Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.mft
File: VEGU-CSXc9PNb7ZUsjnedpxC6GQ.mft (raw, json)
Hash identifier: dnZv4Of+ca/3soGCIHNWT1liUdNgu3GAlU+4Xm3DSZQ=
Subject key identifier: 8B:24:EC:35:E6:C8:B9:09:58:6B:06:06:8F:0F:97:62:01:10:F6:96
Authority key identifier: 54:41:94:F8:24:97:73:D3:CD:6F:B6:54:B2:39:DE:76:9C:42:E8:64
Certificate issuer: /CN=544194f8249773d3cd6fb654b239de769c42e864
Certificate serial: 0197B70EBF3C8605DD744ACD43473B002103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 15:01:26 +0000
Manifest this update: Sat 28 Jun 2025 15:01:26 +0000
Manifest next update: Sun 29 Jun 2025 15:01:26 +0000
Files and hashes: 1: VEGU-CSXc9PNb7ZUsjnedpxC6GQ.crl (hash: XtYAaDq70Uam0/vGj3qSVSK0rmb6IxoxszdrxE/Dd8w=)
2: wFRK2gFO2y-GioRIpDn5lp85ecQ.roa (hash: A8Q7B434lxyY0QPj8csraRvBG53nBnhwRwO+e87bSWA=)
3: xY9MZyofE4_6jiY0oDDhMJyfHtw.roa (hash: SNap0h28tjMNg/zc5gl63p8JrVkT7E4Wu94Pvosrm/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:bf:3c:86:05:dd:74:4a:cd:43:47:3b:00:21:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544194f8249773d3cd6fb654b239de769c42e864
Validity
Not Before: Jun 28 15:01:26 2025 GMT
Not After : Jun 29 15:01:26 2025 GMT
Subject: CN=8b24ec35e6c8b909586b06068f0f97620110f696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cd:3b:c0:fa:05:64:5f:18:af:1e:3a:7d:71:
9f:de:c6:fb:86:2d:6c:13:f2:5d:d0:b5:63:18:8d:
06:6e:91:15:32:a0:3b:d9:2c:f3:6b:55:d5:80:07:
2e:6e:bf:17:ca:23:12:6b:04:2c:5c:01:2a:06:8c:
43:e2:ce:40:a6:0d:1f:06:c2:22:a7:c1:b0:ac:4e:
20:9d:71:7c:88:2c:02:8f:1e:3f:62:6d:38:1b:e9:
07:5e:93:33:09:01:a1:42:0a:c4:ac:03:39:0e:89:
73:a0:e7:47:16:4d:27:17:e5:09:fc:89:84:ed:c0:
c4:2a:72:a3:ce:7d:e0:97:d8:b8:3b:f5:a6:71:a3:
b2:46:fa:0c:36:19:25:5f:85:c0:77:e2:c8:63:4b:
2d:88:9d:48:86:c6:1e:21:0f:6b:1e:e7:03:ea:cf:
b6:99:6f:f7:2a:5a:b6:8e:5a:67:d7:23:ca:89:25:
8d:6b:1b:95:2b:e0:5c:f4:c6:e8:27:91:fe:39:d9:
c0:a7:66:af:2e:fe:7b:da:64:5e:f8:6c:1c:a7:89:
54:64:00:da:5a:56:18:39:9f:86:b5:ce:3f:b2:b6:
b5:a5:9c:ff:54:3d:d6:19:16:19:f2:2a:d4:91:cf:
33:61:55:68:85:d2:e3:50:ba:12:f6:ab:1b:57:d4:
13:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:24:EC:35:E6:C8:B9:09:58:6B:06:06:8F:0F:97:62:01:10:F6:96
X509v3 Authority Key Identifier:
keyid:54:41:94:F8:24:97:73:D3:CD:6F:B6:54:B2:39:DE:76:9C:42:E8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:8a:6f:60:3e:61:c6:63:71:27:c4:7d:5f:eb:37:6d:7b:57:
5f:fc:76:80:ca:ce:1f:5a:d0:79:79:8b:f1:a3:67:b3:a1:33:
5b:b7:dd:a7:d5:5e:fd:2b:cf:38:1d:0b:42:a8:f1:5a:71:47:
3b:9e:ce:d7:c6:69:03:13:a4:60:80:dc:e8:b5:75:3b:eb:f0:
bb:4d:ed:26:c9:bc:4d:21:0e:29:71:30:14:f8:34:42:61:15:
94:2c:42:73:7e:5f:88:d8:cf:74:2a:90:2e:13:6f:1d:ab:56:
ad:a4:1e:da:9f:1f:7d:a8:72:b9:d0:7a:19:55:e1:58:80:fc:
a3:97:3d:a4:e8:54:e4:4b:10:a1:2e:58:8f:11:1a:c7:13:03:
51:af:25:1b:2d:31:3a:eb:d8:6a:bc:43:d6:df:a2:3d:af:42:
d5:65:40:f8:2f:84:0a:41:d1:f4:30:2e:bf:2a:cb:d5:55:8b:
0d:15:17:df:3a:fb:cb:6d:82:f5:4b:d3:05:58:a3:15:ea:8a:
35:51:43:0f:0f:20:a1:4a:76:79:0a:c2:4f:03:68:62:79:47:
4c:14:ab:da:18:80:55:38:9e:7d:7c:ad:1a:4e:50:1d:d0:2b:
13:9d:6f:61:74:de:f8:d7:a7:0e:c1:55:f3:fc:ae:47:00:39:
8c:f2:45:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:53 2025 by rpki-client