Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.mft
File: VHKdSdKy4Au8soU6dMvA6UZz8BI.mft (raw, json)
Hash identifier: MxMM1diWLY8029DqvAa8MqD4sMGRcOLr0KLWkT1E9g0=
Subject key identifier: 0F:A3:C4:06:40:41:51:48:AC:AD:45:50:91:3D:EF:B8:1D:D4:11:08
Authority key identifier: 54:72:9D:49:D2:B2:E0:0B:BC:B2:85:3A:74:CB:C0:E9:46:73:F0:12
Certificate issuer: /CN=54729d49d2b2e00bbcb2853a74cbc0e94673f012
Certificate serial: 0198D5BB8ECE35ADFB54A8D0E4AAC08A120E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHKdSdKy4Au8soU6dMvA6UZz8BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.mft
Manifest number: 1626
Signing time: Sat 23 Aug 2025 07:01:35 +0000
Manifest this update: Sat 23 Aug 2025 07:01:35 +0000
Manifest next update: Sun 24 Aug 2025 07:01:35 +0000
Files and hashes: 1: VHKdSdKy4Au8soU6dMvA6UZz8BI.crl (hash: jT9T/xzWHaB8+9g6XXEhNAUJ+JligM0wF7G6K3ByoK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHKdSdKy4Au8soU6dMvA6UZz8BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:8e:ce:35:ad:fb:54:a8:d0:e4:aa:c0:8a:12:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54729d49d2b2e00bbcb2853a74cbc0e94673f012
Validity
Not Before: Aug 23 07:01:35 2025 GMT
Not After : Aug 24 07:01:35 2025 GMT
Subject: CN=0fa3c40640415148acad4550913defb81dd41108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:48:09:40:f4:96:1d:c8:5f:41:82:0e:14:4c:
af:25:f4:9b:b1:06:3e:1f:88:c6:fd:ab:bb:73:a1:
11:56:a9:c1:b0:74:3d:b5:f6:26:24:f3:d5:39:f4:
26:44:b1:ba:53:c3:91:85:b8:d9:9a:e4:34:e1:0c:
ee:09:bd:17:f6:f8:30:7c:2c:f0:51:d7:b1:b1:bc:
79:86:96:ea:de:ee:a1:aa:89:c6:0a:fa:bb:76:7b:
c8:66:d1:0d:c3:13:c3:45:0f:9e:2d:fa:0e:53:9e:
d1:5c:44:52:1b:c3:30:39:8d:69:8d:8a:d3:c4:3a:
ba:7c:02:58:38:89:c4:f5:9a:e3:17:30:0f:16:c4:
8f:3a:78:91:7d:0b:73:f0:16:1b:5a:34:39:12:8e:
c4:78:cb:14:9f:7e:9f:31:54:7a:0f:e5:8f:98:52:
ed:e9:d1:f5:f6:70:17:ee:0b:c5:e7:be:bf:98:25:
37:77:3d:63:07:44:04:3b:20:c6:a8:5a:a9:63:6b:
c6:49:a8:0f:54:20:7e:c2:f6:68:de:1c:4b:39:d9:
ec:01:5a:a6:8c:f9:78:e5:6b:5a:07:bf:c9:31:db:
4e:45:af:a8:af:fa:95:1f:d2:6d:a7:aa:2f:7f:d8:
d3:a8:f1:b8:97:0c:fe:9f:68:90:b2:99:3a:c2:7b:
30:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A3:C4:06:40:41:51:48:AC:AD:45:50:91:3D:EF:B8:1D:D4:11:08
X509v3 Authority Key Identifier:
keyid:54:72:9D:49:D2:B2:E0:0B:BC:B2:85:3A:74:CB:C0:E9:46:73:F0:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHKdSdKy4Au8soU6dMvA6UZz8BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:19:b7:80:f8:89:fd:35:54:65:e7:66:67:74:c2:2b:b3:a4:
d1:1d:41:3b:f4:ca:9c:28:e0:db:f6:3f:64:7f:14:6f:9e:5b:
6c:21:86:37:e4:21:61:c3:5b:8f:ee:42:f0:d1:f2:8b:d5:6a:
77:e8:ce:97:f2:92:93:34:e3:fd:95:51:c8:91:25:be:37:be:
57:12:38:d4:b3:12:fa:60:e9:ea:38:07:af:a0:7c:17:d2:4c:
14:09:70:6e:c5:6f:05:9a:35:7c:16:86:cf:b5:7b:be:77:d9:
9d:b4:48:ae:9e:18:32:8a:3f:ef:ec:4e:fe:fb:c4:84:75:cb:
4c:36:55:c7:8d:43:58:59:bd:fa:7b:40:04:ad:59:25:13:f7:
ac:5a:46:cd:20:8f:da:7c:96:c5:41:dd:81:0a:b5:17:a0:12:
e5:92:84:19:bb:db:1b:26:53:c1:e6:92:d0:97:cd:7a:4f:84:
73:86:8f:4b:06:93:c2:02:f8:69:3b:72:8f:a0:8d:6e:43:ab:
1d:a9:b2:e5:d7:37:8a:3f:eb:41:7c:39:fc:42:8d:e3:46:13:
27:5d:a6:10:be:12:61:f3:9d:10:4f:ad:f8:dc:e7:d5:05:6e:
f8:a5:c8:41:54:88:b1:7d:06:fd:b6:4c:52:ff:c3:ec:a0:b8:
ea:d3:a8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:35 2025 by rpki-client