Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
File: vz3ogsJhnWgPLX_mALkBbaKHqNM.mft (raw, json)
Hash identifier: GOlcL5DFw+YGxEd5Wy4S+fCWPjLFMvW++quQxo2RCsw=
Subject key identifier: F9:59:78:67:7D:8B:50:9C:63:18:40:4F:43:D6:EB:6A:D6:91:C7:52
Authority key identifier: BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3
Certificate issuer: /CN=bf3de882c2619d680f2d7fe600b9016da287a8d3
Certificate serial: 019A4D3CBE973FFB4DDD7E5E7346719CDCED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
Manifest number: 1563
Signing time: Tue 04 Nov 2025 05:00:17 +0000
Manifest this update: Tue 04 Nov 2025 05:00:17 +0000
Manifest next update: Wed 05 Nov 2025 05:00:17 +0000
Files and hashes: 1: 654gVU41w8foyRrdow3IvLh38_0.roa (hash: FxM/zOQmEVryb2JTftwL4qqp6keHE//w4j2q3qFh7fE=)
2: vz3ogsJhnWgPLX_mALkBbaKHqNM.crl (hash: RBI+aTnrKkXegsNZ69+pYupoqNrlLeXKDqXzmOxGTUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:be:97:3f:fb:4d:dd:7e:5e:73:46:71:9c:dc:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf3de882c2619d680f2d7fe600b9016da287a8d3
Validity
Not Before: Nov 4 05:00:17 2025 GMT
Not After : Nov 5 05:00:17 2025 GMT
Subject: CN=f95978677d8b509c6318404f43d6eb6ad691c752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5d:c0:59:1f:71:cf:e0:17:00:bd:d9:76:2b:
9b:d0:6e:83:23:8c:b3:d3:7d:65:3b:08:24:c6:00:
69:8d:d7:03:4a:09:51:e7:89:a0:7e:6a:4c:4a:bd:
5a:bf:b3:36:15:c4:19:17:7e:34:6f:dc:f5:e1:59:
3a:d2:bf:ed:9a:f9:82:39:b6:f7:e8:80:35:33:5b:
ce:9b:55:0b:fd:39:1a:33:b2:a2:a1:d4:6c:0b:d9:
49:2b:8b:19:f6:27:da:c9:61:34:30:12:31:b1:b6:
fa:20:5f:11:cb:f4:3d:b1:ba:a4:7f:a0:52:ab:e4:
bc:94:87:f4:9a:41:6d:6b:ab:75:35:93:80:1b:26:
66:3d:4e:ab:42:5c:d4:3e:f9:ff:c1:47:cd:75:a8:
87:06:b2:bd:17:d6:02:33:96:c3:75:5d:ff:dc:82:
88:0a:01:a1:19:17:13:fb:46:fd:91:5a:bf:54:05:
9b:fe:22:4b:3a:d3:9e:24:d4:69:68:62:55:8c:5f:
d7:b1:33:69:fc:a9:20:e1:55:bc:55:08:8c:65:88:
71:90:ef:07:e3:4e:99:24:51:ca:71:80:db:4c:53:
ec:58:ea:f7:38:55:17:77:02:9d:52:7f:5d:48:3d:
26:10:60:7a:01:6d:07:eb:1a:b5:fa:ae:3d:39:62:
bb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:59:78:67:7D:8B:50:9C:63:18:40:4F:43:D6:EB:6A:D6:91:C7:52
X509v3 Authority Key Identifier:
keyid:BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:99:99:d2:fe:c3:77:09:25:5a:8f:07:8f:b6:e6:a7:99:ea:
a8:8f:91:cc:f4:44:15:bf:ef:6d:e3:1f:c6:71:5b:c7:24:91:
03:10:7a:0e:ae:46:60:4d:9f:b9:ae:2f:e0:dd:e9:c7:f3:94:
59:5e:0c:53:b0:d0:74:a8:20:11:15:fa:5c:d2:9a:d7:d9:56:
4b:29:b9:e3:23:bc:b5:d2:3f:2f:2d:d7:58:8a:82:49:6c:ac:
ec:9a:e7:8d:b2:b3:de:62:35:41:2f:2d:d7:91:d8:60:bd:be:
4e:18:3a:d9:85:81:48:85:9b:91:dd:06:62:14:e3:41:e6:4a:
21:22:ff:8e:33:67:62:b1:e3:38:94:ac:7f:52:e9:a4:6a:83:
d0:e7:ad:a1:ab:f6:b9:60:2e:f8:d2:24:39:c7:24:1a:27:4e:
df:02:6a:5a:65:78:e3:f9:6d:7c:b9:71:50:9e:cb:aa:9a:6f:
b9:38:60:42:82:b8:2b:c6:e6:ff:e6:90:cf:d6:22:5b:b6:a7:
7e:19:4d:9d:73:0b:23:23:96:97:c8:14:58:55:45:6f:9b:3c:
4b:ad:94:ef:3c:ac:a8:30:46:65:0f:e8:e5:8e:8a:ed:bf:47:
d5:53:b1:4b:4b:73:69:4a:2a:f0:6c:aa:0b:3c:bf:e1:ee:d6:
f9:db:40:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:14 2025 by rpki-client