Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
File: vZC8PjcRQLQqIdaX2DANlBCiSao.mft (raw, json)
Hash identifier: U+suPjKWu+sCdxdp4GZ8nU97PfkIqA9FWIVD1spPDzw=
Subject key identifier: 74:5E:56:F2:44:F6:0B:70:86:0D:51:55:02:CD:4C:5A:B4:D7:64:28
Authority key identifier: BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
Certificate issuer: /CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Certificate serial: 019A142935CA1654E299E5F857246670B3FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
Manifest number: 0885
Signing time: Fri 24 Oct 2025 03:00:36 +0000
Manifest this update: Fri 24 Oct 2025 03:00:36 +0000
Manifest next update: Sat 25 Oct 2025 03:00:36 +0000
Files and hashes: 1: t8BDYn1_4F2TyunsqfKmIL3bpGQ.roa (hash: 96TEsEkP40hfvXfLq7oaqGEhgKhW300uagupuFMXgtg=)
2: vZC8PjcRQLQqIdaX2DANlBCiSao.crl (hash: NFRNrnyWhfdiJHuaJsWGjNh0arweiytm968eXLQcMuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:14:29:35:ca:16:54:e2:99:e5:f8:57:24:66:70:b3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Validity
Not Before: Oct 24 03:00:36 2025 GMT
Not After : Oct 25 03:00:36 2025 GMT
Subject: CN=745e56f244f60b70860d515502cd4c5ab4d76428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:60:56:37:8e:ff:a4:d4:8e:40:55:8d:1f:63:
93:fb:2f:b3:c8:d0:8c:fa:9e:d9:6f:95:d4:26:3f:
cc:cd:58:d0:68:52:28:ca:35:2e:4d:62:b9:b9:78:
c2:2b:23:af:7b:b7:e6:b2:43:32:20:90:f9:c3:a6:
9d:b6:f1:91:96:fd:6c:78:da:3d:09:ab:d5:6b:ff:
49:d9:85:1d:31:bf:ef:a8:ab:7c:f7:0b:0c:35:91:
27:10:62:8f:0d:b4:f2:bb:3c:c5:69:40:7b:28:f0:
db:32:b1:ad:b0:05:1a:ce:e8:2b:82:14:26:c5:cc:
ad:b3:5b:0f:99:bc:50:76:bc:ba:8b:74:fd:96:74:
6a:fb:32:59:72:70:21:f9:0c:a8:12:36:69:cd:2a:
f6:7b:d4:f7:14:5e:1b:4d:32:57:8b:db:17:f7:01:
32:dc:9f:4f:06:ae:97:0e:c0:bd:52:ef:98:0d:57:
cc:e5:cd:1d:2c:1e:21:77:79:1e:04:ce:a8:3b:24:
58:cd:04:1e:b5:42:2f:43:37:a8:98:df:b3:fa:2e:
2e:38:df:5c:e7:65:2b:9b:2e:01:f0:21:67:aa:0b:
48:9d:2c:d9:92:df:18:f0:6f:65:7b:e3:19:4f:c8:
64:4f:81:5e:48:8d:95:b5:0a:5d:36:3c:5f:82:9f:
93:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5E:56:F2:44:F6:0B:70:86:0D:51:55:02:CD:4C:5A:B4:D7:64:28
X509v3 Authority Key Identifier:
keyid:BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:80:1d:7b:cf:8d:28:90:52:4c:92:95:fe:cf:22:23:73:e6:
d6:bc:cd:97:ba:16:37:59:22:27:a3:77:98:8b:e5:d6:75:a7:
d7:bf:35:08:ae:dc:b3:4d:9d:10:5c:ed:05:50:ff:ab:a5:30:
e5:96:ec:c5:68:b1:2e:59:d6:43:e3:7e:7e:ab:63:97:98:2c:
28:4d:50:77:14:45:62:9a:78:a3:06:6d:a2:7c:62:f2:b6:e2:
2e:77:5a:a0:29:4a:96:22:91:df:6a:6e:cf:e2:49:05:28:ed:
bb:e3:17:99:99:94:53:2c:ff:be:61:99:15:ee:3c:b6:a0:7d:
82:1f:15:ba:d8:95:9a:0f:9d:64:28:89:48:32:0c:2f:6f:49:
ae:29:fd:9b:71:d4:02:a5:a0:70:96:e7:41:a6:9a:0a:ea:80:
2a:cd:d4:66:f5:62:a8:2b:4a:cb:01:c9:03:b5:47:e2:59:6d:
c4:77:66:c5:9d:2f:7c:7f:bd:e5:be:5e:23:66:e7:31:c6:40:
f6:ab:a5:7b:ad:14:ec:4b:14:48:e8:d3:26:3b:e2:b2:1e:ed:
70:41:2f:d6:ad:ae:07:31:0a:b3:14:89:c2:b3:3b:ec:60:c3:
bb:d4:e4:c8:ed:20:28:5d:ca:1f:86:37:f1:2b:f2:48:08:58:
63:e6:9f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 09:17:47 2025 by rpki-client