Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft
File: vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft (raw, json)
Hash identifier: rVqMLdD56gBGfh48Z0B2GP442VWpmSYr87ECYzzIv2o=
Subject key identifier: A6:B7:C5:30:57:41:8D:C4:41:CF:C7:22:41:DF:5F:7C:95:4A:DE:F1
Authority key identifier: BE:18:68:20:5B:3D:13:73:55:AA:71:F2:46:72:95:CD:87:19:52:C8
Certificate issuer: /CN=be1868205b3d137355aa71f2467295cd871952c8
Certificate serial: 0199FCC64A11081C6EC6A3B73E726BC600DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhhoIFs9E3NVqnHyRnKVzYcZUsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft
Manifest number: 0CE3
Signing time: Sun 19 Oct 2025 14:01:17 +0000
Manifest this update: Sun 19 Oct 2025 14:01:17 +0000
Manifest next update: Mon 20 Oct 2025 14:01:17 +0000
Files and hashes: 1: vhhoIFs9E3NVqnHyRnKVzYcZUsg.crl (hash: QrNgcvb7z9XRqjcrwPutljUrlPcCnDmhf+DGEaEgMfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhhoIFs9E3NVqnHyRnKVzYcZUsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:4a:11:08:1c:6e:c6:a3:b7:3e:72:6b:c6:00:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1868205b3d137355aa71f2467295cd871952c8
Validity
Not Before: Oct 19 14:01:17 2025 GMT
Not After : Oct 20 14:01:17 2025 GMT
Subject: CN=a6b7c53057418dc441cfc72241df5f7c954adef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9d:9c:3a:4b:69:c1:5c:ae:92:0f:f5:9d:bc:
97:4c:ba:7a:28:43:74:ac:65:96:81:cd:d5:3d:68:
cc:64:8c:06:ad:74:d6:50:7d:27:ec:32:1b:07:6f:
4d:33:b1:a2:58:3d:57:d6:5a:cf:db:4a:72:7b:5f:
0b:90:51:46:20:58:f7:8e:2d:4e:bd:30:07:99:21:
90:9e:84:cf:bc:22:44:e1:52:c9:77:3b:42:3b:c7:
e2:ec:7c:a9:d2:46:6a:93:25:3c:5a:b3:34:4b:d7:
86:77:44:ad:24:a9:5c:2f:1d:b7:32:45:38:5b:21:
67:62:ac:80:a7:c7:42:8c:a1:ec:b8:10:d2:4c:7d:
0f:82:ca:7a:2f:59:f5:01:11:ac:ae:43:61:5f:20:
6b:0c:6b:0a:e3:d2:fd:7c:10:69:5c:35:fa:f4:a4:
87:d0:7a:f3:9b:26:f1:c4:36:f2:1b:bd:9e:f5:e7:
38:3c:8d:1d:51:e5:10:ec:06:4d:ad:7c:49:56:d9:
c4:f2:e8:80:dc:0d:aa:34:34:c6:15:68:bb:1e:93:
31:86:09:1c:ec:39:0c:7d:25:55:49:08:55:69:97:
8f:74:ba:9c:e3:0e:bd:60:91:ff:9e:1c:02:50:be:
d4:79:c0:8f:f5:c8:c7:ff:07:d4:ac:b2:a8:50:c3:
d1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B7:C5:30:57:41:8D:C4:41:CF:C7:22:41:DF:5F:7C:95:4A:DE:F1
X509v3 Authority Key Identifier:
keyid:BE:18:68:20:5B:3D:13:73:55:AA:71:F2:46:72:95:CD:87:19:52:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhhoIFs9E3NVqnHyRnKVzYcZUsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:5d:05:8c:76:e4:c8:7f:17:aa:5d:c2:7f:14:90:55:bf:6e:
2a:9a:a9:bd:0e:1f:da:31:2c:cf:ec:42:b4:44:9c:7d:6e:5d:
05:27:dd:74:03:ef:61:ea:51:1b:e8:ed:ef:b7:40:6d:24:4e:
e8:e6:e6:32:da:dd:83:d5:e9:c8:ca:b1:ca:ea:4d:c8:31:9e:
3a:bf:c0:f5:39:a4:77:b3:c3:df:37:61:49:f4:97:a0:ee:0d:
d6:a3:da:c3:9e:5d:9b:9b:2e:b1:7b:45:e8:8a:87:37:68:95:
f2:19:7f:c7:f8:14:de:80:20:e9:c5:99:a6:fc:37:b9:12:fb:
5b:dd:dc:e6:f1:79:45:af:dd:d6:83:14:6a:bf:25:89:4a:9c:
cf:22:31:1b:bd:45:28:89:46:8b:bf:e1:65:b0:be:e5:28:26:
73:62:38:99:9b:f1:38:b1:18:ea:c2:87:04:e7:55:1e:e5:4d:
ac:00:4e:37:ae:db:c0:d3:0b:85:43:29:44:29:42:a0:04:12:
5e:bc:48:e1:47:00:0d:6b:22:a4:6a:f3:e8:1c:e7:c5:20:aa:
4a:be:36:01:05:46:f9:fe:96:13:c5:d1:d9:ec:c1:fa:f4:21:
35:2c:d5:f3:c4:c7:50:c5:82:79:e0:74:c9:15:07:cc:d7:c0:
68:ce:4f:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xkoRCBxuxqO3PnJrxgDcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMTg2ODIwNWIzZDEzNzM1NWFhNzFmMjQ2NzI5NWNkODcx
OTUyYzgwHhcNMjUxMDE5MTQwMTE3WhcNMjUxMDIwMTQwMTE3WjAzMTEwLwYDVQQD
EyhhNmI3YzUzMDU3NDE4ZGM0NDFjZmM3MjI0MWRmNWY3Yzk1NGFkZWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZ2cOktpwVyukg/1nbyXTLp6KEN0
rGWWgc3VPWjMZIwGrXTWUH0n7DIbB29NM7GiWD1X1lrP20pye18LkFFGIFj3ji1O
vTAHmSGQnoTPvCJE4VLJdztCO8fi7Hyp0kZqkyU8WrM0S9eGd0StJKlcLx23MkU4
WyFnYqyAp8dCjKHsuBDSTH0Pgsp6L1n1ARGsrkNhXyBrDGsK49L9fBBpXDX69KSH
0HrzmybxxDbyG72e9ec4PI0dUeUQ7AZNrXxJVtnE8uiA3A2qNDTGFWi7HpMxhgkc
7DkMfSVVSQhVaZePdLqc4w69YJH/nhwCUL7UecCP9cjH/wfUrLKoUMPRnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKa3xTBXQY3EQc/HIkHfX3yVSt7xMB8GA1UdIwQY
MBaAFL4YaCBbPRNzVapx8kZylc2HGVLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmhob0lGczlFM05WcW5IeVJuS1Z6WWNaVXNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9kOTgwZDEtOTJjOC00NGI0LWE1YWIt
NzU3Zjk5OTI3NTcxLzEvdmhob0lGczlFM05WcW5IeVJuS1Z6WWNaVXNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9kOTgwZDEtOTJjOC00NGI0LWE1YWItNzU3Zjk5OTI3NTcx
LzEvdmhob0lGczlFM05WcW5IeVJuS1Z6WWNaVXNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr10FjHbk
yH8Xql3CfxSQVb9uKpqpvQ4f2jEsz+xCtEScfW5dBSfddAPvYepRG+jt77dAbSRO
6ObmMtrdg9XpyMqxyupNyDGeOr/A9Tmkd7PD3zdhSfSXoO4N1qPaw55dm5susXtF
6IqHN2iV8hl/x/gU3oAg6cWZpvw3uRL7W93c5vF5Ra/d1oMUar8liUqczyIxG71F
KIlGi7/hZbC+5Sgmc2I4mZvxOLEY6sKHBOdVHuVNrABON67bwNMLhUMpRClCoAQS
XrxI4UcADWsipGrz6BznxSCqSr42AQVG+f6WE8XR2ezB+vQhNSzV88THUMWCeeB0
yRUHzNfAaM5Pdg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:27 2025 by rpki-client