Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
File: VChf_ulzEsUcOoBf-TQOvsM1JyA.mft (raw, json)
Hash identifier: P1sUOc0J9ylLtTgaIkHOmgYJKDlUmzFjmWpIH0H22VE=
Subject key identifier: 49:9F:07:31:2C:35:9A:51:B8:57:1D:16:EA:5E:A2:45:AA:29:6C:EA
Authority key identifier: 54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20
Certificate issuer: /CN=54285ffee97312c51c3a805ff9340ebec3352720
Certificate serial: 019888B25684D681F795C136EC5892E48081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
Manifest number: 1622
Signing time: Fri 08 Aug 2025 08:00:45 +0000
Manifest this update: Fri 08 Aug 2025 08:00:45 +0000
Manifest next update: Sat 09 Aug 2025 08:00:45 +0000
Files and hashes: 1: Ca-8iz_zQCrKysmx5A1KTglY5iE.roa (hash: QQcsgeeci4CpJE1THj53EE0/b4qFL4RDwyCbpu7M9gI=)
2: VChf_ulzEsUcOoBf-TQOvsM1JyA.crl (hash: K9JQPWOTYvJKgDRKc7vzKY/Cf0fDIHH5EaQiEgBNKus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:b2:56:84:d6:81:f7:95:c1:36:ec:58:92:e4:80:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54285ffee97312c51c3a805ff9340ebec3352720
Validity
Not Before: Aug 8 08:00:45 2025 GMT
Not After : Aug 9 08:00:45 2025 GMT
Subject: CN=499f07312c359a51b8571d16ea5ea245aa296cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d6:df:af:40:71:af:91:8f:0f:89:3f:0c:f4:
e8:aa:f6:10:2d:01:d7:dc:3f:ac:b2:8b:56:fa:3f:
3b:37:f8:e2:21:d2:37:13:2d:d5:a4:ec:7d:83:ba:
0c:c3:90:2f:f1:56:7f:ec:e7:fa:f7:44:cb:bb:07:
68:47:86:03:1c:d3:75:52:98:a1:72:ce:6a:c0:ae:
59:18:45:c2:71:6a:18:ab:ff:18:95:c3:ab:91:a7:
08:ea:55:98:19:0e:e2:0d:f9:30:5d:34:d9:7b:27:
8a:0f:6f:b4:df:73:dc:bf:3f:18:d8:6a:38:06:b6:
f0:85:91:22:2f:2f:f6:b4:21:e1:02:97:23:d1:78:
aa:8e:c3:05:d1:2e:84:09:27:f5:f0:f8:fe:6e:8d:
52:a3:9d:e3:9f:62:40:52:52:21:e7:39:04:ed:65:
a9:1d:9a:5b:7e:e0:d2:15:d1:4e:ac:86:3b:32:40:
60:45:db:df:d5:2b:f9:64:a0:3d:ae:ad:45:77:e6:
6a:ac:9b:7b:5d:08:b7:c9:35:a6:f2:a7:d0:8d:b1:
64:02:7b:9b:41:9a:79:c1:68:80:ed:a4:83:29:34:
8c:8c:d8:f6:f9:b1:ea:6f:a8:75:c4:e4:1a:b0:e5:
d4:22:2f:a0:58:76:4f:82:fc:ad:3f:c2:6f:b3:de:
ae:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9F:07:31:2C:35:9A:51:B8:57:1D:16:EA:5E:A2:45:AA:29:6C:EA
X509v3 Authority Key Identifier:
keyid:54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:43:7b:85:e5:61:ab:31:c2:39:ce:14:37:3e:42:6c:e7:38:
8c:59:26:6b:b1:56:e5:1d:f2:35:9e:54:29:85:8e:f0:db:6c:
30:69:d7:a8:87:78:3c:d3:47:d2:94:29:34:bb:e1:33:21:39:
1b:2c:69:5f:2b:7d:f1:13:57:ed:68:44:32:7a:83:7a:b1:2e:
e1:cd:0a:98:04:5b:4c:5f:1a:c8:53:e6:ee:50:c6:af:42:dc:
65:d9:e4:e2:cd:ee:d1:a1:d0:a9:bb:c6:dd:1d:74:b8:1f:f7:
95:73:13:90:7e:09:d1:08:2b:e1:bf:aa:b1:18:f3:34:c3:6a:
d3:0c:96:77:c3:06:c2:b6:6f:09:3f:b6:22:f5:53:fb:69:24:
2a:92:eb:dd:6d:f0:2e:1c:15:24:01:37:55:f2:4f:2e:bb:e2:
1a:b8:23:28:ba:6f:1a:88:b8:1d:52:b7:83:81:dc:d1:6d:82:
7c:e4:a4:85:c0:f1:6f:14:0e:0a:5e:db:81:3f:ba:e5:f7:bb:
5e:5f:6d:e7:ab:77:64:0f:8b:21:48:89:e2:c7:bc:29:fd:27:
28:c2:68:17:51:8b:94:f7:77:86:7b:2a:d9:b0:71:9e:93:6b:
d8:8f:00:28:21:c8:a8:e9:72:d5:fc:0e:1c:8b:e4:26:33:4f:
6a:53:3e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:26:28 2025 by rpki-client