Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
File: vz3ogsJhnWgPLX_mALkBbaKHqNM.mft (raw, json)
Hash identifier: I5Wuddx3nJc3sPr02evydLpX9mNjGO9lYQ7sB4elS+s=
Subject key identifier: 3D:70:F7:19:DA:A3:87:BE:04:64:EB:71:D1:2C:60:69:15:F7:BA:9E
Authority key identifier: BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3
Certificate issuer: /CN=bf3de882c2619d680f2d7fe600b9016da287a8d3
Certificate serial: 01984B8A875BC5C24A8E795192257046DD82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
Manifest number: 1459
Signing time: Sun 27 Jul 2025 11:00:26 +0000
Manifest this update: Sun 27 Jul 2025 11:00:26 +0000
Manifest next update: Mon 28 Jul 2025 11:00:26 +0000
Files and hashes: 1: 654gVU41w8foyRrdow3IvLh38_0.roa (hash: FxM/zOQmEVryb2JTftwL4qqp6keHE//w4j2q3qFh7fE=)
2: vz3ogsJhnWgPLX_mALkBbaKHqNM.crl (hash: 6jmv8HegAjLg8AAjrYBzsWCQhJFXPOVJWyIH9GzVsXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:87:5b:c5:c2:4a:8e:79:51:92:25:70:46:dd:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf3de882c2619d680f2d7fe600b9016da287a8d3
Validity
Not Before: Jul 27 11:00:26 2025 GMT
Not After : Jul 28 11:00:26 2025 GMT
Subject: CN=3d70f719daa387be0464eb71d12c606915f7ba9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bf:18:56:81:4c:14:75:a5:39:98:ef:9e:36:
a7:72:21:34:17:74:de:11:ec:64:d5:ce:86:dc:8f:
25:6a:a5:1c:0e:01:93:12:4a:14:9e:97:66:25:2b:
fa:44:55:c6:05:17:9a:ca:9c:cf:87:71:a4:82:4f:
85:8e:8b:4e:ca:ea:33:d8:85:10:fd:24:a4:d6:69:
49:35:91:e0:a4:1f:e5:ca:7f:30:c8:c2:a2:97:9c:
e5:ad:f3:8b:18:10:91:02:3d:a6:35:1e:6d:bc:6f:
d7:89:d1:31:79:15:94:b1:84:40:95:f3:c8:9b:94:
f3:70:65:a4:03:44:41:fa:bf:39:6a:20:f8:7e:18:
89:6d:4a:d4:35:14:b3:91:7b:66:d1:0b:eb:fd:05:
66:65:03:93:f4:2c:94:63:d3:5b:64:bd:c4:23:c9:
e8:41:7a:fe:6a:ed:0a:0c:19:2f:41:b5:5c:84:b8:
f5:cd:4a:b1:c7:ae:83:a1:f7:d3:25:dc:d8:10:04:
51:ad:a3:a6:f1:32:83:4c:8a:fd:9c:15:5e:5b:83:
a9:63:45:f5:07:76:7d:fd:47:cd:ed:35:c2:31:65:
8a:e7:60:64:59:66:3b:de:ef:87:10:30:cd:84:2c:
ae:c6:a6:a8:70:13:95:b6:9f:dc:1c:02:0e:1b:f2:
89:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:70:F7:19:DA:A3:87:BE:04:64:EB:71:D1:2C:60:69:15:F7:BA:9E
X509v3 Authority Key Identifier:
keyid:BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e5:c0:84:0f:72:fd:0c:d7:8e:8e:50:51:56:b9:46:73:c8:
60:e5:0f:f2:a2:51:a6:c1:06:78:3b:ef:37:ce:7b:69:2c:df:
11:6b:ce:5d:f2:a8:6c:a7:8a:5f:fe:48:da:53:ec:f3:b1:e3:
bf:57:b8:ce:dc:3d:00:da:d6:8a:31:9f:7c:0f:c7:f2:aa:98:
1f:36:11:d8:bd:92:13:9f:5c:d2:bf:86:69:b5:e8:06:04:c2:
1f:5d:ee:d3:4f:fa:c2:90:fc:cc:38:b8:4e:82:6c:cf:ca:ed:
d8:19:50:a6:35:59:a4:87:b7:9d:bb:d7:5c:4c:e8:4c:47:bd:
3a:e9:6b:fd:15:eb:15:b6:82:56:77:20:09:01:51:00:fa:dd:
0e:9b:dd:ba:ce:54:da:83:1a:ed:34:2e:55:01:1a:c6:30:f7:
c7:8a:1a:c1:ab:76:cb:de:03:4e:e3:0a:4a:01:e8:2b:58:36:
c9:e5:a3:4a:20:46:c9:9c:ec:c9:22:b9:dc:3a:c8:72:d6:a8:
29:8e:e2:2f:fc:0e:c0:a8:3b:8a:6b:48:9d:20:b2:33:b6:06:
9e:96:6e:cc:8f:fc:a0:63:8a:02:b0:84:f4:5c:51:13:0c:17:
82:62:0b:38:f6:5f:70:ef:ea:23:7e:2a:cd:82:d8:58:f9:ab:
2d:78:b3:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLiodbxcJKjnlRkiVwRt2CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmM2RlODgyYzI2MTlkNjgwZjJkN2ZlNjAwYjkwMTZkYTI4
N2E4ZDMwHhcNMjUwNzI3MTEwMDI2WhcNMjUwNzI4MTEwMDI2WjAzMTEwLwYDVQQD
EygzZDcwZjcxOWRhYTM4N2JlMDQ2NGViNzFkMTJjNjA2OTE1ZjdiYTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA078YVoFMFHWlOZjvnjanciE0F3Te
Eexk1c6G3I8laqUcDgGTEkoUnpdmJSv6RFXGBReaypzPh3Gkgk+FjotOyuoz2IUQ
/SSk1mlJNZHgpB/lyn8wyMKil5zlrfOLGBCRAj2mNR5tvG/XidExeRWUsYRAlfPI
m5TzcGWkA0RB+r85aiD4fhiJbUrUNRSzkXtm0Qvr/QVmZQOT9CyUY9NbZL3EI8no
QXr+au0KDBkvQbVchLj1zUqxx66DoffTJdzYEARRraOm8TKDTIr9nBVeW4OpY0X1
B3Z9/UfN7TXCMWWK52BkWWY73u+HEDDNhCyuxqaocBOVtp/cHAIOG/KJ7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1w9xnao4e+BGTrcdEsYGkV97qeMB8GA1UdIwQY
MBaAFL896ILCYZ1oDy1/5gC5AW2ih6jTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnozb2dzSmhuV2dQTFhfbUFMa0JiYUtIcU5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS80NmY5OTYtMzhkZS00MmZiLWI5ODIt
MDNiZjZjZjczZmYxLzEvdnozb2dzSmhuV2dQTFhfbUFMa0JiYUtIcU5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS80NmY5OTYtMzhkZS00MmZiLWI5ODItMDNiZjZjZjczZmYx
LzEvdnozb2dzSmhuV2dQTFhfbUFMa0JiYUtIcU5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATuXAhA9y
/QzXjo5QUVa5RnPIYOUP8qJRpsEGeDvvN857aSzfEWvOXfKobKeKX/5I2lPs87Hj
v1e4ztw9ANrWijGffA/H8qqYHzYR2L2SE59c0r+GabXoBgTCH13u00/6wpD8zDi4
ToJsz8rt2BlQpjVZpIe3nbvXXEzoTEe9Oulr/RXrFbaCVncgCQFRAPrdDpvdus5U
2oMa7TQuVQEaxjD3x4oawat2y94DTuMKSgHoK1g2yeWjSiBGyZzsySK53DrIctao
KY7iL/wOwKg7imtInSCyM7YGnpZuzI/8oGOKArCE9FxREwwXgmILOPZfcO/qI34q
zYLYWPmrLXizIg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 15:12:30 2025 by rpki-client