Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
File: VC8JTwQnsU80mffN9h2IOwiIYoo.mft (raw, json)
Hash identifier: g7vAU3Ln+8i6aZ3Lh6iVIKgFjDtlVcAC5CeeOFnHeBI=
Subject key identifier: 27:F1:FF:38:3E:AC:66:7F:0B:3E:D0:C5:59:7E:20:02:BA:D9:4D:A2
Authority key identifier: 54:2F:09:4F:04:27:B1:4F:34:99:F7:CD:F6:1D:88:3B:08:88:62:8A
Certificate issuer: /CN=542f094f0427b14f3499f7cdf61d883b0888628a
Certificate serial: 01987E2E88A9AA02394F41DE18FE1A46CF8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
Manifest number: 1302
Signing time: Wed 06 Aug 2025 07:00:35 +0000
Manifest this update: Wed 06 Aug 2025 07:00:35 +0000
Manifest next update: Thu 07 Aug 2025 07:00:35 +0000
Files and hashes: 1: D67aVlXhc44LndQNsE5Bzd0G7rE.roa (hash: Dxh2s3RJlCzPr2UFPIR0UDzenFrh9ma2jyYFmd8QKIw=)
2: VC8JTwQnsU80mffN9h2IOwiIYoo.crl (hash: XOll0aDoKLgW0ZtvJq6o+Hd6uNUe/Fwn/tu7rVZPuDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:88:a9:aa:02:39:4f:41:de:18:fe:1a:46:cf:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f094f0427b14f3499f7cdf61d883b0888628a
Validity
Not Before: Aug 6 07:00:35 2025 GMT
Not After : Aug 7 07:00:35 2025 GMT
Subject: CN=27f1ff383eac667f0b3ed0c5597e2002bad94da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8e:5f:f9:99:17:46:81:e6:d9:57:ec:ab:0b:
84:79:98:59:03:e7:d0:95:a0:65:f9:bf:1f:41:8c:
c6:53:82:31:72:86:79:c9:20:db:4e:7a:c2:e6:df:
49:1c:07:00:0c:2d:a2:fe:f5:3e:87:f2:16:76:06:
3e:da:3b:33:fe:78:9f:63:df:2b:fe:d9:49:57:c8:
d7:16:bd:e6:02:66:b0:d7:27:3a:2d:c4:bc:00:00:
57:45:32:49:e1:3c:3c:04:16:ab:78:82:61:8f:47:
f2:30:e4:6f:a1:81:b3:61:69:e6:3e:a5:53:47:74:
d2:cf:a8:37:8a:68:f1:bc:cc:8c:b5:e3:65:9c:1b:
1e:32:9e:08:65:d7:9d:da:b8:53:8f:7c:33:ad:e9:
74:6a:1d:1a:bf:d4:a0:3e:b8:80:a6:93:32:33:10:
15:f9:cd:1d:8e:40:62:46:94:86:e4:a1:36:f5:a8:
db:fc:26:8c:3d:aa:f4:66:16:7a:93:61:07:ac:1f:
e2:1d:e7:46:af:19:6c:dd:98:0f:92:b5:47:a7:48:
1b:25:36:86:ac:dc:2a:57:fb:74:5b:7f:d6:e9:8a:
6f:b2:bd:14:4d:a1:5b:42:63:b9:34:24:cb:6e:0e:
e5:f0:27:9c:b5:9e:4f:17:70:32:fa:42:ed:92:54:
fb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F1:FF:38:3E:AC:66:7F:0B:3E:D0:C5:59:7E:20:02:BA:D9:4D:A2
X509v3 Authority Key Identifier:
keyid:54:2F:09:4F:04:27:B1:4F:34:99:F7:CD:F6:1D:88:3B:08:88:62:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:80:3d:5c:1a:44:e3:6a:5e:07:eb:41:11:4a:4f:fc:45:5b:
4c:a8:d1:23:dc:f9:a0:35:3a:6a:4a:50:be:a0:39:1a:9e:7b:
49:7a:c5:22:a1:23:1e:f6:d3:3a:c9:1a:18:bc:83:cb:b2:b6:
7c:f4:9a:f5:94:95:df:7b:27:e0:7b:d2:02:be:f9:bc:80:a9:
aa:19:84:46:e9:59:6d:8b:e4:4e:dc:37:9a:f9:d3:c4:56:09:
3f:76:e0:71:97:40:52:3e:e1:bd:ab:37:e8:2b:30:7f:28:36:
cf:23:22:3a:15:53:b9:d4:cc:90:6e:66:e9:95:e5:b3:15:52:
c1:a1:76:94:f9:f9:7d:9f:4c:76:35:3c:58:cc:c8:50:bd:22:
c4:db:d5:36:10:b9:3d:bb:a9:1e:5b:0c:4d:9a:80:e3:b8:90:
e7:29:05:3a:7c:2f:48:64:ab:93:a0:56:0e:df:d3:da:e7:17:
9e:cf:db:9e:1e:a9:e4:d4:8b:9c:c5:e7:7a:c7:32:f1:23:ce:
62:e4:68:51:ff:32:6d:4a:39:f6:ab:e4:0f:1e:7f:44:72:61:
60:3f:63:2c:5d:57:88:a1:bc:e7:bf:bc:29:36:14:af:51:b8:
f5:84:f6:e6:3a:ad:f9:3f:ea:76:38:31:91:06:43:94:5d:97:
6d:60:0b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:29:54 2025 by rpki-client