Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
File: vln_z7TGm3nZrNy-apTbidUjYI4.mft (raw, json)
Hash identifier: ZS8oTM2+M0/Qw6moU1mtUYxH6dqKcQUSDcHLXcv3Acw=
Subject key identifier: D3:E1:0B:64:A6:8F:EE:1E:DC:C6:8B:9B:E8:44:1A:DF:52:47:4D:00
Authority key identifier: BE:59:FF:CF:B4:C6:9B:79:D9:AC:DC:BE:6A:94:DB:89:D5:23:60:8E
Certificate issuer: /CN=be59ffcfb4c69b79d9acdcbe6a94db89d523608e
Certificate serial: 0199FBEAA1BC93BF79E59820B9E233B97FEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
Manifest number: 097A
Signing time: Sun 19 Oct 2025 10:01:21 +0000
Manifest this update: Sun 19 Oct 2025 10:01:21 +0000
Manifest next update: Mon 20 Oct 2025 10:01:21 +0000
Files and hashes: 1: vln_z7TGm3nZrNy-apTbidUjYI4.crl (hash: Sw8LBb2MemHNN6qS+38TVlOVf0lETnq3Hxf/ty6IIe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a1:bc:93:bf:79:e5:98:20:b9:e2:33:b9:7f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be59ffcfb4c69b79d9acdcbe6a94db89d523608e
Validity
Not Before: Oct 19 10:01:21 2025 GMT
Not After : Oct 20 10:01:21 2025 GMT
Subject: CN=d3e10b64a68fee1edcc68b9be8441adf52474d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c0:e6:57:96:89:dd:26:23:6c:8f:27:6f:ed:
b8:0d:12:5c:5c:b4:69:20:ff:c8:f0:3e:78:9c:03:
58:57:a0:cc:05:d9:d1:64:41:29:3c:8b:ad:1f:8b:
90:22:8f:90:06:f1:fd:0e:dd:f5:40:5e:78:d5:3f:
29:b5:97:b4:1a:ca:a3:db:9b:8a:9f:52:90:ff:eb:
53:6f:ba:31:00:6f:3b:0b:0c:b6:2d:5d:dc:e2:b5:
4f:1d:e4:84:88:13:e3:dc:40:42:6d:a7:3a:a0:6f:
98:71:f5:1c:db:10:48:e6:2d:6e:1d:53:d6:b4:50:
6d:2b:38:e2:c0:da:b5:51:3d:09:7f:78:96:da:2f:
1f:31:cc:92:eb:e7:7d:c6:85:80:fb:bd:7f:6d:83:
55:7e:83:85:b3:02:22:15:d4:c6:9d:6f:35:b2:d3:
68:f4:17:65:03:86:61:8a:b2:e0:db:20:ff:bb:02:
00:d7:89:16:2f:c9:40:b8:46:d0:27:c6:ad:2a:90:
fa:af:e4:24:1d:28:d8:f6:d9:d1:c9:9f:0a:c3:69:
22:90:84:42:1b:67:66:88:94:8b:fd:06:4a:c6:55:
d8:03:8c:a8:54:15:b7:d1:0e:5b:68:8e:10:8f:67:
06:c4:ee:5e:8f:66:c1:fd:f8:f7:70:cc:b6:d0:64:
f2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E1:0B:64:A6:8F:EE:1E:DC:C6:8B:9B:E8:44:1A:DF:52:47:4D:00
X509v3 Authority Key Identifier:
keyid:BE:59:FF:CF:B4:C6:9B:79:D9:AC:DC:BE:6A:94:DB:89:D5:23:60:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:3e:d7:95:a6:ac:6f:f5:dd:ab:7c:5e:2d:9d:0f:17:d3:2f:
19:1c:e8:37:2d:98:74:95:4b:06:f7:66:48:da:8f:36:03:4e:
27:1f:c2:03:b0:c3:c7:9c:0d:e3:6b:68:78:6a:bb:c9:47:66:
00:a2:f9:d5:1f:99:49:23:27:94:7e:11:76:a7:0b:28:b3:7d:
5f:8f:14:4d:02:bb:24:93:53:ae:65:f4:17:c7:66:d1:18:30:
0d:de:c1:80:9e:9c:b5:80:e1:9f:bd:48:20:2d:05:78:dc:98:
09:cf:a7:c7:a4:7a:2a:9b:f2:6e:13:56:9c:35:2d:9b:de:93:
9b:38:81:b3:7b:78:2c:93:f0:6e:5a:1a:44:35:39:c4:89:49:
93:71:a3:86:27:52:be:a3:97:06:92:55:7c:a6:e0:88:97:74:
57:b6:05:35:0d:3d:1c:6b:c3:b4:68:cb:93:30:bd:d3:06:8c:
0d:f7:ee:41:ab:e9:90:b6:00:4c:d5:bf:10:38:73:c7:40:a8:
76:d7:bf:95:57:d2:eb:73:07:6d:f8:28:a2:e2:8a:3a:8b:f3:
e8:a0:f8:37:49:87:00:21:d8:d6:7a:82:62:d3:c8:c9:f0:bf:
2e:da:bd:eb:c7:44:4b:59:6c:17:d5:2b:3d:88:1a:28:5b:72:
70:74:22:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:44 2025 by rpki-client