Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
File: vZyAy-XVeXI0X1-l66NchoieVco.mft (raw, json)
Hash identifier: mCTbnyWaNxmtLqKJV21nhw9+WSM0Riu9cNXBUQKON+s=
Subject key identifier: 50:C2:CA:76:4F:C1:5E:B2:10:7B:F2:67:A8:23:4B:31:36:B8:08:EC
Authority key identifier: BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA
Certificate issuer: /CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca
Certificate serial: 01968DA66C0FCEEC6C654FF89FDCC891041A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
Manifest number: 0E9A
Signing time: Thu 01 May 2025 21:00:16 +0000
Manifest this update: Thu 01 May 2025 21:00:16 +0000
Manifest next update: Fri 02 May 2025 21:00:16 +0000
Files and hashes: 1: 8MA87xtZZH4blNN7ljK8ECsUe7c.roa (hash: x/OfLayawCptHxvyhoaHaoE0ADY/ycq4IXhQCadpAd0=)
2: vZyAy-XVeXI0X1-l66NchoieVco.crl (hash: NzjFyFqPY8T8o9OXoXk0yqDTz1CYu2UzgupXakw6HCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 19:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:a6:6c:0f:ce:ec:6c:65:4f:f8:9f:dc:c8:91:04:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca
Validity
Not Before: May 1 21:00:16 2025 GMT
Not After : May 2 21:00:16 2025 GMT
Subject: CN=50c2ca764fc15eb2107bf267a8234b3136b808ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:05:8e:72:8a:16:89:29:f8:0a:40:43:f8:75:
ef:91:6a:38:48:a0:4a:6a:68:22:dd:2a:e9:3b:f4:
4a:98:b2:ad:d9:29:0f:d3:8f:38:ee:d4:0b:3d:3b:
61:8b:2f:d5:e3:5b:fc:f7:2a:ad:16:fd:5b:ac:b8:
cd:b3:b3:3a:ad:a6:65:75:33:05:f1:fb:b8:84:cd:
a7:6c:8b:5d:14:50:5c:94:63:ee:b0:3d:7f:89:e0:
e7:ee:80:51:a4:0b:a2:57:9c:1f:43:7a:40:41:77:
f1:4d:18:80:8c:25:31:67:bb:97:ef:f6:01:80:34:
c4:a8:73:57:34:bd:68:80:5e:ff:09:b1:7c:be:ca:
16:96:39:1d:d2:f7:a3:fa:59:29:15:d6:8d:e4:76:
29:d3:48:41:ab:54:78:8a:b4:11:c7:b6:47:b0:0c:
73:98:0a:2b:fa:48:17:98:a1:32:e4:b6:08:64:55:
d8:9b:c8:e1:70:fd:9a:95:aa:aa:4a:4e:3a:75:5f:
6a:c7:37:ab:cf:d9:63:d6:d6:06:34:6f:3b:f3:36:
f3:9a:4b:3f:0f:a9:f1:eb:74:6f:46:61:f7:3a:db:
2c:e0:24:f8:c7:c4:00:d8:97:51:84:ff:89:4e:51:
55:4b:b0:68:b1:97:25:a8:09:4a:7b:db:d5:7f:89:
14:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C2:CA:76:4F:C1:5E:B2:10:7B:F2:67:A8:23:4B:31:36:B8:08:EC
X509v3 Authority Key Identifier:
keyid:BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:62:c2:51:8c:1c:f4:29:32:d0:97:d7:77:cf:d9:15:b8:41:
67:8e:de:65:27:0a:a2:49:7b:ea:6c:59:01:ca:b7:6f:eb:00:
91:7a:fc:8e:97:85:7b:59:32:65:4d:64:66:d1:7f:02:44:05:
49:71:0e:59:fa:9b:cb:e6:43:a3:6d:fc:e5:37:2c:c1:ac:e5:
9d:d2:dc:b0:97:e2:06:d7:5b:1f:68:19:82:ce:5e:2e:ab:0a:
af:6b:c0:5b:24:2e:23:77:77:45:47:85:6f:61:6b:56:33:06:
47:a4:16:58:d2:80:db:03:cd:fa:36:20:de:f3:bc:be:c9:dc:
bb:8a:c8:47:44:5d:06:27:63:00:99:50:ca:22:c0:3b:01:b9:
25:64:ba:d9:85:54:96:7b:b0:a2:32:3e:b6:fa:22:17:8f:32:
0d:d4:99:06:68:41:61:6d:35:d6:02:b6:bd:90:3e:98:29:cf:
15:73:10:cd:d4:6d:28:c4:ec:2e:83:c5:81:e0:f9:51:29:f6:
32:25:19:30:74:0c:07:40:18:0b:c4:85:fb:11:cc:83:cb:16:
14:1e:64:d7:21:73:27:64:64:ce:47:c2:62:ea:75:91:d3:02:
d8:4d:a3:b1:b6:24:93:d7:2a:ff:29:27:cf:0d:33:82:38:57:
5d:55:57:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 03:57:31 2025 by rpki-client