Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
File: vZyAy-XVeXI0X1-l66NchoieVco.mft (raw, json)
Hash identifier: P3snJtJJ5ZZWdTQI5YU0LXNSUIDme8PNkb0g+pkaxkA=
Subject key identifier: 1A:87:17:6B:A4:83:A2:FE:9D:39:3C:95:84:E5:C3:96:92:0D:76:22
Authority key identifier: BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA
Certificate issuer: /CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca
Certificate serial: 01984BC18E051FB0C2F11B24B334EA498065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
Manifest number: 0F81
Signing time: Sun 27 Jul 2025 12:00:32 +0000
Manifest this update: Sun 27 Jul 2025 12:00:32 +0000
Manifest next update: Mon 28 Jul 2025 12:00:32 +0000
Files and hashes: 1: 8MA87xtZZH4blNN7ljK8ECsUe7c.roa (hash: x/OfLayawCptHxvyhoaHaoE0ADY/ycq4IXhQCadpAd0=)
2: vZyAy-XVeXI0X1-l66NchoieVco.crl (hash: NOE40VJqmDVCeULu1dLih2UHh03WrzXWUSHaNL+4BUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:8e:05:1f:b0:c2:f1:1b:24:b3:34:ea:49:80:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca
Validity
Not Before: Jul 27 12:00:32 2025 GMT
Not After : Jul 28 12:00:32 2025 GMT
Subject: CN=1a87176ba483a2fe9d393c9584e5c396920d7622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:81:29:5a:32:c2:5f:76:db:26:72:f5:0e:97:
d1:44:c4:29:c1:0f:01:ed:c9:3a:b2:eb:40:73:e3:
46:fb:c4:0c:02:4c:c3:cc:03:aa:0f:83:9e:34:87:
80:bb:eb:34:9e:68:a7:2c:d6:95:cf:0c:38:02:0a:
f2:2f:82:0e:1d:62:43:60:22:9a:32:34:5d:7d:45:
a4:82:9f:9f:db:e6:de:bc:04:aa:c1:1d:7b:9f:83:
cd:15:2e:48:91:59:4d:9a:ae:26:aa:96:d3:bc:b6:
33:c8:30:e3:b9:f5:e9:cd:c5:00:66:0d:90:0b:81:
bb:7d:34:de:e7:1b:34:c3:00:0e:22:90:49:cc:75:
d1:8c:fb:77:82:8a:5c:ec:f8:8b:bd:38:4c:6e:22:
c2:cd:6b:02:dc:bc:ae:32:83:7c:5a:64:bb:ee:81:
f3:cc:e0:18:d1:dc:50:dd:f5:1f:74:9a:6c:19:a5:
f4:6a:2d:47:36:0f:bb:42:b9:f0:0b:c4:15:2e:b8:
da:ee:f4:81:6b:d9:d6:03:fb:84:69:74:92:45:81:
35:bb:ab:64:a5:cc:c2:57:8c:92:13:8c:89:a1:9a:
1d:54:43:1e:b7:b9:07:ba:ba:3f:6a:95:23:f5:88:
20:53:3b:82:0a:08:30:13:33:69:9f:c3:a6:d4:8b:
1f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:87:17:6B:A4:83:A2:FE:9D:39:3C:95:84:E5:C3:96:92:0D:76:22
X509v3 Authority Key Identifier:
keyid:BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:0a:3a:4f:32:9c:b5:90:db:a1:97:8a:1f:b1:03:87:8e:88:
aa:67:81:94:c5:cf:8f:66:6e:74:86:33:a9:32:8a:83:5e:c8:
7a:4b:cd:bc:a2:43:85:08:95:8b:ef:f7:14:45:79:7d:22:db:
54:88:48:e6:1d:df:29:96:17:5d:d1:67:4a:89:0b:75:c5:3b:
3f:ae:cb:d6:de:c7:81:05:12:cb:d1:d4:0d:7c:2c:05:f1:74:
74:b9:4c:1e:18:2f:e8:86:df:ba:7f:82:5a:5c:29:6b:9e:77:
e9:96:78:0c:05:60:85:90:2f:ec:bc:c4:92:08:e5:6c:c8:32:
55:77:95:0b:dd:35:d7:d3:80:a9:16:76:f0:38:aa:9c:bc:f6:
e2:8a:69:87:98:18:f4:66:43:b3:62:72:6b:c7:43:66:7a:09:
e5:72:71:3b:db:18:69:a3:b0:d5:27:a2:23:48:75:2d:50:a1:
91:68:d8:49:c2:e6:46:d4:fd:e0:0c:3a:ee:c0:be:1c:83:73:
1d:e6:d8:9d:3d:3e:95:d0:cb:f5:0f:c1:1f:a8:6f:1b:00:ee:
c1:0e:b8:b1:67:b9:c5:4a:05:58:1d:8f:2e:f6:70:8c:95:41:
15:a5:af:06:50:c5:4f:94:05:f6:fc:60:6c:9f:04:20:a0:c0:
4b:8b:f9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:40:47 2025 by rpki-client