Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
File: VC2XGtPC5DjUoxLRod51GBCspOA.mft (raw, json)
Hash identifier: 7MNe05NEpdzVefAnaMt4L94O7EaugWkNjfYuP4wFaYs=
Subject key identifier: C7:11:64:05:4A:0A:71:99:A8:03:DF:5B:7F:64:35:A4:2E:7A:93:0A
Authority key identifier: 54:2D:97:1A:D3:C2:E4:38:D4:A3:12:D1:A1:DE:75:18:10:AC:A4:E0
Certificate issuer: /CN=542d971ad3c2e438d4a312d1a1de751810aca4e0
Certificate serial: 0198D65F9862972E32E1CE496CAD69A807FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:00:45 +0000
Manifest this update: Sat 23 Aug 2025 10:00:45 +0000
Manifest next update: Sun 24 Aug 2025 10:00:45 +0000
Files and hashes: 1: 5-LdegbBxKQtUzYhU_eCIvPEaSU.roa (hash: P+UUaet9A3DPospwlQybCpBsJ5DTQfNPoHJlQgfKeB4=)
2: VC2XGtPC5DjUoxLRod51GBCspOA.crl (hash: CSBEWkyuHuGFaEI6/m72GUV5to2Z3VGcp3NzoNj+J4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:98:62:97:2e:32:e1:ce:49:6c:ad:69:a8:07:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542d971ad3c2e438d4a312d1a1de751810aca4e0
Validity
Not Before: Aug 23 10:00:45 2025 GMT
Not After : Aug 24 10:00:45 2025 GMT
Subject: CN=c71164054a0a7199a803df5b7f6435a42e7a930a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:88:c5:7a:f7:3a:86:41:9c:1c:15:16:7d:97:
9d:b0:0b:64:74:69:cd:d2:3f:c7:19:8e:b4:1f:e1:
c6:ed:df:82:6d:a2:2a:09:b4:77:2e:6e:c6:bb:2e:
5a:b4:4e:e1:f7:37:f4:59:6f:de:81:9b:e3:7a:04:
d1:05:41:b7:7c:ff:54:a2:fc:d3:92:ef:9d:1a:85:
4d:30:a4:64:f4:b8:24:c3:83:50:86:93:29:a4:b8:
1f:63:28:70:e7:fb:9b:34:4c:08:e4:64:8a:94:fd:
78:63:4b:3f:51:7e:a0:9a:af:9b:b2:b0:c7:f0:2c:
5b:5f:bf:ff:56:84:2b:2a:fe:77:ef:13:79:70:61:
2f:70:72:b3:ef:a0:d1:a3:78:6c:08:27:c8:4d:17:
75:50:54:d5:9f:f0:17:8a:9f:f4:9e:1f:4d:15:5c:
ca:6a:f9:45:ae:84:97:3d:9b:03:f3:56:1b:93:f6:
fe:1e:12:fa:47:24:87:71:e6:e0:25:11:62:54:0a:
b9:39:9e:c2:9c:41:e9:25:b8:4e:36:24:85:52:4a:
30:40:54:27:e2:3e:fa:b5:93:b1:02:f0:31:24:43:
7c:26:59:2c:0a:7a:91:e7:ed:53:9d:84:a9:9c:cd:
a3:b7:77:8f:3d:db:dd:a1:38:e5:43:d3:e2:7f:a9:
13:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:11:64:05:4A:0A:71:99:A8:03:DF:5B:7F:64:35:A4:2E:7A:93:0A
X509v3 Authority Key Identifier:
keyid:54:2D:97:1A:D3:C2:E4:38:D4:A3:12:D1:A1:DE:75:18:10:AC:A4:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ed:31:7b:a0:13:5a:e0:d2:d4:9a:52:4b:f8:98:29:2d:03:
81:20:08:1c:52:90:15:a7:c9:b7:b3:c3:ef:36:21:ae:e4:16:
74:20:e8:2e:5d:f2:0b:07:cc:7b:6c:c8:71:df:1f:94:a9:06:
a6:18:17:fb:74:67:e4:5e:91:dc:0e:f0:d0:5d:e6:0c:6d:3e:
49:44:da:27:e9:c3:77:8d:e5:c6:96:56:97:21:12:83:3b:1c:
be:fa:91:65:9f:25:75:b0:08:b7:c5:ba:dd:44:8c:21:73:1a:
62:22:b5:8f:ba:fd:4c:36:bd:5a:a1:6f:8b:a7:dc:64:42:38:
32:f9:31:e7:8a:8b:4a:9a:8d:f5:80:7d:d9:47:5b:84:17:be:
0c:12:4b:dc:3e:32:a7:66:5c:34:df:bc:b3:e0:70:e2:8d:ac:
bc:89:91:c2:38:f2:83:3f:23:43:74:46:2a:24:e7:20:5d:a9:
66:d8:7e:61:7f:65:f8:73:2b:4d:f7:de:de:95:33:78:a7:35:
3e:eb:96:01:b7:67:b7:45:de:25:14:f2:50:93:02:d3:eb:fb:
ee:09:93:23:6d:9c:66:88:5a:3c:3e:ed:0d:53:24:c7:75:f6:
3e:97:16:cf:74:1c:ea:0d:28:dd:00:d2:5a:08:c2:90:16:a4:
ad:96:ce:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX5hily4y4c5JbK1pqAf6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MmQ5NzFhZDNjMmU0MzhkNGEzMTJkMWExZGU3NTE4MTBh
Y2E0ZTAwHhcNMjUwODIzMTAwMDQ1WhcNMjUwODI0MTAwMDQ1WjAzMTEwLwYDVQQD
EyhjNzExNjQwNTRhMGE3MTk5YTgwM2RmNWI3ZjY0MzVhNDJlN2E5MzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYjFevc6hkGcHBUWfZedsAtkdGnN
0j/HGY60H+HG7d+CbaIqCbR3Lm7Guy5atE7h9zf0WW/egZvjegTRBUG3fP9UovzT
ku+dGoVNMKRk9Lgkw4NQhpMppLgfYyhw5/ubNEwI5GSKlP14Y0s/UX6gmq+bsrDH
8CxbX7//VoQrKv537xN5cGEvcHKz76DRo3hsCCfITRd1UFTVn/AXip/0nh9NFVzK
avlFroSXPZsD81Ybk/b+HhL6RySHcebgJRFiVAq5OZ7CnEHpJbhONiSFUkowQFQn
4j76tZOxAvAxJEN8JlksCnqR5+1TnYSpnM2jt3ePPdvdoTjlQ9Pif6kTuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcRZAVKCnGZqAPfW39kNaQuepMKMB8GA1UdIwQY
MBaAFFQtlxrTwuQ41KMS0aHedRgQrKTgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkMyWEd0UEM1RGpVb3hMUm9kNTFHQkNzcE9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85ZGRjOWQtNjBjNy00YmNiLTkxOWEt
MzQwODA4OWVkYzQ1LzEvVkMyWEd0UEM1RGpVb3hMUm9kNTFHQkNzcE9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi85ZGRjOWQtNjBjNy00YmNiLTkxOWEtMzQwODA4OWVkYzQ1
LzEvVkMyWEd0UEM1RGpVb3hMUm9kNTFHQkNzcE9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHe0xe6AT
WuDS1JpSS/iYKS0DgSAIHFKQFafJt7PD7zYhruQWdCDoLl3yCwfMe2zIcd8flKkG
phgX+3Rn5F6R3A7w0F3mDG0+SUTaJ+nDd43lxpZWlyESgzscvvqRZZ8ldbAIt8W6
3USMIXMaYiK1j7r9TDa9WqFvi6fcZEI4Mvkx54qLSpqN9YB92UdbhBe+DBJL3D4y
p2ZcNN+8s+Bw4o2svImRwjjygz8jQ3RGKiTnIF2pZth+YX9l+HMrTffe3pUzeKc1
PuuWAbdnt0XeJRTyUJMC0+v77gmTI22cZohaPD7tDVMkx3X2PpcWz3Qc6g0o3QDS
WgjCkBakrZbO5g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:16:51 2025 by rpki-client