Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
File: vZyAy-XVeXI0X1-l66NchoieVco.mft (raw, json)
Hash identifier: 37mT68QfjDYl3S2jh+lUKHneXYnYM7Xu0O1/i4/ADpI=
Subject key identifier: D0:C7:1E:FC:B1:03:80:06:E6:B3:4B:DB:22:9F:33:54:B6:A5:D5:46
Authority key identifier: BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA
Certificate issuer: /CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca
Certificate serial: 019A722679C889F477B6A62DB955F76D8941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
Manifest number: 109E
Signing time: Tue 11 Nov 2025 09:01:55 +0000
Manifest this update: Tue 11 Nov 2025 09:01:55 +0000
Manifest next update: Wed 12 Nov 2025 09:01:55 +0000
Files and hashes: 1: 8MA87xtZZH4blNN7ljK8ECsUe7c.roa (hash: x/OfLayawCptHxvyhoaHaoE0ADY/ycq4IXhQCadpAd0=)
2: vZyAy-XVeXI0X1-l66NchoieVco.crl (hash: RRELhsxhnKt0fv27wLXQgLYCdD+wEMxHBIWpFhR6XgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:79:c8:89:f4:77:b6:a6:2d:b9:55:f7:6d:89:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca
Validity
Not Before: Nov 11 09:01:55 2025 GMT
Not After : Nov 12 09:01:55 2025 GMT
Subject: CN=d0c71efcb1038006e6b34bdb229f3354b6a5d546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cc:de:95:f1:33:38:f8:d9:07:db:d2:7c:bf:
40:e4:73:62:81:e4:05:38:8e:6e:1a:36:7a:b4:51:
48:59:6a:22:cc:81:a9:94:2d:02:8e:21:b7:2f:88:
33:dd:24:b1:49:0b:ba:ef:05:ac:3a:7d:ea:3b:17:
74:bc:50:11:e2:94:2e:99:cc:42:6b:4f:61:ae:e0:
fb:8c:03:16:51:8b:f6:5d:bf:e6:2a:b0:00:f6:0c:
ed:86:30:68:2f:d3:ac:5e:01:1f:34:8a:28:84:e5:
0a:07:92:59:8c:c7:85:61:2e:73:38:a6:a1:33:c4:
a5:2d:67:9f:8f:de:16:5c:55:8b:36:11:81:9b:76:
e5:e0:0b:9e:f9:c0:f2:7c:7b:93:84:7b:87:e0:b5:
67:de:13:d2:1e:c2:ec:f3:dd:83:ec:c6:53:a3:e3:
0e:c9:23:91:81:cd:15:c8:66:4b:3e:fc:38:eb:ea:
78:47:d9:93:99:81:e7:d4:8d:e6:b4:94:b4:f9:4b:
86:ac:1a:aa:c5:01:0b:ef:f0:63:03:a7:0b:98:34:
b6:23:62:7c:e0:0a:b9:a9:62:cb:32:35:c8:16:d1:
50:f6:87:79:b8:59:8e:eb:f6:87:1c:c2:9a:84:19:
93:cc:c2:43:cd:cd:1a:e1:12:4d:fc:49:ea:2d:6b:
57:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C7:1E:FC:B1:03:80:06:E6:B3:4B:DB:22:9F:33:54:B6:A5:D5:46
X509v3 Authority Key Identifier:
keyid:BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:76:44:18:36:88:68:71:8c:72:44:ad:00:2f:d0:10:1e:3b:
95:f5:28:ef:ea:68:7b:5b:bb:a0:85:d1:26:df:6c:85:32:fb:
fa:4a:e9:68:35:93:85:1f:b4:c9:7a:57:ed:a2:d6:9a:1b:a0:
3a:4e:c7:d7:61:cb:f0:b7:6e:6e:3b:31:c2:9d:9b:b5:50:42:
28:81:b4:a2:8d:98:a1:fa:29:2d:46:0b:81:9c:10:3a:80:ef:
d1:f8:51:1e:69:8f:24:8e:02:c8:63:42:74:d5:e9:c3:c4:a7:
2c:12:db:b6:6e:a0:94:34:8b:b2:e8:8b:2b:2b:34:06:17:b6:
b2:62:cb:87:15:9b:58:be:cf:7b:73:f0:1a:da:ea:a2:a5:b9:
76:f2:fb:75:e3:82:a3:11:db:82:93:68:c6:d8:14:35:eb:5e:
49:51:79:a0:1f:9d:c6:1b:3e:7c:40:aa:6a:17:0c:99:61:ff:
c4:89:6a:87:a4:99:f1:66:f1:a9:4d:f5:84:5a:18:22:a1:f2:
b8:91:7e:47:33:3f:1d:c9:96:7a:76:c0:ef:37:61:4e:96:d9:
d8:31:c1:7b:29:77:cc:c0:a5:3f:9e:e6:e0:2d:af:52:8c:f8:
90:a1:d0:16:c9:d4:ee:ea:d7:fa:97:a8:a0:ac:9f:ee:ac:e1:
78:47:d4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:15 2025 by rpki-client