
72:91:d0:ef:06:5b:8a:29:b5:70:d4:75:93:05:f0:
31:91:e8:5f:b2:cc:88:3e:3c:2b:19:19:68:84:67:
6d:a3:ab:f8:20:3b:be:a6:48:74:71:3c:6f:3d:c9:
b5:58:c1:d9:33:6e:44:b5:0a:2b:d9:71:27:0d:ee:
22:01:b6:74:38:b8:a2:5c:13:a1:2d:9d:29:1d:35:
24:8a:59:9b:2d:c3:57:39:87:e4:4b:41:10:f1:53:
c2:62:fc:24:ae:d2:e5:52:66:52:70:c5:c1:06:b7:
dc:83:cd:aa:e7:26:eb:e5:cc:5c:25:41:9c:66:59:
4f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:74:D7:3E:BB:69:BC:DC:C2:7B:6D:6C:2E:8A:25:51:84:20:52:C4
X509v3 Authority Key Identifier:
keyid:55:99:E5:97:7F:61:E7:3F:30:48:2D:AE:B1:A5:F2:DF:72:D5:ED:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZnll39h5z8wSC2usaXy33LV7UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:ff:d1:78:2c:df:bb:38:16:76:ed:2c:05:d4:ac:1d:ed:12:
20:3e:87:4b:c4:bc:51:b0:1c:89:48:63:a2:27:10:02:34:68:
a5:73:43:c4:3e:c1:a9:64:22:66:0a:24:a0:a6:62:13:de:10:
a8:b3:aa:50:19:94:51:97:83:b5:83:fa:2d:03:21:ae:a4:31:
cc:8c:1c:fa:3b:38:60:ff:3a:ed:60:84:69:fd:1f:7a:c5:a7:
a6:13:79:16:69:d3:a0:15:fd:5b:48:7a:cd:fa:ec:90:3e:8f:
00:19:d9:98:1e:4c:b8:e9:96:31:4b:ac:0c:18:05:c5:ba:cd:
eb:0e:b9:b2:1e:54:d2:dc:49:d8:51:ab:40:23:a9:81:3f:12:
81:02:9a:62:50:e8:f0:d7:4b:2b:50:b6:52:b1:f3:2c:90:b8:
66:7f:c9:d4:0e:81:ab:7b:8f:d6:e2:10:31:88:51:61:d9:a9:
0b:c8:d9:4f:3b:cb:93:e4:e3:13:8d:6c:de:c2:f5:ea:de:94:
8b:33:89:c8:40:d9:7f:a4:bd:86:12:68:b3:0d:e6:6f:d8:d7:
fd:b7:40:7e:8c:7f:76:07:40:a2:54:40:e9:6b:75:fd:02:55:
da:34:1e:c1:c7:d4:eb:36:ce:c2:41:54:3b:f0:31:01:54:0a:
e4:ca:b2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:02:11 2025 by rpki-client