Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
File: VzDFDI_UStGWvxBX7ipvpAQcfk4.mft (raw, json)
Hash identifier: So5W6fYQX2FygLkxaOzFpaHoDnra3KJvZc8uvtTIbwU=
Subject key identifier: DD:20:5A:B7:F9:E3:D6:FE:DF:72:E8:F9:A3:F4:6D:9A:2D:C4:00:D6
Authority key identifier: 57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
Certificate issuer: /CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Certificate serial: 0197B6A20DC9F9BDA0048952A44AF0C1094F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
Manifest number: 0A15
Signing time: Sat 28 Jun 2025 13:02:43 +0000
Manifest this update: Sat 28 Jun 2025 13:02:43 +0000
Manifest next update: Sun 29 Jun 2025 13:02:43 +0000
Files and hashes: 1: VzDFDI_UStGWvxBX7ipvpAQcfk4.crl (hash: g/Q2bQH8WFbUZ/GjN8OrF/fiSaqsRBXRVoHqTETp/5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:0d:c9:f9:bd:a0:04:89:52:a4:4a:f0:c1:09:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Validity
Not Before: Jun 28 13:02:43 2025 GMT
Not After : Jun 29 13:02:43 2025 GMT
Subject: CN=dd205ab7f9e3d6fedf72e8f9a3f46d9a2dc400d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:62:de:11:c8:7f:7d:29:d3:b9:75:b7:44:1f:
34:2f:da:f1:36:a7:8e:f4:50:f0:68:25:63:4a:01:
6c:c9:7f:eb:65:58:11:41:53:93:93:b4:ad:15:54:
13:47:e8:b8:96:bc:62:83:b1:cd:06:60:67:9c:bf:
72:00:ee:dc:c6:ca:2b:ce:7b:5d:59:78:4b:7a:70:
fd:20:85:a4:5d:76:30:39:bd:58:c3:41:00:9d:89:
b1:48:7d:00:e3:7a:df:05:56:fc:cd:f3:43:89:54:
d1:1e:52:40:88:cf:ce:2e:64:5d:47:59:5d:0b:92:
de:15:41:64:54:d2:9b:16:11:c9:a7:39:64:24:92:
2d:48:35:e5:70:8e:3a:2b:e5:0d:34:f7:c0:ee:3d:
97:84:ff:9b:14:df:6f:dc:72:df:e6:a7:c6:94:48:
3c:c7:43:0a:d1:ba:6e:7f:e8:4f:d4:aa:f9:08:b3:
a9:8d:53:83:0f:ac:13:1e:91:a6:2c:a6:7f:9d:f5:
6d:36:2a:92:41:c4:70:70:0f:99:06:e0:66:db:b4:
68:97:44:a8:ae:f7:65:de:b8:37:87:d3:8c:aa:a4:
ea:4c:ba:d0:65:0f:df:a7:a6:53:c9:26:cf:af:2b:
63:66:25:3e:81:b9:40:53:d7:a7:f4:ad:aa:27:77:
09:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:20:5A:B7:F9:E3:D6:FE:DF:72:E8:F9:A3:F4:6D:9A:2D:C4:00:D6
X509v3 Authority Key Identifier:
keyid:57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:00:fa:75:73:bd:dd:81:9d:06:b4:84:df:b4:e2:ae:83:f8:
7e:63:bd:16:44:3b:b2:6c:43:fd:31:a4:db:fa:97:96:85:92:
00:36:e8:86:f3:ab:5b:0b:bc:50:e2:9a:5c:da:37:25:52:be:
90:e1:a3:41:eb:51:0b:57:24:85:3b:a8:82:66:20:d2:9e:1e:
25:0b:62:69:27:31:6b:c3:e4:50:75:f0:4a:56:c6:4a:95:be:
07:ec:1c:c8:c4:02:db:d0:85:a4:dc:63:14:8f:2a:f9:0b:a7:
68:17:28:f4:1f:82:ef:2b:03:4a:a8:d6:80:dd:c5:eb:fa:70:
c0:c5:76:1e:df:2f:d6:99:c3:25:98:87:ea:02:55:fc:90:48:
ce:b4:c7:47:91:3b:a2:c3:e8:01:3c:63:41:61:e2:13:5a:50:
a2:1c:fb:be:ca:67:03:aa:7b:24:48:cf:37:45:a1:d1:a7:02:
83:3e:9e:ad:cc:ba:13:cc:34:42:6c:bd:a1:c4:b3:18:6b:b1:
ee:2d:47:1f:05:ed:72:c7:15:8b:c8:db:33:72:bd:2d:96:cb:
99:8a:a0:77:72:6c:6e:b0:9b:e8:09:b9:6c:78:a3:0a:7e:84:
ac:e6:70:4b:bd:4e:b3:d9:47:cb:4f:62:4d:e5:ae:ea:8a:bd:
eb:13:b4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:09 2025 by rpki-client