Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft
File: vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft (raw, json)
Hash identifier: Uv6MBoSvRvvHKVL9XsJjQdueNu+v85/W/pDfXlqSDsM=
Subject key identifier: E8:20:12:20:32:BC:8F:0E:C8:45:C6:EB:25:BC:E5:EA:68:35:90:BE
Authority key identifier: BE:18:68:20:5B:3D:13:73:55:AA:71:F2:46:72:95:CD:87:19:52:C8
Certificate issuer: /CN=be1868205b3d137355aa71f2467295cd871952c8
Certificate serial: 019891B608A111AB0477DF8E0B9ED40FD120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhhoIFs9E3NVqnHyRnKVzYcZUsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft
Manifest number: 0C27
Signing time: Sun 10 Aug 2025 02:01:22 +0000
Manifest this update: Sun 10 Aug 2025 02:01:22 +0000
Manifest next update: Mon 11 Aug 2025 02:01:22 +0000
Files and hashes: 1: vhhoIFs9E3NVqnHyRnKVzYcZUsg.crl (hash: F3uHuQrZ3/gZf2r5XeqJ9V6956EPeohC5ex6SsWfDGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhhoIFs9E3NVqnHyRnKVzYcZUsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:b6:08:a1:11:ab:04:77:df:8e:0b:9e:d4:0f:d1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1868205b3d137355aa71f2467295cd871952c8
Validity
Not Before: Aug 10 02:01:22 2025 GMT
Not After : Aug 11 02:01:22 2025 GMT
Subject: CN=e820122032bc8f0ec845c6eb25bce5ea683590be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9e:e9:7f:90:5c:22:8b:ee:c4:06:57:d2:bd:
d1:ea:50:b1:8f:82:4c:55:98:8f:75:ee:bb:2b:80:
02:f3:c0:f9:6e:db:6c:81:7e:d0:69:7c:94:79:a0:
30:b6:c6:74:aa:e4:e8:a7:f0:ff:ee:f4:cf:57:e6:
3e:3c:f1:74:e9:ab:3d:c0:e0:93:46:16:d5:16:6d:
a9:6f:90:26:74:a7:10:57:69:fc:4e:65:ed:41:c7:
0b:ef:8c:e8:a8:f9:92:05:d6:5e:bf:f2:2a:54:37:
5d:44:78:58:69:12:55:a7:2b:13:4f:3b:08:18:91:
4b:18:a0:fd:fb:57:b6:12:b4:91:d7:af:ac:e5:9c:
90:b4:47:71:38:c4:d5:0a:ee:84:c3:1a:1c:ce:80:
0e:fe:02:c2:83:c5:55:58:78:19:34:e6:eb:ba:0b:
3b:10:1c:08:ef:3a:5f:37:82:67:fa:8b:27:f9:e1:
68:2c:81:00:50:09:99:3d:28:04:45:1b:2d:12:02:
83:07:dc:e1:3c:0a:fa:65:23:4c:a8:ae:94:31:31:
cc:ed:27:a7:e7:ec:a8:ca:da:85:a0:d3:8d:9d:a9:
da:48:c8:3a:22:3e:3c:66:2d:c7:6f:f6:a6:4c:0a:
6e:df:1e:87:d7:4f:11:72:4f:cc:9c:59:39:f9:49:
6a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:20:12:20:32:BC:8F:0E:C8:45:C6:EB:25:BC:E5:EA:68:35:90:BE
X509v3 Authority Key Identifier:
keyid:BE:18:68:20:5B:3D:13:73:55:AA:71:F2:46:72:95:CD:87:19:52:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhhoIFs9E3NVqnHyRnKVzYcZUsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:df:c1:fe:78:cf:f4:94:93:b3:b4:bd:bb:b0:dc:15:bd:95:
91:10:c9:de:84:49:dd:07:94:9f:00:50:18:a9:91:61:fe:4a:
cd:6c:51:8e:63:2a:a6:ba:2b:b4:9e:31:96:08:da:bd:81:07:
33:5b:26:ed:48:a4:a1:72:0e:94:11:c4:9f:64:47:43:74:66:
3e:1b:db:94:c5:29:76:46:34:e7:25:f4:26:7d:82:3a:59:1f:
69:15:94:93:3a:b6:93:25:ba:55:48:a2:d2:39:f2:35:f7:f7:
db:f3:97:9f:e0:96:b1:0f:2e:bd:77:81:fd:d4:cc:77:19:57:
10:36:14:b7:7f:69:3a:9e:2d:4e:bc:8f:7d:8c:9c:5e:54:c6:
75:5c:f6:c3:ba:76:69:f0:0b:c0:31:89:9e:15:1f:94:e8:d3:
5f:82:fa:e4:1d:9c:28:37:79:da:c5:83:19:7e:f8:08:04:79:
ba:c3:50:9a:08:b9:75:f3:ae:f5:05:2e:0e:8a:7e:ef:9b:e0:
8a:1b:bc:62:b0:eb:a9:cb:ae:fa:89:31:fe:ff:3d:5c:a1:76:
45:e3:21:58:ee:e6:db:d4:6f:c0:e2:0c:3a:e0:86:1b:69:a5:
1c:ab:dc:66:7e:53:47:40:d2:70:17:1b:df:d5:13:11:90:93:
0f:f4:cf:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:39:25 2025 by rpki-client