Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft
File: vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft (raw, json)
Hash identifier: rxDWvWKgNIzhzvhaNUzxpCycBfb9mZvIgoFdpYbhXF8=
Subject key identifier: FE:64:2E:29:28:42:F3:06:2E:10:63:5E:4C:AA:57:B7:F8:E1:65:96
Authority key identifier: BE:18:68:20:5B:3D:13:73:55:AA:71:F2:46:72:95:CD:87:19:52:C8
Certificate issuer: /CN=be1868205b3d137355aa71f2467295cd871952c8
Certificate serial: 0198D73AF8F8C52CACA77299695748DEB2BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhhoIFs9E3NVqnHyRnKVzYcZUsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft
Manifest number: 0C4B
Signing time: Sat 23 Aug 2025 14:00:22 +0000
Manifest this update: Sat 23 Aug 2025 14:00:22 +0000
Manifest next update: Sun 24 Aug 2025 14:00:22 +0000
Files and hashes: 1: vhhoIFs9E3NVqnHyRnKVzYcZUsg.crl (hash: EwsYbNlfkCMBNmuKlO2SGJZUKuUGNbB8qDMydSvSQP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhhoIFs9E3NVqnHyRnKVzYcZUsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:f8:f8:c5:2c:ac:a7:72:99:69:57:48:de:b2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1868205b3d137355aa71f2467295cd871952c8
Validity
Not Before: Aug 23 14:00:22 2025 GMT
Not After : Aug 24 14:00:22 2025 GMT
Subject: CN=fe642e292842f3062e10635e4caa57b7f8e16596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:eb:ba:f6:fa:98:0d:e4:88:1e:81:9c:b3:82:
84:d0:fb:60:45:ac:b3:1c:b2:c2:91:c4:57:92:13:
05:ed:15:4d:1f:fe:42:88:e1:0e:d1:f5:d0:70:07:
dd:a2:32:70:46:22:8e:76:68:fb:2e:be:c3:9a:bc:
14:32:2e:02:a2:a4:b7:d1:ae:e1:d9:89:39:3a:96:
7f:39:91:33:c4:ae:3a:97:0a:28:f0:b3:9b:27:1a:
3d:19:ed:8c:d7:9d:08:27:54:39:4d:3e:db:e4:74:
9e:c7:8b:06:d3:b3:af:0b:55:62:f6:e8:a4:90:c2:
65:83:6d:9f:78:6d:85:88:c7:42:58:81:7f:a3:c7:
28:35:94:4c:0b:b4:b9:69:62:2b:cb:f6:da:8f:08:
aa:6f:b0:a9:31:66:4d:fb:84:59:59:a9:a4:9b:0c:
1b:d7:a6:82:b5:7d:2c:e2:c7:01:8a:7d:9d:38:d3:
9a:00:3f:90:6c:0a:9f:b3:6e:6b:84:fb:8a:cd:75:
2c:cd:c1:f2:4a:99:15:83:f9:75:71:0e:29:4e:8c:
ab:f5:ee:10:73:03:98:07:91:77:8a:ae:da:5f:04:
85:22:b7:ca:80:55:3a:8d:dc:6a:cc:10:c0:bf:b2:
ea:02:34:d9:9c:3e:36:68:1d:1d:6d:ff:57:cc:2a:
d5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:64:2E:29:28:42:F3:06:2E:10:63:5E:4C:AA:57:B7:F8:E1:65:96
X509v3 Authority Key Identifier:
keyid:BE:18:68:20:5B:3D:13:73:55:AA:71:F2:46:72:95:CD:87:19:52:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhhoIFs9E3NVqnHyRnKVzYcZUsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:fe:c6:6c:08:96:31:04:c9:84:cd:36:64:0a:f2:45:af:47:
be:85:4c:06:fd:29:51:57:16:8e:0e:6c:1c:87:03:4b:94:c0:
cd:bf:e4:f2:f3:4b:b0:f5:d0:10:a6:e1:e0:4f:e1:4c:fa:6a:
ab:8e:51:be:e6:f3:d1:2c:85:da:43:b7:78:3d:6a:54:f6:a4:
82:4b:f5:d2:2a:e4:a0:2d:0a:0f:06:07:e0:92:36:7d:45:77:
80:42:58:78:73:2d:ea:24:7c:81:59:d8:17:12:b2:1d:51:50:
26:e0:a1:df:5a:e9:36:b2:9d:7e:91:9b:c6:9e:7b:66:e1:6e:
81:6c:be:97:f1:75:d9:ff:aa:f9:c0:9d:c0:23:f1:0e:a3:ea:
06:10:52:65:b3:29:65:b5:0a:e3:3b:58:93:50:3e:d6:b6:5b:
66:49:40:63:53:d3:51:92:fd:35:54:1c:02:33:64:28:55:73:
d2:a3:f6:87:68:78:bd:ee:03:d4:88:0e:d7:21:c2:25:ff:f7:
27:fe:b1:1c:c9:01:20:34:04:87:5f:a7:51:3f:a8:c9:a7:41:
4f:9d:2f:ed:ce:72:4b:51:46:85:d6:b9:65:d1:ba:a4:2e:29:
50:d6:0b:d0:ea:87:2b:87:c7:8c:21:ad:ef:29:ad:d0:62:08:
82:4e:90:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:04:53 2025 by rpki-client