Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
File: vZyAy-XVeXI0X1-l66NchoieVco.mft (raw, json)
Hash identifier: opr1wtD1s38HJuReT/2oH5sGIV3HOgapfp9isviiPA0=
Subject key identifier: 42:25:37:DB:C3:54:25:EE:6D:2E:52:CE:0F:FE:93:B7:83:5A:0C:F6
Authority key identifier: BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA
Certificate issuer: /CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca
Certificate serial: 0196C796257C8C2D644CB68AEA006D20092E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
Manifest number: 0EB8
Signing time: Tue 13 May 2025 03:00:27 +0000
Manifest this update: Tue 13 May 2025 03:00:27 +0000
Manifest next update: Wed 14 May 2025 03:00:27 +0000
Files and hashes: 1: 8MA87xtZZH4blNN7ljK8ECsUe7c.roa (hash: x/OfLayawCptHxvyhoaHaoE0ADY/ycq4IXhQCadpAd0=)
2: vZyAy-XVeXI0X1-l66NchoieVco.crl (hash: SLvLhC/6T0+qGup82zCv6Jz85+vkRXJii82mmAZCplY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:96:25:7c:8c:2d:64:4c:b6:8a:ea:00:6d:20:09:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca
Validity
Not Before: May 13 03:00:27 2025 GMT
Not After : May 14 03:00:27 2025 GMT
Subject: CN=422537dbc35425ee6d2e52ce0ffe93b7835a0cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7d:c7:c1:81:d6:3c:90:c6:ce:21:29:a6:76:
ee:78:5e:b0:ec:8b:ae:ea:eb:78:81:59:f7:bb:e7:
d6:58:80:2d:c3:69:c3:af:37:75:d3:d0:4d:8b:90:
86:12:f0:b2:e4:d5:6b:e4:83:62:29:50:99:d9:a8:
90:db:16:fc:64:4f:9e:09:a2:27:0e:0c:6c:c8:2b:
c7:5d:d6:7f:41:b2:23:18:f5:68:f8:12:dc:45:b6:
46:34:92:60:63:d5:fa:62:87:b6:6d:a2:d6:89:f1:
38:9e:15:9c:be:73:b2:19:28:86:e0:14:cc:da:6c:
84:68:c0:72:2b:84:fd:ce:45:3d:c6:f1:21:4b:a0:
f2:ac:29:b3:de:fc:d8:3a:6b:2c:23:dd:75:da:be:
c2:7a:6a:3d:f7:15:6d:19:03:99:0e:06:2a:e8:76:
58:b2:61:d3:15:e9:b2:6e:f2:ee:d8:c8:0b:ad:8d:
54:dd:a1:10:0a:4f:9e:5b:cb:9c:b5:48:c7:db:37:
5b:6f:9a:ac:01:bd:8f:37:a2:37:29:de:69:7f:dc:
d6:85:48:d3:d1:34:7e:7e:1c:6d:65:fd:d5:c1:56:
e0:da:a5:17:58:79:3f:d6:1d:60:a5:4f:18:7b:d0:
e0:40:17:89:a1:c1:24:35:9c:54:12:95:e5:34:f5:
7b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:25:37:DB:C3:54:25:EE:6D:2E:52:CE:0F:FE:93:B7:83:5A:0C:F6
X509v3 Authority Key Identifier:
keyid:BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:36:6c:7a:5c:03:9b:33:ac:0a:19:fb:f7:15:3f:f0:fb:02:
f6:ab:4a:86:9f:f4:cb:b5:09:23:e5:4a:6a:18:2f:2a:cf:9b:
41:67:db:97:5d:80:43:0b:c6:09:02:c8:f7:af:ea:fe:67:3f:
12:d6:42:cc:87:ca:76:e5:b3:36:47:53:56:23:84:85:e6:32:
6c:b7:42:60:fb:fe:51:51:ad:00:a4:87:59:da:24:53:0d:19:
69:26:71:8d:41:d0:d2:e5:91:ee:c5:4c:c9:d4:7b:6e:9e:70:
12:6d:e4:ee:d1:5d:65:ba:25:fa:82:ea:c3:09:0b:b7:8f:9a:
9e:ad:bb:23:f4:8c:06:9d:2d:c7:82:e3:5e:ae:89:ed:6b:58:
41:92:0c:35:06:10:e4:c6:d9:22:06:70:7e:99:fe:4c:78:8f:
2e:64:09:d9:0a:36:f1:68:95:1a:fa:f1:0a:21:e6:e9:a7:4a:
03:a8:c1:31:e1:94:1f:e4:39:ce:f7:cb:28:9f:22:49:3e:79:
57:6e:df:f5:3f:12:9e:c0:99:40:91:28:25:7a:b9:fd:1c:5e:
41:eb:8b:2a:07:a0:bd:1e:da:dc:3f:b9:ce:81:58:a9:b2:07:
08:97:f2:b3:e3:dd:bd:60:11:45:67:53:69:b1:20:e5:4a:ed:
4b:19:a3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:24:11 2025 by rpki-client