Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
File: VC8JTwQnsU80mffN9h2IOwiIYoo.mft (raw, json)
Hash identifier: f8gKYCcqhDjpNaUQgXbSIaLfhl+3aqHo8XOh6OhCcZk=
Subject key identifier: D5:39:9C:3E:5A:5A:6A:9B:C6:11:F6:27:2C:E0:4D:DA:34:79:FF:22
Authority key identifier: 54:2F:09:4F:04:27:B1:4F:34:99:F7:CD:F6:1D:88:3B:08:88:62:8A
Certificate issuer: /CN=542f094f0427b14f3499f7cdf61d883b0888628a
Certificate serial: 019A725CED11AE5B6F4512A82CE5C6966622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
Manifest number: 1405
Signing time: Tue 11 Nov 2025 10:01:23 +0000
Manifest this update: Tue 11 Nov 2025 10:01:23 +0000
Manifest next update: Wed 12 Nov 2025 10:01:23 +0000
Files and hashes: 1: D67aVlXhc44LndQNsE5Bzd0G7rE.roa (hash: Dxh2s3RJlCzPr2UFPIR0UDzenFrh9ma2jyYFmd8QKIw=)
2: VC8JTwQnsU80mffN9h2IOwiIYoo.crl (hash: f3IcdBgEnCQhEDozbpAJRt3cuP5XkBXTt6OXRbpmQvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ed:11:ae:5b:6f:45:12:a8:2c:e5:c6:96:66:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f094f0427b14f3499f7cdf61d883b0888628a
Validity
Not Before: Nov 11 10:01:23 2025 GMT
Not After : Nov 12 10:01:23 2025 GMT
Subject: CN=d5399c3e5a5a6a9bc611f6272ce04dda3479ff22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:19:07:ae:f0:87:66:51:07:75:90:26:98:05:
54:e3:e0:97:6b:c0:03:a7:ef:2c:f9:fc:f0:22:ad:
d6:0d:44:80:54:81:e2:ad:c2:99:65:ea:87:90:b4:
19:ac:20:08:87:a0:a0:bd:c0:e0:68:a7:83:70:f6:
d9:41:75:81:a6:f8:08:25:e2:16:1e:98:30:35:55:
70:d8:f6:c4:b2:46:e4:6c:0f:90:d5:05:6e:dd:bf:
49:a9:7f:b1:f0:3b:05:ae:3d:db:68:0b:5c:90:d9:
cd:0b:f7:ac:42:68:44:d4:a5:ed:34:54:99:c9:5e:
bc:92:73:60:9d:7b:20:a9:68:58:a6:c7:d4:4e:0e:
25:5a:cc:28:7a:97:a4:e0:4a:57:f8:cd:49:42:1e:
ba:db:1c:30:d4:97:22:f0:0f:82:e9:e7:e9:78:e0:
52:95:0c:63:02:d7:51:1d:87:ff:45:80:bc:61:a4:
bf:90:29:68:11:71:8e:44:2f:5c:6c:7d:66:12:d1:
32:cc:8e:3a:8d:9a:e6:3d:97:bc:eb:76:a6:94:09:
ac:60:5d:78:0c:67:5a:e8:49:ac:12:c0:48:48:3b:
71:49:e8:11:b2:cc:32:8f:1e:2d:96:be:80:6a:07:
be:1a:a0:eb:71:ee:12:98:ec:43:8d:b7:48:e5:4f:
59:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:39:9C:3E:5A:5A:6A:9B:C6:11:F6:27:2C:E0:4D:DA:34:79:FF:22
X509v3 Authority Key Identifier:
keyid:54:2F:09:4F:04:27:B1:4F:34:99:F7:CD:F6:1D:88:3B:08:88:62:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:10:dc:b1:a1:d6:c0:29:ca:9f:fd:2f:fc:df:54:31:29:05:
b2:37:58:8f:49:8d:a5:4a:2f:27:b2:bd:0d:99:78:4d:e0:cb:
1f:05:5a:c7:14:38:08:b6:16:40:e6:ba:22:ab:97:2d:2e:8e:
28:5c:6e:6e:97:08:0d:11:ab:dd:2c:b6:70:44:af:b8:37:54:
0e:a9:a7:25:a8:85:f6:00:ad:47:29:0a:1c:f6:48:ca:08:8b:
d8:08:49:31:01:fd:b4:a8:66:82:74:df:d6:07:8c:1c:01:b7:
91:8e:95:9c:31:88:75:bc:f8:b3:56:62:99:a1:ae:56:ba:0c:
87:d1:b7:dd:84:d0:41:d5:92:fe:70:0f:21:f6:fb:04:65:dc:
e2:b6:64:4b:0c:a8:85:78:f1:6b:c8:b6:05:ec:db:07:75:f2:
74:c3:0e:f9:0a:5c:c5:c2:20:e0:db:7d:31:77:1e:3d:22:4d:
f0:2e:12:46:f6:01:ee:2d:5c:96:b7:d3:f0:80:3a:3b:34:9f:
6e:cb:66:21:0c:ba:e9:0e:b9:52:3c:f2:45:8a:f6:8b:3d:4b:
97:8c:39:e2:1f:22:cf:a9:ac:e1:65:72:51:fd:d7:9f:79:b1:
8d:e5:d3:70:61:d0:99:24:98:55:79:6f:76:8b:7e:f0:8f:54:
ee:b2:6e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:35 2025 by rpki-client