Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft
File: VGWtK05zj1QvoOaBOPNiZkQeKaA.mft (raw, json)
Hash identifier: o1DPtZnApyg/KhA86ture/HWVjyuRB7idkfzbXG1j4U=
Subject key identifier: 02:CF:88:31:B5:CD:35:CB:FA:10:64:BD:80:F7:6A:FD:D7:A6:8A:5A
Authority key identifier: 54:65:AD:2B:4E:73:8F:54:2F:A0:E6:81:38:F3:62:66:44:1E:29:A0
Certificate issuer: /CN=5465ad2b4e738f542fa0e68138f36266441e29a0
Certificate serial: 0198D660C934942FBD89979D20DA04EA07DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGWtK05zj1QvoOaBOPNiZkQeKaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft
Manifest number: 0CF7
Signing time: Sat 23 Aug 2025 10:02:03 +0000
Manifest this update: Sat 23 Aug 2025 10:02:03 +0000
Manifest next update: Sun 24 Aug 2025 10:02:03 +0000
Files and hashes: 1: 7lJVxJeG2kQzily5Ys3pzO4Cx3c.roa (hash: 2p7G908u5hNgOkOPybVcD1KwXNRQ1cpOLTMbKHUwi8k=)
2: VGWtK05zj1QvoOaBOPNiZkQeKaA.crl (hash: Y/l2JI07qrhRR2FwX3e8ifABx9A3chW+F8sfXo4CUn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGWtK05zj1QvoOaBOPNiZkQeKaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:c9:34:94:2f:bd:89:97:9d:20:da:04:ea:07:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5465ad2b4e738f542fa0e68138f36266441e29a0
Validity
Not Before: Aug 23 10:02:03 2025 GMT
Not After : Aug 24 10:02:03 2025 GMT
Subject: CN=02cf8831b5cd35cbfa1064bd80f76afdd7a68a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:aa:1c:3a:e3:3d:78:74:f5:61:38:6c:01:47:
93:8e:d9:75:38:45:26:93:74:3f:bc:d2:3a:68:c2:
27:1b:e3:77:ef:1b:11:e4:15:64:ae:2f:81:89:10:
70:ba:15:24:1f:f3:1d:c7:04:04:ac:71:15:fc:e3:
69:e1:67:25:62:7e:1f:9b:9a:cd:c6:bb:9f:27:d8:
72:e9:74:f2:27:72:8f:e3:1a:e5:fd:b6:b6:be:3a:
15:0a:63:4a:ac:9f:c0:6b:98:3d:3d:47:a5:09:50:
8e:f5:ae:e2:ac:5b:8f:4b:64:22:fa:5a:a2:52:f7:
c2:d7:91:60:8e:76:3c:a6:3a:6b:7b:71:dd:16:a9:
27:fd:5c:f2:ca:ad:2b:d6:99:51:12:4c:4d:27:b3:
0b:ea:e5:a5:41:5f:e7:54:d4:2e:de:db:34:6c:63:
b2:56:c3:0d:54:54:f2:9c:0b:89:51:07:5c:25:f6:
57:d7:54:52:29:1d:8a:80:0f:f6:53:b0:f2:54:18:
49:70:be:a8:57:e3:17:5a:8f:fd:cc:5e:df:43:b2:
3c:82:6a:9d:a2:54:5d:be:6c:96:a9:ab:12:4b:c7:
46:c5:90:b9:1e:22:37:96:cf:46:42:bb:ae:a3:74:
1d:51:ff:44:36:9e:ef:f0:59:50:7f:e4:c5:ce:12:
f5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CF:88:31:B5:CD:35:CB:FA:10:64:BD:80:F7:6A:FD:D7:A6:8A:5A
X509v3 Authority Key Identifier:
keyid:54:65:AD:2B:4E:73:8F:54:2F:A0:E6:81:38:F3:62:66:44:1E:29:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGWtK05zj1QvoOaBOPNiZkQeKaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:6a:25:9d:08:70:f3:8f:d0:1d:21:90:1e:3b:fb:00:21:1b:
09:31:e0:e0:ae:d0:17:90:d4:8b:e8:b9:84:4a:6f:4a:6e:a2:
8b:b4:9c:86:57:dc:95:66:4d:17:d4:43:62:27:86:6e:66:2f:
03:e4:f3:98:f3:da:d9:1a:76:48:ae:c7:0a:65:e0:90:76:ac:
7a:88:3e:4b:60:f1:95:12:2f:5f:06:2f:0a:99:c4:06:8d:8e:
ae:d0:4c:21:91:53:03:72:77:c5:42:84:ee:de:6c:19:8b:e3:
3a:23:08:21:9f:cf:d1:fa:4f:48:b7:e4:42:db:22:f4:6a:47:
5b:c9:15:40:c1:ae:46:f8:f5:57:07:0d:59:ea:51:b4:66:1f:
ca:ce:5a:6b:70:e9:0f:07:d0:af:9d:5e:32:3f:58:5d:7e:4e:
90:a2:ca:f7:21:cc:fa:cf:60:70:27:76:fc:dd:3f:e6:f4:b8:
34:1f:30:01:a9:6f:0a:33:3a:c1:8b:2f:7f:f4:7a:ca:7e:07:
f3:62:11:64:8d:d4:91:2b:5e:02:3f:fa:42:75:54:9e:92:9e:
64:3d:37:a4:ea:4b:9d:6f:36:7d:9b:ee:52:b8:ec:eb:65:39:
9f:37:7d:51:25:4e:f2:b3:ce:60:53:92:8f:b1:9f:18:c9:02:
5e:f4:2d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:10 2025 by rpki-client