Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
File: vZyAy-XVeXI0X1-l66NchoieVco.mft (raw, json)
Hash identifier: fi39plZfIqxrgJuwW2w9Z7hHpNuyL+OzYDbrxigUgsM=
Subject key identifier: 54:B1:B7:A6:35:07:58:E7:2F:16:07:24:E6:0C:C9:81:37:2D:CF:F8
Authority key identifier: BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA
Certificate issuer: /CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca
Certificate serial: 019A552D878414C790153F3FD0C0DDB41BF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
Manifest number: 108F
Signing time: Wed 05 Nov 2025 18:00:38 +0000
Manifest this update: Wed 05 Nov 2025 18:00:38 +0000
Manifest next update: Thu 06 Nov 2025 18:00:38 +0000
Files and hashes: 1: 8MA87xtZZH4blNN7ljK8ECsUe7c.roa (hash: x/OfLayawCptHxvyhoaHaoE0ADY/ycq4IXhQCadpAd0=)
2: vZyAy-XVeXI0X1-l66NchoieVco.crl (hash: GBBzG3CViySc9RA0WARxmWuMJfad0FNr8i8wHlE5Sdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 18:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2d:87:84:14:c7:90:15:3f:3f:d0:c0:dd:b4:1b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca
Validity
Not Before: Nov 5 18:00:38 2025 GMT
Not After : Nov 6 18:00:38 2025 GMT
Subject: CN=54b1b7a6350758e72f160724e60cc981372dcff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:00:f7:88:e4:57:a0:dd:a0:77:e1:a3:b9:b8:
cf:92:65:16:9b:94:30:cc:a5:27:da:61:15:62:22:
72:e7:47:3d:fb:c1:74:7e:b2:06:5b:b8:e6:13:46:
e4:f6:6f:23:77:12:fd:34:51:61:cc:c1:b3:31:3b:
34:b6:55:6f:e1:89:04:a1:5b:17:c1:80:a5:2d:9b:
8e:eb:13:43:40:18:ea:c1:17:19:6d:ed:82:bb:eb:
1e:a3:00:6e:d4:2b:9d:a2:8f:79:f2:ee:1a:6f:c7:
6a:d1:e7:9d:29:c4:8e:02:22:51:b8:78:a7:3b:a2:
af:f2:19:dc:36:e4:23:0e:2a:8a:8a:4e:59:58:9a:
d0:41:52:42:85:68:46:e7:c3:5a:e3:02:9e:95:e1:
c4:5e:aa:86:85:e1:86:e2:cf:6f:84:0e:59:e6:da:
94:8a:39:54:ba:2a:fd:20:5f:07:c3:11:bc:93:b3:
aa:b5:59:f6:3d:07:ed:c5:b5:b6:58:4e:59:ed:eb:
81:67:e4:e1:f7:c7:29:0a:60:89:49:ef:c5:00:6d:
38:1b:6d:75:21:2d:5d:e1:ed:b6:d8:cd:f6:5b:63:
15:35:45:28:88:90:c2:10:77:9d:3b:17:4a:bb:e4:
e5:7d:f1:d5:82:13:d8:89:61:44:12:c8:45:ec:dd:
3d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B1:B7:A6:35:07:58:E7:2F:16:07:24:E6:0C:C9:81:37:2D:CF:F8
X509v3 Authority Key Identifier:
keyid:BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:fd:e6:f2:8d:0c:b0:52:b9:13:c6:38:e7:2c:01:97:c6:32:
50:0b:21:cb:5f:36:7d:dd:e4:87:68:c0:b0:13:71:8c:aa:4e:
6b:6e:ba:20:d9:93:68:e5:c2:e0:00:e8:c6:f9:cc:ba:04:13:
6f:36:f9:7b:d6:d8:15:3d:d9:c6:8b:5e:3a:4f:e0:2f:b2:c3:
52:fe:d7:23:cc:a8:13:f2:9f:fa:7b:14:86:05:05:b8:9c:67:
ff:f4:5a:84:27:87:c1:7c:57:f3:2f:92:d8:63:17:75:a1:b4:
46:dc:a6:4a:f1:c3:c6:39:dd:93:0f:8a:3c:cd:0a:22:ba:52:
2f:b6:ad:78:69:68:34:f2:54:09:62:b9:cf:a5:48:50:d0:5d:
f1:1c:21:72:15:3b:de:66:38:4e:55:88:3d:dc:de:17:b6:18:
9d:bb:61:d6:22:b2:3b:0e:c9:27:32:5b:ed:59:6f:9b:6a:7c:
a3:3d:ad:27:6f:11:c4:85:34:98:30:1d:27:2c:0c:77:31:d5:
98:ab:c9:a4:5b:2c:e2:de:63:da:ac:78:85:63:82:43:77:e6:
e8:a6:8c:8f:6a:63:fe:be:38:73:f2:bf:3b:6c:e8:d7:54:c5:
10:b8:47:2d:87:4c:a2:6b:d6:cb:86:7a:91:b9:2d:69:f3:b2:
d9:fd:46:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpVLYeEFMeQFT8/0MDdtBvxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkOWM4MGNiZTVkNTc5NzIzNDVmNWZhNWViYTM1Yzg2ODg5
ZTU1Y2EwHhcNMjUxMTA1MTgwMDM4WhcNMjUxMTA2MTgwMDM4WjAzMTEwLwYDVQQD
Eyg1NGIxYjdhNjM1MDc1OGU3MmYxNjA3MjRlNjBjYzk4MTM3MmRjZmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wD3iORXoN2gd+GjubjPkmUWm5Qw
zKUn2mEVYiJy50c9+8F0frIGW7jmE0bk9m8jdxL9NFFhzMGzMTs0tlVv4YkEoVsX
wYClLZuO6xNDQBjqwRcZbe2Cu+seowBu1Cudoo958u4ab8dq0eedKcSOAiJRuHin
O6Kv8hncNuQjDiqKik5ZWJrQQVJChWhG58Na4wKeleHEXqqGheGG4s9vhA5Z5tqU
ijlUuir9IF8HwxG8k7OqtVn2PQftxbW2WE5Z7euBZ+Th98cpCmCJSe/FAG04G211
IS1d4e222M32W2MVNUUoiJDCEHedOxdKu+TlffHVghPYiWFEEshF7N09IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFSxt6Y1B1jnLxYHJOYMyYE3Lc/4MB8GA1UdIwQY
MBaAFL2cgMvl1XlyNF9fpeujXIaInlXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlp5QXktWFZlWEkwWDEtbDY2TmNob2llVmNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9iZGNiYzQtNjNiNy00YWU1LTg2ODQt
NjBlN2U0NTM5OWU2LzEvdlp5QXktWFZlWEkwWDEtbDY2TmNob2llVmNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9iZGNiYzQtNjNiNy00YWU1LTg2ODQtNjBlN2U0NTM5OWU2
LzEvdlp5QXktWFZlWEkwWDEtbDY2TmNob2llVmNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAov3m8o0M
sFK5E8Y45ywBl8YyUAshy182fd3kh2jAsBNxjKpOa266INmTaOXC4ADoxvnMugQT
bzb5e9bYFT3ZxoteOk/gL7LDUv7XI8yoE/Kf+nsUhgUFuJxn//RahCeHwXxX8y+S
2GMXdaG0RtymSvHDxjndkw+KPM0KIrpSL7ateGloNPJUCWK5z6VIUNBd8RwhchU7
3mY4TlWIPdzeF7YYnbth1iKyOw7JJzJb7Vlvm2p8oz2tJ28RxIU0mDAdJywMdzHV
mKvJpFss4t5j2qx4hWOCQ3fm6KaMj2pj/r44c/K/O2zo11TFELhHLYdMomvWy4Z6
kbktafOy2f1GLA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 23:05:50 2025 by rpki-client