Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
File: vz3ogsJhnWgPLX_mALkBbaKHqNM.mft (raw, json)
Hash identifier: Rmq9WfQlzpO9E1QWSU4Q9Gie11itYfDlZPPW3WWrmPg=
Subject key identifier: C5:80:FF:9B:E6:8A:C2:EF:11:56:C2:F1:26:65:16:73:67:0F:D8:47
Authority key identifier: BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3
Certificate issuer: /CN=bf3de882c2619d680f2d7fe600b9016da287a8d3
Certificate serial: 01974AB1888D866145B72D3C34311DC92E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
Manifest number: 13D4
Signing time: Sat 07 Jun 2025 14:00:38 +0000
Manifest this update: Sat 07 Jun 2025 14:00:38 +0000
Manifest next update: Sun 08 Jun 2025 14:00:38 +0000
Files and hashes: 1: 654gVU41w8foyRrdow3IvLh38_0.roa (hash: FxM/zOQmEVryb2JTftwL4qqp6keHE//w4j2q3qFh7fE=)
2: vz3ogsJhnWgPLX_mALkBbaKHqNM.crl (hash: 2l6m+tFADk61mH6kmQ5sbdbsn85IzgyIdA2Pbk/l14w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:88:8d:86:61:45:b7:2d:3c:34:31:1d:c9:2e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf3de882c2619d680f2d7fe600b9016da287a8d3
Validity
Not Before: Jun 7 14:00:38 2025 GMT
Not After : Jun 8 14:00:38 2025 GMT
Subject: CN=c580ff9be68ac2ef1156c2f126651673670fd847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cb:02:bd:31:4f:78:13:8a:34:0e:c9:53:85:
01:03:83:58:d0:4f:b6:66:52:06:d8:91:6d:30:51:
3b:99:49:ab:d9:1d:1d:b5:63:e2:1b:e0:93:ee:87:
15:e0:78:04:cf:ae:bf:1a:29:35:c5:c2:09:27:e5:
48:ca:98:a0:d3:e8:b4:15:1e:aa:cb:05:85:98:b8:
3f:10:4f:d5:e0:2b:26:b1:35:39:5c:8c:ff:8d:17:
cf:4f:b6:11:e2:c0:c9:30:59:63:45:79:11:d4:e9:
77:76:b8:5f:0d:de:6d:6b:4d:8d:37:2a:d6:2e:8c:
6e:8c:3d:2b:74:0f:4f:de:a8:56:e0:cf:f3:01:4c:
7e:f7:19:b7:bb:d2:9d:09:fc:a3:ee:8b:22:bf:08:
de:bd:0e:c1:a3:72:5b:98:cb:e8:d9:d9:05:b5:4a:
52:e3:f5:56:32:97:1b:4c:8e:22:de:d1:23:be:36:
ea:37:5f:2e:d1:e1:e2:16:f1:70:1b:e5:5f:cc:3b:
20:cb:30:8c:c3:17:46:93:67:28:ce:74:6c:b2:0c:
61:d0:1b:28:fe:12:1c:a6:3d:5c:80:89:4f:8f:93:
30:a3:0e:36:a5:c6:9c:cb:73:38:b9:69:7b:fe:50:
91:05:a2:72:cd:34:81:9f:47:58:13:36:d5:a9:84:
79:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:80:FF:9B:E6:8A:C2:EF:11:56:C2:F1:26:65:16:73:67:0F:D8:47
X509v3 Authority Key Identifier:
keyid:BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b6:ce:43:92:0a:b7:f3:87:35:a9:00:3b:ea:f1:34:21:d9:
d5:64:e1:43:76:b1:0d:a7:38:61:cc:6d:fc:72:f4:e6:b0:a1:
49:29:55:1a:fc:3e:68:d7:c2:ff:c3:33:1c:bb:3c:4f:28:0d:
4e:63:4d:76:fe:bb:c4:b4:c8:17:27:6e:9d:63:8c:c9:32:41:
e1:b1:8c:f0:63:c0:f2:c4:8a:cb:fe:c8:53:41:f3:b5:d2:48:
b2:5b:8e:ab:7c:df:58:9f:2c:82:ab:4d:12:9d:a6:3e:74:35:
43:36:da:15:bb:f5:0b:94:c9:4a:04:af:d9:de:38:a8:24:7a:
cf:cc:25:8a:e6:bd:9e:39:aa:c6:c1:1d:26:83:e9:c7:67:88:
2a:12:44:21:da:45:42:23:46:bf:3c:f3:d0:17:bd:73:f5:d0:
93:95:fb:85:96:42:6f:9b:cb:a9:9d:26:35:4f:47:ca:98:d1:
14:7b:c3:a8:47:21:5a:e5:8e:d7:89:6b:c1:3b:3a:4d:28:1b:
cd:85:e6:16:67:eb:62:dc:c5:73:ff:42:e1:f9:f2:99:d3:46:
3e:34:9e:59:35:14:52:2f:56:e2:7d:e4:b1:a4:05:57:3a:e1:
c0:a6:e7:fd:b1:fe:a5:11:87:3c:76:b8:80:54:0d:ce:d9:51:
18:d2:9b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:28:52 2025 by rpki-client