Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
File: VC2XGtPC5DjUoxLRod51GBCspOA.mft (raw, json)
Hash identifier: M68P8BtlwXV1Xrkrdcy7D+cUoUVwZZZUodBW0sFPfxU=
Subject key identifier: 76:22:C8:93:14:F4:9F:DE:27:96:C1:CA:05:9F:E1:5C:92:E1:1D:27
Authority key identifier: 54:2D:97:1A:D3:C2:E4:38:D4:A3:12:D1:A1:DE:75:18:10:AC:A4:E0
Certificate issuer: /CN=542d971ad3c2e438d4a312d1a1de751810aca4e0
Certificate serial: 019873E2E2DE953F8F86ACB433565D9FC165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:01:45 +0000
Manifest this update: Mon 04 Aug 2025 07:01:45 +0000
Manifest next update: Tue 05 Aug 2025 07:01:45 +0000
Files and hashes: 1: 5-LdegbBxKQtUzYhU_eCIvPEaSU.roa (hash: P+UUaet9A3DPospwlQybCpBsJ5DTQfNPoHJlQgfKeB4=)
2: VC2XGtPC5DjUoxLRod51GBCspOA.crl (hash: KN/hIiW7/Ew19nmVOL5h/lxepWdi1TuhUZWguIocBfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:e2:de:95:3f:8f:86:ac:b4:33:56:5d:9f:c1:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542d971ad3c2e438d4a312d1a1de751810aca4e0
Validity
Not Before: Aug 4 07:01:45 2025 GMT
Not After : Aug 5 07:01:45 2025 GMT
Subject: CN=7622c89314f49fde2796c1ca059fe15c92e11d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e1:f3:db:b2:e9:ac:3b:fc:54:ac:ff:a6:99:
4b:3c:4c:eb:8c:9f:49:b0:6c:b7:88:93:ba:a5:dd:
d3:5f:51:f9:b0:84:11:64:f1:8f:c5:fa:1f:08:92:
68:3e:99:00:db:c3:55:12:1d:ac:e1:73:f3:59:f0:
43:c4:56:77:9b:6b:8b:35:5f:1e:9c:37:42:12:06:
c1:20:c2:0b:f9:bd:78:28:22:32:a0:e9:91:fa:8c:
d8:2e:4a:67:6c:1b:bf:43:54:78:4e:c2:92:4b:0c:
f8:79:b0:ad:f1:59:cf:89:5b:c5:1a:4a:69:c0:ed:
f2:5d:17:2f:87:aa:39:d5:e2:36:a0:6c:82:31:7b:
78:c9:ff:22:21:a4:d8:31:e4:60:03:6d:d0:ce:dc:
ef:f0:af:c3:d1:db:d2:7b:55:30:fa:f0:d7:f8:c3:
91:b3:97:2a:60:c4:89:fa:38:48:ba:28:43:e6:e9:
d9:1e:76:43:4f:2e:36:bf:66:d9:bd:cf:11:27:24:
78:da:b7:ea:b9:21:18:c3:88:4a:6a:40:00:fc:93:
9e:62:91:96:ee:61:7f:db:64:27:f5:46:3c:48:53:
99:7c:2a:8c:45:d9:7d:67:73:04:f4:2f:4a:4a:98:
32:32:fa:38:19:d5:1e:ca:10:49:f2:ff:9f:3e:cd:
6d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:22:C8:93:14:F4:9F:DE:27:96:C1:CA:05:9F:E1:5C:92:E1:1D:27
X509v3 Authority Key Identifier:
keyid:54:2D:97:1A:D3:C2:E4:38:D4:A3:12:D1:A1:DE:75:18:10:AC:A4:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:fc:03:ad:7d:6a:c9:29:7b:b6:8c:f5:ae:5f:33:b4:2e:41:
30:b3:3b:33:e3:41:2e:a9:72:4d:70:0b:2a:14:65:fd:11:6f:
3e:37:21:31:32:08:b7:8f:a6:40:67:b2:4f:4a:ff:69:71:8d:
86:07:b4:28:8f:2c:da:dc:eb:95:27:09:7e:40:c8:cf:eb:1a:
52:cc:b0:4d:c8:56:4f:4e:52:77:2d:41:d7:07:b1:37:30:ce:
5c:89:fd:0a:a2:10:1c:4f:c4:08:b9:6f:4e:39:b9:2e:28:87:
cd:48:56:5d:c6:4b:5b:5f:a0:c6:2c:9d:58:a4:97:96:3d:f1:
68:b1:4a:24:0f:2a:c8:99:f1:a9:c3:99:5c:7e:ef:fb:6d:79:
92:aa:af:f1:e1:ca:67:14:4a:06:34:52:c6:d7:76:62:76:81:
fb:54:47:cf:62:fb:e7:72:e8:7d:a6:c3:2d:86:2f:90:a6:83:
8f:a1:2a:64:be:6d:af:3a:b6:d5:0f:9f:81:98:39:f4:9d:c1:
3b:ff:7e:9d:b2:b1:81:ba:17:0a:f2:39:0f:9f:5f:1b:7d:8f:
ad:e4:29:64:8d:8b:dc:0d:85:7f:30:3f:01:02:b8:ab:dd:3f:
22:2a:62:e0:65:af:e9:c0:8e:87:cd:55:5e:5d:95:15:b4:39:
c7:d8:b2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:31 2025 by rpki-client