
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft
File: vvOp01I_TxVliboKokn9NSXIX2s.mft (raw, json)
Hash identifier: tOKEsjRHfKMFlXB+ugc8Hd2CiXy37h/YW7B/z8pXRTw=
Subject key identifier: CB:DE:5A:02:FB:2B:B2:1B:87:2B:D2:F2:68:B1:1D:D5:53:38:BB:D3
Authority key identifier: BE:F3:A9:D3:52:3F:4F:15:65:89:BA:0A:A2:49:FD:35:25:C8:5F:6B
Certificate issuer: /CN=bef3a9d3523f4f156589ba0aa249fd3525c85f6b
Certificate serial: 019922FA0D2974594E44243347D249C3FE0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvOp01I_TxVliboKokn9NSXIX2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 07:00:36 +0000
Manifest this update: Sun 07 Sep 2025 07:00:36 +0000
Manifest next update: Mon 08 Sep 2025 07:00:36 +0000
Files and hashes: 1: vvOp01I_TxVliboKokn9NSXIX2s.crl (hash: Xwyw3H7cBLoYHVnFjg8F+oLsJCoeg3k8Asww5qi/NwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/vvOp01I_TxVliboKokn9NSXIX2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:0d:29:74:59:4e:44:24:33:47:d2:49:c3:fe:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bef3a9d3523f4f156589ba0aa249fd3525c85f6b
Validity
Not Before: Sep 7 07:00:36 2025 GMT
Not After : Sep 8 07:00:36 2025 GMT
Subject: CN=cbde5a02fb2bb21b872bd2f268b11dd55338bbd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:99:36:6a:4a:28:9c:34:16:ac:fd:34:2c:53:
79:e2:bb:68:d7:f5:70:6b:2c:84:15:ab:fb:65:03:
c7:ab:6c:25:71:f9:20:62:73:44:ac:15:94:da:41:
02:55:19:99:d9:06:08:b2:fc:d9:2f:84:32:93:60:
20:3b:85:fc:ee:f4:e9:1b:f8:7e:4c:59:3f:b0:87:
00:fe:ad:6e:0e:f2:19:fc:c7:a3:e8:dd:4b:8f:bc:
42:7c:08:1e:7d:6a:5c:ba:54:0e:8d:06:96:7c:c4:
8c:1d:60:1f:cc:ed:30:72:a4:43:67:14:0d:ae:ba:
31:99:97:b7:3e:bb:2a:dd:33:45:22:ac:80:69:b8:
cc:a3:13:5b:0a:b3:c8:d8:ac:fc:f2:01:85:c2:42:
be:05:1f:26:3e:06:99:de:4e:73:43:46:55:ac:c1:
4b:28:56:f8:5e:49:eb:c6:06:e9:e3:a7:b2:57:38:
ce:86:95:0a:d2:b5:99:ee:37:1c:92:28:89:94:18:
f9:2b:53:42:97:c1:59:e7:12:37:91:27:7d:14:44:
43:ce:3a:84:be:26:56:26:98:6d:c4:da:51:11:c1:
22:15:1c:d1:42:6f:9a:8d:5d:b5:8b:85:9c:56:f7:
c8:65:ed:8e:9e:82:c3:42:f9:17:be:61:db:b6:b2:
51:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DE:5A:02:FB:2B:B2:1B:87:2B:D2:F2:68:B1:1D:D5:53:38:BB:D3
X509v3 Authority Key Identifier:
keyid:BE:F3:A9:D3:52:3F:4F:15:65:89:BA:0A:A2:49:FD:35:25:C8:5F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvOp01I_TxVliboKokn9NSXIX2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:37:97:eb:78:9a:9f:09:4f:0e:e2:0f:b9:72:5a:04:49:30:
a6:91:75:e7:a9:68:e4:84:e8:64:f9:75:16:4e:cf:0f:a7:9f:
f6:59:12:4b:04:32:45:d3:49:1b:25:20:63:d0:28:cc:cb:69:
dd:5a:f1:61:f2:e1:3c:9d:fd:5b:bd:23:37:1f:44:07:b3:d4:
2b:6a:4c:30:16:b6:74:b0:cf:ec:14:5c:d1:49:ce:72:f3:a4:
f4:fc:b5:47:02:8f:dd:c7:1a:c3:06:72:c8:c0:71:f1:b5:39:
75:b9:66:d3:8d:3a:9e:fc:46:a8:7e:58:16:6d:82:97:3b:57:
8e:ac:bf:fe:99:75:5e:86:11:d3:34:7e:56:ac:5e:85:26:06:
dc:5d:c7:75:fa:de:49:3c:a9:ab:a0:2f:68:97:fd:e6:c1:88:
01:b1:b1:df:ed:92:e2:5f:b4:6b:b7:00:b3:1e:1e:ff:22:12:
d1:01:7a:e7:43:df:0c:db:f5:bd:6a:5a:27:6e:f7:8f:3a:07:
84:28:64:cb:eb:33:69:43:2b:7a:15:75:98:e5:01:1b:08:d4:
b9:99:eb:c1:9e:68:1d:ce:1e:af:db:9d:d6:63:f6:eb:64:2c:
a3:7b:b9:71:57:21:7e:a2:9d:7f:6b:1c:e2:e8:c3:56:fe:2e:
91:0c:27:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:59:52 2025 by rpki-client