Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
File: Vzm709YFZftZWALsfGl-ohq9l-Q.mft (raw, json)
Hash identifier: rzZbF3A4pxgNpui0WUdfAN6VNdvvMO3cGzfUd9i5UBM=
Subject key identifier: 3C:E0:8A:3A:A8:79:A6:55:1D:78:DE:1F:2E:2E:0C:6E:89:9E:2E:D0
Authority key identifier: 57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
Certificate issuer: /CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Certificate serial: 0197B82158C0E1CBC4D054C7533A7C7C1771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
Manifest number: 06C4
Signing time: Sat 28 Jun 2025 20:01:22 +0000
Manifest this update: Sat 28 Jun 2025 20:01:22 +0000
Manifest next update: Sun 29 Jun 2025 20:01:22 +0000
Files and hashes: 1: Vzm709YFZftZWALsfGl-ohq9l-Q.crl (hash: q+E8SpKWVMnlJo67zBHoC4z91fR1fC9iW8Y9s1/P1Io=)
2: gAmwtWdBAiGd9eGeDhh_4U76Qd4.roa (hash: dWZpajXQdBvyOcKFRctLEmEP4L6KG6ufnnlUSRMSxks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:58:c0:e1:cb:c4:d0:54:c7:53:3a:7c:7c:17:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Validity
Not Before: Jun 28 20:01:22 2025 GMT
Not After : Jun 29 20:01:22 2025 GMT
Subject: CN=3ce08a3aa879a6551d78de1f2e2e0c6e899e2ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cb:44:6d:69:c0:51:5a:a1:25:62:0a:50:f1:
e4:22:9b:8c:ac:73:2d:09:ab:05:d3:92:fb:f6:82:
9a:33:3e:1f:c6:2d:dd:5f:7b:5c:0a:29:84:78:19:
20:cc:c9:5d:4c:9f:61:80:40:2e:4e:fc:91:57:06:
b6:6b:f8:e4:52:c2:98:ca:f2:9c:d6:da:42:5c:06:
98:14:2d:9d:10:10:4d:9a:c5:16:98:82:17:2d:0f:
9c:1c:a7:81:0e:a3:e3:f4:53:8d:c5:84:98:97:6f:
b8:d1:ce:de:61:9c:04:f6:90:13:82:e0:61:2e:2e:
2a:71:da:88:bb:1a:52:8e:aa:71:2d:ef:dc:ef:53:
0d:32:2a:39:cc:71:52:d0:25:c7:c0:3e:c4:e3:fe:
f7:c5:1d:1b:b3:eb:fa:fc:e0:7b:57:eb:a6:51:a9:
bb:c3:36:28:8e:f3:a6:ab:ea:8c:ed:93:c8:17:fc:
c5:a3:34:96:71:79:cf:6d:4a:05:0c:56:bc:50:58:
56:42:db:d9:63:9f:bb:74:e5:4d:d2:ef:c8:39:23:
a5:05:98:3a:69:37:26:90:fb:bc:10:fd:d2:0d:d4:
de:3d:c2:55:f3:21:79:4c:b0:31:e6:cc:3f:77:9a:
ea:e9:04:c8:b7:d6:d3:0f:e9:f2:bb:0e:3d:f0:1d:
2a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E0:8A:3A:A8:79:A6:55:1D:78:DE:1F:2E:2E:0C:6E:89:9E:2E:D0
X509v3 Authority Key Identifier:
keyid:57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:25:d5:51:2f:a3:5f:8a:36:88:c9:58:76:c8:ef:d7:eb:2a:
c7:d3:dc:a1:bb:58:e4:11:f0:14:ae:48:f9:d3:07:fa:35:f1:
ad:5f:9d:2d:28:b3:3e:ec:d4:7f:21:a3:7e:6f:55:03:7c:35:
f7:4a:d2:7f:f2:de:55:8d:a3:9a:00:8c:a2:a6:e6:ef:7a:bc:
c0:c8:5d:1b:8f:90:fc:98:10:a2:f1:30:86:17:4b:65:b3:40:
7a:16:fd:27:ad:da:68:26:63:7a:51:ee:52:db:87:43:c8:97:
3c:b8:dd:18:6d:de:72:05:48:11:60:df:95:c9:8f:af:44:43:
7b:b0:8f:53:12:51:c2:f3:4d:4e:0f:d1:1c:69:9c:17:42:40:
f3:6b:bd:1f:91:eb:e9:fd:17:9e:85:4d:52:0e:cb:67:6b:77:
3f:6c:1b:24:f0:5c:30:45:b9:c0:41:a2:ca:e8:2d:5e:99:7a:
4c:ec:62:b8:a0:d6:d9:0b:9b:84:6a:4e:59:95:c5:21:35:59:
8f:61:97:de:f7:a3:fb:c9:ca:ea:0b:78:39:f2:db:86:64:6f:
c1:0a:39:cd:17:b1:30:95:0f:89:c6:d8:5f:09:9f:ae:02:e9:
16:73:5f:25:70:7d:6d:9e:33:be:df:39:e6:5b:84:10:4f:ef:
b4:53:bb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:15 2025 by rpki-client