Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.mft
File: VgGQvfsKPyO0QR59dI7du9CfhUY.mft (raw, json)
Hash identifier: EjO48nX88UTw2IfHbItaZAFLuf1Tt67akF+/mxC4nW8=
Subject key identifier: 98:55:42:39:0A:A7:80:4B:4F:22:0E:FC:9F:75:1E:C5:A6:E6:01:7B
Authority key identifier: 56:01:90:BD:FB:0A:3F:23:B4:41:1E:7D:74:8E:DD:BB:D0:9F:85:46
Certificate issuer: /CN=560190bdfb0a3f23b4411e7d748eddbbd09f8546
Certificate serial: 0199FAD858F0C8EBA98271FBC8F5BA84B254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.mft
Manifest number: 0694
Signing time: Sun 19 Oct 2025 05:01:46 +0000
Manifest this update: Sun 19 Oct 2025 05:01:46 +0000
Manifest next update: Mon 20 Oct 2025 05:01:46 +0000
Files and hashes: 1: VgGQvfsKPyO0QR59dI7du9CfhUY.crl (hash: 1BwRARgg7/9Uqy7zzTkhBEmZT/2RXSSVWDQUoOOcDnI=)
2: aC3wds6LFuJDfIfa4GR-5HU6-Kc.roa (hash: UWhDVBKLqro2+xqE0CJZri2s5RftTlScFvl2UagVGMY=)
3: xOiPt-g2hsNHzyr5cjhCKfBNY8g.roa (hash: Z0AV1hF7BU/QckVQcK3A5B7t58HDFClWDu3HiNwNhLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:58:f0:c8:eb:a9:82:71:fb:c8:f5:ba:84:b2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560190bdfb0a3f23b4411e7d748eddbbd09f8546
Validity
Not Before: Oct 19 05:01:46 2025 GMT
Not After : Oct 20 05:01:46 2025 GMT
Subject: CN=985542390aa7804b4f220efc9f751ec5a6e6017b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c7:40:56:76:3a:5b:11:f7:73:04:e5:36:3b:
ab:1d:58:1d:4f:e0:58:47:d1:56:b2:19:56:3a:88:
92:1a:01:b4:2d:38:5e:da:92:3f:50:cb:df:a7:24:
92:e2:85:37:55:c9:2f:fe:c7:5c:b0:08:b4:05:b8:
48:cf:7c:8d:a6:5d:d2:ca:9b:52:47:87:3a:12:da:
62:08:6a:0a:21:03:13:27:a9:85:76:7d:8a:a1:b9:
65:70:3d:bd:0b:e6:da:16:d6:95:7b:a7:cb:d5:57:
4c:16:00:e8:5c:9c:32:d4:97:97:28:09:24:97:93:
e5:b3:d7:43:8f:1b:d1:90:44:e9:fe:92:4c:1e:05:
c9:6f:36:cd:0b:2c:11:20:e4:4f:92:03:b9:4c:1e:
a7:88:c7:6e:53:91:0c:f3:c5:9c:c2:1c:9c:99:b5:
8c:f4:a9:9f:73:4f:ba:4a:c6:6a:91:ef:15:5c:25:
b3:29:4a:10:b0:6b:a0:b4:b1:d8:97:fb:fa:80:9f:
b0:5f:6a:1e:6b:5c:65:f6:94:8e:c1:45:3d:24:93:
63:b6:48:2c:8f:2e:0f:ec:23:b9:42:6a:1f:d0:67:
51:71:10:5d:a3:aa:1e:98:1f:5f:dc:55:c7:be:65:
d9:97:30:82:a2:f8:b7:09:4c:53:7e:8d:59:6d:c1:
17:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:55:42:39:0A:A7:80:4B:4F:22:0E:FC:9F:75:1E:C5:A6:E6:01:7B
X509v3 Authority Key Identifier:
keyid:56:01:90:BD:FB:0A:3F:23:B4:41:1E:7D:74:8E:DD:BB:D0:9F:85:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:42:a7:27:3f:02:23:d0:64:a3:0c:6d:b4:99:05:c0:02:98:
a8:41:85:65:9a:ec:a1:7a:60:1b:48:49:cb:3a:c9:38:9d:1a:
26:f3:62:2f:ca:b6:da:3a:16:af:7a:94:3a:4e:9e:19:72:54:
2d:6a:e0:a4:4f:61:35:55:9b:2e:81:6e:83:46:16:11:eb:3f:
6d:b6:be:e5:ff:84:23:7f:37:a5:03:28:46:a6:0d:93:54:db:
7c:98:0d:ad:82:8d:25:36:29:90:76:53:5e:b5:c8:a4:79:66:
d6:ba:f7:dd:c7:ec:41:c8:c2:ea:a6:c5:9b:c0:96:ca:53:05:
e8:6d:73:d7:73:95:86:cf:5c:2f:bf:82:ee:0a:ab:50:4d:f0:
06:fc:46:4f:92:2e:35:1f:27:53:69:d7:1e:8e:3a:f3:42:ed:
f4:68:8f:49:e8:df:ba:ff:9f:51:7d:60:a2:00:09:a1:66:f8:
08:a0:55:15:a3:4f:c9:81:c2:59:b9:10:53:d3:ec:ab:01:4f:
53:d9:81:49:fd:90:06:37:53:99:00:ac:41:19:85:09:06:60:
a5:2f:94:7e:cc:9c:29:8c:96:b6:0a:03:4b:e4:75:3b:6d:33:
60:e4:6d:8a:8c:11:15:69:22:60:30:be:81:85:41:cd:8c:ca:
40:2e:52:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:36 2025 by rpki-client