Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
File: vZALuaxgacUTtYLWH9gezNVhpWc.mft (raw, json)
Hash identifier: UowkXSTde42v6bBkZNDBn9C5qYY7gxBgaq51r8Jy04Y=
Subject key identifier: 28:9B:DF:75:4F:D1:92:3D:92:BC:65:85:72:A6:C6:B5:5A:8B:BA:81
Authority key identifier: BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
Certificate issuer: /CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Certificate serial: 019A2EC46E3464F2390ED429F38F61E2CBE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
Manifest number: 167C
Signing time: Wed 29 Oct 2025 07:00:16 +0000
Manifest this update: Wed 29 Oct 2025 07:00:16 +0000
Manifest next update: Thu 30 Oct 2025 07:00:16 +0000
Files and hashes: 1: d7tBUWSiQHeiqH-bBOlyLkT02Ns.roa (hash: rmL3xWHBj145jAhqBB3i69rSx83PgbXey8Czqw5Lf3A=)
2: vZALuaxgacUTtYLWH9gezNVhpWc.crl (hash: 69dBnZ2kqtYLxFAkeDBb+z4W/pjuCTYcrpjrSqEXBuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:c4:6e:34:64:f2:39:0e:d4:29:f3:8f:61:e2:cb:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Validity
Not Before: Oct 29 07:00:16 2025 GMT
Not After : Oct 30 07:00:16 2025 GMT
Subject: CN=289bdf754fd1923d92bc658572a6c6b55a8bba81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ad:7e:fc:75:11:89:5b:e5:cf:96:ef:2e:7a:
18:af:55:65:87:70:05:09:65:14:41:96:a1:00:bb:
2b:47:a1:7b:09:f7:55:03:96:b3:c3:27:e3:83:e0:
68:d5:95:52:1a:48:cf:e1:00:e7:d2:1c:2e:b2:95:
bc:02:f9:d9:6b:06:27:64:fe:63:7f:40:73:d2:46:
ab:82:6b:b4:87:f0:5d:f4:32:29:ab:74:e0:68:a8:
a1:e9:3f:25:b8:ed:37:85:98:82:05:18:3f:32:d7:
48:45:62:b6:f2:b6:cf:fb:10:9a:44:c8:8b:23:73:
55:be:a4:6c:45:96:e7:50:11:93:07:78:ca:90:32:
b9:d2:b0:67:d7:9f:db:53:2e:fe:ad:31:e1:22:fd:
c7:8c:8a:1f:89:52:81:f0:6e:fd:de:96:22:1a:59:
35:3a:e6:fa:77:09:2d:77:e3:42:49:90:72:de:c3:
45:e1:26:21:12:ea:71:65:b2:f1:15:18:d2:2f:c2:
e3:b9:49:48:ab:a2:47:9e:e1:97:43:8a:f7:b5:8c:
ab:ab:39:ea:ab:36:13:29:ef:25:96:dd:72:ff:35:
e3:ce:6e:f1:56:19:84:9e:10:f8:da:fd:b0:14:28:
4d:8e:97:4b:4d:b2:d4:7d:37:4f:ff:4f:71:87:74:
df:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:9B:DF:75:4F:D1:92:3D:92:BC:65:85:72:A6:C6:B5:5A:8B:BA:81
X509v3 Authority Key Identifier:
keyid:BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c7:96:fa:45:61:49:14:72:de:79:0c:69:38:ad:a6:ae:9b:
8d:13:90:c5:6e:f1:37:91:14:f4:99:ab:fe:0a:61:a2:2e:2a:
58:ea:ec:d8:67:bd:00:91:1e:34:ab:d2:36:53:c6:35:a7:01:
df:71:4f:ea:06:fb:9d:c6:9c:70:0c:ec:52:98:89:f3:9a:fc:
f2:48:7e:46:93:f0:36:98:23:1d:9a:fe:b1:72:d5:2f:f0:37:
b4:f7:a7:c4:7a:48:ca:dd:44:bc:3b:71:95:98:ec:0d:4f:ee:
f8:bd:78:20:45:ee:61:56:86:f2:90:99:3c:b0:f2:66:d3:45:
38:66:66:21:ff:e1:3c:7a:0f:ea:0f:4b:9a:3f:33:95:a9:e9:
45:6a:a8:5e:cf:c9:ee:b4:85:ff:b2:ac:7a:3c:f4:eb:6b:46:
bb:e1:97:7a:48:66:23:7b:36:1d:02:35:a4:c1:de:85:da:1d:
03:4f:88:10:f6:bb:56:40:79:b9:07:f9:6f:89:ee:18:12:3c:
e4:2e:34:38:64:e4:0a:d4:c2:db:45:f8:08:8e:9f:ae:b1:33:
a4:32:e3:3f:e4:ea:2d:b1:bd:80:6b:27:02:62:1b:e7:68:b7:
df:92:8f:12:f2:51:26:57:10:6c:d3:7b:1c:2b:8c:0a:ea:6f:
52:bc:d9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 08:30:21 2025 by rpki-client