Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
File: VC2XGtPC5DjUoxLRod51GBCspOA.mft (raw, json)
Hash identifier: zF7obvoybqRoZmJLvGkETSMliVDHcQaFYAY4CNpn3ps=
Subject key identifier: C5:6C:55:88:D4:7D:B8:22:B8:8A:29:E8:65:F9:F5:94:E1:04:91:B1
Authority key identifier: 54:2D:97:1A:D3:C2:E4:38:D4:A3:12:D1:A1:DE:75:18:10:AC:A4:E0
Certificate issuer: /CN=542d971ad3c2e438d4a312d1a1de751810aca4e0
Certificate serial: 0199FFC88D8815608997571D21AEBC3CE819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 04:02:37 +0000
Manifest this update: Mon 20 Oct 2025 04:02:37 +0000
Manifest next update: Tue 21 Oct 2025 04:02:37 +0000
Files and hashes: 1: 5-LdegbBxKQtUzYhU_eCIvPEaSU.roa (hash: P+UUaet9A3DPospwlQybCpBsJ5DTQfNPoHJlQgfKeB4=)
2: VC2XGtPC5DjUoxLRod51GBCspOA.crl (hash: UrsnO1Z/wVy38e9BOcrjjpzoDhVM6F6hkm9A/35ayN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:8d:88:15:60:89:97:57:1d:21:ae:bc:3c:e8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542d971ad3c2e438d4a312d1a1de751810aca4e0
Validity
Not Before: Oct 20 04:02:37 2025 GMT
Not After : Oct 21 04:02:37 2025 GMT
Subject: CN=c56c5588d47db822b88a29e865f9f594e10491b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:61:47:85:a3:11:fa:aa:bd:bd:29:91:cc:97:
18:74:0d:10:14:47:66:2e:a6:3e:b9:c5:bf:e4:15:
54:85:cb:fa:7a:da:8e:6d:c5:99:f5:bf:e8:0a:ca:
f3:ca:86:34:d5:8f:66:f8:8f:d8:4c:d3:bb:d0:f4:
f6:81:e6:24:b2:59:fd:42:94:39:09:46:ae:f7:9d:
70:5f:5d:3c:59:e5:12:5a:ec:20:06:80:b2:22:a4:
f1:12:1e:3a:d5:0f:b6:7a:69:93:dd:50:f5:5c:e6:
e8:c9:9c:26:20:93:a1:7a:e5:06:c3:ee:e8:df:ba:
88:14:db:a7:a9:6a:6d:85:4b:05:e4:78:ed:1b:00:
ca:c1:ad:22:35:14:1a:bf:22:a4:3c:2e:2c:df:55:
9b:e6:07:16:8a:6c:f5:5c:91:c5:03:ec:2c:7c:e1:
6b:f3:90:62:f9:62:0a:fb:a6:c2:06:6f:46:87:de:
d1:59:8e:b2:2a:e4:d3:26:ab:76:15:ea:f7:da:b0:
d8:35:25:f2:f4:bb:4c:38:a1:c4:49:72:2a:3e:18:
e3:74:ec:d6:d9:0a:18:ed:64:95:6e:e9:29:a1:2d:
39:cf:ea:b4:d5:58:51:75:33:55:3f:b4:1e:ab:02:
39:b8:d2:c7:ee:02:cd:05:1d:07:6b:b5:49:4f:90:
f7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6C:55:88:D4:7D:B8:22:B8:8A:29:E8:65:F9:F5:94:E1:04:91:B1
X509v3 Authority Key Identifier:
keyid:54:2D:97:1A:D3:C2:E4:38:D4:A3:12:D1:A1:DE:75:18:10:AC:A4:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4f:75:62:a1:a2:e7:f7:ef:e4:6c:95:09:aa:f3:63:a2:a1:
31:db:b4:56:3d:08:c4:90:91:aa:dc:a7:bb:d1:38:94:a9:51:
5b:d5:32:ce:1e:b2:27:ed:b1:d4:8c:0e:b2:3f:fd:d4:e9:1c:
48:7e:76:9a:22:01:a3:9e:ff:8d:d1:eb:d6:66:1a:3f:1c:f7:
0f:83:88:af:17:8a:00:f7:b2:eb:84:b8:d1:33:89:67:d5:1f:
d9:30:ab:b1:e2:e6:f0:f3:8e:e4:41:0e:b5:d7:2d:36:26:16:
eb:f1:c2:7e:65:ae:9b:cc:c4:f7:f1:76:0b:e0:8f:07:7e:b5:
62:88:40:03:29:fe:cf:1b:45:50:bd:b8:cb:21:94:6e:d7:be:
57:bb:fb:6d:d0:00:36:79:b4:96:88:2a:aa:f2:d3:a7:26:55:
c2:82:6c:5a:8b:33:f3:42:95:da:9c:99:5a:9f:b4:c7:74:d3:
1c:3b:a6:04:4b:bc:f3:c4:1a:32:ab:c1:de:2c:89:d7:06:04:
a9:9e:af:e4:c5:c0:98:58:83:08:74:41:26:b3:8e:61:00:d8:
c7:62:b7:09:a6:bc:49:51:f6:ba:94:e9:1d:f2:91:c2:bf:e2:
5e:ef:9a:a1:d2:1e:18:3e:40:67:7c:70:e0:cb:5d:a1:ca:29:
6b:51:18:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:07 2025 by rpki-client