Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
File: VC8JTwQnsU80mffN9h2IOwiIYoo.mft (raw, json)
Hash identifier: WNtfhSXQVohjWsQcbEZW6uINgamaTOecfmCoeHdxeP0=
Subject key identifier: F3:02:1B:27:4B:A7:90:48:89:7C:BE:E8:3E:77:65:FA:B6:C7:52:E3
Authority key identifier: 54:2F:09:4F:04:27:B1:4F:34:99:F7:CD:F6:1D:88:3B:08:88:62:8A
Certificate issuer: /CN=542f094f0427b14f3499f7cdf61d883b0888628a
Certificate serial: 01974930F8F2CE9A132CA9D58560DF9DC227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
Manifest number: 1262
Signing time: Sat 07 Jun 2025 07:00:35 +0000
Manifest this update: Sat 07 Jun 2025 07:00:35 +0000
Manifest next update: Sun 08 Jun 2025 07:00:35 +0000
Files and hashes: 1: D67aVlXhc44LndQNsE5Bzd0G7rE.roa (hash: Dxh2s3RJlCzPr2UFPIR0UDzenFrh9ma2jyYFmd8QKIw=)
2: VC8JTwQnsU80mffN9h2IOwiIYoo.crl (hash: YA9s8dAys2Pmbj7EgxnNFTeIpeeozFnDMccLcsTWsH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:30:f8:f2:ce:9a:13:2c:a9:d5:85:60:df:9d:c2:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f094f0427b14f3499f7cdf61d883b0888628a
Validity
Not Before: Jun 7 07:00:35 2025 GMT
Not After : Jun 8 07:00:35 2025 GMT
Subject: CN=f3021b274ba79048897cbee83e7765fab6c752e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7a:4d:79:dc:75:5d:69:a9:44:75:d3:13:15:
0e:e9:ca:ee:79:f5:db:ad:17:84:c9:5b:9c:8c:b1:
47:9d:27:5d:f9:b1:c9:e9:24:d6:fb:4f:34:62:78:
64:ca:b4:f0:d9:4e:b1:d5:c1:44:ce:49:ad:41:54:
b5:97:ba:89:39:1c:61:8b:b7:fc:e0:e5:9a:1b:c4:
33:77:8a:77:c8:15:40:c3:f3:69:8a:60:c3:2a:ab:
e0:fb:17:df:cc:a1:23:46:81:1f:2a:50:81:77:d4:
21:a3:22:2c:d1:49:98:29:70:45:58:93:e7:13:0a:
e4:5d:50:13:bd:4f:9d:96:89:be:3c:e8:ea:a6:e1:
89:73:29:87:1c:83:08:84:7b:95:be:35:d5:1b:50:
a2:be:63:4a:af:06:57:8f:7b:be:16:7c:cc:39:4d:
8b:ec:c6:bb:d5:ab:bb:eb:a9:b5:b7:de:40:98:1c:
60:9e:5c:a9:2e:17:61:99:36:df:0a:f8:10:b1:38:
1b:ed:f4:33:06:2a:68:54:7a:59:02:b2:d7:99:db:
83:2f:63:fc:f2:d2:09:85:97:4a:e3:21:67:21:6e:
38:99:05:5e:96:03:97:42:c2:c9:9c:6d:07:8f:23:
c2:4a:8b:cb:55:0a:87:6c:4a:16:3b:03:18:40:76:
9a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:02:1B:27:4B:A7:90:48:89:7C:BE:E8:3E:77:65:FA:B6:C7:52:E3
X509v3 Authority Key Identifier:
keyid:54:2F:09:4F:04:27:B1:4F:34:99:F7:CD:F6:1D:88:3B:08:88:62:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:92:60:76:e4:d9:21:a7:1d:b1:0e:15:93:3f:c0:9e:7d:3e:
99:32:13:b4:47:bd:83:d0:5c:ef:66:d1:a0:d3:6d:d8:3c:23:
87:90:39:a7:65:cf:bd:ee:e8:27:dc:ff:33:d1:4a:63:95:a4:
b2:88:f8:1b:08:d3:d2:b2:b8:93:18:3a:5c:3a:9c:2f:04:85:
dc:78:97:52:c4:a4:7f:df:3f:76:e6:18:92:12:d1:89:cc:90:
94:e4:30:d8:e6:bb:ea:d2:fe:06:c6:b5:c4:b4:26:8d:00:ea:
06:71:68:65:92:5f:4e:47:b8:cd:b1:89:58:ff:a4:5b:98:f6:
08:f5:1c:48:bc:b8:0e:52:0d:fe:f3:f8:88:da:9b:25:3e:d9:
4a:eb:c9:06:25:57:03:c0:99:99:a5:39:f8:c6:c7:8c:76:09:
ce:6c:09:72:69:7e:14:d8:07:09:6d:2a:d4:0f:81:ea:89:a0:
2e:4b:f7:7c:c8:de:f5:31:c1:22:69:b9:d3:db:ea:5b:60:36:
65:90:24:f7:e0:5e:de:a0:c2:e4:67:99:f0:77:a4:8f:c4:ca:
d5:14:9c:4e:2a:5b:1a:9f:ab:7a:47:0e:c7:6a:c5:31:05:a1:
2a:5d:2e:1e:44:d8:34:31:34:f7:02:6f:3f:e7:04:dd:1f:61:
e7:a0:a6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:26:02 2025 by rpki-client