Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
File: vln_z7TGm3nZrNy-apTbidUjYI4.mft (raw, json)
Hash identifier: JQBqFo5x9MmLisfCGrhqq/ZzBK0taD/PMVIiTCsEjTg=
Subject key identifier: 94:FE:10:D2:8D:B9:C3:5B:32:F2:C4:2B:63:6D:19:42:E4:E9:BA:B8
Authority key identifier: BE:59:FF:CF:B4:C6:9B:79:D9:AC:DC:BE:6A:94:DB:89:D5:23:60:8E
Certificate issuer: /CN=be59ffcfb4c69b79d9acdcbe6a94db89d523608e
Certificate serial: 0196C34B44DE50B372C30D63BA45E92AC663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
Manifest number: 07CF
Signing time: Mon 12 May 2025 07:00:12 +0000
Manifest this update: Mon 12 May 2025 07:00:12 +0000
Manifest next update: Tue 13 May 2025 07:00:12 +0000
Files and hashes: 1: vln_z7TGm3nZrNy-apTbidUjYI4.crl (hash: NJT0bU0DKoLYBu583eCX2skQcDCxUE8Ybvh2RRbSF9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:44:de:50:b3:72:c3:0d:63:ba:45:e9:2a:c6:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be59ffcfb4c69b79d9acdcbe6a94db89d523608e
Validity
Not Before: May 12 07:00:12 2025 GMT
Not After : May 13 07:00:12 2025 GMT
Subject: CN=94fe10d28db9c35b32f2c42b636d1942e4e9bab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6f:76:12:69:33:43:e2:8b:b0:61:f4:4d:04:
c4:3c:6c:1c:42:f5:f8:1d:5d:a6:db:f7:22:77:56:
3f:12:e9:87:73:51:41:74:95:e3:5e:2d:e5:30:8a:
14:3a:e9:8c:f5:4f:66:56:54:6e:8d:c8:7c:b5:5e:
1a:67:40:4e:89:58:a0:6d:02:70:eb:28:50:a2:e5:
0a:5f:56:0d:d5:e6:5d:ab:9d:18:aa:a9:7f:5d:c6:
0e:89:64:11:c9:7e:df:ab:c3:23:41:d8:78:14:b7:
56:07:2b:33:a4:32:c1:63:b4:9d:1f:c3:16:29:16:
d0:00:10:4a:5c:49:92:34:3a:8d:d7:ac:d1:d1:04:
06:ad:72:3b:c2:10:3d:85:41:47:66:00:4d:f0:d8:
21:be:b4:f0:a8:f1:d5:59:c0:a2:87:8a:0a:76:8a:
f7:ea:29:1b:8c:b3:fa:98:61:00:cd:8e:ae:57:33:
fa:b0:b9:21:f2:ae:15:30:ff:60:87:29:11:0b:b2:
7d:0a:59:63:81:ab:db:65:5c:8c:72:95:a8:37:64:
32:78:c3:d3:24:d2:80:28:28:b7:07:74:d1:71:22:
58:1c:a7:fc:13:33:78:0d:bf:0b:ca:7b:d8:00:51:
f9:bd:61:0c:ee:48:c1:f8:91:5e:a8:13:89:08:46:
80:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FE:10:D2:8D:B9:C3:5B:32:F2:C4:2B:63:6D:19:42:E4:E9:BA:B8
X509v3 Authority Key Identifier:
keyid:BE:59:FF:CF:B4:C6:9B:79:D9:AC:DC:BE:6A:94:DB:89:D5:23:60:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:24:97:50:0d:fb:fd:61:cf:6a:bf:84:b5:a4:43:33:e9:56:
56:e8:3d:c1:9a:83:54:ac:8c:ed:14:a9:01:eb:0d:b3:9d:b2:
e2:7d:8b:ad:d2:21:57:25:f3:b2:b6:35:5c:97:48:60:a1:d8:
de:90:54:c0:f1:4c:c5:d0:7b:ad:67:28:92:31:b5:d8:ca:65:
d2:b9:e5:c0:72:1a:a2:71:12:c7:8f:df:fa:0e:94:cb:8d:fd:
d6:e1:ac:d3:d1:85:94:f9:ae:f4:7a:bc:48:de:f5:59:cc:5d:
93:50:86:98:c2:1a:2f:4f:16:41:a2:16:d4:43:03:ff:a9:a8:
69:b0:a5:ac:6b:de:83:6f:bf:de:a6:2f:36:2f:4f:fc:ac:64:
88:e7:12:5c:d5:59:a1:46:4b:c6:ea:ba:2a:24:cd:5f:3e:53:
90:c5:80:15:d7:6b:41:30:bb:4d:93:9d:76:8d:79:79:7f:d8:
26:22:ae:f4:87:d7:4e:62:13:67:35:73:6b:38:de:11:cd:4e:
e2:e1:79:23:b1:b7:43:52:58:74:f6:6a:91:61:e1:78:19:5d:
2c:2b:a8:c8:c1:60:39:30:03:8d:b9:12:77:5a:4d:45:e5:92:
e8:d4:67:14:b0:74:be:cb:6d:c5:c1:60:3c:45:ce:d0:da:ff:
a5:f0:76:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:06:19 2025 by rpki-client