Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
File: vZC8PjcRQLQqIdaX2DANlBCiSao.mft (raw, json)
Hash identifier: pEtVEvQYTFcLyE4mnYpTUXxK+gHEUE8bfk0gMCdkcHI=
Subject key identifier: 7C:F1:65:F8:AA:68:54:7A:49:8D:83:CB:24:77:47:8C:D8:6D:21:49
Authority key identifier: BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
Certificate issuer: /CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Certificate serial: 0199FCFD9A09D77F2E0A3C8206F369B93B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
Manifest number: 0879
Signing time: Sun 19 Oct 2025 15:01:42 +0000
Manifest this update: Sun 19 Oct 2025 15:01:42 +0000
Manifest next update: Mon 20 Oct 2025 15:01:42 +0000
Files and hashes: 1: t8BDYn1_4F2TyunsqfKmIL3bpGQ.roa (hash: 96TEsEkP40hfvXfLq7oaqGEhgKhW300uagupuFMXgtg=)
2: vZC8PjcRQLQqIdaX2DANlBCiSao.crl (hash: NjRI2OqsXUcUwPST8AFnHRFVGFlWkN1JECaEyLDYLb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:9a:09:d7:7f:2e:0a:3c:82:06:f3:69:b9:3b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Validity
Not Before: Oct 19 15:01:42 2025 GMT
Not After : Oct 20 15:01:42 2025 GMT
Subject: CN=7cf165f8aa68547a498d83cb2477478cd86d2149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:76:07:4f:73:0d:5e:83:4c:4b:20:50:26:ac:
ee:5d:1d:e7:da:fd:d9:e1:c5:0c:b9:3a:26:ba:5d:
b9:52:ac:fc:b7:d1:31:4d:86:5e:4d:a5:bc:14:1a:
25:1a:6f:f6:ee:67:1b:ef:db:94:00:37:0e:99:22:
74:62:cd:6b:54:5d:3b:94:ee:a7:c9:85:89:f4:ea:
75:66:75:2d:1d:9b:11:18:aa:b6:22:7b:57:24:cc:
3e:ae:6b:b8:43:a3:41:ba:e8:f8:76:e8:77:a3:84:
c5:cf:3d:5f:ed:3d:27:b9:76:6d:30:9a:67:f7:31:
d6:0b:b3:f8:7f:5d:46:08:f8:12:cd:03:92:95:4d:
8d:f3:20:ae:29:eb:22:cc:2e:2f:7c:ef:5c:f8:a8:
25:fb:d2:07:ff:64:a3:5f:53:a2:79:15:7b:76:05:
08:5a:44:52:ca:7d:a5:26:c9:56:c3:eb:1a:e2:44:
98:c7:2a:ea:6d:78:54:a6:78:b5:e4:7b:24:b5:1e:
32:fa:bc:08:42:63:18:4a:7f:9a:c3:10:71:60:74:
60:94:97:85:fe:b8:14:0a:b6:26:4d:94:05:ef:b3:
bb:05:c3:c9:c4:89:d0:06:bd:90:f3:20:50:35:a1:
f3:f5:8d:95:62:1d:d2:ea:7d:18:17:17:04:10:76:
46:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F1:65:F8:AA:68:54:7A:49:8D:83:CB:24:77:47:8C:D8:6D:21:49
X509v3 Authority Key Identifier:
keyid:BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:50:41:3e:6b:07:f1:32:d4:f5:e8:76:76:58:a9:60:38:d8:
e3:b8:e2:72:56:4a:19:ae:d7:be:4a:55:f8:a6:db:60:47:2e:
2c:bb:f1:be:0e:23:81:0b:9e:b5:ed:48:cb:b6:59:f0:b7:3a:
d7:53:7a:2b:30:5b:d3:61:62:b1:5b:36:ff:85:b7:b9:21:6a:
fe:e7:92:62:69:39:56:98:eb:02:c0:cd:33:cd:ee:e9:a5:fb:
a2:45:77:57:ed:2d:e1:ec:dd:b4:2b:07:ce:b8:0b:1c:00:8f:
10:09:ab:84:70:4e:36:05:1c:ed:ea:45:55:25:8a:c7:88:a9:
16:ec:76:18:c0:58:48:d8:56:a7:80:44:03:33:5a:b4:68:46:
49:a3:68:62:36:09:da:a3:db:38:a7:52:80:a3:31:ab:51:ec:
26:72:3e:81:dd:33:c1:88:d9:0a:4b:9d:9e:8f:bc:f0:e8:96:
3a:52:cc:98:be:84:43:b4:d0:de:00:2a:b6:e6:b9:6c:a1:6e:
39:1e:ec:80:bb:09:2b:d0:8c:a0:bd:e6:d7:bd:d4:96:7d:83:
0e:e3:a4:eb:83:cb:9e:bf:15:40:d4:c5:aa:72:55:8a:a1:fd:
7d:8a:41:69:35:71:bd:a9:fc:8c:8a:3d:c2:2f:c5:5b:e1:0a:
16:bb:50:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:11:02 2025 by rpki-client