Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
File: Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft (raw, json)
Hash identifier: zFVJUsqzOeIKu/9t1wcb6h1LEnvchQg5SRJIdaFuzkc=
Subject key identifier: F9:8C:E2:0A:E3:0C:B9:70:7F:F4:B1:95:A2:1B:DF:2E:9A:BA:BA:B7
Authority key identifier: 55:C9:A1:83:EE:3F:C0:A3:57:6C:1F:0C:A3:CC:99:77:30:9E:45:83
Certificate issuer: /CN=55c9a183ee3fc0a3576c1f0ca3cc9977309e4583
Certificate serial: 019A725C9EFCFBF330CC0FAABEC00C104977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
Manifest number: 0A88
Signing time: Tue 11 Nov 2025 10:01:03 +0000
Manifest this update: Tue 11 Nov 2025 10:01:03 +0000
Manifest next update: Wed 12 Nov 2025 10:01:03 +0000
Files and hashes: 1: Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl (hash: ePvXm7bC8cYrzgsZNTYHnO+wPvhujmVjBozFT/rDspU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:9e:fc:fb:f3:30:cc:0f:aa:be:c0:0c:10:49:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c9a183ee3fc0a3576c1f0ca3cc9977309e4583
Validity
Not Before: Nov 11 10:01:03 2025 GMT
Not After : Nov 12 10:01:03 2025 GMT
Subject: CN=f98ce20ae30cb9707ff4b195a21bdf2e9ababab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f6:aa:4d:1c:b2:ec:aa:5d:ec:a0:fe:3a:f5:
03:70:00:06:8b:8f:9b:c2:40:8e:16:aa:47:6a:e7:
e1:4a:a5:6b:49:e3:90:c7:34:74:da:55:98:77:d5:
08:c8:02:c3:7e:1f:59:3e:46:fd:8c:61:63:aa:21:
9a:b7:2a:6d:01:1d:d4:fb:44:f4:f4:86:23:40:c2:
67:87:e3:df:f2:4a:16:d1:30:84:03:0f:79:53:88:
db:be:89:39:68:65:91:b1:cb:8a:db:64:06:96:f3:
c7:7d:58:ad:64:9d:5c:4a:cb:39:04:94:17:cf:fc:
40:4c:60:6b:9e:95:de:81:f7:45:f5:a6:7f:c6:e8:
8b:1a:d1:39:8d:c8:18:59:f1:e0:93:f9:aa:fe:65:
66:e2:b1:0a:81:f9:ce:91:2b:d5:5c:91:87:52:31:
50:3a:46:d2:fe:f6:d9:8f:be:12:e5:0e:c4:6c:67:
14:e3:88:2e:42:b7:e9:78:c6:e0:c5:45:cc:1d:1b:
5f:cb:e1:13:c5:2c:e3:54:87:ee:53:fe:9b:99:46:
f8:4d:15:5a:b5:e3:33:0c:1b:8a:f8:11:fb:f8:a9:
16:c1:bf:f5:36:73:fe:28:2d:eb:07:ce:a4:e0:1c:
e7:87:f6:a1:5f:83:a5:76:a9:40:ba:6d:21:59:13:
a0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8C:E2:0A:E3:0C:B9:70:7F:F4:B1:95:A2:1B:DF:2E:9A:BA:BA:B7
X509v3 Authority Key Identifier:
keyid:55:C9:A1:83:EE:3F:C0:A3:57:6C:1F:0C:A3:CC:99:77:30:9E:45:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:82:63:b6:1b:d3:73:a9:71:47:45:2e:34:2b:de:e6:9f:24:
e5:c4:85:22:6a:da:e1:ff:9b:fb:a5:95:0e:cb:bb:e4:b7:75:
5c:2d:df:38:46:a9:15:85:41:a8:f2:e1:31:c7:19:af:29:d0:
d8:cc:61:fd:96:42:ec:d3:82:ce:8d:f1:43:0f:04:ef:5b:82:
5e:b8:ad:aa:4f:89:a5:2d:87:38:b0:f1:7b:bd:95:6d:d8:37:
2f:49:96:97:ed:21:f0:5d:98:08:95:f9:e8:71:a6:a2:22:a2:
ff:87:98:cb:d7:ca:fa:b7:0a:71:8e:a4:f3:20:2c:0e:b9:1e:
29:17:21:75:16:0f:99:84:36:88:56:30:37:e9:36:60:df:45:
99:6a:87:ec:0b:b9:f9:b9:1c:11:a9:ac:5f:94:dc:db:65:1e:
4e:de:f9:8f:8e:38:a9:d9:d2:f2:00:bf:9f:9e:35:50:18:81:
bb:96:dc:e6:96:44:26:b9:71:39:ce:31:02:ec:2e:be:99:09:
43:bf:07:21:06:10:99:ac:e8:41:0e:31:12:68:ec:54:5b:43:
56:57:66:66:6f:38:00:a1:a7:c3:a4:4f:0f:65:1b:71:da:2e:
db:7c:3b:a5:57:ea:ec:09:2a:01:1e:f4:2c:97:23:63:17:e0:
1c:25:db:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:39 2025 by rpki-client