Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
File: vz3ogsJhnWgPLX_mALkBbaKHqNM.mft (raw, json)
Hash identifier: F7WU32+119s3hWaWRXnG6yr9v3rapkq5vGEnOZF1wMo=
Subject key identifier: 87:85:A3:14:B0:AB:5B:AB:77:02:96:E8:C1:EE:0A:01:59:3D:8A:2C
Authority key identifier: BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3
Certificate issuer: /CN=bf3de882c2619d680f2d7fe600b9016da287a8d3
Certificate serial: 0198741905AD0F551F12DFEBA05FD3B6B65E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
Manifest number: 146E
Signing time: Mon 04 Aug 2025 08:00:53 +0000
Manifest this update: Mon 04 Aug 2025 08:00:53 +0000
Manifest next update: Tue 05 Aug 2025 08:00:53 +0000
Files and hashes: 1: 654gVU41w8foyRrdow3IvLh38_0.roa (hash: FxM/zOQmEVryb2JTftwL4qqp6keHE//w4j2q3qFh7fE=)
2: vz3ogsJhnWgPLX_mALkBbaKHqNM.crl (hash: d3HDVF3m4Lo0Txjm0HT+BkMkwW1/9QXtySXiF4iADMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:05:ad:0f:55:1f:12:df:eb:a0:5f:d3:b6:b6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf3de882c2619d680f2d7fe600b9016da287a8d3
Validity
Not Before: Aug 4 08:00:53 2025 GMT
Not After : Aug 5 08:00:53 2025 GMT
Subject: CN=8785a314b0ab5bab770296e8c1ee0a01593d8a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6e:f9:58:99:d3:a4:b8:41:ed:54:2b:1e:f3:
03:3d:00:83:51:55:b0:7f:ff:73:c1:a2:59:98:cf:
6c:b2:4d:21:fe:0d:cf:74:43:25:59:a0:fc:54:fe:
50:c8:f4:10:14:a4:da:19:78:f3:f3:3e:a0:ba:7c:
62:16:81:80:56:0e:cf:f0:5c:ae:40:09:4b:67:a0:
ae:27:7d:f7:16:42:2d:b1:3c:5b:6f:94:39:af:a3:
f7:48:34:b8:da:5c:a7:6f:54:cf:d1:41:d4:b6:f5:
e6:ce:dc:93:69:00:f9:fb:bc:c2:81:d7:21:c3:3f:
d2:56:42:dc:24:c6:96:71:87:38:25:39:63:22:d9:
90:39:95:61:50:e1:4b:7d:b2:c6:6b:b0:7a:4c:87:
3f:bc:a1:35:5e:9b:c8:20:b1:78:84:b0:e7:0d:29:
5e:08:cd:98:23:d7:94:e6:75:27:33:3b:aa:a2:a4:
b7:29:3f:48:63:ca:5b:11:52:00:93:8a:01:4a:ce:
b7:39:5d:b7:13:0f:d9:4a:ea:7b:a0:a2:e6:34:8e:
35:33:7e:a7:6a:2e:62:e1:fb:df:88:17:6b:e3:72:
a0:d4:d4:6f:bc:a5:3f:eb:e2:73:9b:a4:60:fe:64:
7e:41:7b:76:da:fc:94:5a:de:3f:41:63:80:cd:e8:
ea:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:85:A3:14:B0:AB:5B:AB:77:02:96:E8:C1:EE:0A:01:59:3D:8A:2C
X509v3 Authority Key Identifier:
keyid:BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d3:c6:62:62:94:23:e3:d8:2b:28:5d:39:f2:32:cc:09:cf:
8f:d2:a2:da:a0:7a:a5:e1:a2:a6:7d:5c:c4:0a:ba:fc:c7:0b:
8d:f0:fd:c9:1a:e9:95:4e:7e:a9:c6:7c:91:9b:64:da:e1:6a:
b4:3c:89:5e:07:94:9c:d9:40:22:e7:05:2d:d4:3c:7b:58:d5:
b8:33:c7:07:b1:39:a6:4c:a6:d7:07:03:78:62:ca:6b:c1:d2:
e9:db:99:99:cb:d5:9d:91:57:d3:b6:01:22:ba:cc:e8:2a:fc:
e0:ca:80:fd:b4:b5:06:02:80:77:97:e0:6b:67:1c:ef:d7:94:
dc:05:66:9f:3f:85:da:2e:1e:6d:0d:cb:f3:72:1f:5a:e3:46:
a7:ab:ae:e0:e7:f4:7f:b7:08:b5:25:09:dc:9c:f4:4b:29:6b:
6c:c9:a1:b6:74:60:6b:bc:d5:b9:08:e2:cf:2f:7d:35:1a:9f:
fe:3c:3b:f3:0a:de:28:b7:a8:1a:6c:5e:73:b6:8d:28:25:bc:
9d:06:cf:87:99:ec:da:69:fd:73:22:cb:81:ba:92:74:66:de:
3c:9d:79:1f:4e:f8:47:90:6a:e2:bc:81:b8:5f:84:83:71:03:
4d:f0:00:1a:13:90:39:a4:2e:bd:54:97:62:7c:cc:72:43:8a:
b8:f5:6a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:52 2025 by rpki-client