Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft
File: vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft (raw, json)
Hash identifier: JAShknc+0tcb93vmx19mu6LO4YmCEp9qjIu7GULpBlQ=
Subject key identifier: 4A:9E:8D:3D:10:8B:E3:58:F7:1D:72:4D:7F:17:38:B6:01:94:39:BE
Authority key identifier: BE:18:68:20:5B:3D:13:73:55:AA:71:F2:46:72:95:CD:87:19:52:C8
Certificate issuer: /CN=be1868205b3d137355aa71f2467295cd871952c8
Certificate serial: 0197C8DDF2D90737B8C9160A034A3AD76C83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhhoIFs9E3NVqnHyRnKVzYcZUsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft
Manifest number: 0BBF
Signing time: Wed 02 Jul 2025 02:01:18 +0000
Manifest this update: Wed 02 Jul 2025 02:01:18 +0000
Manifest next update: Thu 03 Jul 2025 02:01:18 +0000
Files and hashes: 1: vhhoIFs9E3NVqnHyRnKVzYcZUsg.crl (hash: amWaylR91lq5HsOu+i9jGoszlvx6OWfV8FrnrhSpCr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhhoIFs9E3NVqnHyRnKVzYcZUsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:dd:f2:d9:07:37:b8:c9:16:0a:03:4a:3a:d7:6c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1868205b3d137355aa71f2467295cd871952c8
Validity
Not Before: Jul 2 02:01:18 2025 GMT
Not After : Jul 3 02:01:18 2025 GMT
Subject: CN=4a9e8d3d108be358f71d724d7f1738b6019439be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:66:23:ed:e3:8e:9c:47:76:ed:39:9e:4b:4f:
05:69:e5:48:8a:81:cd:10:92:84:a7:64:5e:27:05:
e9:cf:d3:87:47:48:83:b5:ae:0e:6a:c0:14:f3:e2:
8c:45:bd:37:66:96:af:f3:ba:5d:9c:96:8d:50:0e:
09:f8:b7:6c:a0:27:8b:9f:47:db:c9:67:c3:c7:f6:
5f:29:0b:55:8d:6c:6c:f3:37:a5:04:2f:b2:92:3c:
c1:14:66:98:14:c1:27:35:79:89:38:24:59:d3:20:
af:33:be:94:9b:d9:a3:66:92:30:f6:cc:04:14:ce:
83:19:21:b4:83:bb:11:de:d7:9a:cf:7e:fe:58:89:
7e:2d:b6:d9:6f:0d:db:34:60:cf:25:57:7e:af:41:
47:c7:ef:82:62:e3:ea:92:1d:77:73:29:94:35:26:
0d:f7:87:b9:57:d2:d7:62:0f:8e:07:21:1f:92:1b:
6d:e1:f2:29:82:77:6a:ba:64:96:a8:d4:67:5c:9c:
b1:5b:f7:a0:fd:d8:65:ca:2f:a0:00:8e:d9:a3:35:
c1:bb:4d:e5:1e:cf:c4:51:38:bb:8b:5a:df:8c:c0:
36:ce:2f:5c:fb:7e:5e:a8:93:75:c7:3a:b7:36:b2:
e5:8d:e0:9e:91:45:04:60:29:85:da:00:93:47:ae:
9e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9E:8D:3D:10:8B:E3:58:F7:1D:72:4D:7F:17:38:B6:01:94:39:BE
X509v3 Authority Key Identifier:
keyid:BE:18:68:20:5B:3D:13:73:55:AA:71:F2:46:72:95:CD:87:19:52:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhhoIFs9E3NVqnHyRnKVzYcZUsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:58:95:94:38:be:a7:b6:ac:e0:0d:de:50:b1:91:59:d5:f8:
c2:85:c2:d6:66:79:cc:db:0f:79:c3:e8:7c:74:47:d9:0b:dc:
47:97:7f:51:7c:c8:bd:85:aa:71:57:e0:a6:12:93:3e:c2:c2:
2e:2a:9e:dd:a3:ca:99:1f:5e:d3:71:50:43:3d:b1:70:6c:12:
ae:a2:3b:e0:77:64:c0:30:6c:fe:a7:94:4a:4f:da:ff:8f:21:
56:72:8f:3b:06:fa:e0:5d:7c:da:fb:91:2e:ee:d3:7a:fc:37:
55:83:b1:ba:74:13:29:fd:21:70:37:be:cd:08:20:9c:66:3f:
36:ce:81:42:94:33:88:76:2b:15:be:0e:2b:b0:72:7b:d7:2e:
93:ff:08:71:7f:ad:1c:af:c7:b1:38:da:3e:c7:89:68:03:a2:
64:c7:3c:bb:0c:2b:22:97:76:55:e1:58:29:72:a0:29:53:01:
b0:b4:d6:19:73:67:67:2a:52:39:ba:c0:23:fb:95:60:9f:e8:
d6:a9:15:20:7b:14:56:a0:5d:3c:02:f2:17:e8:48:68:2a:15:
e5:30:28:d5:79:08:df:99:5d:97:13:29:7a:c6:46:e3:5c:cf:
24:11:34:98:bf:a0:c7:eb:35:5d:c7:e3:61:c0:0d:0d:b9:06:
52:f0:19:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 07:44:41 2025 by rpki-client