Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
File: Vacs_0G9t8fgGFXTkHba9yF0LHA.mft (raw, json)
Hash identifier: oWKubMd8YIhecrH/I43Vc6bID18XRUrnEiQmqh7ekAQ=
Subject key identifier: FD:BB:98:F1:B2:E3:0E:B8:C3:BA:39:20:A9:51:AB:B2:2E:E8:AB:15
Authority key identifier: 55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70
Certificate issuer: /CN=55a72cff41bdb7c7e01855d39076daf721742c70
Certificate serial: 0198D4A798A5C32B23B698B1B9BFDA9DE95A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
Manifest number: 1241
Signing time: Sat 23 Aug 2025 02:00:10 +0000
Manifest this update: Sat 23 Aug 2025 02:00:10 +0000
Manifest next update: Sun 24 Aug 2025 02:00:10 +0000
Files and hashes: 1: Vacs_0G9t8fgGFXTkHba9yF0LHA.crl (hash: thBwm5vujdGm/9jv5fbA92b00vsCY19NQblEWPW8KiY=)
2: hVVS9Cn-0kGfNBOiQMyNN9VUf0k.roa (hash: sbgdIqLYSK1OXVPg3GYNP6cJGG82G/AcVDZsAviuiqM=)
3: uHGvKFxGUbuZJitYbOKe-TvvsJA.roa (hash: 2ggmV/gZ71WHFH+tl+mSGN+dQgondzuBHty4bl2C+wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:98:a5:c3:2b:23:b6:98:b1:b9:bf:da:9d:e9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55a72cff41bdb7c7e01855d39076daf721742c70
Validity
Not Before: Aug 23 02:00:10 2025 GMT
Not After : Aug 24 02:00:10 2025 GMT
Subject: CN=fdbb98f1b2e30eb8c3ba3920a951abb22ee8ab15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f6:b9:3c:46:a1:06:f9:85:23:1e:5c:03:76:
e1:9d:1c:4f:41:fd:56:d3:f7:a3:b8:42:2a:7d:c7:
bb:da:bf:08:4c:66:06:17:a5:a6:f2:e5:2f:5b:ac:
1d:6c:01:9f:97:f9:d7:73:c7:cc:7e:c2:25:e9:7d:
d3:b9:1b:4d:f3:db:8a:04:8b:17:86:00:0c:a7:8a:
5f:06:27:95:78:c7:ba:f1:54:06:0c:f5:24:2d:59:
27:b2:19:14:95:75:36:8b:5d:90:87:4c:93:e1:12:
98:24:70:8f:95:67:10:72:c3:b3:60:4d:75:57:d5:
5b:ae:4c:05:5c:18:6b:c2:99:a4:d7:a8:c6:bb:d0:
4f:bf:82:5c:06:fa:a8:a2:83:60:09:fa:78:89:28:
94:d6:64:af:8b:18:54:51:d8:1c:cc:23:f9:93:92:
77:13:43:f1:18:d5:f8:61:87:a4:1e:08:45:50:21:
4f:a9:2f:13:2e:f9:98:f0:58:86:66:3f:3c:98:80:
e3:b0:45:dc:3a:bc:0a:ec:f2:fc:df:97:d3:c4:c9:
83:96:3f:c8:2d:f6:79:9a:44:67:b9:df:b5:46:3e:
ce:cd:24:c2:9f:10:4d:a7:7c:43:50:8f:f0:12:d4:
56:fd:2d:32:43:32:1a:ef:0a:2d:ed:84:1c:f7:a1:
ab:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BB:98:F1:B2:E3:0E:B8:C3:BA:39:20:A9:51:AB:B2:2E:E8:AB:15
X509v3 Authority Key Identifier:
keyid:55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:29:2f:af:50:3b:6c:41:e0:dd:6d:a2:3d:36:e3:35:ff:9b:
ee:84:58:55:6b:0d:3a:57:af:04:bf:47:a8:a2:40:78:8e:6f:
ec:96:9a:ec:3c:cf:8c:38:86:2e:53:34:58:06:f7:51:7f:24:
07:c4:81:20:0b:24:40:5d:b8:21:a2:4c:a5:e6:87:a7:9d:8e:
dc:73:18:a9:84:60:6e:a0:09:6a:e6:9b:d8:ff:98:f4:1d:36:
80:14:45:8b:92:63:eb:62:57:8d:e7:76:70:23:f4:14:5f:c9:
7b:74:56:8c:6b:cd:fb:df:ec:b2:9d:5d:f7:86:4e:dd:ef:cc:
32:5f:45:a5:82:16:31:28:62:5f:d2:9d:42:67:83:c1:97:ac:
63:de:f4:55:e7:de:fa:bf:86:53:1d:81:a7:8a:d7:29:8e:61:
7e:1b:ce:37:71:a1:b8:84:20:da:cd:38:34:a7:69:cf:a0:e6:
67:59:2b:0d:e0:9c:ac:8b:97:2f:5d:6a:8a:b5:91:76:6a:55:
47:ef:d4:ae:cf:13:75:da:3b:96:82:97:46:92:ca:ea:0f:c5:
bc:25:f9:2b:e2:e0:03:37:67:9e:ef:a3:fb:c5:34:35:e0:05:
63:77:3d:45:7a:77:78:9a:7b:82:c9:3f:8f:b6:82:bb:6a:24:
6f:a8:e4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:33 2025 by rpki-client