Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
File: vZLq6eEWmeTOcQWAUZd2wwApYWI.mft (raw, json)
Hash identifier: fnfDQBH5TFrPlAaMwNacO0nOJAEdm9dcQjY+45Jqz+0=
Subject key identifier: 74:A2:A0:66:E7:F2:E0:73:4F:50:BB:D1:39:7D:B1:82:DC:73:8B:02
Authority key identifier: BD:92:EA:E9:E1:16:99:E4:CE:71:05:80:51:97:76:C3:00:29:61:62
Certificate issuer: /CN=bd92eae9e11699e4ce710580519776c300296162
Certificate serial: 0199240C9E4823C4424A9BBC554F8F5407D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
Manifest number: 1604
Signing time: Sun 07 Sep 2025 12:00:30 +0000
Manifest this update: Sun 07 Sep 2025 12:00:30 +0000
Manifest next update: Mon 08 Sep 2025 12:00:30 +0000
Files and hashes: 1: 1-usx18zg0vXovZ69VA6wMJG1snQ.roa (hash: cCydz0/7urXRQoQLYjIuxn5IDBNQFz8a/SIpL/HwR48=)
2: vZLq6eEWmeTOcQWAUZd2wwApYWI.crl (hash: 7c7gsqReMPlHBHlGnkXfVoNyyYvZXumKWgsbsuNU/8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0c:9e:48:23:c4:42:4a:9b:bc:55:4f:8f:54:07:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd92eae9e11699e4ce710580519776c300296162
Validity
Not Before: Sep 7 12:00:30 2025 GMT
Not After : Sep 8 12:00:30 2025 GMT
Subject: CN=74a2a066e7f2e0734f50bbd1397db182dc738b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9b:30:d6:13:c3:99:f4:3d:a9:99:d0:7e:da:
00:aa:46:56:35:51:bd:65:75:48:26:2f:9d:c2:94:
2c:33:72:9a:74:bb:13:cd:51:bb:ac:94:85:fc:7c:
35:88:8e:02:d9:2b:f3:26:df:ca:97:3b:b4:8e:38:
88:70:12:d3:a2:7d:a3:d1:42:83:cf:d2:c1:02:cd:
cd:38:7f:2e:72:a0:3a:2e:ba:38:dd:d6:d5:80:e3:
db:7f:99:9d:0e:37:4e:4c:c4:f9:01:42:20:96:d9:
07:36:75:df:36:64:79:4f:3b:31:87:ca:7a:3f:cf:
d2:20:94:8d:9c:30:82:b0:88:d5:a4:e2:26:15:73:
1f:c2:47:5f:78:53:39:50:ce:7a:df:d3:7c:80:37:
db:7d:27:5c:a9:22:9b:4d:d1:dd:73:8d:19:08:66:
ca:ce:85:db:1c:d7:a6:4d:18:05:e7:b7:3b:a3:43:
f8:53:64:0c:b2:a0:99:9d:93:c8:e5:5b:cc:bb:9e:
ec:79:05:02:f7:92:dc:06:23:3a:75:37:80:da:2a:
31:29:fa:62:a2:08:1c:ae:23:78:79:e9:53:ac:a8:
32:02:54:c7:40:7c:23:46:aa:c3:7c:72:36:d4:f8:
f0:17:8a:79:f0:79:bd:61:86:ad:5a:a3:3a:93:19:
d4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A2:A0:66:E7:F2:E0:73:4F:50:BB:D1:39:7D:B1:82:DC:73:8B:02
X509v3 Authority Key Identifier:
keyid:BD:92:EA:E9:E1:16:99:E4:CE:71:05:80:51:97:76:C3:00:29:61:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:c9:b3:0d:1d:9a:8a:06:97:9f:1d:51:ed:64:c2:46:fe:51:
b7:ec:e9:d5:d4:c0:80:af:2e:cc:88:27:a5:07:c6:d7:99:22:
64:dc:e1:12:43:92:47:21:01:46:15:ef:b3:08:f4:0e:ee:8a:
79:b6:82:7f:11:6f:50:0d:be:ba:64:a6:b5:69:a8:10:85:e9:
43:7a:b3:4a:d4:fa:59:8a:ba:8f:1f:9c:e9:0b:a2:bb:60:30:
09:85:c8:d2:65:de:31:6c:b8:26:27:fa:03:41:8e:e5:b6:3a:
87:c1:31:0b:30:1c:fc:b1:e0:c1:30:dd:9f:a7:16:da:ca:2c:
79:30:9a:70:42:51:0d:90:b6:3b:ac:f1:a3:de:6b:84:fb:6f:
3b:00:2b:ac:97:74:a8:c2:00:6f:90:85:ca:8b:cc:0a:18:85:
54:b2:e1:84:f4:2b:ba:f0:14:98:03:56:13:91:9e:43:d1:ca:
99:57:94:c1:1b:ee:dc:cb:c0:f2:cc:85:b6:90:de:0a:39:17:
ee:d5:26:e0:ef:24:3e:56:05:cb:00:22:9e:5f:a9:39:79:48:
e2:a5:e7:fc:3c:88:e9:96:1f:b4:20:38:dd:57:ed:07:43:a4:
f2:12:fc:0c:77:a9:0c:e7:1d:7e:6c:8e:58:c5:93:86:31:c4:
03:7d:db:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:41:35 2025 by rpki-client