Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.mft
File: VkmqAU6M8795JOd1h9CnyMqhxJc.mft (raw, json)
Hash identifier: nI8cdl2+XXjTr/qrrIcpcJ7NSfpG+/+71kB1WLJZkV0=
Subject key identifier: 5C:68:9A:3F:10:B0:38:6D:D7:75:C5:93:B2:9C:78:D1:78:C0:84:00
Authority key identifier: 56:49:AA:01:4E:8C:F3:BF:79:24:E7:75:87:D0:A7:C8:CA:A1:C4:97
Certificate issuer: /CN=5649aa014e8cf3bf7924e77587d0a7c8caa1c497
Certificate serial: 019895242FF6B6152491114C87CD1A22977F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkmqAU6M8795JOd1h9CnyMqhxJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.mft
Manifest number: 0A92
Signing time: Sun 10 Aug 2025 18:00:33 +0000
Manifest this update: Sun 10 Aug 2025 18:00:33 +0000
Manifest next update: Mon 11 Aug 2025 18:00:33 +0000
Files and hashes: 1: VkmqAU6M8795JOd1h9CnyMqhxJc.crl (hash: XCmZtu/vgZupOfj+CdVBHZNfFkcOO8yxGUH9DDkZQ10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkmqAU6M8795JOd1h9CnyMqhxJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:24:2f:f6:b6:15:24:91:11:4c:87:cd:1a:22:97:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5649aa014e8cf3bf7924e77587d0a7c8caa1c497
Validity
Not Before: Aug 10 18:00:33 2025 GMT
Not After : Aug 11 18:00:33 2025 GMT
Subject: CN=5c689a3f10b0386dd775c593b29c78d178c08400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:92:fc:37:3d:6a:94:dc:0a:93:1c:64:41:43:
1c:b9:3f:39:4d:88:2f:41:0c:e1:ec:a0:4a:9b:34:
4f:74:17:7a:54:37:72:fc:dd:a1:79:25:ef:4a:ad:
fc:c3:77:cf:02:bc:01:0b:29:66:2a:10:76:b2:c0:
df:90:cc:7e:74:2e:fe:63:5b:bd:c2:6a:2c:f4:28:
c1:b8:9d:42:3f:5f:60:7d:46:02:ca:77:23:b6:d3:
63:9b:95:41:dd:5c:37:18:1b:89:d6:84:b3:a4:07:
d7:61:0f:53:df:43:a8:47:fb:57:65:0c:c7:52:bd:
a5:a7:e2:01:43:5b:aa:50:f2:9b:09:f8:b3:54:74:
28:e9:0e:0f:6b:a2:b9:c2:3f:a5:dc:8b:ac:7d:b6:
9f:6e:ce:43:71:1b:e1:34:2b:c9:02:4c:2d:15:be:
6e:a8:86:d7:e4:72:55:4f:f9:6c:a2:64:8a:a8:6c:
4e:3a:8a:f1:0d:03:e9:89:c7:a0:0a:c5:89:59:4d:
62:4e:4c:88:50:bd:66:fb:87:60:d1:8a:aa:76:2f:
59:52:7f:c6:5c:37:1a:1c:d3:66:d9:b6:ec:da:7c:
86:4d:6a:90:d4:85:e5:6f:67:0b:12:9d:6b:5e:8f:
25:2a:ff:63:f2:9f:cd:f1:c4:62:25:2a:c1:af:7c:
95:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:68:9A:3F:10:B0:38:6D:D7:75:C5:93:B2:9C:78:D1:78:C0:84:00
X509v3 Authority Key Identifier:
keyid:56:49:AA:01:4E:8C:F3:BF:79:24:E7:75:87:D0:A7:C8:CA:A1:C4:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkmqAU6M8795JOd1h9CnyMqhxJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ac:f9:f8:94:c9:0a:64:08:b4:4e:39:10:57:07:2f:db:c9:
20:db:44:98:98:69:ff:69:2e:3e:58:11:98:10:c2:17:63:06:
10:1e:2e:ed:86:83:8e:1a:23:f1:98:f5:f5:db:ce:07:a5:4b:
46:e8:52:6f:40:f6:d9:c1:29:fc:7b:dd:27:22:61:e4:1b:79:
1f:b3:57:ac:ed:4f:d9:c0:1d:9a:5f:d5:a5:01:62:79:c6:9f:
41:7e:bf:95:b9:c0:bb:bb:b6:a3:8e:26:94:12:f3:ed:e8:86:
bc:79:89:32:e4:d8:39:81:a4:e8:d0:f7:e0:01:04:db:1e:20:
de:10:44:e5:1a:f7:90:e6:2c:63:99:ef:64:3a:f7:d4:7e:2e:
2b:90:fb:b0:0d:4e:24:28:af:2f:e1:48:2f:5b:28:a2:c8:33:
d3:fd:93:0d:23:b5:4b:52:48:b6:63:1c:08:5d:d5:a7:b7:49:
a5:e8:a4:af:be:58:ae:45:ff:9d:27:39:d6:0c:64:38:03:bd:
aa:01:20:79:c2:0f:4e:9d:56:a4:0d:b8:23:69:1e:f9:54:02:
77:98:c5:71:f0:4b:88:c5:7b:9d:e6:7d:c3:27:36:32:9e:56:
4b:98:36:74:c3:2f:ba:43:b5:85:ac:b0:9d:6f:33:0e:bd:03:
ec:cd:1a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:43:47 2025 by rpki-client