Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.mft
File: VV10LVJ_lwDMAEfX1hv9gih42x8.mft (raw, json)
Hash identifier: Edbp16yWAUOj27cblslfRAjemZe1XhuikN8+olKiapU=
Subject key identifier: CF:FF:AC:C5:E6:C2:AA:05:A1:89:F5:3F:EA:A9:BA:A5:C9:D2:3A:CA
Authority key identifier: 55:5D:74:2D:52:7F:97:00:CC:00:47:D7:D6:1B:FD:82:28:78:DB:1F
Certificate issuer: /CN=555d742d527f9700cc0047d7d61bfd822878db1f
Certificate serial: 0198879FA1748DFE7F845B3436E0AFBC8BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VV10LVJ_lwDMAEfX1hv9gih42x8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.mft
Manifest number: 15FA
Signing time: Fri 08 Aug 2025 03:00:42 +0000
Manifest this update: Fri 08 Aug 2025 03:00:42 +0000
Manifest next update: Sat 09 Aug 2025 03:00:42 +0000
Files and hashes: 1: DYecUh-DxqkXQO2e7g2xu3pUfow.roa (hash: YUWrnAO2Gq94plJUaewAQTbWDDY7NY6O0vRYXx6edu0=)
2: VV10LVJ_lwDMAEfX1hv9gih42x8.crl (hash: R+gHdDD/8zd31mE9RG/9qPmnl6t+VBxmn/kRHpEB28M=)
3: hNRdZItPl-_x1hY3C3RjmRZbjnY.roa (hash: RX1AwwjMh7GoVfAGeesdzdmROnn3H+S+x/ans2oUFUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VV10LVJ_lwDMAEfX1hv9gih42x8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:9f:a1:74:8d:fe:7f:84:5b:34:36:e0:af:bc:8b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=555d742d527f9700cc0047d7d61bfd822878db1f
Validity
Not Before: Aug 8 03:00:42 2025 GMT
Not After : Aug 9 03:00:42 2025 GMT
Subject: CN=cfffacc5e6c2aa05a189f53feaa9baa5c9d23aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1d:3e:57:86:50:48:fd:26:6e:48:ae:8e:c7:
88:52:0d:99:58:01:c3:e0:4c:63:d2:2d:0e:ff:fa:
b8:b9:ec:f8:38:fb:cd:d0:33:33:10:35:56:62:de:
9f:9a:ca:bf:f0:69:37:af:2b:d7:a1:ec:cc:7d:1d:
41:88:55:8d:2e:e8:b2:86:a5:ea:77:45:12:41:a4:
fa:0e:11:33:69:0f:3f:12:03:a0:36:fa:6c:0f:92:
3f:19:60:7b:96:21:3e:8a:14:7a:77:82:c2:62:d9:
9e:a4:09:ca:02:3e:83:94:77:62:ee:dd:63:e5:78:
4e:77:9b:d7:73:95:56:d8:d9:34:01:26:5c:f1:d1:
4f:4a:b6:19:f7:d1:be:26:f4:a4:81:f3:c9:41:64:
2a:80:ff:f9:0f:8c:66:57:8d:83:b7:e1:f6:bb:db:
0b:b8:c1:a7:cc:90:ba:59:f2:b3:2f:36:a2:7f:a7:
95:4a:a3:bb:bd:a3:fc:99:a1:c8:77:8c:35:1b:31:
9e:65:98:4c:1f:43:35:31:a0:2b:74:51:81:d0:32:
05:4d:6f:58:15:91:38:1d:ed:fc:84:d4:d0:bc:87:
62:b9:03:6d:35:30:d5:a3:83:2d:99:93:18:2c:a5:
bc:c8:e5:3a:62:6b:a4:82:a8:d6:fa:18:c1:76:fa:
33:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FF:AC:C5:E6:C2:AA:05:A1:89:F5:3F:EA:A9:BA:A5:C9:D2:3A:CA
X509v3 Authority Key Identifier:
keyid:55:5D:74:2D:52:7F:97:00:CC:00:47:D7:D6:1B:FD:82:28:78:DB:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VV10LVJ_lwDMAEfX1hv9gih42x8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:18:ee:35:b7:19:50:77:75:2b:1e:6a:3c:fd:00:80:c4:80:
ea:41:ae:51:1a:33:c4:9f:a0:af:5e:4f:b2:b2:c2:33:ba:f0:
41:fb:95:07:de:6d:db:cb:91:cb:07:22:13:c4:b0:3c:75:c5:
bb:f0:eb:ce:4a:75:d0:6f:4e:7a:13:1a:36:c6:df:ec:9e:41:
1d:3f:41:ca:76:1d:2d:f6:8d:f6:a4:f6:c8:db:22:69:70:34:
3a:23:de:de:5c:5a:7c:fa:0c:cd:7e:34:1d:40:99:97:7f:0f:
b5:35:b4:07:3c:b0:6e:1f:77:75:ff:f7:3f:f7:08:3c:ce:02:
69:c1:47:49:d0:13:9a:2f:3e:4b:e4:98:99:30:76:15:a9:fd:
a9:26:b7:bd:5f:cd:c9:51:10:cd:20:97:90:8f:73:90:70:e1:
78:fb:2f:26:aa:bf:f5:40:be:e6:b6:cb:d9:d9:53:2b:d0:f2:
68:4f:bf:fe:62:92:fc:3c:9c:d5:51:3b:0c:9c:84:97:a2:73:
51:1c:06:50:11:95:08:0c:71:61:db:a1:62:7e:04:97:75:14:
26:10:6b:c0:8c:d3:aa:76:40:23:bc:f4:55:d8:ac:f8:c8:d0:
75:19:d6:3e:24:ef:70:55:75:3d:97:c6:a7:cb:95:1f:cb:44:
e8:9f:9a:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiHn6F0jf5/hFs0NuCvvIvIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NWQ3NDJkNTI3Zjk3MDBjYzAwNDdkN2Q2MWJmZDgyMjg3
OGRiMWYwHhcNMjUwODA4MDMwMDQyWhcNMjUwODA5MDMwMDQyWjAzMTEwLwYDVQQD
EyhjZmZmYWNjNWU2YzJhYTA1YTE4OWY1M2ZlYWE5YmFhNWM5ZDIzYWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR0+V4ZQSP0mbkiujseIUg2ZWAHD
4Exj0i0O//q4uez4OPvN0DMzEDVWYt6fmsq/8Gk3ryvXoezMfR1BiFWNLuiyhqXq
d0USQaT6DhEzaQ8/EgOgNvpsD5I/GWB7liE+ihR6d4LCYtmepAnKAj6DlHdi7t1j
5XhOd5vXc5VW2Nk0ASZc8dFPSrYZ99G+JvSkgfPJQWQqgP/5D4xmV42Dt+H2u9sL
uMGnzJC6WfKzLzaif6eVSqO7vaP8maHId4w1GzGeZZhMH0M1MaArdFGB0DIFTW9Y
FZE4He38hNTQvIdiuQNtNTDVo4MtmZMYLKW8yOU6YmukgqjW+hjBdvoz9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM//rMXmwqoFoYn1P+qpuqXJ0jrKMB8GA1UdIwQY
MBaAFFVddC1Sf5cAzABH19Yb/YIoeNsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlYxMExWSl9sd0RNQUVmWDFodjlnaWg0Mng4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9mZjVlYzktZTIyZS00MDMwLTgzMzQt
ZDVkZDQ2YWFhNDAxLzEvVlYxMExWSl9sd0RNQUVmWDFodjlnaWg0Mng4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9mZjVlYzktZTIyZS00MDMwLTgzMzQtZDVkZDQ2YWFhNDAx
LzEvVlYxMExWSl9sd0RNQUVmWDFodjlnaWg0Mng4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYBjuNbcZ
UHd1Kx5qPP0AgMSA6kGuURozxJ+gr15PsrLCM7rwQfuVB95t28uRywciE8SwPHXF
u/Drzkp10G9OehMaNsbf7J5BHT9BynYdLfaN9qT2yNsiaXA0OiPe3lxafPoMzX40
HUCZl38PtTW0Bzywbh93df/3P/cIPM4CacFHSdATmi8+S+SYmTB2Fan9qSa3vV/N
yVEQzSCXkI9zkHDhePsvJqq/9UC+5rbL2dlTK9DyaE+//mKS/Dyc1VE7DJyEl6Jz
URwGUBGVCAxxYduhYn4El3UUJhBrwIzTqnZAI7z0Vdis+MjQdRnWPiTvcFV1PZfG
p8uVH8tE6J+aJg==
-----END CERTIFICATE-----
Generated at Fri Aug 8 12:58:52 2025 by rpki-client