Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
File: vZC8PjcRQLQqIdaX2DANlBCiSao.mft (raw, json)
Hash identifier: 3CaqrlWC2ipzhstng7TtguzWLCeR7JhtI8m6RB56ba8=
Subject key identifier: AD:10:B4:68:59:66:6C:D3:6D:02:1C:60:8E:03:F2:EC:ED:F0:1D:DF
Authority key identifier: BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
Certificate issuer: /CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Certificate serial: 01984A783501EF1BF74CED4DBFB5842E4D4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
Manifest number: 0798
Signing time: Sun 27 Jul 2025 06:00:48 +0000
Manifest this update: Sun 27 Jul 2025 06:00:48 +0000
Manifest next update: Mon 28 Jul 2025 06:00:48 +0000
Files and hashes: 1: t8BDYn1_4F2TyunsqfKmIL3bpGQ.roa (hash: 96TEsEkP40hfvXfLq7oaqGEhgKhW300uagupuFMXgtg=)
2: vZC8PjcRQLQqIdaX2DANlBCiSao.crl (hash: F85DGOuweyGRy2fFI50gFmNLfLI4OKONulkjYHJgZ4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:35:01:ef:1b:f7:4c:ed:4d:bf:b5:84:2e:4d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Validity
Not Before: Jul 27 06:00:48 2025 GMT
Not After : Jul 28 06:00:48 2025 GMT
Subject: CN=ad10b46859666cd36d021c608e03f2ecedf01ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a3:e3:02:e1:d1:c7:8d:6b:63:19:8d:39:1e:
a5:dd:f0:60:88:fe:46:aa:07:f6:8e:14:84:f8:5f:
77:f2:3b:68:bf:d6:63:49:0b:25:22:94:af:f4:4f:
d2:86:95:62:63:b5:cd:45:f7:36:c4:e8:10:f7:0b:
3a:c2:80:99:fb:94:2a:96:b5:c1:48:a1:cf:55:26:
39:54:b8:c8:63:5b:b0:0a:41:b4:e1:09:6a:0d:1d:
c5:47:50:00:97:ae:fb:c8:a3:a4:f1:e7:61:bc:83:
c0:7a:ae:18:14:92:12:69:4e:06:d5:01:3b:8f:61:
77:8d:a1:d4:9b:bb:11:56:17:90:7c:5c:06:ae:2d:
fe:f2:89:76:3f:60:18:d1:75:55:9b:f9:19:7a:6f:
bc:5c:ca:9b:46:db:b6:f6:b2:11:9a:9b:f4:49:fb:
84:87:d8:d8:35:88:13:71:39:a7:b0:3f:32:70:73:
fe:6b:c2:f9:1e:ff:43:07:dc:b0:d4:de:4a:3b:40:
30:c8:5e:86:6a:93:f9:15:5f:45:77:3a:07:fb:f3:
a5:da:81:55:74:58:ce:d6:26:e9:82:fc:bf:4d:90:
54:e1:76:82:e5:64:5f:c7:ae:76:9b:ba:89:88:80:
51:c7:f3:06:7f:55:44:92:f8:7c:cd:5a:a3:80:ee:
ea:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:10:B4:68:59:66:6C:D3:6D:02:1C:60:8E:03:F2:EC:ED:F0:1D:DF
X509v3 Authority Key Identifier:
keyid:BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:21:b7:c2:d6:e7:e2:b1:55:4b:4d:db:53:ce:4e:66:f3:16:
00:d1:78:42:11:4d:62:57:6d:aa:83:2d:12:5c:79:cf:9a:22:
6f:1d:a4:c7:c6:cb:f9:9f:79:5e:f3:4d:e8:e3:92:d0:a0:db:
5a:6d:76:2d:37:07:61:d1:f4:3a:7a:92:ae:b6:03:2c:bb:ff:
33:89:8a:48:26:5f:1f:fd:b6:4e:e1:78:83:5a:4e:47:49:45:
f3:0d:96:4a:a6:ba:47:d3:28:10:55:ff:85:cc:ab:0b:49:2d:
f4:ee:13:02:ca:70:18:1e:10:b9:e6:90:86:c6:22:0c:99:07:
85:7c:cf:c1:ed:a7:7a:1f:ec:72:58:95:38:96:e7:96:8e:3a:
a8:b4:7f:2d:93:4e:34:7a:d1:ef:1a:10:69:db:9b:73:a9:35:
fd:e8:ee:8c:9f:05:e1:16:95:5d:cd:b1:84:7a:47:92:c5:37:
32:ad:2b:a4:9f:62:86:5c:eb:e2:62:78:c6:58:fb:ea:2f:95:
96:cc:4a:6c:3f:21:22:60:f5:db:81:29:9e:d0:8a:78:fe:4c:
51:5f:1f:92:84:5f:f8:8c:35:93:f3:8d:58:e4:8b:8c:a3:2c:
71:dd:8b:9f:66:70:c3:de:c0:6d:4f:e7:ba:2d:d2:61:90:b4:
c1:d4:ac:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:05:09 2025 by rpki-client