Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
File: vln_z7TGm3nZrNy-apTbidUjYI4.mft (raw, json)
Hash identifier: Tr9MPf4W4a3cHMwWZNviCMGf1r0rXueaZECOsclLTyg=
Subject key identifier: 2F:A8:35:71:D6:AE:B9:8E:2D:53:9F:A4:8E:D1:76:72:EC:DD:E3:4C
Authority key identifier: BE:59:FF:CF:B4:C6:9B:79:D9:AC:DC:BE:6A:94:DB:89:D5:23:60:8E
Certificate issuer: /CN=be59ffcfb4c69b79d9acdcbe6a94db89d523608e
Certificate serial: 0197B6A1B4ED1727AAEF402310B12F91C824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
Manifest number: 084D
Signing time: Sat 28 Jun 2025 13:02:20 +0000
Manifest this update: Sat 28 Jun 2025 13:02:20 +0000
Manifest next update: Sun 29 Jun 2025 13:02:20 +0000
Files and hashes: 1: vln_z7TGm3nZrNy-apTbidUjYI4.crl (hash: 9e75Vo5d5VSV/WytNN+fhX5/OvCiwKbevVJf0rI3q+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:b4:ed:17:27:aa:ef:40:23:10:b1:2f:91:c8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be59ffcfb4c69b79d9acdcbe6a94db89d523608e
Validity
Not Before: Jun 28 13:02:20 2025 GMT
Not After : Jun 29 13:02:20 2025 GMT
Subject: CN=2fa83571d6aeb98e2d539fa48ed17672ecdde34c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a6:88:26:d2:3a:4c:96:e4:e3:7a:3a:fd:89:
a2:49:64:24:ae:bd:b7:fc:4b:e8:ad:3f:8c:95:87:
78:49:51:ce:b9:4b:b8:8f:cc:35:8d:46:9d:2e:c8:
b1:c5:a9:85:82:3d:7f:be:b7:01:ae:ab:3e:3a:49:
99:06:ee:53:3f:08:68:9e:df:69:db:d7:72:08:d3:
bb:2d:f5:96:e0:a0:47:26:db:2e:fb:8a:a1:c8:be:
47:8b:0e:28:bc:2e:cc:a8:84:ce:87:a6:9e:94:58:
20:67:7e:c3:76:5d:79:2f:98:86:61:a4:a2:0d:e4:
7a:5d:c0:9a:4b:6a:d7:d3:e5:9b:b4:58:2e:03:4e:
58:c8:68:53:3c:86:99:58:32:89:5c:fa:8a:45:ad:
66:5a:43:35:48:95:bb:e1:10:28:ee:6b:c9:13:07:
29:82:2f:21:6b:f3:75:7d:d2:f8:ee:b7:5f:b2:3d:
4b:ab:7a:01:e0:19:18:48:5c:81:dc:f3:0d:e2:89:
0a:f5:53:29:57:02:a6:ea:1d:12:56:85:ce:5c:91:
e8:13:e9:de:2e:d7:c9:1f:0a:ed:fd:04:f1:e7:8b:
f0:6e:74:cd:4b:d0:a3:7d:99:01:f5:f5:9e:08:e9:
40:82:61:1e:08:3c:1f:6c:cd:03:2b:ce:4f:e0:04:
07:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A8:35:71:D6:AE:B9:8E:2D:53:9F:A4:8E:D1:76:72:EC:DD:E3:4C
X509v3 Authority Key Identifier:
keyid:BE:59:FF:CF:B4:C6:9B:79:D9:AC:DC:BE:6A:94:DB:89:D5:23:60:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f1:78:12:75:2f:28:c3:a2:0c:ef:e9:77:ef:4c:6f:c3:78:
1a:42:71:e9:c6:b4:93:20:fb:e5:53:8b:45:26:a6:9b:91:9b:
75:72:35:d0:31:5d:82:99:97:47:17:19:ed:7a:63:81:20:c2:
7d:75:66:b6:16:29:1e:0c:4f:b0:0e:3b:7f:40:81:93:b4:98:
3b:24:33:99:16:76:59:d6:98:ac:0a:9c:46:22:c6:44:0a:b4:
c7:5b:92:6f:af:dd:42:6e:73:d2:78:6d:06:8d:0d:88:12:01:
7d:52:f1:70:32:42:b1:37:df:97:6a:3a:9a:06:52:1f:09:e2:
d1:03:c3:78:94:47:ae:4d:d7:96:2b:65:07:18:ef:58:98:5c:
b4:35:89:81:f7:d6:bb:15:c3:65:c5:cd:71:ee:d2:1c:e0:3b:
dc:28:fd:93:87:8c:07:23:3c:f4:bf:dc:c0:05:58:34:a4:a2:
8e:af:ce:df:84:1a:2c:56:13:ed:7e:2c:8f:9a:76:60:ee:f3:
8f:cf:4d:6b:56:86:a1:fa:aa:1a:25:a3:50:14:dd:86:59:8a:
c5:03:dc:7f:6c:5e:45:4b:d3:be:75:11:fb:6e:8b:95:3c:6b:
0f:06:1d:78:4c:49:aa:08:ef:2e:a3:0c:eb:03:4f:01:06:b1:
e3:35:a9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:27 2025 by rpki-client