Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
File: Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft (raw, json)
Hash identifier: 5X4Ez0oTXEVQL3a9tKo/e2rLrmcOz8Gn8N/mx3dwxy8=
Subject key identifier: 62:59:4D:14:99:A7:2D:75:50:9C:F0:23:8D:39:6A:5C:5E:43:EC:3B
Authority key identifier: 55:C9:A1:83:EE:3F:C0:A3:57:6C:1F:0C:A3:CC:99:77:30:9E:45:83
Certificate issuer: /CN=55c9a183ee3fc0a3576c1f0ca3cc9977309e4583
Certificate serial: 01984A0A44AD41284845BD46A7F1EF1FB68E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
Manifest number: 096A
Signing time: Sun 27 Jul 2025 04:00:43 +0000
Manifest this update: Sun 27 Jul 2025 04:00:43 +0000
Manifest next update: Mon 28 Jul 2025 04:00:43 +0000
Files and hashes: 1: Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl (hash: 8uUSeg7bHoE9IvJMqMMGyI+QuFD5oQ6NI0F8t2ZEL2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:44:ad:41:28:48:45:bd:46:a7:f1:ef:1f:b6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c9a183ee3fc0a3576c1f0ca3cc9977309e4583
Validity
Not Before: Jul 27 04:00:43 2025 GMT
Not After : Jul 28 04:00:43 2025 GMT
Subject: CN=62594d1499a72d75509cf0238d396a5c5e43ec3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f2:2d:c6:79:3a:2e:23:d7:4d:88:7d:46:13:
af:80:ba:61:07:81:e5:9d:62:b6:b1:83:74:db:87:
eb:f9:59:23:a2:e2:ef:66:19:43:f2:36:bd:1c:ce:
80:0f:dc:cb:27:12:e0:de:66:a5:9d:44:6c:05:fe:
e3:4b:ba:2e:b0:7a:8b:1a:f4:4f:d2:e3:96:b8:15:
a2:f4:41:89:9b:85:74:55:c1:9a:7d:1a:34:9d:27:
5f:0d:4e:47:c6:b2:bf:fe:a2:f7:d4:28:9e:83:aa:
67:1e:71:e9:7c:0c:18:6e:8a:a8:fc:5b:bd:42:ad:
06:9d:86:b3:3d:a4:51:9b:d4:92:b8:30:85:e3:26:
4d:c4:73:19:71:ec:ba:a3:2c:8c:f9:6a:ee:90:ab:
14:83:c2:95:46:d9:89:24:5b:0a:d9:8c:65:0b:d0:
9d:fd:79:85:c3:e4:0b:8c:04:98:f3:7d:cf:e5:81:
35:9e:b4:c5:38:2b:0f:bf:4b:b8:fe:0a:2a:4d:ac:
56:98:bd:9d:a2:84:d3:17:10:a1:96:27:19:47:88:
7a:c3:03:47:55:06:41:64:2a:7f:1b:42:bf:83:a8:
ef:05:99:6d:88:cd:9b:3f:f0:aa:f6:f2:b1:e3:36:
6c:3e:59:4d:42:00:c8:d7:26:c1:fd:a0:f9:7d:cf:
7a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:59:4D:14:99:A7:2D:75:50:9C:F0:23:8D:39:6A:5C:5E:43:EC:3B
X509v3 Authority Key Identifier:
keyid:55:C9:A1:83:EE:3F:C0:A3:57:6C:1F:0C:A3:CC:99:77:30:9E:45:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e3:0f:3c:c3:e7:28:a5:73:58:91:7a:d1:d2:9d:80:36:91:
bf:f3:d2:8f:58:e6:86:ea:14:21:7b:64:dc:8a:e8:a8:10:4d:
ac:6f:c8:f3:61:8d:16:a0:e4:ae:fb:41:1a:f6:41:bc:75:ba:
cf:71:be:e4:e8:1b:9e:c2:d3:51:c9:0a:15:48:2a:70:d8:6e:
7d:54:9a:16:73:62:b1:1a:7a:57:5e:8f:2d:71:62:5a:a4:fb:
c2:35:ef:f2:5a:64:86:25:1a:c4:7e:40:5c:92:6c:f4:ca:16:
88:40:b8:55:88:cb:65:7f:90:43:59:25:a2:bc:33:15:40:23:
b1:29:62:3f:a2:6d:05:a0:1d:d9:9c:87:33:af:f3:c0:17:f7:
08:68:7d:01:c6:6a:17:12:8d:e3:09:02:f7:7c:cc:fc:ad:6a:
51:59:7b:c1:a8:d8:f0:b5:4e:fc:a8:d3:ec:bf:8e:8a:4b:37:
4d:bb:45:86:8b:15:1a:5a:44:6d:10:93:68:11:67:2a:b8:1d:
3d:05:f7:f2:b4:bc:d6:e3:1b:b5:43:a0:11:1a:5f:e4:9a:19:
8d:b9:72:ad:34:0f:35:8c:79:fe:31:d9:f8:a8:c3:95:6f:a4:
82:13:06:e6:6b:3a:c1:60:63:de:71:8a:da:55:97:aa:38:21:
67:1b:0f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:49:08 2025 by rpki-client