Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
File: vZALuaxgacUTtYLWH9gezNVhpWc.mft (raw, json)
Hash identifier: nyq2vOs84Rh2EulA8BAbAMLYCJX+Y95IOqwdf9Ryu1I=
Subject key identifier: C0:82:59:43:B3:0D:01:18:7A:3E:30:B7:38:40:83:35:2B:AB:10:11
Authority key identifier: BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
Certificate issuer: /CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Certificate serial: 01993981F155C733E189AC6168E7B736428D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
Manifest number: 15FD
Signing time: Thu 11 Sep 2025 16:00:41 +0000
Manifest this update: Thu 11 Sep 2025 16:00:41 +0000
Manifest next update: Fri 12 Sep 2025 16:00:41 +0000
Files and hashes: 1: d7tBUWSiQHeiqH-bBOlyLkT02Ns.roa (hash: rmL3xWHBj145jAhqBB3i69rSx83PgbXey8Czqw5Lf3A=)
2: vZALuaxgacUTtYLWH9gezNVhpWc.crl (hash: Eoo9+GDVyHHeFnyC31sGHMvo3fFsjegfZjGgc9Xl5Bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:81:f1:55:c7:33:e1:89:ac:61:68:e7:b7:36:42:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Validity
Not Before: Sep 11 16:00:41 2025 GMT
Not After : Sep 12 16:00:41 2025 GMT
Subject: CN=c0825943b30d01187a3e30b7384083352bab1011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3c:1c:cf:cc:11:ca:91:1e:86:c6:78:22:4a:
af:27:03:17:35:71:15:25:2a:33:38:bc:58:91:8a:
96:17:f9:50:fa:5b:e3:0f:3c:7a:20:9a:8f:28:9f:
7a:88:08:7d:e0:d5:77:ca:07:2c:42:7b:90:73:6e:
ed:04:a3:1b:da:51:a1:f6:0b:a7:26:2f:d2:2a:30:
81:c6:15:3a:46:ec:49:ef:3f:bd:1e:dc:76:b4:0f:
b6:87:f2:ab:db:7a:c5:8b:f7:1b:37:33:bb:5e:fe:
a9:99:45:86:e9:6d:b2:c0:36:c9:95:bb:30:5f:3d:
c2:4a:b3:5a:29:84:6e:ee:80:d8:ba:3b:85:86:53:
84:46:3a:a7:a3:18:b7:3a:68:96:2a:20:51:05:c3:
59:a6:df:d0:57:37:6d:52:b7:02:96:9a:ed:b9:ce:
f4:41:7f:21:15:85:ed:ce:bb:24:1b:96:1b:9a:65:
cf:9d:c8:42:b8:97:44:7d:ee:4c:47:78:d9:ed:3c:
32:ce:8a:81:9b:9d:72:2e:cf:05:27:4c:40:57:a9:
75:01:d7:9a:79:f3:d9:07:d4:20:3b:8b:dc:0e:ee:
c8:c5:2a:e2:f0:9b:cf:99:ef:93:0b:75:ce:da:b7:
a3:dd:a6:8a:4b:ae:e2:15:ba:8f:47:b9:0a:23:5d:
31:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:82:59:43:B3:0D:01:18:7A:3E:30:B7:38:40:83:35:2B:AB:10:11
X509v3 Authority Key Identifier:
keyid:BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:fb:58:32:ab:1f:12:74:5f:db:27:87:3d:75:59:6e:5e:f7:
a3:07:0f:fe:9e:71:57:6b:a6:4b:7f:59:41:fa:59:51:16:5a:
71:77:84:91:03:4c:cd:44:2b:26:56:19:5e:f2:34:e4:ff:6a:
db:a8:b9:4c:06:15:2f:98:16:9a:1a:5d:be:79:59:15:70:37:
1d:d1:bf:51:ae:7e:cb:14:b7:f6:10:7c:e2:6b:76:e1:bf:96:
13:a5:23:6f:c7:3e:fc:19:e4:0b:06:a4:bf:5f:6e:a9:9d:4c:
03:2c:9a:09:95:9c:37:01:40:56:5b:8d:a9:53:50:f2:1d:db:
c6:1f:e2:b7:c4:04:bb:68:ff:df:ff:9f:67:52:32:91:36:b1:
f6:04:30:9c:56:46:44:11:bc:24:af:2d:72:b4:e0:00:df:de:
48:d8:3b:16:9a:55:c1:ea:73:7a:79:c4:b2:86:2d:08:84:eb:
bb:e7:1b:60:48:05:f3:99:1c:d9:a7:41:36:9f:2c:07:3d:20:
c7:04:11:55:68:e4:60:4c:b3:89:f5:da:32:46:f8:0e:e8:dd:
10:19:17:eb:84:ca:a0:5f:51:07:a7:2e:01:6d:c5:97:ba:a4:
b5:64:f5:9b:8e:0c:5d:3d:f5:70:10:84:8d:24:01:70:5c:6e:
84:e0:b7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 23:47:04 2025 by rpki-client