Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
File: vZyAy-XVeXI0X1-l66NchoieVco.mft (raw, json)
Hash identifier: SMcrFO8W1Z2wv2HaIpwB2YDiD//Vg4znB9JvEifcliE=
Subject key identifier: 7A:F9:23:DE:71:EB:53:5C:06:31:A2:00:AE:19:34:13:19:C2:36:D1
Authority key identifier: BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA
Certificate issuer: /CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca
Certificate serial: 01989CDDC01F07D31E52AED7003F3E16D1B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
Manifest number: 0FAB
Signing time: Tue 12 Aug 2025 06:00:34 +0000
Manifest this update: Tue 12 Aug 2025 06:00:34 +0000
Manifest next update: Wed 13 Aug 2025 06:00:34 +0000
Files and hashes: 1: 8MA87xtZZH4blNN7ljK8ECsUe7c.roa (hash: x/OfLayawCptHxvyhoaHaoE0ADY/ycq4IXhQCadpAd0=)
2: vZyAy-XVeXI0X1-l66NchoieVco.crl (hash: xA51/3qQW7mpc5j7nk13RDHreOEYEXVIQr5pWdOmzuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9c:dd:c0:1f:07:d3:1e:52:ae:d7:00:3f:3e:16:d1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca
Validity
Not Before: Aug 12 06:00:34 2025 GMT
Not After : Aug 13 06:00:34 2025 GMT
Subject: CN=7af923de71eb535c0631a200ae19341319c236d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:18:01:a3:d6:ae:9b:3f:1f:11:f5:ce:19:32:
3b:de:46:7e:68:e3:3c:25:64:a6:9c:46:e0:f4:56:
cd:9b:3f:74:25:ab:18:d8:fd:ab:81:42:07:3a:e7:
16:65:16:85:32:65:e0:ca:ef:67:20:a4:43:b2:32:
ae:2e:5b:31:13:1b:08:6f:57:fc:e1:02:87:ab:e6:
f7:8e:5f:f3:7d:ca:8c:cf:f6:4d:56:3f:85:4d:93:
56:eb:ef:66:92:79:38:4f:5a:43:99:c6:ec:05:28:
e2:77:43:33:b5:bb:96:22:85:55:21:3e:9b:e1:58:
bd:e0:34:e7:bf:7f:16:a8:20:85:97:e8:79:61:a4:
3e:5d:3c:48:9a:8a:41:0b:72:84:86:f6:6e:52:f6:
cb:af:d3:2e:56:45:90:15:c9:5d:bf:cf:e2:e8:00:
ef:57:d8:f9:ea:12:2b:15:7c:38:f6:8b:4f:9f:b8:
1b:db:fc:95:f2:fe:4f:37:23:d2:ce:c1:41:f0:03:
13:1a:8a:c8:38:2c:d6:39:f0:50:fa:5a:19:0a:57:
79:ed:3f:c1:5d:3b:ba:7b:39:c9:75:28:d8:d0:10:
3f:ab:16:a9:77:b8:ca:b4:54:43:21:c2:dd:d6:65:
48:ea:05:e2:1d:c1:5c:b3:41:19:91:20:0d:9b:db:
41:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F9:23:DE:71:EB:53:5C:06:31:A2:00:AE:19:34:13:19:C2:36:D1
X509v3 Authority Key Identifier:
keyid:BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d6:3b:94:3f:a7:c7:4a:18:c7:8f:90:38:25:6f:a3:ae:89:
35:a3:b7:37:7d:cd:9f:3c:c6:55:f2:fc:f8:cb:0a:0c:8b:a3:
f6:93:8c:c0:06:74:cd:38:f0:00:ae:40:fd:58:87:3a:03:40:
9f:2c:b6:a5:9c:ca:33:f9:c5:44:d1:0e:bf:ea:df:50:5b:13:
01:53:a3:0e:81:9a:6e:7a:8a:3c:74:a3:2b:a8:d9:7a:97:0c:
c3:c2:1a:d3:ec:a9:5e:c8:2d:c7:3b:a7:c6:0b:cf:d5:7a:ac:
87:dd:51:ad:69:67:3c:0c:e0:00:a8:63:ae:5e:c7:18:33:76:
71:cb:0a:be:67:ca:d6:ea:53:5f:b1:33:e9:9b:3c:51:5a:e4:
2e:55:a5:3c:0f:36:cf:b0:04:1b:45:33:f6:28:9f:6f:98:7b:
3a:0b:f1:d9:77:40:6d:aa:b1:13:85:ed:8c:05:df:ab:2f:2e:
aa:29:df:15:41:f9:f2:a2:1d:1f:d9:f5:20:4b:c3:4c:77:45:
88:06:80:56:a7:a9:c5:0c:ed:e7:21:9b:11:bc:24:72:b7:a8:
69:19:34:a5:ef:b8:54:8d:9b:5a:70:32:f5:b7:c4:98:5e:6f:
72:c7:ea:6e:5e:ab:3d:03:04:25:c6:fb:d8:ec:58:54:f4:64:
d7:8b:77:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZic3cAfB9MeUq7XAD8+FtGwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkOWM4MGNiZTVkNTc5NzIzNDVmNWZhNWViYTM1Yzg2ODg5
ZTU1Y2EwHhcNMjUwODEyMDYwMDM0WhcNMjUwODEzMDYwMDM0WjAzMTEwLwYDVQQD
Eyg3YWY5MjNkZTcxZWI1MzVjMDYzMWEyMDBhZTE5MzQxMzE5YzIzNmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xgBo9aumz8fEfXOGTI73kZ+aOM8
JWSmnEbg9FbNmz90JasY2P2rgUIHOucWZRaFMmXgyu9nIKRDsjKuLlsxExsIb1f8
4QKHq+b3jl/zfcqMz/ZNVj+FTZNW6+9mknk4T1pDmcbsBSjid0MztbuWIoVVIT6b
4Vi94DTnv38WqCCFl+h5YaQ+XTxImopBC3KEhvZuUvbLr9MuVkWQFcldv8/i6ADv
V9j56hIrFXw49otPn7gb2/yV8v5PNyPSzsFB8AMTGorIOCzWOfBQ+loZCld57T/B
XTu6eznJdSjY0BA/qxapd7jKtFRDIcLd1mVI6gXiHcFcs0EZkSANm9tBIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHr5I95x61NcBjGiAK4ZNBMZwjbRMB8GA1UdIwQY
MBaAFL2cgMvl1XlyNF9fpeujXIaInlXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlp5QXktWFZlWEkwWDEtbDY2TmNob2llVmNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9iZGNiYzQtNjNiNy00YWU1LTg2ODQt
NjBlN2U0NTM5OWU2LzEvdlp5QXktWFZlWEkwWDEtbDY2TmNob2llVmNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9iZGNiYzQtNjNiNy00YWU1LTg2ODQtNjBlN2U0NTM5OWU2
LzEvdlp5QXktWFZlWEkwWDEtbDY2TmNob2llVmNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa9Y7lD+n
x0oYx4+QOCVvo66JNaO3N33NnzzGVfL8+MsKDIuj9pOMwAZ0zTjwAK5A/ViHOgNA
nyy2pZzKM/nFRNEOv+rfUFsTAVOjDoGabnqKPHSjK6jZepcMw8Ia0+ypXsgtxzun
xgvP1Xqsh91RrWlnPAzgAKhjrl7HGDN2ccsKvmfK1upTX7Ez6Zs8UVrkLlWlPA82
z7AEG0Uz9iifb5h7Ogvx2XdAbaqxE4XtjAXfqy8uqinfFUH58qIdH9n1IEvDTHdF
iAaAVqepxQzt5yGbEbwkcreoaRk0pe+4VI2bWnAy9bfEmF5vcsfqbl6rPQMEJcb7
2OxYVPRk14t30Q==
-----END CERTIFICATE-----
Generated at Tue Aug 12 13:41:32 2025 by rpki-client