Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
File: VC2XGtPC5DjUoxLRod51GBCspOA.mft (raw, json)
Hash identifier: /vnnXD0FDJ6JPhMsT4NMlsX5PsBHLup4nw9hvXaxdqc=
Subject key identifier: 6B:B8:C1:03:B7:8E:86:E8:9E:17:D4:09:64:3C:21:90:98:54:B1:21
Authority key identifier: 54:2D:97:1A:D3:C2:E4:38:D4:A3:12:D1:A1:DE:75:18:10:AC:A4:E0
Certificate issuer: /CN=542d971ad3c2e438d4a312d1a1de751810aca4e0
Certificate serial: 0199312417E97D19133F8690DF9A8135BF59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
Manifest number: 1679
Signing time: Wed 10 Sep 2025 01:01:12 +0000
Manifest this update: Wed 10 Sep 2025 01:01:12 +0000
Manifest next update: Thu 11 Sep 2025 01:01:12 +0000
Files and hashes: 1: 5-LdegbBxKQtUzYhU_eCIvPEaSU.roa (hash: P+UUaet9A3DPospwlQybCpBsJ5DTQfNPoHJlQgfKeB4=)
2: VC2XGtPC5DjUoxLRod51GBCspOA.crl (hash: GHOapIr7qhfiPdKvy1SDILn795GtpC2DDdZ4tYERpAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 01:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:24:17:e9:7d:19:13:3f:86:90:df:9a:81:35:bf:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542d971ad3c2e438d4a312d1a1de751810aca4e0
Validity
Not Before: Sep 10 01:01:12 2025 GMT
Not After : Sep 11 01:01:12 2025 GMT
Subject: CN=6bb8c103b78e86e89e17d409643c21909854b121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ad:43:4f:e3:92:39:5d:23:94:76:13:6f:eb:
f2:29:14:fa:47:d1:5e:47:b9:a3:87:eb:36:f6:22:
ba:5d:56:0c:a1:f0:87:79:40:3d:02:12:ec:95:66:
f7:ee:86:e3:11:cd:c8:6b:18:91:d6:6a:b1:72:2e:
9d:54:84:da:fd:e2:2a:d4:58:21:53:40:0e:c7:f5:
ad:8b:20:ed:52:9f:00:67:60:9e:68:e4:13:f1:2d:
e6:4b:6f:77:b2:65:96:7a:29:f5:3f:17:af:c9:46:
a6:7d:40:64:5a:96:e4:52:e1:6c:1f:32:0e:f5:62:
22:ae:5c:3e:ae:c5:b5:51:3b:25:b4:57:91:57:9a:
d2:dd:d8:3a:0b:df:e1:2d:61:67:3d:42:40:ee:06:
3b:f2:3d:16:63:a3:30:b7:c0:c5:4d:c8:46:89:7c:
58:c5:b0:e1:f8:76:e0:ef:43:62:0a:b4:c0:e7:de:
cc:24:95:3a:d5:c4:4c:91:a1:42:cb:5b:77:6c:03:
31:a9:3a:ec:8c:d9:25:26:e6:8a:f8:8f:27:9a:d9:
b3:3e:32:69:fa:8e:3e:1b:9e:df:38:a7:62:12:39:
c2:f0:2f:5b:ce:81:1a:3a:4e:7a:3b:4f:dc:a3:f2:
53:cc:17:f0:c1:47:7b:ba:e6:67:59:d6:b1:77:c8:
80:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B8:C1:03:B7:8E:86:E8:9E:17:D4:09:64:3C:21:90:98:54:B1:21
X509v3 Authority Key Identifier:
keyid:54:2D:97:1A:D3:C2:E4:38:D4:A3:12:D1:A1:DE:75:18:10:AC:A4:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d0:4e:c1:a6:b9:b9:df:f6:1e:ce:96:49:67:9d:d9:a4:e1:
91:db:6a:bf:a1:34:fa:7d:fb:eb:b6:63:3d:f7:20:0a:61:20:
c3:9a:3e:8e:01:35:89:74:16:63:71:99:1c:ce:bf:3f:72:b9:
bb:a4:bb:6a:95:f4:6a:3f:f6:cc:e7:25:f2:6f:f6:3d:b0:85:
18:88:3f:f5:90:72:bc:04:0b:84:e8:5d:a6:0a:7d:fe:78:8e:
f9:5b:b3:fb:3f:8c:13:91:be:4f:e7:12:a7:78:9e:c5:ec:c6:
c6:d1:08:25:17:7b:aa:29:45:4c:92:e2:35:75:a1:04:47:f2:
a8:97:ed:60:26:7e:4d:f3:f1:52:f5:c1:e3:61:21:33:c1:7e:
fe:de:86:6d:2c:dd:43:46:8d:5b:a5:f4:f2:15:72:c6:a9:ae:
31:77:ae:7b:74:82:cf:44:e8:76:e5:36:d5:a8:f6:2c:f3:f0:
7e:c6:26:ab:e4:c9:ee:b0:dc:2e:6f:d9:39:24:94:03:68:1b:
5b:cb:4a:bd:8e:9c:08:7d:91:3f:ec:14:49:8d:cd:da:e7:e2:
4d:c8:f7:05:bc:b0:91:c9:ab:47:7b:1b:4f:74:8e:35:3a:fa:
9e:4b:9f:37:cd:22:72:75:7d:88:53:ec:50:42:a1:89:c9:2e:
7e:ee:e1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:14:07 2025 by rpki-client