Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
File: Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft (raw, json)
Hash identifier: MRGhDRXAiuPX1XynkHXyLbbtawg7k1CsSUsoHM1QmL8=
Subject key identifier: D2:2D:DA:F6:33:FA:4A:8F:56:EB:B5:48:94:70:30:47:60:5A:30:B9
Authority key identifier: 55:C9:A1:83:EE:3F:C0:A3:57:6C:1F:0C:A3:CC:99:77:30:9E:45:83
Certificate issuer: /CN=55c9a183ee3fc0a3576c1f0ca3cc9977309e4583
Certificate serial: 0198D5162429C8889B616DB8FED0B517A830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
Manifest number: 09B2
Signing time: Sat 23 Aug 2025 04:00:54 +0000
Manifest this update: Sat 23 Aug 2025 04:00:54 +0000
Manifest next update: Sun 24 Aug 2025 04:00:54 +0000
Files and hashes: 1: Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl (hash: lHWLGtjVBPT0sMrkZXc981tD3HD1fJRbyHjm5Ig4bgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:24:29:c8:88:9b:61:6d:b8:fe:d0:b5:17:a8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c9a183ee3fc0a3576c1f0ca3cc9977309e4583
Validity
Not Before: Aug 23 04:00:54 2025 GMT
Not After : Aug 24 04:00:54 2025 GMT
Subject: CN=d22ddaf633fa4a8f56ebb54894703047605a30b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:63:87:dc:f7:f7:d6:77:a5:7d:80:c3:dd:b1:
3c:97:3b:74:73:a6:06:33:af:e0:5c:36:26:bd:c0:
79:d9:f2:e0:6a:be:7e:85:48:f8:e3:f7:86:21:90:
0c:3c:fc:b7:c8:75:68:21:e2:ea:c9:7f:ad:88:c0:
1c:f6:83:8d:f4:40:df:8d:87:b4:d7:aa:ab:14:df:
f1:82:22:b6:69:c9:78:6a:45:51:cc:27:e2:1b:0d:
53:92:47:1c:97:ab:0d:33:1c:f7:bb:64:bc:d6:b9:
82:00:a7:b8:a2:50:07:b2:f4:df:af:45:0a:e1:46:
28:38:ba:f9:0a:09:9c:6d:8d:3a:3e:0a:ef:83:c4:
12:f5:f2:4b:bd:11:f4:ac:60:0e:d1:f2:45:5b:cc:
59:3b:8f:50:1e:af:68:42:62:3f:24:a4:93:5f:8f:
03:3f:2b:94:80:cd:68:80:f2:32:b9:59:ef:fe:3b:
13:2d:47:be:dd:dd:2d:01:15:93:58:76:a3:5c:3b:
4a:f4:84:a1:8f:4c:0a:72:1e:ab:8a:c3:f7:2e:8c:
1c:37:b0:e8:e2:e0:1b:15:d6:1f:7b:b2:17:f9:56:
36:c7:d0:a2:83:22:bf:ff:11:ff:d6:51:e2:c6:5a:
d1:f5:18:3a:c3:a5:44:d0:82:0d:2d:d9:0d:dc:e5:
67:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2D:DA:F6:33:FA:4A:8F:56:EB:B5:48:94:70:30:47:60:5A:30:B9
X509v3 Authority Key Identifier:
keyid:55:C9:A1:83:EE:3F:C0:A3:57:6C:1F:0C:A3:CC:99:77:30:9E:45:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ad:9f:43:de:49:94:aa:7b:c6:ff:65:46:35:50:ea:78:cd:
92:86:a1:b7:c1:17:17:3d:5c:0e:f7:90:fe:90:c3:1f:73:5b:
c5:8e:ca:64:db:c7:49:1f:07:f1:8e:dc:86:ab:d8:d2:64:8f:
7b:2e:1f:eb:3b:ca:ae:8a:fe:fc:e4:e4:99:88:bc:c2:77:4d:
69:df:16:66:ce:e2:e1:2b:39:68:9f:3c:fd:25:f7:7c:13:9b:
f0:56:85:a0:c7:7f:0a:f3:af:7b:f3:09:9f:64:4d:2b:9f:41:
14:a7:ec:25:f8:e9:8b:f6:02:b7:08:23:bb:c1:7c:46:34:fe:
b6:1f:86:71:a4:bd:c6:7d:5d:02:23:11:f5:36:cf:76:ed:85:
4f:cd:fe:1c:fd:69:09:8f:77:20:d1:fc:3b:eb:1b:4b:cf:79:
f3:bd:0c:87:81:5a:0c:77:0e:2a:0b:3d:7b:8e:76:21:0b:bd:
84:ab:45:1f:20:63:fe:e3:aa:bc:4e:ca:1b:da:22:84:bb:fd:
a2:ad:a4:54:53:56:19:84:fe:d5:39:a5:cc:b8:e2:3b:73:cf:
0d:20:70:d6:51:fc:47:6d:6d:1f:b9:2c:ef:a5:31:90:57:18:
0b:a9:c5:05:14:fa:37:92:46:e8:aa:6d:6e:c7:cc:8f:7a:9f:
66:3c:6d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:46:58 2025 by rpki-client