Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
File: VhxILbWscM1l8s5s5ffiW4929Gk.mft (raw, json)
Hash identifier: WLBRN+BhSNMGMw+XJwqW/L+rd6QQDjKi+IUcWmIUUw4=
Subject key identifier: 53:51:C3:B7:66:94:72:65:9A:23:D3:91:9D:13:E3:F9:F2:F1:3B:C7
Authority key identifier: 56:1C:48:2D:B5:AC:70:CD:65:F2:CE:6C:E5:F7:E2:5B:8F:76:F4:69
Certificate issuer: /CN=561c482db5ac70cd65f2ce6ce5f7e25b8f76f469
Certificate serial: 019873E1EF30AF70C69B3337D2D05AD30862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
Manifest number: 09EC
Signing time: Mon 04 Aug 2025 07:00:43 +0000
Manifest this update: Mon 04 Aug 2025 07:00:43 +0000
Manifest next update: Tue 05 Aug 2025 07:00:43 +0000
Files and hashes: 1: VhxILbWscM1l8s5s5ffiW4929Gk.crl (hash: tu6l59atopMw7DomINZZvJU309WtA6C9eUmvoJ5+K/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:ef:30:af:70:c6:9b:33:37:d2:d0:5a:d3:08:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=561c482db5ac70cd65f2ce6ce5f7e25b8f76f469
Validity
Not Before: Aug 4 07:00:43 2025 GMT
Not After : Aug 5 07:00:43 2025 GMT
Subject: CN=5351c3b7669472659a23d3919d13e3f9f2f13bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f1:3d:69:d7:e4:0f:41:c4:53:42:dc:cf:0f:
a3:96:2a:59:49:ad:8b:f9:42:97:54:29:be:8f:ce:
ad:26:54:0f:c2:19:8e:e1:82:93:bc:2d:ea:ad:42:
12:8f:d7:73:cd:f3:9d:07:93:72:da:94:75:b4:16:
3a:ee:63:ad:f3:75:a0:85:46:e6:2f:e1:bb:ff:4c:
2c:aa:cc:c2:9a:a4:33:ad:f5:d8:7e:3a:9e:6a:c8:
fa:fc:68:e3:43:be:ab:41:b3:31:3b:86:0d:ba:62:
5d:f7:90:9d:e3:a2:6a:98:ee:fb:a6:1d:94:85:74:
9b:8f:4d:97:46:36:03:6e:f6:6b:6d:ca:15:f8:b3:
4b:da:37:1a:68:6e:83:36:c2:14:68:91:ab:a8:c0:
7f:ee:1d:82:f6:21:fc:2a:cd:a9:29:4b:c7:da:44:
18:82:e1:d2:87:7d:f4:20:4b:3f:14:b2:f2:81:7d:
24:ae:b8:c5:d4:b4:a1:d9:66:09:39:de:f3:b8:bf:
ca:c2:88:4b:aa:3c:ba:25:9f:34:6a:e8:78:47:c6:
da:84:50:c9:d1:33:dc:d0:ff:34:e3:cb:53:e7:ac:
e5:bf:37:8e:87:a0:2b:18:e8:df:5e:a3:4c:17:9c:
88:d1:af:73:62:2f:bc:ce:15:c6:d7:c9:73:89:b4:
75:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:51:C3:B7:66:94:72:65:9A:23:D3:91:9D:13:E3:F9:F2:F1:3B:C7
X509v3 Authority Key Identifier:
keyid:56:1C:48:2D:B5:AC:70:CD:65:F2:CE:6C:E5:F7:E2:5B:8F:76:F4:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:45:79:3c:1f:5a:bf:9a:aa:74:c8:39:e7:33:d4:bf:7a:7d:
a4:0f:8a:07:73:00:ed:56:1e:aa:c5:77:51:c8:9b:c4:2d:45:
39:bd:97:7c:de:db:2a:4c:05:ce:99:c7:64:cc:1a:c0:cc:b6:
7b:eb:ee:73:f1:3c:f8:02:b8:a9:28:79:19:c9:aa:54:aa:a3:
f9:13:48:23:20:6a:ea:71:da:0c:c3:0b:52:3f:62:9d:5a:f6:
f2:30:f7:b8:b5:eb:ed:36:df:ae:ab:56:61:3e:0d:25:95:03:
71:55:69:87:8a:3a:e2:10:52:50:3a:a6:c2:07:03:3f:d2:25:
a7:96:bf:d4:dc:e8:0e:a1:d9:da:1c:7e:0e:bc:11:90:9a:f2:
bf:20:89:5b:bb:aa:3e:f9:0e:86:9b:21:09:44:59:7a:36:c6:
c3:62:a0:6b:67:cb:75:5c:18:69:ed:d9:a9:09:80:1e:fb:ce:
73:43:ad:39:4b:e7:a1:64:9b:2a:c4:3f:e6:59:f7:e7:0b:fe:
28:df:3e:75:fa:4d:63:99:f1:ff:34:05:18:fe:c0:f9:7d:5a:
32:f9:5a:47:ab:0f:6b:5d:d0:13:bc:38:37:9a:a8:e9:ee:08:
d0:f0:20:e6:44:88:5b:5d:03:f0:74:0a:75:2d:e7:b3:9d:23:
bb:30:3e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:44:21 2025 by rpki-client