Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
File: vEZLqdJjhfVN9iVKwkiSbTcERbA.mft (raw, json)
Hash identifier: CIot34053pfb3S9KTb9e2nqYxdOPL9O5diU6+0zkSpM=
Subject key identifier: 03:A0:B9:74:21:2E:A9:E3:9A:0A:61:47:E3:54:AD:17:E3:B7:67:BF
Authority key identifier: BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0
Certificate issuer: /CN=bc464ba9d26385f54df6254ac248926d370445b0
Certificate serial: 0199380246A3C05553B5993175B48F0A6B11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
Manifest number: 1685
Signing time: Thu 11 Sep 2025 09:01:37 +0000
Manifest this update: Thu 11 Sep 2025 09:01:37 +0000
Manifest next update: Fri 12 Sep 2025 09:01:37 +0000
Files and hashes: 1: gAF5yk6vmaOq2Uung0D_8Gub1gc.roa (hash: eVAKmeO8heHGdx9Kcy2Kx3p7IXGpACADu9i5ILdct+c=)
2: vEZLqdJjhfVN9iVKwkiSbTcERbA.crl (hash: JR2ujF51+/3H1irOj/JbqQEe/49TcfN4dhhVSf97Ac0=)
3: zyyxpnYwsTYjNu4Wy5twrx2x4fk.roa (hash: NQRYx+K4EclccAZE0WPjuwlvX5dADgQnuUhPYSSnRgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:02:46:a3:c0:55:53:b5:99:31:75:b4:8f:0a:6b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc464ba9d26385f54df6254ac248926d370445b0
Validity
Not Before: Sep 11 09:01:37 2025 GMT
Not After : Sep 12 09:01:37 2025 GMT
Subject: CN=03a0b974212ea9e39a0a6147e354ad17e3b767bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fd:cd:51:7d:31:a2:72:5a:93:00:be:2d:c0:
53:a0:7c:e1:30:ae:8b:1f:23:13:a2:2b:ae:7f:d4:
49:43:19:8d:b7:d9:95:59:de:76:df:d0:7a:88:3b:
26:d9:85:a7:38:5e:5a:ec:21:84:7c:3c:a9:f4:b5:
6c:3f:8e:ec:57:d2:e1:d4:62:c1:e4:87:d2:92:fd:
8b:b0:18:f7:7f:f9:79:66:ea:7f:c9:2a:e7:8f:f2:
d6:3e:ae:94:57:c3:9d:3c:ba:7f:a2:88:c1:ba:35:
27:7d:69:34:84:a3:3c:f6:02:26:56:a8:87:35:5a:
82:f0:bb:cb:6b:8f:66:1c:4c:0e:76:47:98:fd:d6:
ba:3d:f2:32:7f:ea:9c:49:d4:47:e9:a6:9f:cf:ca:
57:5c:26:14:46:aa:db:2a:35:5f:bb:3a:62:2d:ac:
fe:b0:46:fa:89:10:9c:e8:68:b8:2d:14:6c:1e:17:
b5:7e:54:5b:79:26:ba:6b:65:21:72:9c:b9:cc:b5:
ba:7c:fb:6c:19:2f:a4:22:03:77:a0:24:f1:8c:7d:
dd:58:44:08:fa:03:88:52:dc:44:aa:f7:d1:59:95:
dd:3d:0f:78:68:34:3b:2c:73:17:20:22:ee:bd:a9:
c6:ca:ae:8e:63:63:b7:59:d2:eb:cd:b3:2b:9c:89:
89:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A0:B9:74:21:2E:A9:E3:9A:0A:61:47:E3:54:AD:17:E3:B7:67:BF
X509v3 Authority Key Identifier:
keyid:BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:af:01:11:30:e4:69:2b:3e:e7:c2:25:cf:00:c6:79:ec:e4:
2f:2a:bc:7b:d0:83:8f:32:77:03:74:29:e2:51:7c:aa:8a:ed:
f8:b8:28:07:a0:80:43:95:2b:25:21:e4:c4:08:fe:a2:2e:4e:
84:69:bb:dc:d4:62:3b:5f:76:a5:90:4b:c6:f7:69:7d:1d:e4:
3b:de:8e:a0:5f:9d:e6:d3:22:e1:cb:97:eb:59:be:aa:1f:56:
f0:0f:96:58:9a:c1:6e:4e:47:43:40:bb:e7:c1:1e:91:09:d5:
2b:2f:03:9d:71:b0:bd:e9:70:fd:11:60:7d:eb:81:1a:0e:db:
7c:19:9a:67:61:10:91:ca:13:d8:81:7e:fb:1d:c3:f9:66:11:
a8:f9:1e:9c:05:68:0b:f6:15:7d:55:61:e7:33:87:c9:d5:99:
75:05:84:aa:bf:0c:95:84:37:c5:c7:5e:9b:5a:c9:13:36:b6:
9a:be:4b:ac:5e:a1:24:a8:20:91:13:49:4f:7d:07:81:48:44:
9a:c9:08:da:7a:e4:c4:d3:58:0d:d8:bd:ed:26:53:8c:df:82:
cb:55:3a:ea:c6:87:23:7a:26:2a:52:75:78:39:6e:d5:bf:b0:
2b:cf:bd:a0:24:92:c5:a5:d0:6c:cf:08:1d:bf:c2:fd:39:46:
f3:7d:aa:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 11:26:48 2025 by rpki-client