Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
File: VChf_ulzEsUcOoBf-TQOvsM1JyA.mft (raw, json)
Hash identifier: C9SRPjnlCW/BnieWRBPg8Ml1d6lKB4+I2MOdNmBv26s=
Subject key identifier: 9B:2E:01:81:74:7B:DC:CF:61:16:89:7E:E0:A5:04:ED:8B:DC:D1:B9
Authority key identifier: 54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20
Certificate issuer: /CN=54285ffee97312c51c3a805ff9340ebec3352720
Certificate serial: 01984AE5749E88442BCBC65F1F21B6FEB996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 08:00:08 +0000
Manifest this update: Sun 27 Jul 2025 08:00:08 +0000
Manifest next update: Mon 28 Jul 2025 08:00:08 +0000
Files and hashes: 1: Ca-8iz_zQCrKysmx5A1KTglY5iE.roa (hash: QQcsgeeci4CpJE1THj53EE0/b4qFL4RDwyCbpu7M9gI=)
2: VChf_ulzEsUcOoBf-TQOvsM1JyA.crl (hash: pCGL4zfDWaI3U/AGFrDpVINrXURRtDRlHV/N2SE1wzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:74:9e:88:44:2b:cb:c6:5f:1f:21:b6:fe:b9:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54285ffee97312c51c3a805ff9340ebec3352720
Validity
Not Before: Jul 27 08:00:08 2025 GMT
Not After : Jul 28 08:00:08 2025 GMT
Subject: CN=9b2e0181747bdccf6116897ee0a504ed8bdcd1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:47:b3:5c:63:6c:e3:0e:e9:98:95:89:6d:c5:
e4:da:be:b9:49:79:e4:91:90:ae:b8:46:b3:d3:44:
f4:76:b0:ac:46:a5:04:c1:29:26:5d:e0:7c:8e:ca:
ee:25:49:9c:c8:e8:92:0c:c7:69:fa:d2:95:02:10:
e4:15:fe:63:d2:bf:71:3a:05:ab:94:3b:be:1c:b1:
76:70:83:74:23:a1:f7:67:60:6f:32:cb:f9:2f:87:
8a:bc:4a:bc:3d:1b:6a:d8:8c:19:72:e2:fb:72:f1:
a1:41:fd:2b:c6:73:4e:d4:a2:aa:80:5e:5c:68:8f:
91:41:97:87:2b:87:1f:8f:80:f2:72:87:d6:b6:11:
37:ad:a5:23:e0:3c:e6:3f:cb:e3:d9:1a:03:cb:16:
f6:0d:af:2d:2b:34:b4:ae:21:47:36:71:19:e5:eb:
64:47:ec:7d:36:88:7e:de:3b:6f:5e:9d:82:ff:6c:
f9:ca:41:19:c7:9d:9b:e7:bf:26:b3:71:37:e3:22:
56:21:f7:84:a8:8b:49:b9:24:9c:eb:90:c7:13:bb:
35:83:83:56:9a:95:fa:b3:13:fe:cb:9c:ef:53:8a:
e2:ff:3a:d6:be:dc:fa:b0:69:5d:2b:65:f7:c4:f2:
06:c6:61:3e:4d:85:f1:d5:d6:6f:fa:3e:ac:f0:16:
d7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2E:01:81:74:7B:DC:CF:61:16:89:7E:E0:A5:04:ED:8B:DC:D1:B9
X509v3 Authority Key Identifier:
keyid:54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:7e:e7:cc:d7:2e:0a:3b:a6:01:11:3b:c3:98:23:b1:64:57:
54:4f:e4:49:ba:cd:09:f1:25:90:4d:df:b2:a4:dd:4b:43:b3:
1a:45:97:9a:d4:f4:1c:b8:2f:49:ee:75:d6:59:83:af:40:37:
81:84:7f:70:84:a7:53:10:b9:f1:3b:57:e0:30:ed:9c:d1:a5:
26:28:63:14:00:9f:ae:6a:67:f0:0e:e2:de:46:e9:1b:67:cc:
f4:8f:72:d1:0b:9e:6b:0b:b5:42:74:10:08:05:0e:91:82:a7:
65:d3:15:f3:2c:bd:6f:92:f1:99:b2:b2:a2:d3:88:e6:99:93:
97:33:84:aa:6c:54:68:aa:14:1b:d1:0c:16:6f:fe:07:75:4e:
d1:00:0f:28:04:a0:7f:d8:13:8f:62:19:81:97:65:41:06:43:
00:50:3e:4f:9f:e9:ae:29:9b:8d:69:65:f9:a2:6a:ce:71:69:
22:a7:55:f2:f4:96:2d:f5:dd:33:44:7e:e2:5a:19:e1:7b:71:
36:bf:7a:5e:51:fb:c1:84:a4:06:45:ef:31:bc:c9:8f:d8:db:
09:0f:ab:84:9e:52:13:f3:3d:6e:61:29:a6:58:ed:cd:c9:0d:
63:ed:0b:07:70:ae:6b:8f:3d:45:e9:d0:a8:b9:64:63:3d:0e:
44:05:3e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:36:27 2025 by rpki-client