Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft
File: vzrHIKEXt01NE8Jj95R3kp7btLw.mft (raw, json)
Hash identifier: pAAva2xjoTz2HdIjIGwfuF3r2EBuLmY7Q3pri66jK9A=
Subject key identifier: CC:E2:DA:7B:BF:82:A9:FF:EE:1A:47:78:E4:8A:A9:19:07:63:DE:95
Authority key identifier: BF:3A:C7:20:A1:17:B7:4D:4D:13:C2:63:F7:94:77:92:9E:DB:B4:BC
Certificate issuer: /CN=bf3ac720a117b74d4d13c263f79477929edbb4bc
Certificate serial: 0198D515A7A3C1DAA494D59DE6C5182AD9B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vzrHIKEXt01NE8Jj95R3kp7btLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft
Manifest number: 0433
Signing time: Sat 23 Aug 2025 04:00:22 +0000
Manifest this update: Sat 23 Aug 2025 04:00:22 +0000
Manifest next update: Sun 24 Aug 2025 04:00:22 +0000
Files and hashes: 1: vzrHIKEXt01NE8Jj95R3kp7btLw.crl (hash: hAS2HLLls+hqLhrKBBowbMx5hmFVffedku5tFrrfiNM=)
2: y3g1z7Zmigqej1DGQ1gx3ilZaM8.roa (hash: ce+FeJaNssRXQv9hff7wkEZwcN/xUnX9DV6JIGk2oTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/vzrHIKEXt01NE8Jj95R3kp7btLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:a7:a3:c1:da:a4:94:d5:9d:e6:c5:18:2a:d9:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf3ac720a117b74d4d13c263f79477929edbb4bc
Validity
Not Before: Aug 23 04:00:22 2025 GMT
Not After : Aug 24 04:00:22 2025 GMT
Subject: CN=cce2da7bbf82a9ffee1a4778e48aa9190763de95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:09:e2:17:32:22:df:94:ef:1a:38:e5:c1:3f:
5e:21:5f:ad:9e:a7:53:89:67:2e:78:ec:12:db:01:
b5:3e:8d:b8:5d:9f:35:a8:3e:d8:04:34:cc:84:84:
78:d9:94:db:0a:87:e8:f6:34:21:52:41:5f:63:59:
dd:ff:61:19:91:83:c4:9b:39:0c:52:17:3a:9b:43:
71:cd:8d:e9:29:ff:bd:cc:92:cf:5f:e1:e4:2a:da:
e1:4e:a2:d0:1f:f9:82:95:ed:ab:95:a8:c4:79:0a:
a2:df:f6:00:88:76:37:18:e7:21:23:5d:84:99:b8:
6d:28:04:fa:70:16:3a:6f:85:8e:02:04:ff:f2:2e:
88:c4:38:0c:c5:04:73:b2:62:19:49:14:32:fe:9b:
d7:b9:a3:a4:3d:35:ac:83:a8:10:74:87:77:c0:17:
53:28:13:07:6f:3d:49:80:65:61:94:95:7d:5b:d2:
61:e7:3b:3e:1f:c4:60:63:ba:cf:1a:f4:19:56:bf:
e0:68:5a:ed:c4:d1:77:76:bb:6a:95:02:c5:1e:64:
87:25:2b:bc:d1:5b:49:5b:9a:2b:1d:b0:65:da:bf:
17:21:3c:a8:aa:8f:c4:b6:ba:8a:8d:53:98:0f:a4:
f0:41:e5:b7:a2:30:d8:46:3b:6e:9e:e6:de:e6:94:
75:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E2:DA:7B:BF:82:A9:FF:EE:1A:47:78:E4:8A:A9:19:07:63:DE:95
X509v3 Authority Key Identifier:
keyid:BF:3A:C7:20:A1:17:B7:4D:4D:13:C2:63:F7:94:77:92:9E:DB:B4:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vzrHIKEXt01NE8Jj95R3kp7btLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:9c:65:13:12:3f:7b:03:12:9b:65:06:cd:51:7d:54:15:ab:
12:1d:fc:8a:9b:71:90:53:1e:24:46:69:8a:ce:a1:fd:1b:47:
51:0c:8b:f6:68:2a:53:0d:f4:ea:cf:d6:77:1d:f3:6a:74:6a:
f0:c6:e4:af:ea:c6:b8:a6:5c:1b:d9:17:a2:c1:77:33:9a:6d:
df:bd:e7:88:b7:e8:cc:c9:0b:9e:22:9b:98:45:3d:d0:54:e2:
36:2a:73:66:bc:10:03:b8:6e:a8:15:17:1f:41:c4:7b:95:a1:
e9:0e:6a:0b:9e:3b:20:d2:6d:9c:5c:05:dc:cd:2b:d6:1e:14:
bd:b1:0b:a0:3f:a0:0e:f6:05:9d:06:7b:34:97:69:b7:e8:d7:
ee:96:7e:e8:c4:b3:f2:47:9e:6d:d3:68:bb:d8:73:6f:11:ac:
87:4f:e5:1b:d1:5b:3b:14:ef:c7:00:19:e2:7b:34:dc:ca:81:
b1:41:35:7e:55:db:1e:51:a1:98:ee:df:cb:5d:b0:92:27:3c:
37:3b:20:a6:03:cd:bd:d2:fb:91:3d:db:ab:d5:c9:0f:84:5d:
cb:53:46:ff:3f:72:97:26:f4:ea:20:0d:fa:19:03:73:8d:ec:
f6:43:f5:41:2b:59:15:9e:49:b5:33:1f:79:5c:21:5b:51:39:
b1:8a:e1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:11:20 2025 by rpki-client