Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
File: vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft (raw, json)
Hash identifier: vdsFFWw8pH1OTyQS1UUgqYyIb6R/X9WCMgfaURq8+X4=
Subject key identifier: 4E:CE:62:50:B4:11:F4:3D:1F:68:79:BC:A9:4B:7A:C9:A3:A9:7E:F7
Authority key identifier: BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
Certificate issuer: /CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Certificate serial: 0198D7A9374CC0EA7CF5FC4BD9DB71BA4BBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 16:00:47 +0000
Manifest this update: Sat 23 Aug 2025 16:00:47 +0000
Manifest next update: Sun 24 Aug 2025 16:00:47 +0000
Files and hashes: 1: BF5uYM34somF3uKBjwVBv6TvSUc.roa (hash: LMQTKQzXnQ/SBYJGX5sPOQPjZo/gmRmiCPcpMivc64U=)
2: vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl (hash: XrjY27LtF314pB0VEfrb96upr73MiIxr6mn4+EiRpy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:37:4c:c0:ea:7c:f5:fc:4b:d9:db:71:ba:4b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Validity
Not Before: Aug 23 16:00:47 2025 GMT
Not After : Aug 24 16:00:47 2025 GMT
Subject: CN=4ece6250b411f43d1f6879bca94b7ac9a3a97ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:82:c2:be:cc:d9:b5:cd:04:01:b1:b7:eb:
37:2c:d6:2c:2d:cb:5f:17:fc:92:5c:99:d5:c1:2a:
b7:b7:d7:6d:40:8e:a3:28:1a:b1:5f:57:25:c9:da:
5f:ef:a7:f8:38:f0:83:8f:19:73:72:4b:13:6c:cc:
62:7c:17:0b:cb:ab:f9:43:11:91:9c:a9:e3:6c:39:
b6:31:14:b5:cf:5f:59:ff:ec:b8:84:56:e0:1d:b6:
5c:4a:22:1f:c6:e7:fd:c1:11:5a:86:8b:fd:f1:ee:
69:42:d0:f4:8c:96:88:6e:27:df:71:b9:6a:93:ac:
c1:6f:54:52:24:a9:45:e4:b9:88:f4:1f:db:d4:6f:
96:10:95:b2:da:c1:da:16:5f:86:60:5b:71:5a:d5:
16:09:32:25:1b:aa:21:40:bb:ba:a3:f7:a5:e0:96:
15:77:3f:e0:58:d0:1e:37:aa:75:b3:ed:e5:ad:fb:
bd:91:c4:61:86:5e:e3:06:9b:fa:97:01:88:bb:d9:
0c:5f:c7:56:f1:57:c2:21:18:2c:3c:c1:97:16:84:
dd:f5:9e:5f:11:ca:73:f6:b9:46:78:c0:c8:4d:d8:
42:9a:9a:88:56:57:d6:4a:bc:3a:01:2f:f3:9b:de:
15:75:a7:0f:10:54:5d:6e:55:2a:2f:ba:5f:ed:bf:
20:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CE:62:50:B4:11:F4:3D:1F:68:79:BC:A9:4B:7A:C9:A3:A9:7E:F7
X509v3 Authority Key Identifier:
keyid:BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:19:23:d9:e5:5b:7f:87:1c:02:cf:48:c2:f1:d1:b1:b8:d0:
68:88:cf:99:1a:69:c5:72:86:db:83:dc:0d:06:c1:98:30:c3:
f5:1d:2b:6a:90:f5:47:dc:06:d0:38:a9:70:4f:ab:f9:0a:b1:
61:08:ea:61:89:c3:d7:22:0c:2b:b8:77:fe:6d:e0:76:f7:ad:
9e:f1:73:b8:15:2c:32:43:ad:85:a6:2f:82:61:13:3f:09:87:
1d:c8:89:45:4a:0f:af:1b:87:69:34:d2:c5:5c:45:1c:1b:65:
34:6c:be:dc:59:f7:a4:69:cf:44:86:fb:2b:98:c0:fd:6f:00:
8f:36:a3:bb:13:95:d8:0e:72:52:8b:2f:06:28:b8:86:87:9d:
13:2b:eb:a6:72:d1:f9:7d:f1:39:bb:63:07:99:1c:54:cb:d2:
44:9d:95:52:c9:b6:f5:10:fa:41:4b:40:7b:10:de:d2:82:b7:
d9:02:71:8d:b1:56:63:12:83:4c:b2:86:dd:fa:16:e5:47:86:
d9:8f:de:43:b5:03:87:f5:71:03:4b:c1:15:68:81:86:e3:2d:
69:d4:20:2a:24:14:fe:0e:2a:d0:9c:c7:8d:d5:3f:41:b2:bd:
50:3a:63:05:0c:c8:01:b0:0e:86:99:18:74:ee:c3:a2:f4:46:
d2:3b:09:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:17:08 2025 by rpki-client