Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
File: vZyAy-XVeXI0X1-l66NchoieVco.mft (raw, json)
Hash identifier: NprI+lwUd3nE5n4H8KUlFEm/i1BTYSQ7M1HXNHjXJq8=
Subject key identifier: AD:1E:24:E3:7C:4A:ED:DB:66:5E:85:84:E9:80:49:34:10:68:D4:23
Authority key identifier: BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA
Certificate issuer: /CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca
Certificate serial: 0197470BB3A6719FE7B294B99132104E5350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
Manifest number: 0EFA
Signing time: Fri 06 Jun 2025 21:00:38 +0000
Manifest this update: Fri 06 Jun 2025 21:00:38 +0000
Manifest next update: Sat 07 Jun 2025 21:00:38 +0000
Files and hashes: 1: 8MA87xtZZH4blNN7ljK8ECsUe7c.roa (hash: x/OfLayawCptHxvyhoaHaoE0ADY/ycq4IXhQCadpAd0=)
2: vZyAy-XVeXI0X1-l66NchoieVco.crl (hash: HSlltvwMO4y+M7i9Q6ByHxOXWeFSMRVcwEIMEfOYOcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:b3:a6:71:9f:e7:b2:94:b9:91:32:10:4e:53:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca
Validity
Not Before: Jun 6 21:00:38 2025 GMT
Not After : Jun 7 21:00:38 2025 GMT
Subject: CN=ad1e24e37c4aeddb665e8584e98049341068d423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5a:f7:f1:8d:7a:4c:9d:e2:e0:ad:52:55:80:
79:1e:ff:d2:81:df:60:07:e9:05:1a:e6:ef:d5:87:
94:53:6f:97:9a:f7:d4:61:64:b6:2f:7b:ac:50:4a:
ba:8d:4e:b7:f4:a2:f4:d6:0a:23:00:98:24:d9:c4:
cf:be:ee:b6:08:cd:d0:a2:7e:3c:78:57:80:d3:53:
99:86:b4:12:22:50:8e:6b:0c:29:44:1d:a2:6b:8f:
42:2d:3d:f0:7d:29:35:82:4e:a8:61:e0:1d:15:eb:
b4:3a:7f:77:73:bb:e6:a1:53:3a:52:5d:c8:a7:58:
74:9a:a9:d1:d5:02:97:a6:df:b2:af:5e:f0:08:64:
1c:d9:c5:31:d8:c3:06:b4:ea:d7:56:72:ca:68:2c:
06:d4:82:7a:a6:3a:15:60:b3:66:d5:c5:fd:af:c7:
ce:f7:5a:a4:72:f9:bf:75:60:ca:30:97:e2:62:b6:
a7:df:17:f8:9f:ab:8b:9d:97:af:14:3c:d1:1c:db:
11:e2:a4:8a:e6:e6:1d:ba:a2:7d:54:2a:d1:b4:4f:
9e:02:b6:b3:b9:42:9d:78:83:e4:74:0b:10:7f:aa:
07:04:1e:9a:7e:1d:65:69:c2:02:83:b5:66:c0:0b:
a4:d1:68:6b:35:c4:3b:db:94:52:92:41:19:dc:1f:
01:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1E:24:E3:7C:4A:ED:DB:66:5E:85:84:E9:80:49:34:10:68:D4:23
X509v3 Authority Key Identifier:
keyid:BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c5:2b:55:c2:0e:f5:15:3a:f1:b8:69:94:cf:67:e2:85:f0:
6d:59:91:05:3c:45:95:14:19:cc:2f:32:14:9c:92:bd:ad:f2:
80:0a:da:de:a1:b3:33:39:4e:76:7c:c8:5e:64:15:3e:32:5a:
6e:3d:55:c3:f3:b3:80:36:c4:2f:1e:32:4a:98:f6:e6:38:e6:
98:d3:cc:5f:4f:cb:82:23:5f:7b:c3:f0:07:46:90:db:7a:6e:
88:62:e8:0e:fd:36:e6:35:1b:e1:36:1c:fa:e3:ec:5b:82:53:
f8:77:20:ea:3a:46:75:7e:d6:31:35:15:13:84:ad:3e:ce:33:
96:a6:7a:b7:1e:6e:a5:dc:05:81:00:51:a5:8c:9b:80:d9:16:
e2:f9:c9:30:34:4a:4d:6a:73:49:fb:30:0c:cd:e7:15:92:64:
2c:de:61:e1:a5:fc:88:dc:e9:2b:69:01:9e:8e:3d:71:0f:03:
cd:1a:87:27:7f:11:eb:f5:10:e9:aa:fa:64:74:d7:64:f7:ce:
60:07:09:67:7c:d0:c9:1e:a4:21:b0:c4:b8:a3:ee:d1:aa:92:
de:9a:e5:5e:f6:5a:79:e3:ed:ee:94:39:65:a2:ca:79:e9:8d:
19:b2:a2:06:fe:00:b6:3e:3b:59:ac:8d:c5:30:c4:83:f5:a4:
83:a1:68:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:52:00 2025 by rpki-client