Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
File: vZALuaxgacUTtYLWH9gezNVhpWc.mft (raw, json)
Hash identifier: I9QOVn69InaHN5Xon/SekN5uA5E9K2atxW0XVA4s6EE=
Subject key identifier: AD:78:52:BA:A7:B3:C5:B1:23:0D:92:0D:7C:2D:AC:5B:95:F2:52:91
Authority key identifier: BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
Certificate issuer: /CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Certificate serial: 0198D51613D6FD33038C86DC6DB8629C38E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
Manifest number: 15C9
Signing time: Sat 23 Aug 2025 04:00:50 +0000
Manifest this update: Sat 23 Aug 2025 04:00:50 +0000
Manifest next update: Sun 24 Aug 2025 04:00:50 +0000
Files and hashes: 1: d7tBUWSiQHeiqH-bBOlyLkT02Ns.roa (hash: rmL3xWHBj145jAhqBB3i69rSx83PgbXey8Czqw5Lf3A=)
2: vZALuaxgacUTtYLWH9gezNVhpWc.crl (hash: cknmPMwoIa2+XpA4tnMC/nKWSoKMaboiTbZCcEY2zHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:13:d6:fd:33:03:8c:86:dc:6d:b8:62:9c:38:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Validity
Not Before: Aug 23 04:00:50 2025 GMT
Not After : Aug 24 04:00:50 2025 GMT
Subject: CN=ad7852baa7b3c5b1230d920d7c2dac5b95f25291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6b:26:6c:bf:f3:f6:72:21:89:bb:74:88:47:
45:75:3c:ce:f8:0f:f7:fc:33:4f:70:f7:21:cb:ae:
d5:f2:b0:04:a6:c1:d1:07:cd:a9:38:24:e9:db:78:
3a:8e:29:c2:9f:7e:f1:57:15:6d:bf:10:de:3c:37:
ea:9c:e1:55:dc:10:8e:13:32:6c:0c:67:b4:54:5f:
05:52:04:bf:15:a7:6b:3c:a5:c8:53:9b:35:55:03:
f6:6a:85:66:a8:c6:e2:d4:ba:47:ed:8b:fe:74:81:
a7:f8:f9:7c:e4:b5:86:67:7a:9c:b0:92:af:d6:28:
b1:05:24:91:e9:37:88:eb:93:8c:da:70:f1:7f:5f:
ff:14:6f:02:9b:e2:7d:da:cd:3f:e3:ce:af:19:8c:
fb:36:90:ad:8a:2a:16:a9:aa:d7:c3:49:1b:67:2a:
fb:b5:13:83:2b:f2:03:eb:8d:6f:69:f0:94:4a:f1:
47:27:6a:55:b2:14:20:1c:28:c1:94:47:c0:e0:32:
3c:f8:10:6f:7a:5b:c4:d5:51:d8:54:af:59:de:13:
41:19:30:33:d7:dc:a5:17:fa:8a:f5:79:23:14:b6:
e4:cf:43:56:37:f2:29:14:13:70:64:d8:15:18:e8:
0e:52:15:fc:c0:64:27:00:5d:51:76:f8:c3:d2:55:
7f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:78:52:BA:A7:B3:C5:B1:23:0D:92:0D:7C:2D:AC:5B:95:F2:52:91
X509v3 Authority Key Identifier:
keyid:BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:2a:5c:ef:c2:47:88:37:34:1c:29:f6:6a:b8:2e:54:86:60:
2a:87:46:fa:ff:98:8c:09:87:d2:d0:64:47:fd:35:0d:f5:2a:
67:39:13:36:51:92:41:f7:c9:ee:95:0b:ed:eb:6f:9c:79:d0:
8a:86:c5:71:4e:78:9a:3a:09:bc:78:de:ad:18:1a:b6:0d:cc:
2e:29:08:6c:c0:02:7c:ad:4f:42:50:66:4b:3e:72:6e:a4:cb:
92:d6:26:74:72:12:4f:fe:11:7d:6c:65:2f:ff:51:55:48:f3:
71:22:4b:06:51:84:e9:97:79:95:a9:23:61:21:83:dc:b9:2f:
e7:aa:b2:4a:5b:31:9b:35:30:49:51:f6:bd:c5:06:16:b4:9d:
30:9f:67:d9:fb:b2:55:12:88:87:72:f7:a8:73:80:f1:6c:57:
a2:e0:17:91:ef:cf:ab:2b:1b:f2:f2:cd:7a:7c:ad:cb:62:a1:
a8:a2:09:8b:8a:14:8d:13:8d:21:ca:10:d5:91:74:86:1c:6d:
44:69:b1:cf:68:30:27:b2:b0:dd:93:a7:97:47:a0:cb:ed:0e:
5d:1d:b5:ac:52:d6:45:a3:01:e1:82:06:7e:27:a8:93:97:76:
dc:50:e7:f7:6d:0a:93:81:02:53:3b:c4:d9:cd:8e:9a:64:65:
62:18:cf:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:00:44 2025 by rpki-client