Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft
File: VCcv8xcpc8hppSISv3zoAeH454M.mft (raw, json)
Hash identifier: NeoXq5OOKktaiaQGwr2L+p294l+z5rE2owAV40eSW+k=
Subject key identifier: 6A:D8:D5:81:60:3F:44:84:D2:05:42:E5:F9:3E:E4:CE:90:58:E0:F9
Authority key identifier: 54:27:2F:F3:17:29:73:C8:69:A5:22:12:BF:7C:E8:01:E1:F8:E7:83
Certificate issuer: /CN=54272ff3172973c869a52212bf7ce801e1f8e783
Certificate serial: 019922FA8DDA9C085BD6402FD7D5BFFC4ED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCcv8xcpc8hppSISv3zoAeH454M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 07:01:09 +0000
Manifest this update: Sun 07 Sep 2025 07:01:09 +0000
Manifest next update: Mon 08 Sep 2025 07:01:09 +0000
Files and hashes: 1: VCcv8xcpc8hppSISv3zoAeH454M.crl (hash: nJHo9t7pv+pKegLKQ7TlOcsdEQH9/IS0QGppeMgN1cQ=)
2: oohgjiQIj_tIu1PGNdnlfQkGF6M.roa (hash: 6v4z144BDrgglq1LMAS7dreBWe+2oC3G15H9vrrNnFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft
rsync://rpki.ripe.net/repository/DEFAULT/VCcv8xcpc8hppSISv3zoAeH454M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:8d:da:9c:08:5b:d6:40:2f:d7:d5:bf:fc:4e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54272ff3172973c869a52212bf7ce801e1f8e783
Validity
Not Before: Sep 7 07:01:09 2025 GMT
Not After : Sep 8 07:01:09 2025 GMT
Subject: CN=6ad8d581603f4484d20542e5f93ee4ce9058e0f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d7:0c:a2:da:ba:77:38:7d:79:00:d8:da:93:
d9:89:20:54:0c:87:af:09:7e:a9:ea:5a:56:a4:02:
bd:22:4f:51:c2:28:1d:ab:07:e8:51:58:da:c3:3b:
e8:42:f5:64:99:b1:ce:d5:d4:9e:2e:0c:a8:cc:1a:
16:a7:a9:8d:34:4d:3e:4f:28:72:69:52:15:77:d9:
12:af:d6:18:ad:d8:3b:29:9c:2a:04:80:e4:62:e6:
b5:ac:2c:f7:84:13:25:7c:98:a4:50:ba:91:d7:2e:
e6:b3:f6:a1:9e:ae:53:30:71:b1:a0:95:71:21:f8:
70:ae:25:e9:e8:ac:7e:03:d5:9d:11:35:3c:9a:08:
53:8e:2d:44:79:fe:b3:71:2b:fd:44:e0:a2:23:2f:
9e:a8:a5:ba:67:13:2a:b9:68:43:62:97:e2:86:16:
00:67:be:19:a7:68:6e:18:42:b0:53:83:b9:ff:b0:
0c:93:e1:7f:2c:85:f2:12:0b:44:59:c1:a4:dc:b4:
c5:cd:69:b8:f5:98:c3:8e:97:98:5e:9d:70:36:03:
64:b0:61:85:6e:7c:04:97:36:6b:e7:b2:99:93:83:
8e:16:03:7d:7f:ca:ff:c7:e4:7a:fe:ea:51:57:20:
4d:0b:8b:57:3c:c1:11:7a:aa:d4:56:7a:ce:5f:84:
f1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D8:D5:81:60:3F:44:84:D2:05:42:E5:F9:3E:E4:CE:90:58:E0:F9
X509v3 Authority Key Identifier:
keyid:54:27:2F:F3:17:29:73:C8:69:A5:22:12:BF:7C:E8:01:E1:F8:E7:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCcv8xcpc8hppSISv3zoAeH454M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:1b:a5:14:8d:22:1f:e4:b1:c6:51:4b:f8:96:f6:65:c5:21:
70:06:f8:1f:78:ea:c4:32:a1:27:f9:45:07:d2:15:7e:0d:9c:
33:b1:27:e5:fc:39:7f:60:26:e0:e0:38:33:97:1e:80:b7:3b:
b9:21:28:d4:01:cb:cd:c8:af:ee:a8:b4:53:c1:1a:94:bd:af:
b2:73:2a:bb:cb:b6:d9:61:67:4e:ed:ba:b3:7b:49:b1:41:46:
0a:c2:7a:19:9c:a4:10:88:40:17:21:e5:14:57:d6:b4:3d:00:
63:bf:72:c0:0f:9b:72:7d:69:13:c9:05:4e:59:ab:e9:eb:82:
56:c6:13:7d:af:31:25:f9:f5:a7:ef:d7:b1:ef:38:f8:39:55:
55:6d:6f:c0:3a:1e:4e:1c:8d:e9:7b:2c:4d:c1:ab:53:5f:b6:
74:94:19:9b:f9:05:f2:24:f4:93:6a:09:db:f2:0a:4b:8b:61:
fe:87:a1:cb:a6:cd:e9:6c:ff:a2:36:d7:d1:06:40:34:c4:d7:
97:d2:41:46:a5:78:8c:d2:17:7e:62:c3:fd:a8:03:57:4e:ab:
48:d0:17:38:f3:73:3b:dc:bd:88:6c:e1:8d:33:94:f6:fc:ab:
df:bb:7d:bb:c1:5e:51:ad:7b:78:a4:4a:aa:ed:83:4f:45:93:
e4:b5:24:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:32:28 2025 by rpki-client