Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
File: vZyAy-XVeXI0X1-l66NchoieVco.mft (raw, json)
Hash identifier: 4r0cjUqP9o4TDn6VFj07cwcTePVRY7kix/vCyTKnm58=
Subject key identifier: AF:5F:DF:4C:F9:A2:00:63:B5:F2:3F:7A:A8:19:44:D8:24:16:EA:93
Authority key identifier: BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA
Certificate issuer: /CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca
Certificate serial: 019A003507784B3E8E4DCA45B50B1A7A8A1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
Manifest number: 1063
Signing time: Mon 20 Oct 2025 06:01:06 +0000
Manifest this update: Mon 20 Oct 2025 06:01:06 +0000
Manifest next update: Tue 21 Oct 2025 06:01:06 +0000
Files and hashes: 1: 8MA87xtZZH4blNN7ljK8ECsUe7c.roa (hash: x/OfLayawCptHxvyhoaHaoE0ADY/ycq4IXhQCadpAd0=)
2: vZyAy-XVeXI0X1-l66NchoieVco.crl (hash: JJk/r+jvWatw0EWfFxZj7P9wpn8Af4DpiseRr8w7gl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:07:78:4b:3e:8e:4d:ca:45:b5:0b:1a:7a:8a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca
Validity
Not Before: Oct 20 06:01:06 2025 GMT
Not After : Oct 21 06:01:06 2025 GMT
Subject: CN=af5fdf4cf9a20063b5f23f7aa81944d82416ea93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:55:89:3a:0e:b0:3f:45:47:7d:a4:e6:35:f2:
64:9d:94:4c:05:bd:65:16:7d:b8:80:f0:4a:de:a8:
f1:e5:69:c1:57:3b:7d:b2:77:63:ff:80:08:9d:cf:
3e:29:dc:5d:06:e4:54:86:cf:c2:bb:38:74:e8:b7:
4a:a7:c4:99:51:c6:24:93:ed:00:0c:03:67:90:1f:
e4:5a:fb:dd:7a:5f:ce:8e:f8:6f:4c:da:0c:38:79:
0c:50:c6:db:17:fe:df:5f:4b:f6:e4:3f:97:75:b2:
cb:6f:c4:8f:91:00:14:97:82:06:d8:46:b2:27:a2:
65:c1:58:b5:71:7a:91:8d:49:d1:61:a0:77:aa:7c:
8a:ce:9e:d9:f0:6a:f8:63:95:ff:4a:18:a3:06:62:
b8:c0:44:18:26:98:9b:3f:28:93:10:79:c9:2f:98:
ca:2f:66:ea:85:59:37:d7:a7:80:6b:c6:bc:a5:96:
ee:4b:61:e9:9d:1f:f7:e6:fc:46:8e:14:cb:8a:6f:
74:9a:ac:93:d7:69:1a:cd:fa:db:c7:0f:9f:ae:46:
4e:5b:dc:b2:bd:44:3b:1e:d0:46:af:54:84:bd:6a:
5e:7d:cb:58:f4:af:f7:35:90:b8:cd:4f:79:da:2f:
80:6a:e0:75:b9:23:5a:12:f9:59:72:71:8b:f4:61:
27:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:5F:DF:4C:F9:A2:00:63:B5:F2:3F:7A:A8:19:44:D8:24:16:EA:93
X509v3 Authority Key Identifier:
keyid:BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:22:32:ca:70:1e:ec:07:e8:a4:33:6d:6e:26:66:e0:6c:73:
c4:21:72:a7:6d:5a:13:f5:17:cf:d3:15:c1:4f:e7:e0:18:22:
9c:e7:41:78:51:92:b6:fe:e8:96:ce:a8:01:5a:19:6e:ce:83:
03:71:89:01:dc:20:31:2c:20:78:2f:7a:a7:e0:43:9a:93:f4:
ed:5f:a8:2b:b4:48:d0:43:9a:6a:2c:6b:08:9c:45:d2:58:83:
70:92:f0:c3:10:b8:52:66:e3:aa:56:18:d7:9e:f1:a7:7e:f7:
e2:b2:5b:93:4a:42:5a:2c:c0:4f:39:f7:4c:27:ca:ea:62:9c:
62:17:ec:2c:33:0e:21:68:24:9a:63:4e:b9:19:81:98:01:de:
c5:8b:3f:af:f4:3a:01:ee:a8:13:c7:fc:10:3c:66:26:ab:08:
21:dd:90:ac:76:05:50:38:90:ee:89:e5:1a:ff:03:77:a2:b9:
a5:40:a6:6a:4a:5a:8d:36:24:67:0b:aa:39:d2:ec:47:8c:18:
87:76:83:9a:a7:c7:69:30:e8:ce:78:70:27:16:fe:24:e7:a6:
1b:62:ba:e4:32:93:a0:82:3b:5a:9d:7c:24:da:5b:59:2d:38:
b8:87:1f:e2:dd:ae:db:1f:75:bf:d0:81:55:72:11:e0:34:dd:
af:b7:30:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:56:14 2025 by rpki-client