Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft
File: VHFLUoQ1EPnzrDC4GbYQ15a338E.mft (raw, json)
Hash identifier: xR/QLh2bJRrQm044wWBFkFRJZq3VaKWPhRkeicWlx8s=
Subject key identifier: 2E:25:A5:76:B9:60:5F:A9:D2:52:E5:5F:12:B4:92:F0:39:5E:DD:73
Authority key identifier: 54:71:4B:52:84:35:10:F9:F3:AC:30:B8:19:B6:10:D7:96:B7:DF:C1
Certificate issuer: /CN=54714b52843510f9f3ac30b819b610d796b7dfc1
Certificate serial: 019921B0681861B4D213082FD3BF07C4305E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHFLUoQ1EPnzrDC4GbYQ15a338E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft
Manifest number: 120B
Signing time: Sun 07 Sep 2025 01:00:33 +0000
Manifest this update: Sun 07 Sep 2025 01:00:33 +0000
Manifest next update: Mon 08 Sep 2025 01:00:33 +0000
Files and hashes: 1: VHFLUoQ1EPnzrDC4GbYQ15a338E.crl (hash: aQSozwZGxaWh2oJoQxXBM2Gy1HIeIT/XpEICi0Y3M08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHFLUoQ1EPnzrDC4GbYQ15a338E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:68:18:61:b4:d2:13:08:2f:d3:bf:07:c4:30:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54714b52843510f9f3ac30b819b610d796b7dfc1
Validity
Not Before: Sep 7 01:00:33 2025 GMT
Not After : Sep 8 01:00:33 2025 GMT
Subject: CN=2e25a576b9605fa9d252e55f12b492f0395edd73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:96:79:8b:92:07:8f:ef:c7:b3:03:10:be:5f:
04:18:af:c3:2b:28:dc:b0:b3:e1:12:53:72:9e:41:
b0:07:af:86:68:96:f6:d4:f7:b1:b4:e4:5a:d4:84:
4c:ff:ac:96:e9:0c:86:d9:e7:8d:52:98:3b:ec:78:
41:e6:e7:44:df:01:54:e7:cb:da:73:49:95:19:08:
92:2e:06:90:c9:89:2c:cd:76:1a:fb:0e:29:1a:25:
3b:e0:b0:ed:0a:c5:21:89:2e:24:9f:d8:04:2b:98:
cd:bc:93:d6:a3:40:67:e1:a9:1d:83:2f:55:23:1f:
f8:49:b3:c3:7f:ec:ba:ca:c0:92:a2:31:6d:28:c7:
90:5a:3d:f9:d2:05:ab:65:a7:64:9b:69:de:25:23:
d5:87:d6:63:b4:76:c0:5c:7e:f1:a3:19:a5:82:61:
ba:ea:61:33:bd:20:45:59:a8:da:15:76:c1:35:7f:
ce:15:19:de:8b:1b:43:55:cb:1b:6d:e1:80:ca:c7:
73:52:00:c9:f7:87:f6:ab:60:bc:cc:c6:ed:e3:8e:
df:82:d4:3f:6a:ce:31:00:0f:f0:4a:59:54:70:b6:
3a:07:7a:9d:18:1a:fa:5b:ea:c5:10:1f:fc:14:da:
65:c4:94:d5:c8:5d:d2:de:44:28:58:00:fd:52:f4:
7f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:25:A5:76:B9:60:5F:A9:D2:52:E5:5F:12:B4:92:F0:39:5E:DD:73
X509v3 Authority Key Identifier:
keyid:54:71:4B:52:84:35:10:F9:F3:AC:30:B8:19:B6:10:D7:96:B7:DF:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHFLUoQ1EPnzrDC4GbYQ15a338E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:66:10:97:48:6f:48:09:56:07:4d:c7:b7:cd:b2:5c:b9:c0:
be:ff:95:03:68:9f:ae:a2:04:89:59:d7:86:d5:f7:ee:85:cb:
81:6b:24:35:e0:1c:c5:4b:9a:8a:8d:86:57:75:f6:c2:c7:09:
44:7a:c9:07:7f:7d:e8:dc:75:f7:94:f4:36:2f:ad:94:f7:1d:
34:df:ad:50:72:a6:ae:5c:ab:1e:5d:0b:da:9f:c5:19:a5:a1:
f7:28:09:a4:93:63:19:fa:e3:8a:c2:c8:8c:7a:ec:cd:45:66:
ff:ed:21:46:ef:33:f1:21:5f:a8:07:61:97:6d:c6:e9:8a:d2:
1f:d4:d8:66:27:ad:a4:62:92:cb:6d:10:c3:2b:dc:8d:21:09:
ff:17:8e:00:bc:20:40:99:72:81:fb:84:2a:ef:a0:6e:5f:0d:
bd:9f:ad:dc:8c:1e:90:da:84:3c:33:a2:af:b1:3b:97:68:9a:
ac:a7:77:8e:08:76:69:e8:46:05:5f:f7:12:8b:ba:7d:ec:09:
e4:6a:ec:91:1b:6f:b1:f7:99:a0:0f:c7:3e:73:77:3b:83:e0:
5d:aa:19:f7:80:d7:93:b5:51:cd:c0:20:9e:4b:1c:af:87:1b:
aa:09:b0:9c:b6:33:f5:57:78:57:bf:f0:fe:1f:f5:4b:fc:8f:
5a:09:95:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:55:29 2025 by rpki-client