Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
File: VzDFDI_UStGWvxBX7ipvpAQcfk4.mft (raw, json)
Hash identifier: aLjrYqAy9fxh9nEpUWx1YBS1iaKyq9NgVqUBo7JyVEE=
Subject key identifier: 85:DE:EB:0C:12:D0:43:D4:E4:AA:A4:B9:69:5F:58:47:18:5E:46:1A
Authority key identifier: 57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
Certificate issuer: /CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Certificate serial: 0198D472C2DD6A56A66B423F1A59CB9903ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
Manifest number: 0AA9
Signing time: Sat 23 Aug 2025 01:02:27 +0000
Manifest this update: Sat 23 Aug 2025 01:02:27 +0000
Manifest next update: Sun 24 Aug 2025 01:02:27 +0000
Files and hashes: 1: VzDFDI_UStGWvxBX7ipvpAQcfk4.crl (hash: Xv8phRKqg9NsI60XCJCCyv7cLOQrZDQwJdNyH8HE/M4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:c2:dd:6a:56:a6:6b:42:3f:1a:59:cb:99:03:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Validity
Not Before: Aug 23 01:02:27 2025 GMT
Not After : Aug 24 01:02:27 2025 GMT
Subject: CN=85deeb0c12d043d4e4aaa4b9695f5847185e461a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1d:75:09:ef:e2:26:75:40:61:66:61:5d:18:
35:f2:e4:84:ea:c0:f2:6c:d7:bf:f3:92:dd:9f:58:
96:1d:8a:0f:36:bf:7f:b9:68:67:1c:5b:64:d5:cd:
b1:e4:a5:a1:7c:ce:c7:f8:86:1f:11:3e:fc:78:79:
d9:60:1a:51:2f:df:75:60:1f:ba:94:63:7d:d2:9a:
31:db:3e:b1:4c:f4:9e:93:15:5d:05:0e:8e:c3:0c:
52:13:50:e8:23:33:db:bf:c0:df:1a:2c:a7:66:03:
89:24:2f:88:62:47:9c:01:18:3a:7d:de:8d:d0:b2:
ab:fd:f0:1f:59:d2:1f:91:3e:37:f0:12:4f:d4:2a:
87:c6:0f:72:31:46:43:68:1f:a5:1d:8e:bd:45:09:
c2:6d:ae:e0:7f:88:0a:08:95:94:19:13:fa:ed:52:
a7:21:eb:6e:ef:37:0e:b3:a9:38:11:99:5b:aa:3e:
f7:fe:8e:51:ab:6b:d3:3c:b3:d3:3d:fe:42:55:3c:
5b:fa:2a:2c:4b:76:55:92:66:a4:c3:3d:45:b8:07:
c2:2e:2e:65:ef:66:a5:79:b0:95:5d:1c:fa:a2:86:
ff:aa:cd:a8:ff:78:fd:50:65:db:b8:a5:6a:f4:9a:
61:e5:cb:f8:72:66:c3:7d:3c:11:51:5b:94:c3:de:
ac:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DE:EB:0C:12:D0:43:D4:E4:AA:A4:B9:69:5F:58:47:18:5E:46:1A
X509v3 Authority Key Identifier:
keyid:57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:4e:76:21:0f:e1:14:24:8c:56:9c:b7:18:0a:b5:ac:c4:f7:
85:da:7d:71:f6:d2:b7:13:70:f2:71:f1:4e:7c:cf:54:4e:3d:
38:f9:dc:83:52:07:af:be:0b:d8:f2:ae:00:d9:9a:36:39:74:
fd:ef:fc:95:e9:e2:9e:cf:dc:15:65:68:86:50:6b:6e:6f:8e:
fd:75:a5:61:c0:e7:aa:94:e3:0c:db:ed:5c:76:df:d4:21:06:
68:8e:8f:11:fc:b1:23:f0:54:be:6f:91:fd:24:2f:d4:e9:f8:
60:b2:09:86:2f:45:e4:4b:ad:d3:34:e9:79:f0:fa:83:ea:ea:
80:67:c4:25:71:55:3a:8c:77:e3:b6:d3:7f:2c:80:c0:78:40:
ee:d3:c2:d1:f0:c7:66:b5:7b:1e:d8:58:22:f5:ab:8e:24:72:
58:01:e9:da:5e:96:60:9d:71:17:60:c9:80:c4:46:a9:80:18:
58:dc:06:8e:a4:29:f4:c1:90:17:e6:48:d9:3a:59:72:5f:bc:
4e:02:f8:32:60:f2:1a:e4:98:02:57:d9:d1:f5:78:a9:77:b1:
de:f2:a8:c9:50:4f:fa:65:14:06:fa:fe:26:3b:24:b0:ee:9c:
64:99:b7:4c:ac:e9:76:78:e6:44:a3:10:da:a1:25:b2:ab:05:
c1:46:e7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:08 2025 by rpki-client