Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
File: VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft (raw, json)
Hash identifier: IU6e4YjQl7cqsAE1iaTWTf1bXX77CuyrW26VySZJYQ0=
Subject key identifier: A2:B1:31:C9:8F:D1:E9:47:8C:4D:03:E2:0C:1F:6D:14:E5:BA:51:D8
Authority key identifier: 54:61:75:F2:E8:29:B4:66:57:59:6D:D8:F3:2E:1F:93:EC:BE:0A:24
Certificate issuer: /CN=546175f2e829b46657596dd8f32e1f93ecbe0a24
Certificate serial: 0199FBEAB4334FD28D91CCEAC29297F7A08E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:01:26 +0000
Manifest this update: Sun 19 Oct 2025 10:01:26 +0000
Manifest next update: Mon 20 Oct 2025 10:01:26 +0000
Files and hashes: 1: VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl (hash: /LZoVNEwMo0wByf9KLi/DX+1Mce8sPsmEZN1+sjOHD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:b4:33:4f:d2:8d:91:cc:ea:c2:92:97:f7:a0:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546175f2e829b46657596dd8f32e1f93ecbe0a24
Validity
Not Before: Oct 19 10:01:26 2025 GMT
Not After : Oct 20 10:01:26 2025 GMT
Subject: CN=a2b131c98fd1e9478c4d03e20c1f6d14e5ba51d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d4:de:b4:60:79:2e:79:09:9b:7d:67:6f:79:
ee:bb:ec:20:05:7e:23:96:38:d9:3e:c2:fc:20:df:
21:f2:79:54:4a:ed:36:d3:cb:32:57:93:85:16:fe:
55:5b:e7:cf:69:ac:29:8b:f3:52:be:cc:8d:fb:e6:
fd:c7:5d:74:b8:06:dd:0f:78:6f:ea:d7:bd:b3:ea:
47:cb:0b:49:ef:5c:a0:47:0c:ee:36:75:34:1a:e1:
51:ae:74:86:17:4c:b4:f3:46:98:55:c4:3a:2a:23:
e9:df:df:1c:65:32:40:b5:7f:9b:4b:13:58:d0:37:
45:4d:d0:03:da:c1:9e:f0:e6:38:11:a9:26:53:7c:
b6:75:b7:cb:dd:40:6f:55:f1:83:b6:c9:4c:22:10:
be:46:8f:65:7b:37:db:fc:d6:98:39:21:9f:51:e8:
e9:07:19:34:4f:ed:49:04:de:3f:d6:83:67:81:0c:
9b:85:03:e3:70:d2:a8:eb:37:4c:be:8d:10:e7:d7:
49:d5:81:f3:30:df:f3:b8:77:5b:cd:3a:fc:8a:c6:
8f:68:6f:93:9b:03:2f:14:d6:ba:64:6d:0f:c2:d1:
46:ae:f7:7c:29:f9:c4:81:87:29:e7:4a:77:85:e9:
30:3c:1d:5e:2f:6d:8c:60:9a:68:9f:b4:9f:ce:64:
80:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B1:31:C9:8F:D1:E9:47:8C:4D:03:E2:0C:1F:6D:14:E5:BA:51:D8
X509v3 Authority Key Identifier:
keyid:54:61:75:F2:E8:29:B4:66:57:59:6D:D8:F3:2E:1F:93:EC:BE:0A:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:25:47:10:89:f8:fb:37:2d:24:6f:82:e3:c0:8d:dd:67:00:
51:be:1b:4f:3a:49:c9:c8:30:b8:38:21:c4:b3:d3:62:99:16:
df:f6:aa:f7:b5:3e:82:cb:1b:a6:e4:53:58:3e:df:64:26:21:
44:bc:b8:50:ea:60:91:d5:0a:2e:13:a1:74:87:6a:7b:ef:83:
e5:10:36:31:c1:85:6b:07:fd:31:35:c8:77:cc:b5:d9:a8:14:
69:d5:29:43:7d:6d:dd:15:1b:4e:ca:81:f0:e9:29:77:83:ba:
11:8e:00:e4:0f:0a:58:98:fc:15:08:2a:1d:c6:81:7f:be:a6:
14:d2:75:e7:34:1a:e2:6a:d1:c0:8a:bd:36:bf:c9:54:95:2a:
88:e5:da:f3:6b:c9:52:76:41:f6:b4:c9:bc:32:2e:1b:14:d8:
0e:15:73:2e:b0:b0:e4:cc:87:55:6a:af:2e:ec:5e:71:82:3f:
e3:61:e1:88:f9:34:4f:55:16:b4:e1:10:fd:fa:88:20:bb:88:
2a:28:45:5c:9a:20:c6:57:9f:f1:8d:62:95:22:ac:18:22:c2:
e9:79:6c:02:b6:72:30:9f:0a:c9:e1:40:f3:ef:28:89:2e:16:
81:7d:7b:8e:1e:e6:08:45:29:d3:e1:d1:7d:28:8b:8d:25:9a:
e6:22:2e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:21 2025 by rpki-client