Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.mft
File: VV10LVJ_lwDMAEfX1hv9gih42x8.mft (raw, json)
Hash identifier: v7B1vzi0nECH729LwE9iRcDQICuCbGFGEAzt5I8ZZnQ=
Subject key identifier: 27:01:55:D6:30:20:41:AB:9E:F4:B6:8C:83:58:FA:E7:59:F3:C8:40
Authority key identifier: 55:5D:74:2D:52:7F:97:00:CC:00:47:D7:D6:1B:FD:82:28:78:DB:1F
Certificate issuer: /CN=555d742d527f9700cc0047d7d61bfd822878db1f
Certificate serial: 0199FC588A2FC992E83E80150ABDB5018469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VV10LVJ_lwDMAEfX1hv9gih42x8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.mft
Manifest number: 16BB
Signing time: Sun 19 Oct 2025 12:01:24 +0000
Manifest this update: Sun 19 Oct 2025 12:01:24 +0000
Manifest next update: Mon 20 Oct 2025 12:01:24 +0000
Files and hashes: 1: DYecUh-DxqkXQO2e7g2xu3pUfow.roa (hash: YUWrnAO2Gq94plJUaewAQTbWDDY7NY6O0vRYXx6edu0=)
2: VV10LVJ_lwDMAEfX1hv9gih42x8.crl (hash: KlCMuf2+1/7IMUlSqwqHBZsQHAdRzkbooh0oX+IXHzM=)
3: hNRdZItPl-_x1hY3C3RjmRZbjnY.roa (hash: RX1AwwjMh7GoVfAGeesdzdmROnn3H+S+x/ans2oUFUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VV10LVJ_lwDMAEfX1hv9gih42x8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:8a:2f:c9:92:e8:3e:80:15:0a:bd:b5:01:84:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=555d742d527f9700cc0047d7d61bfd822878db1f
Validity
Not Before: Oct 19 12:01:24 2025 GMT
Not After : Oct 20 12:01:24 2025 GMT
Subject: CN=270155d6302041ab9ef4b68c8358fae759f3c840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:85:da:5c:4c:27:bb:63:58:17:38:81:d0:41:
94:ac:ef:45:53:ea:e2:fe:e9:a3:81:7d:d7:a3:63:
e7:a8:1d:3a:12:f8:93:c0:72:ac:be:89:47:33:39:
c3:9b:cc:1d:c4:f7:49:63:df:9a:e9:99:bd:25:7e:
8b:0a:63:5c:40:87:64:45:55:2e:47:09:b5:bc:7a:
d1:67:3c:72:ee:0d:d9:37:75:ed:1f:a1:d4:a4:9c:
db:c9:31:31:ae:68:e4:a0:a3:6f:03:7d:fc:a7:8c:
8b:d3:01:44:55:da:26:c5:51:4b:ae:01:c9:77:7e:
b1:8a:c1:96:ad:d8:a7:21:9d:24:69:e9:0b:22:e2:
03:b6:32:d3:66:ea:e0:bf:f8:e8:09:68:01:10:68:
03:15:a1:38:56:7f:15:77:00:a8:a5:8c:d1:53:27:
88:16:7a:d0:77:29:f8:27:5f:ec:50:40:01:20:34:
61:6c:85:22:5a:65:0c:1e:d7:72:ee:88:14:97:fc:
1d:0e:c2:d8:31:db:2b:14:6f:d5:c8:62:02:53:aa:
e6:f8:ee:e1:65:b6:b7:51:b3:3b:ce:8a:d1:52:da:
8f:e3:d4:c5:b0:a2:68:d0:06:d3:9d:ae:dd:c5:99:
89:0f:c4:08:39:2c:e0:24:2d:f5:ed:ca:e0:79:23:
46:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:01:55:D6:30:20:41:AB:9E:F4:B6:8C:83:58:FA:E7:59:F3:C8:40
X509v3 Authority Key Identifier:
keyid:55:5D:74:2D:52:7F:97:00:CC:00:47:D7:D6:1B:FD:82:28:78:DB:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VV10LVJ_lwDMAEfX1hv9gih42x8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:da:df:ed:91:d0:44:db:b4:c9:61:71:56:ed:58:5a:fd:82:
61:5c:8a:f4:c1:bc:37:ab:9d:28:06:39:1e:37:5a:d1:8d:ed:
dc:cf:7f:39:1d:4a:2b:75:25:f9:06:38:f7:39:8e:95:f6:9e:
18:13:f0:16:79:55:db:3f:71:09:99:a6:e6:91:88:9e:27:2c:
ef:b4:dd:42:e9:95:00:ba:b9:95:f1:50:0a:0f:0d:e2:34:2d:
61:b8:8e:6e:53:26:e7:ee:82:bf:e8:77:9c:d8:40:a7:8e:bb:
e4:3a:ae:40:09:6d:70:9f:ca:f2:25:df:92:84:7b:68:4c:29:
6e:b9:96:fa:c2:36:68:77:af:a3:01:b2:c3:f0:0f:b5:69:95:
1a:08:fe:7d:c8:78:18:77:23:55:7a:a6:c4:c6:67:90:5e:e0:
c7:b4:8c:db:48:82:2e:4b:ea:99:a7:af:a8:6e:e2:5a:a7:12:
52:92:29:4e:94:06:8b:31:51:6b:a7:53:58:96:80:e9:61:ca:
5e:9c:19:27:06:f0:7a:71:4e:7f:cc:db:07:40:56:29:28:9b:
37:fd:27:78:33:d6:c7:26:72:73:41:ee:04:cb:11:e9:39:d0:
e2:a5:82:26:b8:2a:54:fa:35:7e:f0:ae:8f:b6:00:87:ce:62:
1d:2a:80:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:21 2025 by rpki-client