Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
File: vz3ogsJhnWgPLX_mALkBbaKHqNM.mft (raw, json)
Hash identifier: PXTgvs+pUyJ8SAytLitB1qebSnv05iA6QSTpb0BXuec=
Subject key identifier: 19:C0:E8:6C:85:B5:14:F6:36:EB:98:8B:7A:18:5B:7D:B9:5C:76:F3
Authority key identifier: BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3
Certificate issuer: /CN=bf3de882c2619d680f2d7fe600b9016da287a8d3
Certificate serial: 01976997AF29CBB5C0255EBE07C93388E7E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
Manifest number: 13E4
Signing time: Fri 13 Jun 2025 14:00:37 +0000
Manifest this update: Fri 13 Jun 2025 14:00:37 +0000
Manifest next update: Sat 14 Jun 2025 14:00:37 +0000
Files and hashes: 1: 654gVU41w8foyRrdow3IvLh38_0.roa (hash: FxM/zOQmEVryb2JTftwL4qqp6keHE//w4j2q3qFh7fE=)
2: vz3ogsJhnWgPLX_mALkBbaKHqNM.crl (hash: 9fvjo5yF73bPA1WZ4Blm5XpQ4Fc9EcsEmUzShqwzH4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:af:29:cb:b5:c0:25:5e:be:07:c9:33:88:e7:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf3de882c2619d680f2d7fe600b9016da287a8d3
Validity
Not Before: Jun 13 14:00:37 2025 GMT
Not After : Jun 14 14:00:37 2025 GMT
Subject: CN=19c0e86c85b514f636eb988b7a185b7db95c76f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:97:21:15:91:37:97:c8:80:56:fa:3d:bc:6d:
a0:49:43:da:27:77:86:7a:a6:fb:bd:70:99:23:46:
22:42:d1:3b:0c:29:96:a9:58:98:d0:2d:9c:40:c9:
0e:fd:3c:51:d4:ab:0c:8e:6b:27:65:8c:dc:ac:f1:
0d:b1:29:d1:0b:dc:0e:d9:87:5a:a2:99:55:3e:77:
d3:86:d3:4f:7e:9c:89:ae:c5:47:4b:50:41:8f:40:
29:86:a4:5c:41:d7:e2:63:9e:54:3d:bb:b3:c7:ba:
4e:67:72:cb:6e:fd:86:08:04:aa:d3:21:1b:28:2b:
3e:b6:02:cf:43:4b:79:cf:e9:d0:9c:34:3b:a3:40:
84:19:dc:c0:31:28:49:30:5b:f9:70:87:ba:8d:ae:
ec:d9:75:2a:f8:d7:c8:0a:ef:3c:f5:70:09:64:44:
81:cd:ca:41:e9:0c:1c:3e:9c:c3:0a:ce:bc:52:7d:
de:07:3e:43:ac:87:b4:1e:2f:4a:ff:95:0c:31:32:
c2:2b:6c:73:a4:f5:5a:19:f2:aa:c0:20:24:60:84:
ac:db:bf:14:e6:de:34:23:63:fe:bd:38:fb:ea:d4:
90:dc:74:f0:a4:87:36:dd:74:db:db:ed:f9:cc:5a:
16:64:49:0b:92:ad:c7:eb:89:4f:da:b0:78:ab:80:
6e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C0:E8:6C:85:B5:14:F6:36:EB:98:8B:7A:18:5B:7D:B9:5C:76:F3
X509v3 Authority Key Identifier:
keyid:BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:28:f6:5e:11:49:1e:83:3d:36:ae:9f:50:ff:30:9d:d6:b7:
d3:5e:9e:7d:11:ae:f2:d9:09:47:06:f6:90:aa:54:ef:bc:13:
c8:0a:7c:6d:78:fb:96:3e:37:6a:d4:cc:48:cb:2d:d8:04:58:
1f:99:d2:11:af:5f:54:c9:85:e5:ae:30:21:78:88:32:23:39:
7e:cf:72:dc:99:7e:37:ca:8a:0e:42:92:8d:f6:77:eb:8e:5b:
23:6e:26:a3:d5:c0:1e:a8:d4:92:d6:dd:40:67:68:6d:12:e8:
b6:a4:fb:98:3a:c7:2a:29:16:2b:06:8d:00:8d:b7:27:ef:12:
79:4b:55:88:f5:73:ba:be:e7:33:a3:26:55:2c:9e:fd:6c:2b:
ea:a7:a6:49:c0:ea:87:43:eb:f7:4f:df:69:68:79:ff:5b:69:
24:f3:9a:3c:7b:dd:23:7f:56:2d:65:e6:bb:1b:89:b5:7d:9a:
8e:7f:bb:74:ba:1a:79:bb:16:7b:c1:6f:e3:e7:03:97:c6:46:
21:66:41:11:c6:49:58:20:44:75:72:3c:00:4d:e2:b5:3a:d7:
83:b8:2e:2d:e6:f8:59:63:15:26:9b:fc:c5:cf:41:34:5e:f0:
b7:11:c3:8e:1e:28:46:d2:3c:8e:1d:d6:95:16:34:77:e2:15:
a9:ff:87:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:05:01 2025 by rpki-client