Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
File: VC8JTwQnsU80mffN9h2IOwiIYoo.mft (raw, json)
Hash identifier: z/M8R4h45O63xQFRu8FueAiya5v4cq00QckpAfegS5s=
Subject key identifier: F0:89:FF:3D:17:13:CE:97:48:0A:D0:8A:CC:74:89:26:D9:C5:8F:43
Authority key identifier: 54:2F:09:4F:04:27:B1:4F:34:99:F7:CD:F6:1D:88:3B:08:88:62:8A
Certificate issuer: /CN=542f094f0427b14f3499f7cdf61d883b0888628a
Certificate serial: 0198D7057F2265562EE03E4B1E0E50114907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
Manifest number: 1330
Signing time: Sat 23 Aug 2025 13:01:58 +0000
Manifest this update: Sat 23 Aug 2025 13:01:58 +0000
Manifest next update: Sun 24 Aug 2025 13:01:58 +0000
Files and hashes: 1: D67aVlXhc44LndQNsE5Bzd0G7rE.roa (hash: Dxh2s3RJlCzPr2UFPIR0UDzenFrh9ma2jyYFmd8QKIw=)
2: VC8JTwQnsU80mffN9h2IOwiIYoo.crl (hash: 0dUgNRJ8R3eGVf3LUhYt6Kkw2aZCS/rcXJxRXib10y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:7f:22:65:56:2e:e0:3e:4b:1e:0e:50:11:49:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f094f0427b14f3499f7cdf61d883b0888628a
Validity
Not Before: Aug 23 13:01:58 2025 GMT
Not After : Aug 24 13:01:58 2025 GMT
Subject: CN=f089ff3d1713ce97480ad08acc748926d9c58f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:64:ae:ef:c5:23:f5:60:e3:86:c8:a6:d8:e0:
04:6d:c0:1f:1d:a0:df:96:d9:6e:84:3a:ac:a0:dc:
e9:b6:68:70:db:3e:1f:08:59:81:d1:d9:6d:4c:47:
a6:63:01:4e:83:2a:3e:64:f8:de:ce:da:a0:fa:85:
84:cc:af:48:1f:38:19:1f:3b:59:c4:4c:84:02:83:
03:e7:d5:83:aa:8e:59:2a:02:35:6a:db:4e:70:7f:
27:40:96:60:1d:8f:c7:d1:75:b3:db:a1:e9:c4:6f:
bb:25:90:b9:b7:f5:2f:0d:1a:a7:71:de:db:f0:6c:
49:50:2f:6e:36:7e:1a:bb:5b:36:c4:bb:1b:72:65:
72:66:83:bd:3d:d5:48:bc:43:95:75:b6:f9:83:f6:
18:2e:39:54:02:fc:83:44:ce:7e:eb:07:c5:97:62:
a3:d2:cd:bb:77:f1:a5:16:7c:ad:b5:c3:36:0b:a3:
15:04:24:c6:eb:65:f1:99:7f:b4:50:1a:90:30:74:
34:b6:eb:1b:88:ab:45:3f:6d:88:b0:8e:52:98:f5:
f6:f2:85:7e:ba:b6:1a:84:8e:07:b2:f1:db:a8:70:
bf:f1:fd:db:47:f9:6d:97:8f:dd:42:5e:fd:12:18:
07:3b:6d:9b:ea:79:b2:7c:39:39:ef:6a:60:75:92:
0e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:89:FF:3D:17:13:CE:97:48:0A:D0:8A:CC:74:89:26:D9:C5:8F:43
X509v3 Authority Key Identifier:
keyid:54:2F:09:4F:04:27:B1:4F:34:99:F7:CD:F6:1D:88:3B:08:88:62:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:7b:50:d5:72:70:ca:5f:d7:7f:e9:d2:a9:0e:18:fc:2e:a0:
bf:a4:52:9e:76:62:11:e1:07:fe:48:41:ca:9d:d0:1d:b9:7c:
7b:e0:f0:c7:8f:98:3c:1f:66:e6:4d:53:05:bd:a4:7f:0a:3c:
32:50:5c:fb:1a:57:ea:8f:fc:5b:50:e0:67:46:4e:b0:6d:39:
6a:61:87:f4:8a:3a:84:9b:25:fd:c1:2c:52:3c:cf:0e:23:14:
f1:3f:e1:e7:cf:a2:ff:4f:92:80:09:eb:54:66:05:d2:c6:2c:
d7:75:e5:f4:e0:95:62:38:21:77:96:e6:5e:f4:99:7e:25:2c:
21:6d:f0:c8:e3:ac:75:60:02:a4:a1:b2:2a:e2:f7:19:34:5c:
7f:51:c9:09:f1:35:0b:bc:7e:b1:43:9f:4e:c9:00:d6:71:9a:
13:29:45:e5:de:67:0a:9c:38:51:49:46:df:00:39:43:41:66:
4e:d1:8b:d9:d7:99:40:b1:0e:ff:39:ae:db:ca:86:92:0a:ce:
6b:f4:e6:f2:f6:62:de:e3:67:c5:3c:ed:7c:b5:9d:ee:c4:07:
44:2b:cb:e7:31:3b:fc:27:d9:22:e7:08:23:9a:71:e2:4c:a5:
0a:0d:03:74:a9:54:81:99:63:90:f3:27:e1:20:b4:59:db:95:
d3:14:e4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:50:07 2025 by rpki-client