
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
File: vln_z7TGm3nZrNy-apTbidUjYI4.mft (raw, json)
Hash identifier: Th4Gbkn6tNM1ogQJphLyC9EGI0SeWjG/d9WlHhbVW8A=
Subject key identifier: D9:EC:CA:70:D7:36:BC:AA:68:12:A1:36:6A:66:2C:27:6C:C7:3D:22
Authority key identifier: BE:59:FF:CF:B4:C6:9B:79:D9:AC:DC:BE:6A:94:DB:89:D5:23:60:8E
Certificate issuer: /CN=be59ffcfb4c69b79d9acdcbe6a94db89d523608e
Certificate serial: 0198D65F8181A1671FE369DA3E6B39EF456D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
Manifest number: 08E2
Signing time: Sat 23 Aug 2025 10:00:39 +0000
Manifest this update: Sat 23 Aug 2025 10:00:39 +0000
Manifest next update: Sun 24 Aug 2025 10:00:39 +0000
Files and hashes: 1: vln_z7TGm3nZrNy-apTbidUjYI4.crl (hash: 2UiVkg2Bxj5w2UZcYuAIynsg+2VleTRZH+1m/BQFZj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:81:81:a1:67:1f:e3:69:da:3e:6b:39:ef:45:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be59ffcfb4c69b79d9acdcbe6a94db89d523608e
Validity
Not Before: Aug 23 10:00:39 2025 GMT
Not After : Aug 24 10:00:39 2025 GMT
Subject: CN=d9ecca70d736bcaa6812a1366a662c276cc73d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e7:b6:d7:7e:b7:87:11:cd:14:a0:29:78:a6:
bf:3c:3c:d4:08:64:63:05:34:d1:4a:b6:bd:aa:f4:
25:be:64:9f:ae:84:39:89:1b:94:24:01:6c:dc:3e:
63:7e:39:d1:75:ed:bb:35:ff:90:73:96:1a:76:b9:
11:8e:07:b7:5b:b2:a9:c5:a2:6c:3c:86:63:d2:a6:
4b:b2:b6:01:46:3e:43:0d:69:f5:76:dc:6c:49:c2:
82:1c:8b:84:b1:a3:63:4d:93:0d:9f:07:84:b2:91:
c3:1e:11:e5:0b:8c:41:1d:63:2c:95:e7:cf:cb:18:
d6:84:b4:3c:7b:2c:59:96:bc:64:c6:7e:9a:1e:71:
56:41:34:3c:bf:f4:a1:b7:d2:e2:21:c8:fe:92:53:
c9:73:7b:67:21:ab:b5:2f:94:55:3f:ad:ac:dc:09:
ee:5f:67:5f:66:26:c8:0d:37:12:b0:08:e6:d8:1d:
9b:24:dd:16:4a:64:33:2e:6b:4f:b9:54:7b:aa:91:
11:57:cf:23:43:c0:f5:0c:cd:be:ad:7a:cd:09:70:
a1:4b:c6:42:29:6d:f5:7e:2f:03:1a:1e:0d:dc:13:
6b:c2:3b:dc:1f:91:37:d7:ad:d7:e7:f3:27:8e:a4:
2d:13:64:58:5c:ec:d3:73:75:70:26:92:a2:81:03:
f1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EC:CA:70:D7:36:BC:AA:68:12:A1:36:6A:66:2C:27:6C:C7:3D:22
X509v3 Authority Key Identifier:
keyid:BE:59:FF:CF:B4:C6:9B:79:D9:AC:DC:BE:6A:94:DB:89:D5:23:60:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:7d:21:cb:fc:56:27:83:02:73:30:ae:71:64:d7:31:6a:ef:
20:01:fe:d6:2d:ca:14:50:dd:99:f6:0b:24:3e:e7:42:c6:3d:
74:66:74:f1:46:2f:e6:b9:1a:36:b2:96:4d:3e:9b:39:8c:f7:
42:57:47:e6:37:0b:3b:3a:9c:87:65:b6:4c:f2:56:6f:a9:3b:
e7:3a:7f:56:20:f7:ab:a0:d4:db:f5:ef:e6:47:9e:cf:dc:39:
d8:4a:96:89:44:40:c6:0e:6b:6c:4c:9b:88:b8:ad:db:74:d9:
9c:6d:47:7e:db:be:8e:61:35:3a:a6:71:c4:39:a4:4b:0c:9d:
0c:5e:32:b1:e1:42:46:14:a2:65:3a:3c:be:ca:c2:ca:32:e0:
04:64:7b:9d:d8:90:c7:d4:63:fa:4b:91:c5:4a:79:b5:73:dd:
02:41:0a:ff:00:53:46:24:f6:37:b2:f4:01:18:1c:b7:06:22:
51:28:ff:c9:4e:f3:c9:25:33:ef:92:d7:a9:75:e8:2b:b1:ee:
f9:1a:fb:77:6a:fb:2b:f0:7f:79:0c:0a:c4:67:1f:aa:eb:90:
44:40:83:4a:6b:12:f4:99:90:99:05:55:c2:b6:30:ae:55:b4:
70:68:9d:50:cd:a6:a3:dc:1d:35:57:4b:b6:50:b5:e7:5f:73:
ef:b4:0d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:44 2025 by rpki-client