Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
File: Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft (raw, json)
Hash identifier: Q9l7MXqOiRhAQZZKg6sSrJokC77J7yKjUTuihzgaSA4=
Subject key identifier: 66:5C:FD:F4:BE:72:72:70:25:4D:23:94:F6:7D:60:8B:32:B6:7A:BF
Authority key identifier: 55:C9:A1:83:EE:3F:C0:A3:57:6C:1F:0C:A3:CC:99:77:30:9E:45:83
Certificate issuer: /CN=55c9a183ee3fc0a3576c1f0ca3cc9977309e4583
Certificate serial: 019A4F991424798F77A1A8568C6FEC455DF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
Manifest number: 0A76
Signing time: Tue 04 Nov 2025 16:00:23 +0000
Manifest this update: Tue 04 Nov 2025 16:00:23 +0000
Manifest next update: Wed 05 Nov 2025 16:00:23 +0000
Files and hashes: 1: Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl (hash: APYennpXErrf1J2Uhz7WbrJqAxURS051S9BXnmTEohY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:14:24:79:8f:77:a1:a8:56:8c:6f:ec:45:5d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c9a183ee3fc0a3576c1f0ca3cc9977309e4583
Validity
Not Before: Nov 4 16:00:23 2025 GMT
Not After : Nov 5 16:00:23 2025 GMT
Subject: CN=665cfdf4be727270254d2394f67d608b32b67abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c9:2e:2e:2c:df:3e:94:34:43:3e:a8:e6:a6:
47:06:57:0e:7e:de:32:93:26:ee:ef:24:86:97:1f:
e8:57:d1:a1:ee:ff:38:67:45:f6:87:8c:55:1c:1e:
5e:4f:7b:bc:71:1f:9b:8c:0d:9e:08:70:49:1e:bf:
f8:03:4f:3a:a4:ef:92:d4:95:b9:72:bc:45:24:05:
1a:6d:4a:9f:e1:69:f0:c2:a1:1e:73:3a:2f:cd:4b:
22:98:2f:3f:0b:16:7b:9d:42:89:fd:53:f8:32:3e:
9c:07:8a:8f:05:cb:83:e0:d7:b1:5d:3e:0c:e2:26:
35:0c:9f:09:c6:9c:4b:b1:60:7a:b7:8b:ec:a4:24:
e1:3d:04:11:e0:a6:ed:23:cd:5c:ca:c1:22:ee:21:
cd:a1:b7:23:37:82:f8:ff:29:23:5b:3e:82:0d:a2:
31:39:ef:71:48:2d:92:be:4f:0c:40:72:a7:03:19:
11:a2:2e:66:17:42:73:c1:93:6b:0c:02:fe:92:5b:
ab:d1:eb:30:89:8c:36:d2:1a:c6:0c:71:fa:77:51:
d3:41:be:68:5e:6d:42:3d:66:5c:0e:33:6f:4f:9b:
6a:c4:eb:d5:5a:16:05:f9:80:93:2d:21:10:6e:27:
ec:a1:2c:b7:04:d0:37:88:2d:ba:c5:83:f7:e0:25:
5b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5C:FD:F4:BE:72:72:70:25:4D:23:94:F6:7D:60:8B:32:B6:7A:BF
X509v3 Authority Key Identifier:
keyid:55:C9:A1:83:EE:3F:C0:A3:57:6C:1F:0C:A3:CC:99:77:30:9E:45:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b7:6a:9d:b4:af:e2:67:4d:0e:a3:0e:ca:a3:69:ed:74:e3:
c9:0f:24:01:41:ae:31:48:cd:8f:c4:ba:38:7e:51:67:0e:a0:
43:dd:a8:ee:cd:e5:db:d1:21:1d:10:e3:1e:33:0a:93:47:7d:
12:9a:a2:5f:d0:d8:1e:43:b1:12:aa:af:bf:3b:56:ba:93:2e:
07:09:60:84:80:79:25:08:b3:da:9a:20:4c:0d:55:07:b7:49:
b7:79:74:51:e8:db:a1:64:9e:42:5e:6d:33:a3:5c:f8:e1:44:
b5:8e:22:a0:47:52:13:b7:d1:f2:c0:8a:96:3f:12:ab:6d:b9:
84:03:ef:50:2d:e4:23:80:1c:01:f7:00:49:77:30:2a:3a:75:
d4:95:18:d3:26:e6:6b:85:11:1d:9d:b8:3e:24:3a:d5:21:87:
e6:50:a4:eb:5b:28:d7:ad:88:6a:5c:f8:c9:11:50:50:81:aa:
55:6d:0d:ee:1f:93:8e:c3:9a:71:fc:eb:ce:7e:47:1d:6a:13:
f3:25:fa:5b:92:ba:43:a1:52:6a:74:fa:e9:c8:6f:3d:8b:7b:
ea:d3:6d:82:81:b3:d9:2d:0f:81:92:ee:55:f8:19:f7:36:09:
94:39:1f:01:55:de:43:e6:bc:a5:63:c6:a9:bf:35:00:b7:dd:
dc:db:9c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:23 2025 by rpki-client