Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
File: VzCjLzFiRs4LFHu4lejN8K7UPtY.mft (raw, json)
Hash identifier: OXinqdjGp6HUR+9Nqy2+bjAYv8FXnnOIlj2JezFT/dE=
Subject key identifier: BF:3F:00:B2:B9:30:84:FD:41:31:D8:2D:26:F2:D2:E0:89:37:AE:30
Authority key identifier: 57:30:A3:2F:31:62:46:CE:0B:14:7B:B8:95:E8:CD:F0:AE:D4:3E:D6
Certificate issuer: /CN=5730a32f316246ce0b147bb895e8cdf0aed43ed6
Certificate serial: 0198960069CE4CE775B131F459F668CC4AE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
Manifest number: 08D7
Signing time: Sun 10 Aug 2025 22:01:06 +0000
Manifest this update: Sun 10 Aug 2025 22:01:06 +0000
Manifest next update: Mon 11 Aug 2025 22:01:06 +0000
Files and hashes: 1: JdnQsGvdkhLMYKHimmIYbcmtu_4.roa (hash: XQ8/SW7MphrctHqH7PZ0NzqyE28ii273Q0FygBQXgEo=)
2: VzCjLzFiRs4LFHu4lejN8K7UPtY.crl (hash: RaHaoO9CE8lhVfhcU1C6TFot8qJ6vKC2+hpZBV4OWis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:00:69:ce:4c:e7:75:b1:31:f4:59:f6:68:cc:4a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5730a32f316246ce0b147bb895e8cdf0aed43ed6
Validity
Not Before: Aug 10 22:01:06 2025 GMT
Not After : Aug 11 22:01:06 2025 GMT
Subject: CN=bf3f00b2b93084fd4131d82d26f2d2e08937ae30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:25:7a:47:20:81:bc:d6:e2:31:9c:9e:2e:81:
fb:73:99:e2:ff:19:09:b8:d1:52:92:58:4a:3c:99:
0d:32:fb:d3:65:15:af:82:4d:5e:be:fe:57:cb:74:
bc:75:69:27:4c:06:ae:67:55:3c:9c:19:84:70:54:
8b:d4:84:1c:73:ab:5e:57:0f:30:a4:ed:5b:4c:93:
25:ab:9b:d8:ba:28:89:e4:a2:b5:b6:57:36:55:93:
33:ed:b1:f9:f2:8f:28:d1:50:a0:89:05:f8:c7:cd:
7e:11:d5:aa:18:02:1e:90:6a:bb:72:05:0f:e1:ff:
7c:77:58:60:f6:24:3f:15:dc:5d:35:a0:3b:71:c0:
66:1d:b9:9a:dd:56:e1:bf:c0:7c:81:f4:ce:dc:00:
e1:57:44:19:04:74:de:00:ca:78:0f:c0:e1:e5:83:
c1:7c:b8:08:3e:66:8b:06:5e:ff:26:75:6f:c3:6f:
6b:03:63:e3:ee:ce:97:20:7a:e3:b0:96:75:1f:a1:
ff:34:76:82:e9:e6:6e:36:ab:a6:2f:57:9c:ce:04:
4e:35:8c:95:5d:61:08:2d:76:8b:8a:44:db:1f:c9:
63:3a:5b:3c:e9:df:33:fe:1f:8d:1f:35:75:bb:0d:
99:ab:e2:0c:d4:25:99:ce:fb:90:f7:a1:ac:5d:23:
1c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3F:00:B2:B9:30:84:FD:41:31:D8:2D:26:F2:D2:E0:89:37:AE:30
X509v3 Authority Key Identifier:
keyid:57:30:A3:2F:31:62:46:CE:0B:14:7B:B8:95:E8:CD:F0:AE:D4:3E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:94:f3:4f:6f:e3:c4:73:08:7f:70:38:6c:fa:6b:0a:1e:83:
e2:c2:82:87:6a:e6:cf:11:9b:79:7f:2a:f1:83:02:02:20:87:
b3:a4:14:86:9f:2d:5e:05:39:76:73:a1:f1:67:38:9c:12:29:
40:45:bc:f1:99:28:ab:c3:30:47:ed:a9:44:f1:32:3c:9e:8f:
37:5a:0a:be:1c:5a:32:e0:aa:5d:c3:47:94:1d:56:67:9b:2e:
e5:23:e1:90:35:d1:81:5f:02:58:d4:29:87:83:a2:65:55:88:
d1:70:3a:a7:91:42:68:92:5a:f4:23:ff:81:cd:bb:af:d9:ec:
ce:08:f1:e6:3a:b7:d3:b0:3d:9d:a7:8c:24:49:47:7d:fc:a9:
b9:70:b6:85:20:92:25:b9:b7:24:5b:e5:fc:19:29:bb:11:74:
d0:07:b5:9a:f6:2e:aa:ba:36:8e:cd:38:d6:ec:5e:94:cb:b3:
ac:a6:e6:85:0d:00:04:25:5e:65:27:8c:c8:25:1d:34:05:9a:
8f:95:54:9e:3d:92:23:8a:27:63:ce:03:5e:52:9e:78:f4:48:
c3:19:e5:95:c0:16:10:a6:25:bb:1d:1c:ed:d5:da:f3:9d:21:
7a:62:36:e8:0b:04:a4:1d:69:14:08:1d:d4:5e:bd:3e:d0:5f:
0c:e6:83:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:40 2025 by rpki-client