Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
File: vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft (raw, json)
Hash identifier: Z3Fh3lgVS4E+arY2cKGbAit1MLq85X07Zl51+TGlsRU=
Subject key identifier: 82:9D:DA:8B:B0:3E:F9:98:B1:3C:8C:B9:4C:69:79:16:0C:65:45:AF
Authority key identifier: BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
Certificate issuer: /CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Certificate serial: 019962B510AF0FE28C46610F1E829F8B5EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
Manifest number: 1691
Signing time: Fri 19 Sep 2025 16:00:57 +0000
Manifest this update: Fri 19 Sep 2025 16:00:57 +0000
Manifest next update: Sat 20 Sep 2025 16:00:57 +0000
Files and hashes: 1: BF5uYM34somF3uKBjwVBv6TvSUc.roa (hash: LMQTKQzXnQ/SBYJGX5sPOQPjZo/gmRmiCPcpMivc64U=)
2: vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl (hash: ymZH8JZhM79MbPAspwZrrFVFMEd8NwzRwrw2IS4HhhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:62:b5:10:af:0f:e2:8c:46:61:0f:1e:82:9f:8b:5e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Validity
Not Before: Sep 19 16:00:57 2025 GMT
Not After : Sep 20 16:00:57 2025 GMT
Subject: CN=829dda8bb03ef998b13c8cb94c6979160c6545af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d4:41:a4:0f:54:34:f1:5b:78:59:f7:61:ad:
38:15:74:31:38:4b:c3:6a:1b:e5:9b:3a:b4:85:ff:
7b:cc:cf:1f:bb:c8:b5:78:7d:67:7e:d4:49:6e:c6:
a3:ba:bd:e9:ca:2c:6e:95:1e:63:19:30:8e:1c:87:
05:5c:27:e2:ab:5e:5a:ea:af:f3:57:ae:60:89:25:
38:05:9d:ec:cd:dd:34:45:78:c9:ff:43:a7:1a:f8:
23:4e:3e:d2:7e:63:02:a9:8a:1b:cb:fe:f0:3c:36:
80:d5:71:8e:42:f5:26:ef:66:8e:49:87:c8:4c:dc:
1f:53:6f:5b:21:44:99:f6:31:27:f8:11:66:e5:79:
87:52:37:6c:00:f1:c7:fb:fc:f5:09:34:2f:3c:81:
96:31:dc:db:1e:ea:c6:be:18:5f:35:6d:3f:54:39:
eb:2d:03:4a:a6:ba:59:7a:88:9e:3b:5f:47:fe:52:
d9:f5:a8:d8:1a:31:65:4c:ff:3f:50:1c:c6:f7:a6:
90:ef:34:50:ce:4d:aa:0e:8b:eb:ef:c3:8e:81:95:
e6:b0:d9:a9:a7:44:11:82:8a:4d:63:a2:95:e3:c5:
85:6e:7d:e3:4e:f3:2b:fc:35:94:a1:9e:63:6e:c5:
64:34:f5:f1:cc:4d:3a:04:44:53:71:4e:41:64:d4:
40:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9D:DA:8B:B0:3E:F9:98:B1:3C:8C:B9:4C:69:79:16:0C:65:45:AF
X509v3 Authority Key Identifier:
keyid:BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:d9:93:23:8b:cd:60:cc:39:ee:73:90:88:c5:23:db:6f:a2:
c2:ec:cd:7d:01:63:f4:f8:d7:ab:0e:4f:e8:1b:e7:f9:ae:f5:
d5:2b:7b:4e:50:01:2a:c9:36:f2:38:4b:15:36:26:1d:8f:bc:
c3:ae:33:26:03:bc:23:0b:ee:8a:18:47:b1:27:0c:91:24:c3:
99:b5:ac:c7:2f:44:93:b1:bd:ea:f6:74:e0:a5:54:a9:dd:96:
db:28:e8:08:5a:be:90:12:39:75:13:ad:12:ed:49:d8:95:48:
36:de:b2:82:b3:6a:c6:23:d7:cf:e7:78:8c:31:ad:81:c0:8b:
ae:1d:02:0c:f9:e1:11:fc:a6:56:6b:70:86:ba:4b:c6:d3:14:
17:2c:70:0c:4a:18:79:74:94:e9:ed:f3:1a:a6:fa:3c:f7:86:
04:fa:d9:0d:78:71:18:ee:57:0a:15:61:42:ce:0a:77:4b:42:
a6:02:c2:1b:2d:5c:05:7c:f4:d9:2b:4e:e0:44:2b:95:db:28:
e9:a8:d6:f3:fc:52:fd:20:28:f7:ff:ea:d9:30:f0:fe:9b:c6:
bb:13:e8:6d:ea:cd:bd:5e:a9:c1:f5:56:7f:b2:1d:4b:a3:f5:
6c:98:79:40:04:dd:40:27:45:34:fc:5e:b0:e3:f9:99:39:da:
12:99:24:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 22:41:26 2025 by rpki-client