Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
File: vZoDUhhk_eVxr63vAfMpdZg9H2I.mft (raw, json)
Hash identifier: OTK0SjaAFKxIllGiarcU3EI0+zZzJ8mwnXpMudUO3RI=
Subject key identifier: 53:D8:82:4C:2B:8D:EC:AC:33:78:F2:C7:E9:36:4D:A7:A6:61:1F:C9
Authority key identifier: BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62
Certificate issuer: /CN=bd9a03521864fde571afadef01f32975983d1f62
Certificate serial: 0199FDD8D15B4E40B76DCC4A405F5389028A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
Manifest number: 01C8
Signing time: Sun 19 Oct 2025 19:01:08 +0000
Manifest this update: Sun 19 Oct 2025 19:01:08 +0000
Manifest next update: Mon 20 Oct 2025 19:01:08 +0000
Files and hashes: 1: RJNuysFIW66Gw4c0piXvnXkEo9o.roa (hash: /TsRrqxKejX5cWBdLvn7sFDNt5iNj6A7iHaePoLLWJk=)
2: vZoDUhhk_eVxr63vAfMpdZg9H2I.crl (hash: pyER43G/oqyGa9FhWTLCJlt59GFHcL7zBsQqtErCFJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:d1:5b:4e:40:b7:6d:cc:4a:40:5f:53:89:02:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd9a03521864fde571afadef01f32975983d1f62
Validity
Not Before: Oct 19 19:01:08 2025 GMT
Not After : Oct 20 19:01:08 2025 GMT
Subject: CN=53d8824c2b8decac3378f2c7e9364da7a6611fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:d3:06:67:dd:47:18:c1:5d:c3:10:a6:5f:
f5:6d:29:37:bb:be:be:0d:0a:d9:f5:7d:b6:13:f9:
10:c8:ec:b2:d6:d2:8e:97:00:8c:bb:08:d4:ec:a7:
fc:9c:e8:8e:f5:f1:7a:c5:f9:e2:a0:a6:29:26:40:
33:a0:9f:9e:fa:37:80:2c:73:3d:dd:a5:66:25:66:
f1:dd:82:42:d9:a8:ac:5c:1f:a8:c8:d9:e5:bb:c2:
07:46:5f:32:77:e4:e4:25:fe:50:6c:34:b3:74:0e:
80:2e:c8:bc:11:4f:fc:1e:26:b7:65:6c:64:45:38:
47:f1:b0:b8:41:d2:c4:54:83:a2:c1:a1:80:43:45:
68:2a:05:64:be:8f:58:40:ec:96:50:39:ab:7a:ab:
1f:07:3d:e4:fb:45:eb:16:d6:29:e3:0e:f9:c3:bd:
83:2e:46:a8:11:95:23:c8:85:f7:c6:4b:47:c8:6e:
ac:99:75:4c:bc:98:6e:0c:03:ad:65:58:90:80:15:
2b:73:33:cc:05:a2:d2:89:48:ee:f9:1d:2f:e3:c3:
b2:cd:b9:45:31:a0:ba:6e:f1:5d:2a:ec:55:0e:4f:
ce:ee:ca:ac:e4:42:e8:64:ba:1d:0c:45:e9:80:38:
7a:29:26:23:08:16:e3:c8:75:c7:0d:1e:cd:5d:ed:
34:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D8:82:4C:2B:8D:EC:AC:33:78:F2:C7:E9:36:4D:A7:A6:61:1F:C9
X509v3 Authority Key Identifier:
keyid:BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:12:ed:e0:b2:36:38:5b:5d:53:c7:25:54:13:83:d6:36:ce:
c4:bc:d1:76:8d:1b:c3:d2:4a:c5:c4:02:ce:79:f7:52:35:6f:
91:68:04:79:7f:9c:e7:83:c3:d5:95:e1:7e:e2:42:2c:89:ad:
e8:e4:ae:4c:4d:31:27:96:0e:96:29:4a:1a:f4:38:2e:bb:06:
97:70:95:c3:68:21:6f:22:55:88:0b:eb:72:51:6b:86:17:7b:
68:5c:97:03:84:f7:77:0d:1d:cb:37:5b:fd:5f:25:7f:bc:58:
8d:b8:e6:c9:b0:9e:f4:cf:0d:30:df:a5:c2:22:e2:e5:ee:bc:
8d:dc:46:40:3d:60:d2:e1:87:67:c2:36:f5:15:74:cf:59:ca:
b5:ab:b7:b9:56:c1:af:eb:b0:bf:22:05:34:a8:8b:77:ce:37:
08:53:c7:28:a0:4f:33:d0:e3:01:93:25:3a:e9:4e:ad:a1:ae:
c8:28:4a:aa:0e:5d:bf:7c:5e:39:13:b8:df:5b:86:6d:a5:d1:
c9:a9:b8:6e:04:32:80:04:26:a1:a7:44:99:e3:d2:b7:66:9f:
9f:15:f7:96:88:f9:dc:d8:9b:18:19:65:2a:10:cb:bc:1a:96:
71:35:ce:7c:9c:c8:53:f3:08:55:12:16:6b:45:0a:d7:24:11:
58:3c:ad:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:56 2025 by rpki-client