
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
File: Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft (raw, json)
Hash identifier: UScqQIwNLNqg6o9kczT65r7SCYr98EjXs+OlFTZrgps=
Subject key identifier: 08:1C:42:10:00:AB:36:12:53:65:67:97:8E:E4:DE:A9:E1:36:88:83
Authority key identifier: 55:C9:A1:83:EE:3F:C0:A3:57:6C:1F:0C:A3:CC:99:77:30:9E:45:83
Certificate issuer: /CN=55c9a183ee3fc0a3576c1f0ca3cc9977309e4583
Certificate serial: 019872989765FBD638ACA657AC0B87198789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
Manifest number: 097F
Signing time: Mon 04 Aug 2025 01:00:59 +0000
Manifest this update: Mon 04 Aug 2025 01:00:59 +0000
Manifest next update: Tue 05 Aug 2025 01:00:59 +0000
Files and hashes: 1: Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl (hash: 4ABVgOLQznk+PmT0Rotrq4EIPOqzVjQe5bMbTSeA7yE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:97:65:fb:d6:38:ac:a6:57:ac:0b:87:19:87:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c9a183ee3fc0a3576c1f0ca3cc9977309e4583
Validity
Not Before: Aug 4 01:00:59 2025 GMT
Not After : Aug 5 01:00:59 2025 GMT
Subject: CN=081c421000ab3612536567978ee4dea9e1368883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:44:84:9c:2c:af:38:8b:4d:4f:12:63:db:15:
56:aa:02:0c:64:fb:8b:16:16:d2:ff:ab:ad:61:b6:
46:3f:06:0f:ec:3f:7e:89:5f:e3:fb:a7:2c:9c:09:
b7:9b:57:88:f2:4a:83:4a:62:2f:ae:92:1e:2e:52:
45:c3:53:44:4a:de:f8:bd:22:ff:fe:9a:0b:02:2d:
c1:66:f8:c3:81:29:a0:06:64:92:aa:aa:b6:e4:02:
97:c1:21:66:d1:31:23:5c:f9:eb:7d:44:d7:e9:8b:
ec:4d:5e:a8:bc:2a:b2:af:16:eb:0d:24:71:51:92:
33:d3:a0:9d:2f:3b:48:81:72:44:3d:c3:6a:06:cc:
d6:a3:38:46:03:25:a1:b0:8e:61:c3:ef:89:d5:e4:
cf:4d:6f:20:31:54:72:82:48:0a:ba:db:38:4c:52:
58:cf:4b:98:53:ed:5a:f8:9e:53:0e:a4:49:6e:10:
32:bc:cc:b0:13:85:52:80:fa:1c:db:ae:e5:cf:48:
11:67:c9:cc:ff:e2:8c:29:64:40:c3:b5:23:ae:8f:
3d:16:c0:10:23:77:bf:bb:4f:ca:af:be:b3:35:3a:
65:9e:9f:cb:58:b7:a3:90:c1:4f:7a:e9:ee:99:ed:
80:bf:48:c7:99:f2:b8:4b:30:ed:f2:5f:97:5c:bb:
5d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1C:42:10:00:AB:36:12:53:65:67:97:8E:E4:DE:A9:E1:36:88:83
X509v3 Authority Key Identifier:
keyid:55:C9:A1:83:EE:3F:C0:A3:57:6C:1F:0C:A3:CC:99:77:30:9E:45:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:14:91:3b:94:8b:7a:7c:b4:7c:07:27:2f:ca:c0:31:70:b0:
af:86:ed:38:42:10:3f:8c:dc:52:60:ca:36:ea:83:16:c7:92:
da:eb:88:53:fd:bf:48:3e:cf:9d:89:65:48:77:88:f8:57:1c:
0e:1a:11:77:37:4d:83:66:56:63:1a:e2:63:63:45:04:87:f7:
5a:05:39:e1:ee:b9:20:60:8c:90:a8:1e:7d:da:27:87:19:d5:
03:cc:db:22:48:f2:fb:64:d8:91:d6:d9:af:97:2c:b6:1c:4e:
bc:71:04:ee:be:1b:1b:b6:f6:77:ab:31:12:93:d1:46:89:bc:
ea:bc:7c:6b:9d:33:b2:b4:26:19:59:f0:bc:ea:df:2e:77:85:
e2:db:3e:e8:49:39:7c:de:21:fc:48:30:17:81:93:80:91:50:
e1:51:20:b2:f1:13:55:ba:98:b4:f3:12:fa:50:0e:b5:97:71:
6f:b4:b0:83:22:62:2f:83:9c:4e:f7:8a:de:b1:e1:cb:09:fa:
5d:36:47:71:f5:d1:ca:19:b8:98:59:94:57:62:2d:e7:df:fb:
be:8e:7f:a3:69:7b:42:a6:11:1c:d2:93:21:57:19:92:0f:ab:
10:b0:5c:47:ce:04:c8:00:e1:3d:31:67:4b:7e:7d:99:de:4f:
81:81:2f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:51 2025 by rpki-client