Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
File: vZLq6eEWmeTOcQWAUZd2wwApYWI.mft (raw, json)
Hash identifier: jPLN0DKJl4/4K6JpRZfXh9+MevApjoth3WnVOfiZhc0=
Subject key identifier: B0:42:09:DB:54:9C:F2:AF:8D:EE:A5:27:80:4F:CA:90:DF:49:4E:EF
Authority key identifier: BD:92:EA:E9:E1:16:99:E4:CE:71:05:80:51:97:76:C3:00:29:61:62
Certificate issuer: /CN=bd92eae9e11699e4ce710580519776c300296162
Certificate serial: 0198744FA88D18528B05C31008D8BDBB4BCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
Manifest number: 15A9
Signing time: Mon 04 Aug 2025 09:00:34 +0000
Manifest this update: Mon 04 Aug 2025 09:00:34 +0000
Manifest next update: Tue 05 Aug 2025 09:00:34 +0000
Files and hashes: 1: 1-usx18zg0vXovZ69VA6wMJG1snQ.roa (hash: cCydz0/7urXRQoQLYjIuxn5IDBNQFz8a/SIpL/HwR48=)
2: vZLq6eEWmeTOcQWAUZd2wwApYWI.crl (hash: UV9PIKrisRlsgqwK5xbLLgl+WHMqzqXruOkUz5XlEYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:a8:8d:18:52:8b:05:c3:10:08:d8:bd:bb:4b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd92eae9e11699e4ce710580519776c300296162
Validity
Not Before: Aug 4 09:00:34 2025 GMT
Not After : Aug 5 09:00:34 2025 GMT
Subject: CN=b04209db549cf2af8deea527804fca90df494eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ee:b9:25:f2:72:25:55:c2:42:95:f4:80:5b:
82:d8:80:21:98:90:25:d3:e3:4b:67:d1:87:11:9b:
2e:6f:ad:3e:0b:09:39:f5:94:01:00:67:5b:7f:b2:
11:90:e9:32:ce:11:6b:33:25:ab:9a:26:92:80:b1:
6f:7a:90:04:2f:aa:38:a0:d9:62:7f:98:7c:53:6c:
de:68:1f:78:39:56:8a:60:b8:b0:a3:ea:fc:dc:25:
ed:09:fd:82:54:15:5a:0a:70:da:7e:34:11:ad:12:
41:66:51:a4:ff:05:8e:9a:4c:6d:89:41:9f:8a:8a:
33:4d:db:28:a3:51:b8:ba:60:77:90:47:36:a8:e1:
a7:1b:c7:69:1a:1b:22:ed:26:e7:2d:8d:b6:0b:7e:
c7:11:d8:db:94:a0:77:dc:b3:ac:fd:cb:3f:e0:a6:
d9:21:44:4d:77:29:86:7f:ce:3c:fa:a9:8c:62:68:
5b:1f:ca:2d:71:9e:7a:01:14:f5:bc:52:c2:51:f9:
d3:b0:e2:5e:27:ae:0d:68:b2:ea:f8:0d:95:0c:27:
58:09:b7:56:39:2d:a3:5e:0d:a9:59:f8:9c:b7:48:
d2:ef:49:5a:34:6f:6f:d2:3b:83:e3:17:23:ff:e8:
15:76:8c:ec:04:f3:ab:27:88:21:a1:29:58:75:cb:
a1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:42:09:DB:54:9C:F2:AF:8D:EE:A5:27:80:4F:CA:90:DF:49:4E:EF
X509v3 Authority Key Identifier:
keyid:BD:92:EA:E9:E1:16:99:E4:CE:71:05:80:51:97:76:C3:00:29:61:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:62:e7:09:26:e6:56:b0:0c:25:2a:b8:c1:aa:6d:e4:4c:f3:
aa:15:50:68:ea:7e:a5:84:8e:b9:5d:60:cd:39:ff:75:2f:cd:
32:94:8a:ab:5b:71:9c:83:94:b9:d0:03:23:a8:c7:96:94:81:
25:67:f5:5b:25:c4:12:41:74:b6:b6:b1:9c:fa:54:49:a4:7a:
6e:34:06:b1:cb:9d:20:d1:8c:d5:d5:be:94:5e:55:ef:fc:50:
57:01:20:95:5e:c4:11:c2:df:9f:37:d4:12:6b:49:3e:55:05:
e8:ce:01:c6:70:4c:1c:3a:ad:cd:bf:cb:92:c0:e2:51:60:96:
54:6e:d7:dc:02:ac:8c:eb:3d:e9:48:99:05:07:de:dc:18:20:
e2:d5:ad:47:a3:41:4c:93:73:81:a2:4a:da:0e:2f:18:0d:d1:
9e:a0:30:48:e0:fd:e9:9f:19:f8:3b:92:4e:28:db:e0:18:83:
fd:a7:86:64:13:04:ee:24:1a:2b:a9:7f:f0:04:34:d0:1b:65:
4d:61:ba:a5:65:a7:7c:33:c3:da:56:b2:7b:7e:61:0e:34:f1:
4c:24:1a:24:56:42:eb:68:79:8b:ed:56:b4:7b:20:34:5a:9b:
03:12:00:a5:ca:00:5a:52:f1:f6:73:18:ba:4c:82:ea:7a:39:
5f:f5:21:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:22:06 2025 by rpki-client