Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft
File: vgMXYC-wyqOlEAaL2YnUba44TdI.mft (raw, json)
Hash identifier: JwQZ1BX22GEJJMkzXxFosBon+0EUY6EcO9brPV9JyRs=
Subject key identifier: 16:B4:78:9E:14:FF:A2:2A:C7:2A:D5:AD:78:97:DE:6B:68:30:D6:29
Authority key identifier: BE:03:17:60:2F:B0:CA:A3:A5:10:06:8B:D9:89:D4:6D:AE:38:4D:D2
Certificate issuer: /CN=be0317602fb0caa3a510068bd989d46dae384dd2
Certificate serial: 0198D65F1B58E434A3E132FD261877090ADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgMXYC-wyqOlEAaL2YnUba44TdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft
Manifest number: 02BC
Signing time: Sat 23 Aug 2025 10:00:13 +0000
Manifest this update: Sat 23 Aug 2025 10:00:13 +0000
Manifest next update: Sun 24 Aug 2025 10:00:13 +0000
Files and hashes: 1: vgMXYC-wyqOlEAaL2YnUba44TdI.crl (hash: p7JHk8j9dndfs+WRD9PaOciB4q02a16zJx00OiWGwC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgMXYC-wyqOlEAaL2YnUba44TdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:1b:58:e4:34:a3:e1:32:fd:26:18:77:09:0a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be0317602fb0caa3a510068bd989d46dae384dd2
Validity
Not Before: Aug 23 10:00:13 2025 GMT
Not After : Aug 24 10:00:13 2025 GMT
Subject: CN=16b4789e14ffa22ac72ad5ad7897de6b6830d629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6d:85:8c:ad:42:22:36:eb:0b:41:62:0d:04:
93:1c:a9:22:08:c7:a7:d0:29:c6:63:70:31:93:2e:
ef:7b:8f:16:32:a0:38:04:7f:2d:42:4c:a2:82:48:
96:41:49:ef:23:26:8a:e5:03:78:49:1e:1f:80:74:
c0:90:c8:cf:6e:f5:eb:f5:95:6d:51:b7:d1:d2:ef:
4e:38:a1:4b:7b:73:3c:52:f8:b3:25:e3:05:06:6b:
88:d9:6b:9f:b4:bb:95:45:63:1e:cd:36:cc:72:35:
05:e1:43:f3:eb:aa:dc:d2:aa:bd:7b:70:97:f4:96:
af:8f:ab:f3:98:0f:b7:f6:50:af:fe:6c:b2:85:f8:
7d:34:82:04:42:25:7f:5c:49:4a:f3:df:5e:da:49:
bd:f5:4c:d7:ba:b4:26:75:e8:b1:5e:3e:d1:4d:c3:
ca:90:a0:af:bd:14:0e:0c:f8:5c:f6:27:76:23:3c:
f7:9e:5a:09:02:7c:60:37:4b:33:88:74:43:7b:86:
d1:24:55:1c:44:6f:3f:7a:cb:58:d4:fa:26:7f:24:
cf:d0:f0:0e:29:08:12:fc:8c:db:c1:ab:0b:51:82:
5e:09:17:8d:3f:66:dc:b0:6d:e1:20:55:e4:35:ed:
8c:1b:da:60:1f:f8:a4:e9:4d:36:75:47:33:7e:e4:
24:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B4:78:9E:14:FF:A2:2A:C7:2A:D5:AD:78:97:DE:6B:68:30:D6:29
X509v3 Authority Key Identifier:
keyid:BE:03:17:60:2F:B0:CA:A3:A5:10:06:8B:D9:89:D4:6D:AE:38:4D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgMXYC-wyqOlEAaL2YnUba44TdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:88:e3:b5:05:e3:5b:b7:6c:51:61:74:da:f4:60:11:22:60:
6a:83:41:6e:53:58:4f:9f:16:24:5d:22:09:c7:14:5a:81:82:
8d:c8:73:46:59:ca:7b:96:77:fa:17:76:ca:93:7c:f0:ba:a8:
a5:ab:ed:d7:33:eb:1d:9f:79:ef:8a:0f:4f:3e:28:ea:ac:48:
a8:70:91:c3:2e:57:83:cc:a4:2c:da:4e:a9:40:9c:4f:e0:79:
8a:97:f6:fc:aa:84:d0:eb:b9:2d:74:52:70:90:ff:12:dd:90:
c9:c9:77:01:6e:92:11:d8:81:de:44:46:8d:ba:6d:47:ff:c0:
be:61:51:0a:ba:ff:e4:30:8d:1d:67:40:f3:f7:a5:62:54:ac:
7f:a3:54:84:8c:9f:f1:8d:72:2b:b3:1a:b1:82:92:01:57:a0:
a9:4f:f0:1b:ff:ff:e1:b3:ca:03:bf:2e:f9:b2:8b:c2:e2:1e:
b7:60:af:0f:b7:23:17:44:41:68:e7:bc:ff:21:65:96:a5:4b:
81:14:6d:aa:d0:75:20:54:c8:8d:4f:7f:aa:e8:8f:0a:d5:4a:
32:d2:05:95:b3:cd:80:c8:66:c5:e0:40:d1:c9:f1:a3:3a:8a:
87:6a:ba:08:cb:92:77:18:1b:79:c3:36:4a:81:af:07:e7:2b:
0a:b5:9a:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXxtY5DSj4TL9Jhh3CQrdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMDMxNzYwMmZiMGNhYTNhNTEwMDY4YmQ5ODlkNDZkYWUz
ODRkZDIwHhcNMjUwODIzMTAwMDEzWhcNMjUwODI0MTAwMDEzWjAzMTEwLwYDVQQD
EygxNmI0Nzg5ZTE0ZmZhMjJhYzcyYWQ1YWQ3ODk3ZGU2YjY4MzBkNjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkm2FjK1CIjbrC0FiDQSTHKkiCMen
0CnGY3Axky7ve48WMqA4BH8tQkyigkiWQUnvIyaK5QN4SR4fgHTAkMjPbvXr9ZVt
UbfR0u9OOKFLe3M8UvizJeMFBmuI2WuftLuVRWMezTbMcjUF4UPz66rc0qq9e3CX
9Javj6vzmA+39lCv/myyhfh9NIIEQiV/XElK899e2km99UzXurQmdeixXj7RTcPK
kKCvvRQODPhc9id2Izz3nloJAnxgN0sziHRDe4bRJFUcRG8/estY1PomfyTP0PAO
KQgS/IzbwasLUYJeCReNP2bcsG3hIFXkNe2MG9pgH/ik6U02dUczfuQk/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBa0eJ4U/6IqxyrVrXiX3mtoMNYpMB8GA1UdIwQY
MBaAFL4DF2AvsMqjpRAGi9mJ1G2uOE3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmdNWFlDLXd5cU9sRUFhTDJZblViYTQ0VGRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi82YmMxMTMtODlhYS00NWRlLTg4OTUt
MTRhYWVhMjA4ZjI1LzEvdmdNWFlDLXd5cU9sRUFhTDJZblViYTQ0VGRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi82YmMxMTMtODlhYS00NWRlLTg4OTUtMTRhYWVhMjA4ZjI1
LzEvdmdNWFlDLXd5cU9sRUFhTDJZblViYTQ0VGRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW4jjtQXj
W7dsUWF02vRgESJgaoNBblNYT58WJF0iCccUWoGCjchzRlnKe5Z3+hd2ypN88Lqo
pavt1zPrHZ9574oPTz4o6qxIqHCRwy5Xg8ykLNpOqUCcT+B5ipf2/KqE0Ou5LXRS
cJD/Et2Qycl3AW6SEdiB3kRGjbptR//AvmFRCrr/5DCNHWdA8/elYlSsf6NUhIyf
8Y1yK7MasYKSAVegqU/wG///4bPKA78u+bKLwuIet2CvD7cjF0RBaOe8/yFllqVL
gRRtqtB1IFTIjU9/quiPCtVKMtIFlbPNgMhmxeBA0cnxozqKh2q6CMuSdxgbecM2
SoGvB+crCrWaWw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:16:26 2025 by rpki-client