Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
File: vZC8PjcRQLQqIdaX2DANlBCiSao.mft (raw, json)
Hash identifier: 1BrnRnbyFtiemesMsFdekQ/zBPmeO1gDXDMN3X03ye0=
Subject key identifier: 63:BB:17:59:38:48:B5:E3:AE:A4:4D:09:AA:2E:CA:D1:CD:94:ED:F6
Authority key identifier: BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
Certificate issuer: /CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Certificate serial: 0198D583D7C3966BA77EBEDCBE31C5C42AC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
Manifest number: 07E0
Signing time: Sat 23 Aug 2025 06:00:44 +0000
Manifest this update: Sat 23 Aug 2025 06:00:44 +0000
Manifest next update: Sun 24 Aug 2025 06:00:44 +0000
Files and hashes: 1: t8BDYn1_4F2TyunsqfKmIL3bpGQ.roa (hash: 96TEsEkP40hfvXfLq7oaqGEhgKhW300uagupuFMXgtg=)
2: vZC8PjcRQLQqIdaX2DANlBCiSao.crl (hash: B6UN1H5X6DCfuHtZEXlNhH6ub2RZ42wFXS9BdzvAMcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:d7:c3:96:6b:a7:7e:be:dc:be:31:c5:c4:2a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Validity
Not Before: Aug 23 06:00:44 2025 GMT
Not After : Aug 24 06:00:44 2025 GMT
Subject: CN=63bb17593848b5e3aea44d09aa2ecad1cd94edf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3e:bd:51:41:2a:e4:9d:1e:b3:6a:ac:4c:d8:
18:06:b3:e6:41:c6:7d:04:7a:f6:94:5b:86:5e:e4:
42:0b:0a:5d:7b:c5:56:21:6b:b6:ee:8e:7f:53:0a:
e2:47:1f:61:4f:81:bc:fc:7f:8f:79:72:f5:9c:af:
e3:a6:22:0f:17:f6:4b:1a:27:3f:7b:21:c9:90:91:
3c:8e:9e:d5:91:3e:77:ee:2c:b8:ac:46:21:9c:c3:
59:bf:d7:e7:db:bb:4e:a4:74:9c:2a:81:95:2b:ad:
12:98:ba:21:a3:60:5a:28:dd:04:1e:48:62:cf:7b:
59:67:85:32:ef:3a:24:e8:e0:09:57:bc:b3:18:41:
70:29:b3:11:e2:a3:21:50:20:e5:da:03:e2:18:07:
fe:25:be:37:2f:ea:ef:e6:1b:a6:db:12:cd:04:b2:
98:ae:1f:dd:e8:10:c3:db:72:b7:22:90:a8:67:c3:
32:c5:9a:87:15:0d:88:66:16:db:ba:cb:75:af:30:
e3:ed:1d:fc:b7:b9:80:90:88:34:ca:04:26:90:b9:
8b:ea:44:d4:ff:2c:e7:fa:9f:1e:e3:cf:09:2c:6c:
ab:25:21:91:c5:0e:8f:06:ad:2e:a7:24:21:0d:51:
f5:95:1c:0d:e8:1a:14:24:57:5d:0a:8f:40:17:c5:
2d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BB:17:59:38:48:B5:E3:AE:A4:4D:09:AA:2E:CA:D1:CD:94:ED:F6
X509v3 Authority Key Identifier:
keyid:BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:54:ff:55:fc:ac:8c:91:3c:fb:9f:eb:15:fa:d1:00:cb:8c:
cc:9d:fa:41:f5:e6:2c:3e:4a:d0:1a:81:8f:e2:2a:a2:13:39:
cc:25:65:8e:28:1f:c9:aa:33:af:56:09:2a:68:0d:ff:52:2e:
c1:45:da:64:4b:66:df:c7:51:67:05:54:36:59:6d:6a:93:2e:
8a:49:dd:83:68:8b:3d:75:74:1e:28:e6:5d:ff:ea:f4:1a:18:
79:95:ba:fa:ca:88:cd:1b:8f:1c:d4:a8:64:e1:43:f6:1a:81:
db:af:30:3d:2c:b3:40:e2:f1:7c:23:bf:51:21:4f:0f:1f:52:
61:cb:e5:5b:5b:47:e8:fb:82:46:6f:1b:17:19:be:09:24:5a:
d2:49:b6:19:e7:82:47:9e:b2:b2:ca:dc:3a:31:79:21:b2:87:
bb:0b:67:ed:85:d3:85:ff:06:ab:50:b7:ea:f3:78:5c:9c:9b:
12:e5:ff:18:fb:8d:7c:28:46:88:b2:aa:84:cb:ae:2e:74:55:
ed:74:45:02:89:54:cf:06:d5:57:22:98:2c:e6:14:9e:b2:50:
ec:cf:2b:dc:33:be:f7:e7:ad:50:23:4e:a8:1a:cc:cf:db:43:
16:cc:22:f7:aa:fb:5d:07:e8:4e:92:ba:83:7b:4b:0c:12:06:
35:df:14:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:30:34 2025 by rpki-client