Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
File: vz3ogsJhnWgPLX_mALkBbaKHqNM.mft (raw, json)
Hash identifier: ot6tlsaoqVWdJ/+bDsXomvZa9qS6Jqkp/zcIZYUkRGw=
Subject key identifier: B3:CE:CF:1F:AD:6D:36:2E:F1:57:98:FF:67:8F:5D:A2:E8:C8:C0:D5
Authority key identifier: BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3
Certificate issuer: /CN=bf3de882c2619d680f2d7fe600b9016da287a8d3
Certificate serial: 0199FE0FD268E9871C645B66103EC636279F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
Manifest number: 153A
Signing time: Sun 19 Oct 2025 20:01:13 +0000
Manifest this update: Sun 19 Oct 2025 20:01:13 +0000
Manifest next update: Mon 20 Oct 2025 20:01:13 +0000
Files and hashes: 1: 654gVU41w8foyRrdow3IvLh38_0.roa (hash: FxM/zOQmEVryb2JTftwL4qqp6keHE//w4j2q3qFh7fE=)
2: vz3ogsJhnWgPLX_mALkBbaKHqNM.crl (hash: 0KfQwE/330I8hzAS/mB6kVrv+zyNKzLXJvlvZRm494o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:d2:68:e9:87:1c:64:5b:66:10:3e:c6:36:27:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf3de882c2619d680f2d7fe600b9016da287a8d3
Validity
Not Before: Oct 19 20:01:13 2025 GMT
Not After : Oct 20 20:01:13 2025 GMT
Subject: CN=b3cecf1fad6d362ef15798ff678f5da2e8c8c0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:d2:b7:db:8b:87:13:a5:a9:52:0f:03:c6:
0a:7f:6b:68:91:84:71:ef:ae:c4:ed:be:34:08:0f:
5e:10:91:85:9e:66:81:0a:7a:c0:02:1d:3d:1c:34:
87:6a:fc:19:74:dc:ed:84:18:5f:f7:d8:b6:cb:38:
0a:ae:5e:51:ec:92:bf:a6:f6:2f:6b:43:a8:64:6a:
b8:e4:5d:3a:1e:6e:54:82:7d:5d:cd:fd:fe:b6:bc:
94:d7:f4:0a:39:59:19:16:03:a4:ee:50:e7:85:32:
2c:c3:65:90:51:ee:a5:98:fb:22:cc:15:dc:f1:07:
0e:28:15:09:05:35:d0:88:fb:3e:3b:55:4e:68:de:
fd:e1:f3:98:a3:65:bc:60:d3:d8:e1:bc:6e:64:ed:
df:66:9e:38:ad:ce:70:ee:f1:85:53:24:11:e2:f8:
50:ac:d6:a6:d4:0b:ba:2b:4d:95:cf:45:6c:00:92:
66:cd:03:41:cd:59:a4:00:f8:2f:d3:d9:e5:a6:12:
e1:c5:ac:cf:ce:ec:b1:7e:44:1a:28:92:6e:66:07:
3f:b8:97:78:1b:98:1f:e5:5c:c6:c7:19:40:05:43:
66:62:1c:13:62:3b:a0:ab:c2:5a:d8:88:52:77:b5:
2e:9a:7f:86:46:b9:ed:f0:0c:23:a9:d0:5e:13:d6:
81:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CE:CF:1F:AD:6D:36:2E:F1:57:98:FF:67:8F:5D:A2:E8:C8:C0:D5
X509v3 Authority Key Identifier:
keyid:BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:b8:5b:59:a0:29:7b:8d:bf:10:41:1c:b5:5a:5a:6c:40:22:
2c:c9:4a:91:c8:ae:5c:2e:cd:fc:9a:f0:85:6f:64:85:6b:ff:
1f:55:53:66:7c:bd:61:43:bd:20:17:28:a2:a0:16:c8:17:56:
d3:c1:f0:e8:d4:69:55:4a:b8:8f:16:9d:60:95:4a:64:76:4b:
03:7d:aa:2c:40:67:b2:59:ce:08:03:36:a7:ef:0f:fe:d3:c3:
54:e1:69:5d:53:bc:20:9a:83:a3:1f:a1:89:9e:a3:f5:30:aa:
ca:6b:0e:a1:9c:ae:92:a7:62:f6:92:72:24:09:e3:46:51:99:
3b:13:95:23:78:50:a5:0c:8c:45:6c:ba:72:4c:5b:43:8a:4d:
69:2c:40:4e:a7:71:5d:82:64:e9:1d:c3:24:6c:96:0c:1e:7d:
cd:4d:40:b7:b1:ab:ec:0e:ec:1f:49:a4:bb:36:ea:a8:05:18:
37:8c:ed:66:bb:81:94:6f:d2:43:60:b2:bf:58:8e:a6:87:e1:
ad:70:46:99:93:f4:d4:61:6a:87:40:5e:63:a7:7f:3d:f3:c4:
12:f5:2c:ea:57:1e:33:1e:b7:c4:aa:b3:da:05:3d:f0:79:08:
d2:b7:71:e9:c6:ad:2b:36:5d:f7:1c:10:30:59:46:66:d6:55:
06:bf:aa:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+D9Jo6YccZFtmED7GNiefMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmM2RlODgyYzI2MTlkNjgwZjJkN2ZlNjAwYjkwMTZkYTI4
N2E4ZDMwHhcNMjUxMDE5MjAwMTEzWhcNMjUxMDIwMjAwMTEzWjAzMTEwLwYDVQQD
EyhiM2NlY2YxZmFkNmQzNjJlZjE1Nzk4ZmY2NzhmNWRhMmU4YzhjMGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq//St9uLhxOlqVIPA8YKf2tokYRx
767E7b40CA9eEJGFnmaBCnrAAh09HDSHavwZdNzthBhf99i2yzgKrl5R7JK/pvYv
a0OoZGq45F06Hm5Ugn1dzf3+tryU1/QKOVkZFgOk7lDnhTIsw2WQUe6lmPsizBXc
8QcOKBUJBTXQiPs+O1VOaN794fOYo2W8YNPY4bxuZO3fZp44rc5w7vGFUyQR4vhQ
rNam1Au6K02Vz0VsAJJmzQNBzVmkAPgv09nlphLhxazPzuyxfkQaKJJuZgc/uJd4
G5gf5VzGxxlABUNmYhwTYjugq8Ja2IhSd7Uumn+GRrnt8AwjqdBeE9aB3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPOzx+tbTYu8VeY/2ePXaLoyMDVMB8GA1UdIwQY
MBaAFL896ILCYZ1oDy1/5gC5AW2ih6jTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnozb2dzSmhuV2dQTFhfbUFMa0JiYUtIcU5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS80NmY5OTYtMzhkZS00MmZiLWI5ODIt
MDNiZjZjZjczZmYxLzEvdnozb2dzSmhuV2dQTFhfbUFMa0JiYUtIcU5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS80NmY5OTYtMzhkZS00MmZiLWI5ODItMDNiZjZjZjczZmYx
LzEvdnozb2dzSmhuV2dQTFhfbUFMa0JiYUtIcU5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUrhbWaAp
e42/EEEctVpabEAiLMlKkciuXC7N/JrwhW9khWv/H1VTZny9YUO9IBcooqAWyBdW
08Hw6NRpVUq4jxadYJVKZHZLA32qLEBnslnOCAM2p+8P/tPDVOFpXVO8IJqDox+h
iZ6j9TCqymsOoZyukqdi9pJyJAnjRlGZOxOVI3hQpQyMRWy6ckxbQ4pNaSxATqdx
XYJk6R3DJGyWDB59zU1At7Gr7A7sH0mkuzbqqAUYN4ztZruBlG/SQ2Cyv1iOpofh
rXBGmZP01GFqh0BeY6d/PfPEEvUs6lceMx63xKqz2gU98HkI0rdx6catKzZd9xwQ
MFlGZtZVBr+qtQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:12:08 2025 by rpki-client