
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.mft
File: VHKdSdKy4Au8soU6dMvA6UZz8BI.mft (raw, json)
Hash identifier: zJXa3HTKFyFiforYNRegcuuc3b2gtdEQq+4igCFM2x4=
Subject key identifier: 9F:7B:F7:B2:55:4D:94:8B:CF:92:88:FF:58:6D:F7:80:DD:99:2C:95
Authority key identifier: 54:72:9D:49:D2:B2:E0:0B:BC:B2:85:3A:74:CB:C0:E9:46:73:F0:12
Certificate issuer: /CN=54729d49d2b2e00bbcb2853a74cbc0e94673f012
Certificate serial: 01974DB28E91E778669BAEB4BE030CFC2244
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHKdSdKy4Au8soU6dMvA6UZz8BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.mft
Manifest number: 155B
Signing time: Sun 08 Jun 2025 04:00:36 +0000
Manifest this update: Sun 08 Jun 2025 04:00:36 +0000
Manifest next update: Mon 09 Jun 2025 04:00:36 +0000
Files and hashes: 1: VHKdSdKy4Au8soU6dMvA6UZz8BI.crl (hash: Z1KHmvFEWanc2luABdKww/u+K4csJK6xOOoTovVqVTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHKdSdKy4Au8soU6dMvA6UZz8BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:8e:91:e7:78:66:9b:ae:b4:be:03:0c:fc:22:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54729d49d2b2e00bbcb2853a74cbc0e94673f012
Validity
Not Before: Jun 8 04:00:36 2025 GMT
Not After : Jun 9 04:00:36 2025 GMT
Subject: CN=9f7bf7b2554d948bcf9288ff586df780dd992c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3b:55:a1:42:f1:30:f5:b8:1b:1e:47:5c:f5:
4e:b1:d9:ac:97:58:2e:27:55:6d:97:35:a5:e7:aa:
9d:58:85:8e:d1:1d:75:74:0d:fc:3c:dc:47:ff:6e:
4c:1c:60:93:bb:28:7b:60:86:23:e1:b6:d0:79:47:
75:c6:e1:bb:d2:8d:e8:20:22:f1:95:6e:d1:28:f6:
29:3a:f6:7a:ac:66:08:cc:30:84:dd:70:bb:8f:69:
7d:ab:00:06:5d:08:0f:14:62:88:94:fa:29:1e:16:
f9:e6:c8:b7:69:ce:de:40:e3:76:ce:fd:17:53:b5:
5d:11:95:e1:47:bc:da:2b:78:4f:58:8b:77:18:d8:
14:f3:03:2c:6e:43:de:39:83:87:d7:b6:71:f2:1c:
50:0d:01:8a:19:9a:4b:f2:ce:b8:92:24:26:42:f0:
72:ba:38:c4:ae:86:11:8b:f0:24:cd:5b:d5:b3:07:
46:04:02:1a:b4:25:16:e7:df:1b:35:23:6a:2e:1a:
c2:8f:da:6b:1f:cb:3f:69:d8:79:97:2a:38:e0:d3:
0c:70:91:66:b3:3a:32:c8:12:a4:07:d5:0f:d9:ab:
c9:50:0a:3e:19:2a:30:0e:57:dd:6e:a2:3d:3e:b3:
3a:23:e2:58:80:eb:4e:5d:5c:b5:68:be:74:42:6b:
30:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7B:F7:B2:55:4D:94:8B:CF:92:88:FF:58:6D:F7:80:DD:99:2C:95
X509v3 Authority Key Identifier:
keyid:54:72:9D:49:D2:B2:E0:0B:BC:B2:85:3A:74:CB:C0:E9:46:73:F0:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHKdSdKy4Au8soU6dMvA6UZz8BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:56:32:b7:cf:4f:5a:f3:1f:2c:77:46:ae:e1:a2:d7:bb:72:
b9:13:fa:99:ed:56:53:7e:04:06:53:b7:db:67:af:08:75:51:
8e:36:0e:f3:2b:bb:57:67:d8:6e:4d:14:e0:a2:1c:b3:19:4d:
9b:ff:f9:1f:1f:c8:5b:31:9c:c5:b1:95:00:7b:e3:b8:d7:52:
5c:51:9c:79:da:87:c7:10:8c:43:37:cc:90:69:21:65:b9:58:
c0:d8:9a:e6:40:59:f5:73:6a:ca:b3:65:84:4b:ed:7b:f2:3d:
91:4c:67:d5:0f:d4:c7:f5:6c:d9:84:c3:1a:a5:7e:d9:53:0b:
78:aa:1f:ff:d4:a5:66:5e:83:e1:77:c3:3b:9f:f2:c3:e2:65:
61:4a:f9:b0:6c:0c:ad:82:d6:f6:66:94:08:7b:e6:72:49:52:
ea:bd:cc:c6:bc:cb:fc:28:8c:57:0c:5f:e5:df:17:98:e4:4d:
87:63:70:65:5d:83:d2:cb:fc:1f:a4:18:d9:7a:ed:4c:b4:92:
18:33:9c:cc:9a:c9:a9:c3:13:bd:21:20:09:d8:6a:35:f1:92:
04:ed:62:45:01:d0:fa:a0:72:7c:f8:0d:05:b6:c7:77:33:24:
a7:01:dd:e3:a7:06:96:d2:4c:e5:6d:c6:a5:a8:b2:be:d2:b9:
91:4d:93:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:26:35 2025 by rpki-client