Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
File: Vacs_0G9t8fgGFXTkHba9yF0LHA.mft (raw, json)
Hash identifier: R+9Y0Lp2npaWCCJ7hjX125a9rD/2Dz7hs1/q0YSxqrk=
Subject key identifier: 8A:ED:B4:FA:24:F0:B5:E3:58:55:F1:53:39:81:35:08:68:20:B7:EE
Authority key identifier: 55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70
Certificate issuer: /CN=55a72cff41bdb7c7e01855d39076daf721742c70
Certificate serial: 01987418B9584D2531B1BDBA11D35C540061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
Manifest number: 120F
Signing time: Mon 04 Aug 2025 08:00:33 +0000
Manifest this update: Mon 04 Aug 2025 08:00:33 +0000
Manifest next update: Tue 05 Aug 2025 08:00:33 +0000
Files and hashes: 1: Vacs_0G9t8fgGFXTkHba9yF0LHA.crl (hash: YSV3Il5r86ojO1J/6OvJi1JHsiP90SnQkx+vDBz3wZA=)
2: hVVS9Cn-0kGfNBOiQMyNN9VUf0k.roa (hash: sbgdIqLYSK1OXVPg3GYNP6cJGG82G/AcVDZsAviuiqM=)
3: uHGvKFxGUbuZJitYbOKe-TvvsJA.roa (hash: 2ggmV/gZ71WHFH+tl+mSGN+dQgondzuBHty4bl2C+wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:b9:58:4d:25:31:b1:bd:ba:11:d3:5c:54:00:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55a72cff41bdb7c7e01855d39076daf721742c70
Validity
Not Before: Aug 4 08:00:33 2025 GMT
Not After : Aug 5 08:00:33 2025 GMT
Subject: CN=8aedb4fa24f0b5e35855f153398135086820b7ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:97:02:3b:c1:af:eb:97:dc:4e:fe:61:88:77:
8d:86:ea:4c:85:e9:ac:a2:6b:dd:6e:88:fd:a8:54:
60:41:86:42:43:0d:13:fc:b0:cc:b7:62:e1:fd:49:
13:8f:47:f0:46:43:05:a7:6e:1e:e8:26:b4:99:54:
39:e2:2b:64:43:21:2e:6f:7b:80:29:15:2f:52:95:
ee:76:7b:56:ae:43:56:e6:92:de:b4:c7:8c:7c:7f:
7d:17:9e:22:95:73:ef:21:1d:1f:59:98:70:ef:ad:
a1:f8:8c:ce:63:9f:0f:90:13:55:09:e8:c8:a3:d2:
e2:50:c0:ec:c6:5c:50:54:96:af:67:88:e6:ce:ae:
a2:ba:94:c3:68:ba:8c:42:93:88:e3:fa:0d:43:ca:
c8:c5:13:5b:f6:68:3a:71:ce:9d:7a:90:fc:50:f5:
c1:b1:35:c3:ac:a3:c7:8a:f5:d3:a1:86:b8:b2:b3:
2b:cc:48:f8:1c:1e:22:65:1a:b7:9a:b7:3b:db:f9:
f0:8b:e9:0d:cd:64:f3:9b:32:bb:7d:9e:cf:2a:23:
ea:5b:de:09:eb:63:c7:82:a4:1d:1d:24:dd:fc:62:
0d:8d:07:e2:58:e1:96:25:e3:31:a3:06:d4:5d:cc:
be:46:43:ac:07:fb:5e:5e:82:56:b1:22:a9:79:24:
98:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:ED:B4:FA:24:F0:B5:E3:58:55:F1:53:39:81:35:08:68:20:B7:EE
X509v3 Authority Key Identifier:
keyid:55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a1:b9:f3:7f:24:9f:f0:95:23:02:ff:6d:97:42:85:e9:00:
37:ce:b9:b2:73:1e:ee:10:2e:54:47:67:83:39:eb:b3:72:a5:
80:65:6c:59:ff:ff:7a:79:c4:8b:03:20:b3:4b:ec:7a:85:f6:
52:39:43:74:70:48:cb:f2:9b:64:08:ff:7d:e9:39:71:ad:6d:
17:60:d0:ed:4e:66:a0:85:da:0e:96:1b:1a:8c:d0:f3:96:2e:
93:6e:14:c7:65:32:53:78:69:91:a3:05:68:09:ec:12:1c:4a:
fb:08:ba:4b:d5:ba:dc:7f:74:b1:21:22:63:c5:cf:f4:38:84:
ad:bc:26:4a:7a:56:d3:95:fe:5b:2e:cf:a0:ea:f3:16:78:ac:
61:ef:63:33:cc:cd:8b:ce:2c:33:93:30:e7:f4:fd:82:71:2f:
19:8a:2d:60:0d:7f:ea:05:7e:12:57:47:aa:4d:f2:d5:20:22:
6b:1b:ba:4b:16:48:7b:6b:20:10:05:7d:2c:c7:86:16:da:97:
dd:c5:81:d0:18:58:5f:a9:c6:99:a3:36:6a:6c:1e:9d:35:c2:
b4:4b:7a:e0:ff:63:3d:bb:28:df:ab:9a:9c:b5:73:13:76:4f:
34:b7:46:4f:90:6f:40:7c:20:da:27:64:6d:0a:8a:9a:83:d7:
9a:d4:0a:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GLlYTSUxsb26EdNcVABhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YTcyY2ZmNDFiZGI3YzdlMDE4NTVkMzkwNzZkYWY3MjE3
NDJjNzAwHhcNMjUwODA0MDgwMDMzWhcNMjUwODA1MDgwMDMzWjAzMTEwLwYDVQQD
Eyg4YWVkYjRmYTI0ZjBiNWUzNTg1NWYxNTMzOTgxMzUwODY4MjBiN2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5cCO8Gv65fcTv5hiHeNhupMhems
omvdboj9qFRgQYZCQw0T/LDMt2Lh/UkTj0fwRkMFp24e6Ca0mVQ54itkQyEub3uA
KRUvUpXudntWrkNW5pLetMeMfH99F54ilXPvIR0fWZhw762h+IzOY58PkBNVCejI
o9LiUMDsxlxQVJavZ4jmzq6iupTDaLqMQpOI4/oNQ8rIxRNb9mg6cc6depD8UPXB
sTXDrKPHivXToYa4srMrzEj4HB4iZRq3mrc72/nwi+kNzWTzmzK7fZ7PKiPqW94J
62PHgqQdHSTd/GINjQfiWOGWJeMxowbUXcy+RkOsB/teXoJWsSKpeSSYnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrttPok8LXjWFXxUzmBNQhoILfuMB8GA1UdIwQY
MBaAFFWnLP9BvbfH4BhV05B22vchdCxwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmFjc18wRzl0OGZnR0ZYVGtIYmE5eUYwTEhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy80ZjkxOGItMjhkOS00MTliLTg2NDct
MzM4OTg2MTc2YjFmLzEvVmFjc18wRzl0OGZnR0ZYVGtIYmE5eUYwTEhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy80ZjkxOGItMjhkOS00MTliLTg2NDctMzM4OTg2MTc2YjFm
LzEvVmFjc18wRzl0OGZnR0ZYVGtIYmE5eUYwTEhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR6G5838k
n/CVIwL/bZdChekAN865snMe7hAuVEdngznrs3KlgGVsWf//ennEiwMgs0vseoX2
UjlDdHBIy/KbZAj/fek5ca1tF2DQ7U5moIXaDpYbGozQ85Yuk24Ux2UyU3hpkaMF
aAnsEhxK+wi6S9W63H90sSEiY8XP9DiErbwmSnpW05X+Wy7PoOrzFnisYe9jM8zN
i84sM5Mw5/T9gnEvGYotYA1/6gV+EldHqk3y1SAiaxu6SxZIe2sgEAV9LMeGFtqX
3cWB0BhYX6nGmaM2amwenTXCtEt64P9jPbso36uanLVzE3ZPNLdGT5BvQHwg2idk
bQqKmoPXmtQKCA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:07:44 2025 by rpki-client