Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
File: vZALuaxgacUTtYLWH9gezNVhpWc.mft (raw, json)
Hash identifier: enR3IdWckesoGOL5qgTnjccnh7/eb5OFbo3W2D72BgA=
Subject key identifier: CE:21:CF:0E:AD:9D:1B:A9:87:66:3D:C8:53:58:54:2B:65:3F:63:4B
Authority key identifier: BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
Certificate issuer: /CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Certificate serial: 0197B745749824D0E3025F4FB337EB5E5FE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
Manifest number: 1535
Signing time: Sat 28 Jun 2025 16:01:11 +0000
Manifest this update: Sat 28 Jun 2025 16:01:11 +0000
Manifest next update: Sun 29 Jun 2025 16:01:11 +0000
Files and hashes: 1: d7tBUWSiQHeiqH-bBOlyLkT02Ns.roa (hash: rmL3xWHBj145jAhqBB3i69rSx83PgbXey8Czqw5Lf3A=)
2: vZALuaxgacUTtYLWH9gezNVhpWc.crl (hash: lU6QKH8boGNjuysKCrXcY7CKjXPs5ktGLtKBASIkmts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:74:98:24:d0:e3:02:5f:4f:b3:37:eb:5e:5f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Validity
Not Before: Jun 28 16:01:11 2025 GMT
Not After : Jun 29 16:01:11 2025 GMT
Subject: CN=ce21cf0ead9d1ba987663dc85358542b653f634b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:24:6b:43:e3:80:40:5f:b9:be:c9:6c:c7:d7:
f0:1c:a9:0c:07:44:13:6d:c5:bf:b1:4e:33:d9:f9:
1a:32:f5:f6:d4:15:d4:09:fd:19:3b:fd:68:01:46:
0d:13:9d:13:d4:68:44:d9:39:83:85:4d:00:c5:9b:
94:f3:76:2d:67:bb:35:12:9d:f3:63:d2:10:93:c9:
3b:61:fc:33:10:3d:f9:08:a5:07:28:e6:c0:51:21:
6c:f2:c3:ad:43:23:b3:c9:da:fa:da:58:a3:89:cc:
3f:8f:36:37:77:33:27:87:44:dd:a2:92:3b:e3:45:
ca:df:ab:65:9d:79:84:5f:29:a7:8c:27:d6:59:d2:
63:af:00:4e:a0:29:7a:0f:6b:f0:57:88:ae:7e:75:
f2:6b:22:bc:be:2a:c3:20:18:df:b4:c6:69:2d:b0:
e9:7c:bf:b7:08:37:aa:d4:2b:79:a5:7d:99:b9:a3:
c8:8f:aa:28:ab:dc:43:52:a9:ff:a7:9d:ff:1c:43:
70:92:20:40:d6:63:30:c1:3a:74:c7:ad:88:e8:9a:
0d:be:cd:eb:fc:2d:99:17:e3:90:a4:f0:fd:5e:58:
30:f1:9e:f2:7a:ca:f7:19:30:be:17:66:15:5e:70:
b0:72:58:d6:9e:b8:f9:63:6d:7d:d7:f2:ec:2b:05:
48:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:21:CF:0E:AD:9D:1B:A9:87:66:3D:C8:53:58:54:2B:65:3F:63:4B
X509v3 Authority Key Identifier:
keyid:BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:bf:07:4e:23:47:92:63:7c:ce:d2:e4:93:1f:0d:f6:5a:fd:
62:3f:65:32:ab:e3:ff:29:62:85:ea:c6:bf:be:40:46:e7:cb:
da:32:78:10:e9:1b:37:53:42:24:3a:f1:c6:a7:09:fd:1b:31:
06:47:08:d9:4c:49:8e:e2:db:cb:70:b8:44:01:cb:16:fe:56:
c1:dd:43:6c:61:12:c5:82:20:7c:70:2d:21:c6:e9:75:9f:d3:
ed:ed:05:09:d0:9f:cb:93:06:9a:29:a6:6c:1b:64:60:e6:19:
cb:d7:3e:57:c6:4e:f0:0a:cf:3d:d6:11:1a:51:c3:e9:5d:a1:
25:58:aa:36:7d:f4:5c:c9:a5:5d:fc:72:d1:0e:3d:50:c3:4a:
01:8e:46:a1:b3:ed:2f:ea:b6:51:ce:52:2c:43:c4:e5:fd:47:
f3:f4:cf:f9:69:f1:0b:69:26:9b:1a:78:ed:4d:c9:ad:ef:75:
42:53:c7:e6:40:f3:66:3d:a9:e4:3c:36:6e:0e:7b:76:00:93:
60:60:f0:c7:21:21:bc:3e:68:ce:a2:5a:72:b0:18:38:15:1b:
03:fd:59:ac:09:b9:c8:e5:62:c1:3a:7d:34:6e:60:0c:f5:f6:
5c:ae:f1:67:c1:df:20:55:39:cc:7c:f7:47:f6:95:2b:ec:28:
72:30:86:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:29:36 2025 by rpki-client