Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft
File: vvOp01I_TxVliboKokn9NSXIX2s.mft (raw, json)
Hash identifier: fJefSL3r5PCXSrUhO4jxsZ4EdCIj/N7f1paes4CYxx0=
Subject key identifier: 0C:17:97:81:1A:75:45:4D:93:29:1C:15:CC:DE:ED:91:0D:0E:35:F9
Authority key identifier: BE:F3:A9:D3:52:3F:4F:15:65:89:BA:0A:A2:49:FD:35:25:C8:5F:6B
Certificate issuer: /CN=bef3a9d3523f4f156589ba0aa249fd3525c85f6b
Certificate serial: 0198D99993E689E39CFCDCCBFC3C1A865438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvOp01I_TxVliboKokn9NSXIX2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft
Manifest number: 1648
Signing time: Sun 24 Aug 2025 01:02:57 +0000
Manifest this update: Sun 24 Aug 2025 01:02:57 +0000
Manifest next update: Mon 25 Aug 2025 01:02:57 +0000
Files and hashes: 1: vvOp01I_TxVliboKokn9NSXIX2s.crl (hash: lP/c8GJKTr5v812hGmwJI9hdOdtwGvKXrLpu8kPmdUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/vvOp01I_TxVliboKokn9NSXIX2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:99:93:e6:89:e3:9c:fc:dc:cb:fc:3c:1a:86:54:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bef3a9d3523f4f156589ba0aa249fd3525c85f6b
Validity
Not Before: Aug 24 01:02:57 2025 GMT
Not After : Aug 25 01:02:57 2025 GMT
Subject: CN=0c1797811a75454d93291c15ccdeed910d0e35f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d2:d7:0f:8b:15:dc:b2:0e:bb:4a:91:91:f4:
0d:25:fe:10:b0:93:c0:18:05:53:50:f1:9a:8e:00:
64:95:0d:78:6e:8b:ee:6e:bf:b8:d3:7b:b6:55:c2:
5d:17:d1:0b:02:bb:8b:c8:c8:0e:c6:12:c0:c6:6b:
4d:51:99:b0:de:9d:72:18:08:b9:e7:15:ea:3d:98:
e5:f3:65:ed:17:14:8e:c1:fa:5d:a1:99:1e:c0:ab:
0a:8b:dd:46:a9:43:ad:d4:f1:1d:d9:70:39:00:d1:
88:86:a2:9d:d9:ad:57:4e:8d:1a:2a:60:0e:aa:14:
b7:1e:d4:3f:d8:6f:24:be:d3:e5:6b:83:65:0e:18:
8c:33:53:f3:e3:d2:8d:ba:bc:60:2d:9c:b5:f0:8c:
a1:a2:9b:05:7b:af:05:25:23:4f:b9:14:2a:8d:ea:
b0:f5:54:e5:06:8c:0f:42:76:b0:4e:76:98:87:3f:
d7:a0:9b:37:af:89:9d:9f:29:ba:81:a2:41:ab:3e:
35:11:80:91:21:cb:46:86:fd:86:9e:10:f5:5a:3c:
25:67:f9:d0:59:ad:db:92:68:13:33:7c:e8:05:b1:
2c:f3:8f:8f:01:d6:42:e0:2e:40:51:83:51:05:9a:
4c:08:ea:ce:e5:ea:94:38:18:08:77:b1:6a:eb:8b:
9d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:17:97:81:1A:75:45:4D:93:29:1C:15:CC:DE:ED:91:0D:0E:35:F9
X509v3 Authority Key Identifier:
keyid:BE:F3:A9:D3:52:3F:4F:15:65:89:BA:0A:A2:49:FD:35:25:C8:5F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvOp01I_TxVliboKokn9NSXIX2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:56:64:53:0d:10:9a:06:1b:61:47:a4:ca:1b:4c:98:20:93:
0e:60:6f:1a:34:41:98:f9:e8:da:94:87:cb:24:a5:3c:28:57:
49:8a:9d:c2:b2:3a:6a:9b:6e:27:95:d6:e7:9b:62:a1:6b:f5:
c8:12:70:b1:ba:67:97:ac:4e:7f:af:67:be:65:28:e5:14:f7:
ca:d8:ce:b8:f3:e2:a7:b1:f3:39:35:2a:41:57:3f:f2:96:5d:
da:5f:2f:0f:07:2e:5b:27:3e:a5:41:7a:db:fd:92:32:a3:12:
00:04:1a:d3:9e:79:89:ef:a9:a5:31:3a:b2:eb:c6:44:bb:4f:
9c:d0:96:35:67:3d:7e:5d:20:12:75:32:1d:78:0d:a3:a6:7e:
51:a0:ba:bc:52:0a:2e:01:d1:dd:9f:0c:38:80:85:92:24:d0:
33:3e:3b:89:61:f5:af:52:b5:4e:51:e2:88:a4:d1:14:2c:7e:
1c:5e:01:03:d4:bb:d4:23:51:d4:e6:3e:ee:44:fc:34:9d:a4:
24:5a:03:a8:1f:d5:a7:f3:b9:d9:90:83:ea:30:a8:b2:2b:8a:
e1:1a:0c:2c:5f:64:46:8e:e7:8f:1b:49:07:9a:6f:d5:2e:53:
7f:19:91:8a:5f:67:43:29:a6:a6:5f:e7:c7:e3:b3:c2:c3:41:
90:67:2c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:30:25 2025 by rpki-client