Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
File: Vacs_0G9t8fgGFXTkHba9yF0LHA.mft (raw, json)
Hash identifier: dXKiX0/X/y1L8N9ukDjkC0GlyXJHbBswERrBugYY0gM=
Subject key identifier: 2F:33:7B:64:F7:86:B7:54:D5:0E:7C:F8:67:EA:2D:DB:EC:9E:6D:50
Authority key identifier: 55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70
Certificate issuer: /CN=55a72cff41bdb7c7e01855d39076daf721742c70
Certificate serial: 019847AD7DCC260C7D9ADBF7C035A04EFC3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
Manifest number: 11F8
Signing time: Sat 26 Jul 2025 17:00:08 +0000
Manifest this update: Sat 26 Jul 2025 17:00:08 +0000
Manifest next update: Sun 27 Jul 2025 17:00:08 +0000
Files and hashes: 1: Vacs_0G9t8fgGFXTkHba9yF0LHA.crl (hash: sGNkFBtTfzDHbM5Tp4/i9PEF8g8WZuumDqPDk1skM4Y=)
2: hVVS9Cn-0kGfNBOiQMyNN9VUf0k.roa (hash: sbgdIqLYSK1OXVPg3GYNP6cJGG82G/AcVDZsAviuiqM=)
3: uHGvKFxGUbuZJitYbOKe-TvvsJA.roa (hash: 2ggmV/gZ71WHFH+tl+mSGN+dQgondzuBHty4bl2C+wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:7d:cc:26:0c:7d:9a:db:f7:c0:35:a0:4e:fc:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55a72cff41bdb7c7e01855d39076daf721742c70
Validity
Not Before: Jul 26 17:00:08 2025 GMT
Not After : Jul 27 17:00:08 2025 GMT
Subject: CN=2f337b64f786b754d50e7cf867ea2ddbec9e6d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:12:bc:ef:78:b4:32:8b:b2:de:65:21:ab:41:
f6:7d:c0:3a:04:64:3f:d4:cc:dd:a0:c8:2c:10:15:
2c:84:80:5e:91:ec:53:0c:ae:65:e8:f7:46:a0:ee:
d8:48:75:bf:ad:0f:d3:8f:7e:b7:72:f6:66:cc:4b:
ce:cb:da:b0:3d:86:45:d9:6f:5e:3c:b0:3a:2e:a8:
9f:46:60:20:87:62:90:8b:01:e6:9e:f5:df:ff:34:
d1:ca:71:5f:4c:1a:c9:d6:a7:26:b3:65:6d:23:78:
3d:66:af:f0:94:fa:8e:9f:ef:77:17:75:e2:5b:3e:
1b:72:cc:33:25:c8:bf:e0:c2:6a:a3:43:db:ac:6a:
19:cb:7b:b2:56:d2:1e:b1:23:1e:20:b0:5b:4d:00:
62:d2:fe:07:ad:c0:99:72:90:ae:87:76:10:77:72:
a2:62:bb:96:26:c6:ac:da:3c:43:e3:da:f3:78:27:
16:fb:e7:a4:1c:58:ae:de:07:b9:1b:0d:2e:ec:f4:
b7:8e:c0:7a:7a:40:35:1d:b6:e8:08:d1:77:c0:29:
9f:c5:85:37:64:fa:28:3d:04:d3:78:18:1e:53:73:
55:3a:02:b4:64:41:31:0c:1c:a0:9e:e7:98:24:86:
3a:8d:cd:e5:fb:70:c0:c5:03:19:cc:08:fe:fb:dc:
2a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:33:7B:64:F7:86:B7:54:D5:0E:7C:F8:67:EA:2D:DB:EC:9E:6D:50
X509v3 Authority Key Identifier:
keyid:55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:8b:cc:d4:fc:f2:76:15:fa:fa:33:23:c0:18:ac:29:19:3f:
b7:69:dc:0a:78:cd:36:43:f4:08:f1:6f:39:01:58:cb:0a:f4:
69:d4:67:47:b7:2b:14:62:29:68:1d:06:3d:44:ed:f4:d7:16:
f7:a4:23:e5:ef:c1:b4:12:ab:00:6a:5c:04:32:68:de:5a:8b:
a7:3d:48:9e:29:1c:4c:79:89:9a:18:02:f1:af:f5:a1:84:d5:
5a:38:7d:78:93:93:ff:bb:96:d3:d9:8c:44:3a:9a:0e:9b:9a:
14:eb:55:3e:26:74:e7:df:9a:2e:74:c5:8d:bd:c5:9f:76:29:
b2:b4:eb:5f:91:8d:e2:6e:a8:d5:23:29:b3:bb:88:74:ba:5b:
2f:bb:af:06:d8:1a:49:51:6f:bb:d5:10:1c:82:2e:d6:b1:e5:
b9:02:22:90:46:ca:a3:d9:7b:f8:7e:c9:f1:84:33:70:1b:2b:
63:3c:7c:d9:79:5f:1f:a3:66:5b:08:2e:8e:10:6d:a1:70:a1:
98:c0:2b:14:a4:4d:f2:95:2d:43:b7:d7:85:b1:24:2c:63:18:
70:9b:0e:70:71:e2:75:0d:27:6e:92:0c:79:02:67:97:de:66:
8f:cc:7d:df:98:22:32:bd:7b:93:8b:bb:bc:3b:30:ef:08:b7:
b5:ff:05:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:04:54 2025 by rpki-client