Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
File: vZC8PjcRQLQqIdaX2DANlBCiSao.mft (raw, json)
Hash identifier: UO+spxVtyKBL8SYR+hSrULRczIznBV81LkarAWhaeYY=
Subject key identifier: C5:A9:10:8A:1A:AF:67:7D:5E:8B:62:10:5D:65:50:79:DD:14:92:0E
Authority key identifier: BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
Certificate issuer: /CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Certificate serial: 01976C62582592665FA42FBFD233AA2920AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
Manifest number: 0725
Signing time: Sat 14 Jun 2025 03:01:13 +0000
Manifest this update: Sat 14 Jun 2025 03:01:13 +0000
Manifest next update: Sun 15 Jun 2025 03:01:13 +0000
Files and hashes: 1: t8BDYn1_4F2TyunsqfKmIL3bpGQ.roa (hash: 96TEsEkP40hfvXfLq7oaqGEhgKhW300uagupuFMXgtg=)
2: vZC8PjcRQLQqIdaX2DANlBCiSao.crl (hash: se6dwmE+kV7fNE+UQop/P73JabPy2Vt6KyT9nxsFSSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:58:25:92:66:5f:a4:2f:bf:d2:33:aa:29:20:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Validity
Not Before: Jun 14 03:01:13 2025 GMT
Not After : Jun 15 03:01:13 2025 GMT
Subject: CN=c5a9108a1aaf677d5e8b62105d655079dd14920e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b6:6c:85:99:2a:6b:4c:39:aa:30:92:f5:de:
df:aa:f5:ee:d2:1d:3f:43:08:88:ec:79:fc:60:8a:
bb:7d:c6:eb:62:d5:90:5c:75:9b:db:c3:14:92:83:
50:61:0b:f1:5b:c7:7a:2e:7c:34:6d:1a:35:7e:3f:
58:1a:e6:e1:28:23:5e:85:bb:d1:37:65:f8:b2:d8:
6f:63:75:20:ce:b4:cc:bb:17:fd:26:65:9c:a5:be:
12:1c:df:23:1f:3e:9e:af:1d:0d:22:70:6f:14:43:
d4:c9:3f:e2:9f:fa:59:f4:78:f1:4e:f3:c0:8b:d1:
c6:2c:b8:11:44:bc:13:12:e9:3f:82:07:03:cb:ad:
cb:c5:68:a2:2a:1c:9a:9f:54:dc:8b:57:38:82:c2:
a4:aa:d1:bd:36:08:7a:45:37:3f:91:e6:e4:f1:0c:
9a:b5:98:86:55:57:07:fc:a4:86:f1:f5:97:ba:ef:
01:e5:a6:a9:a6:f3:82:0d:d4:f0:dd:4d:d8:31:13:
86:61:dd:a3:bd:31:bd:33:e9:c5:ca:11:d1:8d:59:
71:d9:43:08:54:80:99:99:7c:67:c6:09:ce:60:3c:
67:6d:79:81:ab:0a:e5:6b:20:92:9f:62:cb:56:74:
1f:6c:3d:f1:f2:3b:b4:2c:88:58:25:a9:99:c9:5c:
cf:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A9:10:8A:1A:AF:67:7D:5E:8B:62:10:5D:65:50:79:DD:14:92:0E
X509v3 Authority Key Identifier:
keyid:BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:96:67:d5:4c:11:e9:06:2d:4e:f7:17:1b:5d:9e:fe:75:bf:
30:a0:f6:59:4d:e7:2d:bd:ed:b3:bc:e3:9b:4c:f5:f8:76:8d:
1d:04:d2:0f:8a:0b:e1:ef:e2:54:66:9b:cb:e1:d1:ad:59:df:
fa:0b:f0:02:f2:50:78:31:80:c6:20:be:61:9d:20:52:fa:c6:
c5:70:b9:1c:45:42:1b:27:cc:6f:30:d5:f6:cd:1d:06:68:fb:
85:f3:30:28:fb:cb:24:b5:ff:0e:42:f7:5a:42:66:47:2e:77:
e8:84:13:3a:5d:57:b9:9b:d9:f6:aa:b0:b0:9f:57:7f:63:1c:
6b:85:0a:12:8d:1c:c3:e6:0e:73:8e:04:d7:10:5b:42:82:25:
ef:81:5e:dc:51:5a:b3:ea:9e:6f:ef:58:ae:5d:b1:5f:9e:74:
4f:8f:c3:ff:5a:72:a3:ae:d8:e3:26:6f:7b:e8:32:b5:cf:fd:
32:07:29:a9:af:44:d3:15:cc:67:a3:4e:80:f5:6a:87:6d:af:
12:fd:de:8f:06:78:cb:44:4d:ce:0e:76:93:94:2d:7d:af:27:
cc:3e:69:91:d2:ad:cc:3a:96:d3:ee:e6:54:40:5e:0f:03:70:
bd:d2:37:0e:d9:a7:f6:db:4d:16:d8:b5:90:09:fa:40:06:37:
9d:50:d5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:23:08 2025 by rpki-client