Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
File: VC2XGtPC5DjUoxLRod51GBCspOA.mft (raw, json)
Hash identifier: U2cD+CQJlqxIZNv8VphOJbnf4PLnYXVlCR2a2YDZp0g=
Subject key identifier: 0B:84:F3:AA:FA:98:B2:63:F4:56:4C:55:63:6D:AE:57:6B:01:FD:FD
Authority key identifier: 54:2D:97:1A:D3:C2:E4:38:D4:A3:12:D1:A1:DE:75:18:10:AC:A4:E0
Certificate issuer: /CN=542d971ad3c2e438d4a312d1a1de751810aca4e0
Certificate serial: 019847782A254AEE8D292EE4596B5E1F91C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 16:01:54 +0000
Manifest this update: Sat 26 Jul 2025 16:01:54 +0000
Manifest next update: Sun 27 Jul 2025 16:01:54 +0000
Files and hashes: 1: 5-LdegbBxKQtUzYhU_eCIvPEaSU.roa (hash: P+UUaet9A3DPospwlQybCpBsJ5DTQfNPoHJlQgfKeB4=)
2: VC2XGtPC5DjUoxLRod51GBCspOA.crl (hash: W4qX1kSfx/UaXXy7fX7iA5OVtg2PwV9F/1j0fRVlnDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:2a:25:4a:ee:8d:29:2e:e4:59:6b:5e:1f:91:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542d971ad3c2e438d4a312d1a1de751810aca4e0
Validity
Not Before: Jul 26 16:01:54 2025 GMT
Not After : Jul 27 16:01:54 2025 GMT
Subject: CN=0b84f3aafa98b263f4564c55636dae576b01fdfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:76:b8:6b:a7:50:d6:38:b5:0b:9d:62:da:5e:
af:8c:5c:c6:e4:e0:39:49:aa:f7:c7:e1:57:62:a4:
b1:e7:12:15:87:c8:0a:bf:87:9e:ae:1c:32:92:1e:
d5:bd:f2:20:b1:8f:f8:1f:97:32:2b:e2:b3:d6:8c:
0d:d8:78:49:fe:af:aa:08:e8:af:69:c1:22:62:02:
7a:2a:ff:ab:d8:98:e5:b7:c6:11:de:ac:63:5b:8b:
e5:1f:68:67:29:18:26:ba:11:c3:28:30:e1:eb:ae:
20:d3:1c:fb:0d:59:fd:e4:59:0e:18:a7:84:ed:d5:
7d:3b:b5:ad:87:82:a9:d1:fd:31:2b:b1:b1:0c:41:
c0:46:aa:cc:25:aa:aa:3c:8c:b3:47:6f:33:ae:f0:
e0:d0:b4:30:a8:ae:ed:25:64:49:7e:7a:01:84:39:
17:f8:f2:57:7d:c3:0a:38:34:ab:05:76:93:25:51:
45:31:e7:be:40:27:cc:e1:d3:7e:bb:c2:47:e6:cc:
87:43:3d:4d:b6:74:13:da:08:cc:0b:e9:9c:8e:74:
1e:1a:97:76:f0:2e:09:43:79:82:88:1c:95:76:6f:
27:bd:8f:bd:01:3c:be:a4:b8:b6:ab:7e:74:0c:00:
b4:2b:87:a1:ba:98:37:c1:e3:51:3c:2c:dd:1d:e5:
c1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:84:F3:AA:FA:98:B2:63:F4:56:4C:55:63:6D:AE:57:6B:01:FD:FD
X509v3 Authority Key Identifier:
keyid:54:2D:97:1A:D3:C2:E4:38:D4:A3:12:D1:A1:DE:75:18:10:AC:A4:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:46:49:08:64:86:0a:ac:bf:bd:18:39:6c:b4:24:e4:a4:85:
31:1b:6a:7e:1f:40:23:95:b3:a2:01:8b:ab:5b:40:94:cd:e0:
b5:11:d8:bf:30:09:c8:63:57:3c:4a:27:e3:50:d1:51:cd:70:
b3:49:b4:97:f5:ac:66:67:1a:74:d8:14:2d:1a:be:1c:c6:9b:
97:60:b6:bb:55:8a:99:d7:ac:7e:58:3c:82:ce:37:ea:8a:bd:
6e:c1:70:b7:e9:b2:c9:4f:2e:c2:e2:4a:d8:fd:8d:a5:50:e7:
5d:61:67:82:1f:fd:de:54:c2:4c:f4:0f:ce:56:e4:62:d8:47:
67:cc:88:bf:61:80:d8:80:10:36:b3:7b:a5:9b:59:f9:e4:12:
f0:3f:8b:3b:9c:1e:41:09:e8:b9:47:32:3e:a1:55:ed:ae:a6:
36:9a:4b:51:e8:4c:8e:e6:a8:60:ff:af:13:94:14:03:39:e5:
ad:2f:a5:47:17:88:8b:79:55:45:90:ff:33:9f:7b:37:77:97:
49:bd:87:95:54:de:8d:bf:52:3e:49:78:a2:2d:2f:35:ba:ea:
b5:cc:cf:fb:bf:1a:24:e6:fc:c7:7b:61:04:c4:ab:f4:2d:65:
2c:ac:61:63:9f:03:a0:d6:2b:56:6e:49:3b:fc:db:ee:3d:36:
ce:ac:7c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:44:21 2025 by rpki-client