Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
File: vz3ogsJhnWgPLX_mALkBbaKHqNM.mft (raw, json)
Hash identifier: BzraCpd86lzvJ4DIj2kKVf+1ml9jHgYBEeM/cjjm3L8=
Subject key identifier: 16:23:95:F5:68:22:58:E8:B9:BF:7A:8D:24:DE:01:4D:66:BE:FA:CB
Authority key identifier: BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3
Certificate issuer: /CN=bf3de882c2619d680f2d7fe600b9016da287a8d3
Certificate serial: 0198D698759457C5E523450C71B689427FD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
Manifest number: 14A1
Signing time: Sat 23 Aug 2025 11:02:52 +0000
Manifest this update: Sat 23 Aug 2025 11:02:52 +0000
Manifest next update: Sun 24 Aug 2025 11:02:52 +0000
Files and hashes: 1: 654gVU41w8foyRrdow3IvLh38_0.roa (hash: FxM/zOQmEVryb2JTftwL4qqp6keHE//w4j2q3qFh7fE=)
2: vz3ogsJhnWgPLX_mALkBbaKHqNM.crl (hash: Ant2FiUNL+Qj3/DKoeJVg2xmM/tEKezvPm2+RjHTFqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:75:94:57:c5:e5:23:45:0c:71:b6:89:42:7f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf3de882c2619d680f2d7fe600b9016da287a8d3
Validity
Not Before: Aug 23 11:02:52 2025 GMT
Not After : Aug 24 11:02:52 2025 GMT
Subject: CN=162395f5682258e8b9bf7a8d24de014d66befacb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fc:97:a6:b9:a9:3e:32:fd:ca:33:db:f9:ff:
79:74:e2:bc:fb:37:10:0a:c2:a7:d9:8f:9b:8a:fc:
56:79:b2:45:7b:b1:88:b1:5f:eb:23:84:2b:c5:08:
b1:04:4b:d3:c6:fc:d4:c8:ca:26:8a:06:05:88:af:
35:0b:29:d6:68:2a:79:00:e9:c1:af:9b:cb:3b:57:
7a:c5:0a:6a:33:8f:65:87:dc:54:bc:bf:87:fc:08:
6d:fb:9a:b6:43:b5:b2:0c:83:4b:45:b1:f5:18:97:
ae:9f:f7:62:32:9b:5f:b7:85:d1:54:1b:f6:13:d7:
16:77:a6:1d:be:54:b5:b8:72:38:54:23:a8:58:71:
93:ce:f0:69:1d:41:df:26:84:e7:32:70:09:39:68:
a4:b5:d3:8c:8e:00:fc:4b:43:1b:6f:d5:79:85:a1:
b1:35:64:88:80:60:80:82:a1:b8:39:09:9e:9b:e8:
59:14:61:5d:f1:2c:20:99:c0:34:21:de:64:70:f8:
05:ec:ae:c7:ad:4f:f1:dc:75:bc:7c:f9:89:fd:48:
5b:8a:4f:d0:14:80:bf:dc:28:b4:1b:b1:6a:98:33:
32:17:fb:54:69:e0:e3:7c:0d:54:ec:4f:25:6a:8d:
2b:a0:92:fa:e6:b5:ab:6c:04:e0:bf:f7:8d:a5:bc:
1d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:23:95:F5:68:22:58:E8:B9:BF:7A:8D:24:DE:01:4D:66:BE:FA:CB
X509v3 Authority Key Identifier:
keyid:BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:24:75:92:86:64:44:8b:2a:19:79:53:6f:8e:b4:ed:19:85:
80:d9:45:da:f0:ce:fd:a0:40:fd:b7:c5:3c:b8:c1:ef:58:42:
c2:ad:a0:23:8b:c4:8e:19:c6:ac:ba:0d:9d:3d:31:65:e3:79:
39:45:0e:1e:31:3e:4d:d0:cb:86:f1:b8:63:14:fb:91:f7:08:
c2:d3:71:47:09:a5:bc:1d:bd:29:d8:84:4a:69:9d:4d:1e:c4:
51:2e:e3:21:5d:3e:00:5a:fe:22:2e:57:19:79:2d:98:01:8e:
a8:bc:3a:18:81:a1:fe:68:6e:2d:e6:df:ee:96:2f:92:d9:50:
d2:14:3e:b8:f5:ca:a9:59:a3:49:8d:64:1e:ad:bc:42:1d:5d:
2e:7b:6d:e3:74:cb:10:ac:c3:cf:8f:e7:ce:21:67:24:86:83:
9c:b6:96:48:b8:96:e1:11:1a:7c:2e:74:cc:3f:fc:f2:01:21:
b5:e5:48:5e:dd:12:05:bb:c3:45:24:68:4e:b4:ba:11:41:7d:
86:15:f5:03:d7:ca:b9:c7:91:3a:42:66:30:6f:a3:41:72:35:
69:c2:d8:0c:ee:21:a9:dd:f2:08:1e:e8:24:a2:fe:1b:04:c7:
74:ad:b8:9a:72:dc:f3:34:72:39:de:cc:0f:b6:ff:0d:0f:51:
24:d9:16:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:05:00 2025 by rpki-client