Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft
File: vgMXYC-wyqOlEAaL2YnUba44TdI.mft (raw, json)
Hash identifier: UPsAsp5eH/gTDMKUXG1ndA2qoOgvphhP+TM9MgYTtOo=
Subject key identifier: 6D:0A:22:0D:8C:EA:CB:8F:2C:CB:3A:31:B5:6B:62:4B:F5:1D:16:2B
Authority key identifier: BE:03:17:60:2F:B0:CA:A3:A5:10:06:8B:D9:89:D4:6D:AE:38:4D:D2
Certificate issuer: /CN=be0317602fb0caa3a510068bd989d46dae384dd2
Certificate serial: 0199FDDA016CDF0947CB759033F86B4ADBFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgMXYC-wyqOlEAaL2YnUba44TdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft
Manifest number: 0355
Signing time: Sun 19 Oct 2025 19:02:26 +0000
Manifest this update: Sun 19 Oct 2025 19:02:26 +0000
Manifest next update: Mon 20 Oct 2025 19:02:26 +0000
Files and hashes: 1: vgMXYC-wyqOlEAaL2YnUba44TdI.crl (hash: rOs69WdICFkJNVGgEl1U4Ym/+D+tImMiyk4G9bsY/Do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgMXYC-wyqOlEAaL2YnUba44TdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:01:6c:df:09:47:cb:75:90:33:f8:6b:4a:db:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be0317602fb0caa3a510068bd989d46dae384dd2
Validity
Not Before: Oct 19 19:02:26 2025 GMT
Not After : Oct 20 19:02:26 2025 GMT
Subject: CN=6d0a220d8ceacb8f2ccb3a31b56b624bf51d162b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:53:fc:1c:4f:1d:76:cd:37:52:8c:32:e4:10:
0f:0e:4c:c2:af:36:6d:6e:16:d5:65:eb:7a:0a:79:
d5:4f:db:02:42:12:6e:83:79:fc:3b:6d:db:3b:62:
bf:d1:c8:ce:73:96:9e:a3:37:36:ff:1e:5e:08:7c:
9e:39:b1:a1:3f:fe:73:46:f0:72:26:d7:d4:cc:31:
65:6d:3a:71:75:84:05:6c:ab:8c:83:b4:93:c4:b5:
eb:01:8f:cb:4c:36:68:15:5f:d5:f8:03:2b:1b:cd:
07:4c:9f:f9:1f:a5:38:67:41:77:d4:d5:cb:cf:bb:
81:70:11:2e:44:24:2c:b3:74:14:76:f9:13:34:60:
91:87:2c:a7:a9:87:4c:2d:22:13:f3:9d:e1:ac:4e:
a0:b2:59:35:33:93:6c:b7:ca:93:a1:41:67:c3:45:
73:80:d8:70:63:ba:1d:45:48:1c:6e:63:02:b7:3e:
31:7f:bc:01:6c:e6:b7:84:76:27:00:ec:da:b8:c1:
ee:34:0c:0f:c8:e3:a8:f4:4f:00:44:c7:0b:d1:62:
8d:21:c2:e8:61:49:64:a2:2a:94:7b:a8:57:99:9e:
35:e7:14:2b:15:63:c0:7b:33:b7:77:9f:04:7a:59:
91:01:09:a0:7a:19:64:f6:35:87:a2:e4:01:da:49:
be:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:0A:22:0D:8C:EA:CB:8F:2C:CB:3A:31:B5:6B:62:4B:F5:1D:16:2B
X509v3 Authority Key Identifier:
keyid:BE:03:17:60:2F:B0:CA:A3:A5:10:06:8B:D9:89:D4:6D:AE:38:4D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgMXYC-wyqOlEAaL2YnUba44TdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:be:37:b6:91:40:ca:a7:f8:b1:70:7d:84:2a:54:2d:6b:c2:
4a:94:fa:dc:0f:04:b4:60:01:e9:fa:52:9e:7c:5f:68:b5:6f:
86:b0:27:f0:4e:26:b5:14:97:4b:f4:a1:80:26:0f:cc:54:ad:
b5:d5:91:db:a7:1f:4a:df:c4:0a:22:ec:54:a6:f7:39:dc:f9:
5a:f0:2f:07:9c:aa:ba:d6:bc:8e:4e:be:2f:0e:62:2e:b1:85:
d5:e5:81:83:87:b0:d5:ec:57:28:c6:ae:47:49:86:b6:07:62:
3e:9f:3e:42:89:5a:15:7c:6f:d3:9c:13:2e:b7:45:9b:55:2d:
cb:c6:86:82:47:64:f5:ab:ef:83:38:91:3f:78:4a:15:62:59:
5c:81:ca:67:e7:ab:11:e7:97:ce:5f:8d:67:ac:c3:55:b5:24:
da:ce:e4:1f:4a:0b:e3:c9:b2:e9:3b:1d:53:7e:32:4f:e5:98:
fd:14:1e:3e:fe:ba:af:a3:ac:81:6a:9d:f8:b1:d7:38:e7:2f:
35:42:53:c0:43:8b:17:ad:2b:77:dc:24:6b:9e:7f:8f:85:08:
31:37:f1:f8:15:4a:ce:8f:3e:09:54:43:43:25:e0:23:d0:e6:
24:5d:46:b3:f6:9f:39:a7:65:a6:d6:73:98:b3:af:b2:d2:37:
a2:1e:74:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:31:14 2025 by rpki-client