Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.mft
File: VHKdSdKy4Au8soU6dMvA6UZz8BI.mft (raw, json)
Hash identifier: fMwJ4gZLD25IcLTpnrujeV7CtaLB6sMxlxQHCEJJbyg=
Subject key identifier: B9:0F:E5:26:BD:4E:C6:C9:8A:4F:DA:22:4B:36:11:BE:49:3D:83:EA
Authority key identifier: 54:72:9D:49:D2:B2:E0:0B:BC:B2:85:3A:74:CB:C0:E9:46:73:F0:12
Certificate issuer: /CN=54729d49d2b2e00bbcb2853a74cbc0e94673f012
Certificate serial: 019A01112F65006F5985DF77A55BCF09D13F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHKdSdKy4Au8soU6dMvA6UZz8BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.mft
Manifest number: 16C1
Signing time: Mon 20 Oct 2025 10:01:34 +0000
Manifest this update: Mon 20 Oct 2025 10:01:34 +0000
Manifest next update: Tue 21 Oct 2025 10:01:34 +0000
Files and hashes: 1: VHKdSdKy4Au8soU6dMvA6UZz8BI.crl (hash: Fms5D+TlfO81G3hpWmByT4qQpXD4nDjTwziFNa/FEV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHKdSdKy4Au8soU6dMvA6UZz8BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 10:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:2f:65:00:6f:59:85:df:77:a5:5b:cf:09:d1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54729d49d2b2e00bbcb2853a74cbc0e94673f012
Validity
Not Before: Oct 20 10:01:34 2025 GMT
Not After : Oct 21 10:01:34 2025 GMT
Subject: CN=b90fe526bd4ec6c98a4fda224b3611be493d83ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:db:26:ea:e3:ad:a1:e4:f1:89:57:ff:95:ce:
01:17:6d:00:10:48:24:2c:22:7b:76:b0:e7:c6:53:
a0:8a:d6:04:47:1a:64:bc:f6:a2:a8:7a:fb:84:63:
44:54:58:f2:87:33:f6:53:4c:b5:58:71:4c:fd:83:
c7:bb:ca:a8:b7:71:bc:af:a3:48:90:c7:be:8a:f9:
49:11:64:82:82:24:3f:3a:66:90:c5:19:74:a7:70:
bd:f2:11:bd:5a:7e:1a:ec:2f:3e:05:1e:c7:78:3f:
1f:9a:27:87:2a:ca:ea:ae:69:a7:b4:8c:bf:03:f2:
3d:f1:cb:2f:c5:cb:e4:76:24:a1:82:66:61:64:93:
40:f9:e6:29:90:a3:5a:18:a4:37:29:8f:d5:20:d7:
dd:1b:a8:94:b8:dc:14:39:97:6c:e9:ac:e6:02:6e:
21:1a:41:83:2a:68:2b:62:8e:43:7e:55:da:ad:29:
39:f6:05:1e:fb:be:12:0c:ec:a9:3f:41:35:20:91:
cb:71:5b:cc:eb:d3:05:e6:60:bb:05:fe:e9:00:ae:
c8:c9:d8:7a:25:b8:d3:1e:4d:1f:7d:c6:c4:6b:09:
2a:da:2c:ec:a9:e7:80:a4:19:89:3c:e3:89:6b:5b:
86:89:b3:a6:7c:1d:e7:c5:4b:8e:33:19:74:d2:03:
ac:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0F:E5:26:BD:4E:C6:C9:8A:4F:DA:22:4B:36:11:BE:49:3D:83:EA
X509v3 Authority Key Identifier:
keyid:54:72:9D:49:D2:B2:E0:0B:BC:B2:85:3A:74:CB:C0:E9:46:73:F0:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHKdSdKy4Au8soU6dMvA6UZz8BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:51:86:1a:b7:47:7c:67:5c:c6:57:e8:83:51:70:2b:a6:fa:
58:30:e1:ca:b6:02:e3:e6:5b:4d:62:73:22:0f:ce:50:ea:f5:
5c:59:21:52:25:f5:65:d7:72:e2:61:76:2a:a2:4a:1a:c4:b1:
d2:24:ba:bb:5a:6a:e3:8c:d2:fb:08:ef:ab:52:76:39:a7:bd:
e8:92:4d:5c:16:3a:79:f2:99:8d:4a:2a:b6:fe:25:8e:96:7a:
6c:be:c1:33:47:e6:25:7b:e7:37:03:34:76:bb:71:53:ff:91:
a2:75:d4:ae:bc:9d:3b:a3:3e:c6:94:9b:16:40:09:74:69:70:
9f:57:93:b8:9c:1c:48:b6:24:f9:6b:34:f0:6b:63:65:9e:48:
80:ec:49:24:96:7b:4b:59:d9:f5:f4:49:1a:ef:bf:c4:2a:62:
ab:0a:45:75:4a:d4:b8:85:b8:4f:eb:c7:f2:5b:5a:51:e7:9c:
f1:bd:6a:ed:3e:58:7a:1b:a0:26:da:54:72:5c:d7:61:49:ed:
23:c2:d1:10:89:29:e7:4a:4c:25:8c:a0:ee:ad:77:7f:4e:6b:
79:0f:e9:3b:06:e5:c5:e5:fb:0e:ca:93:37:66:f2:4d:4d:13:
99:60:55:7b:8d:ad:c1:5d:48:30:42:48:b6:71:6f:53:68:25:
90:24:e7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:01:14 2025 by rpki-client