Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
File: vZyAy-XVeXI0X1-l66NchoieVco.mft (raw, json)
Hash identifier: WCMFafoDZ6S5diC12Lh/BSvw64s2GkTLou9KmI4PAkA=
Subject key identifier: 8C:96:56:2B:33:2A:14:E6:97:79:F7:E0:BD:A5:03:11:C5:0C:5E:B9
Authority key identifier: BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA
Certificate issuer: /CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca
Certificate serial: 019788B449A8C53619FF819BE197F5DA3C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
Manifest number: 0F1C
Signing time: Thu 19 Jun 2025 15:00:05 +0000
Manifest this update: Thu 19 Jun 2025 15:00:05 +0000
Manifest next update: Fri 20 Jun 2025 15:00:05 +0000
Files and hashes: 1: 8MA87xtZZH4blNN7ljK8ECsUe7c.roa (hash: x/OfLayawCptHxvyhoaHaoE0ADY/ycq4IXhQCadpAd0=)
2: vZyAy-XVeXI0X1-l66NchoieVco.crl (hash: GGWM+FYhQYExM/hj2wbwTYBxUkuuF58MOfMtbvAKLEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:b4:49:a8:c5:36:19:ff:81:9b:e1:97:f5:da:3c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca
Validity
Not Before: Jun 19 15:00:05 2025 GMT
Not After : Jun 20 15:00:05 2025 GMT
Subject: CN=8c96562b332a14e69779f7e0bda50311c50c5eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bb:89:0d:9c:99:6e:f8:bd:a5:0c:e2:e2:b5:
ae:58:c4:0e:b4:4a:57:b2:6e:c3:37:79:9e:69:28:
c9:bb:75:a1:57:79:64:39:58:38:b8:bb:dd:59:d3:
c2:2d:ce:45:fc:6e:b2:30:8d:58:74:9a:47:be:cf:
e3:e6:d6:57:4f:29:93:44:79:2e:63:e4:72:82:d5:
83:2a:f2:c1:92:c8:1f:b1:f3:b1:64:89:85:95:29:
37:a3:ad:ea:90:2e:bc:f4:ca:ec:97:89:84:55:4e:
24:29:f4:d4:d6:be:4d:ff:34:32:1f:be:ad:f0:96:
a2:c0:c9:67:ad:7d:3f:86:be:f6:75:81:22:b1:04:
f9:90:a5:b9:eb:47:49:ac:91:15:41:86:38:0d:1e:
44:d5:09:73:65:9f:af:31:9b:b5:83:ce:88:f2:c1:
9b:29:44:31:bb:cb:f8:b4:03:d7:f4:b8:df:f3:e4:
75:a6:a5:b3:ea:2c:c1:23:ad:e6:05:87:7f:83:4e:
d5:40:b2:f2:5b:4f:38:f6:d5:1d:35:ba:57:97:df:
de:63:15:7d:14:3e:48:7b:70:1c:b2:55:66:8b:c9:
97:79:17:14:a5:af:97:b2:a9:74:a3:2c:1e:14:7b:
4e:ee:60:fb:28:da:a6:aa:ec:03:59:62:ec:95:de:
d0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:96:56:2B:33:2A:14:E6:97:79:F7:E0:BD:A5:03:11:C5:0C:5E:B9
X509v3 Authority Key Identifier:
keyid:BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:5a:bb:88:aa:80:7e:a9:d1:d9:68:ee:74:3c:70:05:30:09:
1d:81:c6:65:1c:0c:2a:a3:f1:33:c9:a6:38:ff:f2:bb:08:02:
ae:67:2e:13:47:fc:5a:4d:39:f9:a7:32:0c:ac:0a:0c:a3:9b:
df:c2:1d:6f:92:db:bc:0b:81:9b:90:0f:f4:4a:ee:1a:58:80:
08:7b:8d:05:95:9c:6e:b8:86:fe:72:dd:64:24:fc:c4:e5:e1:
0a:69:a1:f4:77:42:7f:a9:af:06:8b:77:3a:46:47:45:4e:d6:
ba:85:95:d2:55:c7:2c:ee:ba:6d:27:ab:f9:e1:d6:38:3e:0b:
11:e9:84:32:f0:7b:da:b3:10:a9:74:50:8b:07:65:0b:fc:06:
2d:43:92:1b:60:cd:6b:ce:80:0b:b1:bd:8a:00:c3:a6:35:3f:
3e:09:fd:b3:f2:7b:44:e0:ca:fd:d5:37:68:93:f0:ce:04:a9:
84:4f:06:0d:9a:f9:55:08:9f:05:31:24:9d:70:77:a1:c2:57:
4e:a6:73:e1:78:f8:e5:5d:c4:be:d1:54:9f:fc:1d:80:2a:65:
d8:b9:ef:9a:6c:c8:cd:8e:4b:4f:90:45:c0:bf:05:b9:17:2e:
b5:37:9a:98:9f:2b:89:0b:3a:da:83:a6:ce:df:81:db:3d:d9:
62:ed:6e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 02:19:10 2025 by rpki-client