Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
File: vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft (raw, json)
Hash identifier: fBKvWhCYsHgb6f8QmosSMPgy0s9PB3yAVkJeoV/nMQ0=
Subject key identifier: 4D:1D:ED:4B:86:CA:71:18:C3:DC:96:AD:11:5E:4C:E3:66:F3:98:06
Authority key identifier: BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
Certificate issuer: /CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Certificate serial: 0198526836EABD619CB72C1587AE14DE16A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
Manifest number: 1604
Signing time: Mon 28 Jul 2025 19:00:18 +0000
Manifest this update: Mon 28 Jul 2025 19:00:18 +0000
Manifest next update: Tue 29 Jul 2025 19:00:18 +0000
Files and hashes: 1: BF5uYM34somF3uKBjwVBv6TvSUc.roa (hash: LMQTKQzXnQ/SBYJGX5sPOQPjZo/gmRmiCPcpMivc64U=)
2: vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl (hash: RNCKVfX2F5HK5+7+kQvUZdPaM6Qm8YntchkPkvvk1W4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 19:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:36:ea:bd:61:9c:b7:2c:15:87:ae:14:de:16:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Validity
Not Before: Jul 28 19:00:18 2025 GMT
Not After : Jul 29 19:00:18 2025 GMT
Subject: CN=4d1ded4b86ca7118c3dc96ad115e4ce366f39806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b0:ed:5c:6b:ed:5d:38:92:d4:95:ef:92:c2:
cd:ef:69:5c:39:e2:a9:80:0f:34:38:95:73:9a:72:
5d:62:ff:42:dc:36:a3:5d:ac:53:9a:41:39:c1:b2:
6f:ac:71:ae:5b:c6:12:89:76:fc:b5:a4:f8:42:74:
33:af:4c:38:e0:1a:c8:af:a1:46:7c:d2:b8:1c:fa:
e9:53:5e:a5:5f:b1:39:01:3c:33:c8:19:96:9e:6a:
8f:cf:51:6c:3a:8f:b1:cd:91:0b:bf:22:d1:fd:14:
f1:c6:db:49:0e:e8:fb:00:fc:ed:99:71:1e:94:3b:
fe:bb:d6:8b:c3:de:22:4e:ea:39:81:c0:a5:1c:14:
b0:e9:8d:d1:3a:94:70:4c:02:c4:e9:73:c9:6e:79:
75:71:ef:2b:f2:2c:99:07:96:b1:cc:a8:82:6a:02:
f8:c1:14:e0:2f:02:53:a4:4d:c8:89:ec:51:52:7d:
b4:ef:33:96:f4:e8:97:e8:2c:cf:74:20:9c:59:1c:
da:5c:6a:05:e5:e4:ca:d8:d9:f3:fb:05:93:da:f2:
13:46:99:75:ee:b1:82:2c:a0:7a:8b:01:b8:29:93:
88:54:ac:d3:1e:1f:9d:4f:f6:ea:0e:cc:bb:a2:ee:
6f:1a:be:f7:93:7c:16:74:2c:10:91:d4:fa:ef:81:
ed:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:1D:ED:4B:86:CA:71:18:C3:DC:96:AD:11:5E:4C:E3:66:F3:98:06
X509v3 Authority Key Identifier:
keyid:BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:4c:42:7f:d4:c0:be:e6:5f:f5:d4:1d:b5:7e:7a:6e:1a:fc:
de:79:4e:71:14:08:a8:3e:ba:33:bf:86:69:90:89:aa:e9:74:
e5:82:b0:89:13:bc:c1:b0:3f:29:f6:d8:a6:55:ba:2e:8b:8f:
1d:c6:73:32:57:81:fd:ba:cd:af:79:c8:52:af:5b:09:8b:94:
37:cc:42:66:db:e4:a9:42:5e:9a:ae:fe:97:a2:14:67:66:d6:
e7:42:4f:64:f0:00:0e:c2:a7:9a:b7:9c:9f:97:3f:c4:ff:87:
df:38:af:9f:44:09:06:20:ae:d4:0a:b9:14:28:e8:18:b8:8d:
96:5b:e6:82:d4:a9:36:53:27:2a:6d:d5:3d:3e:ca:d8:6e:d2:
f3:3c:d2:cb:3f:2d:e7:3a:75:04:bf:6b:e3:09:00:f1:88:a8:
6c:15:06:d3:e4:a5:c9:d4:2e:3d:1d:37:ff:db:3e:dc:f6:13:
90:2e:8d:78:6b:3f:90:f6:cb:a2:21:91:6d:fd:9b:f2:6d:86:
ed:c8:00:03:55:07:3d:7d:f3:9a:d4:e9:ae:75:90:6a:cb:8b:
db:26:f1:46:ab:dd:1a:70:48:f3:99:05:5e:d2:03:6a:4e:74:
61:51:76:58:d8:77:96:11:eb:b7:d6:38:b3:3b:8f:36:f4:c1:
69:70:fc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:34:50 2025 by rpki-client