Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
File: vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft (raw, json)
Hash identifier: vWWbn3Fz4xRdGPDpJwSu5DSWYnj+phFCq1JIyMqGlIs=
Subject key identifier: 85:E0:D9:86:F7:E2:B7:15:7D:DC:FF:31:63:BD:9A:41:E2:91:A9:4E
Authority key identifier: BE:0F:8F:14:F2:20:E9:3E:E3:47:47:C4:D6:DB:F1:AD:35:B3:83:FA
Certificate issuer: /CN=be0f8f14f220e93ee34747c4d6dbf1ad35b383fa
Certificate serial: 0197B6A0470197B7802D19F806ED28208BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
Manifest number: 0C89
Signing time: Sat 28 Jun 2025 13:00:46 +0000
Manifest this update: Sat 28 Jun 2025 13:00:46 +0000
Manifest next update: Sun 29 Jun 2025 13:00:46 +0000
Files and hashes: 1: vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl (hash: eAFZtL+KzIXKIFE3SsYPyz4UTOJSaE6e8gkkuIKxD0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:47:01:97:b7:80:2d:19:f8:06:ed:28:20:8b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be0f8f14f220e93ee34747c4d6dbf1ad35b383fa
Validity
Not Before: Jun 28 13:00:46 2025 GMT
Not After : Jun 29 13:00:46 2025 GMT
Subject: CN=85e0d986f7e2b7157ddcff3163bd9a41e291a94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:34:cc:66:71:8f:ea:5e:b8:4c:dd:fd:c0:6a:
32:37:8b:db:d2:7d:d2:86:4e:42:56:b7:6a:0d:ee:
a2:12:84:5a:70:f6:50:6a:28:b2:d5:af:13:69:63:
ef:ea:ad:b0:38:a0:aa:9f:a3:46:3b:b3:06:4a:fe:
ed:13:7f:07:a5:00:54:15:b7:03:ad:36:02:ac:8a:
8c:43:0c:5d:4a:7b:db:3f:25:69:6a:18:96:ee:41:
1c:5c:d8:4e:f3:3d:db:eb:9b:78:6b:a7:70:0b:c6:
b1:16:46:7e:16:9b:1c:00:41:bc:8f:d2:41:da:e1:
07:13:b8:43:85:3a:df:1b:d9:72:9c:9e:f7:2b:65:
7b:75:28:5e:e6:0b:24:ec:e7:6f:e3:7e:15:18:83:
4a:04:a0:b8:d4:c7:d6:d2:c4:f1:61:95:82:ec:e1:
bd:84:ea:d2:2e:49:5f:72:68:19:eb:41:2c:23:d2:
7c:c5:bf:2c:b7:bb:88:4b:35:59:d8:70:15:00:61:
d7:ea:c6:c6:a9:90:08:59:e3:7f:8e:0e:f9:16:d0:
59:65:61:f0:8a:78:ba:43:33:9e:b1:5d:81:94:a8:
b1:c1:fb:bc:87:8d:76:c3:73:5d:35:d0:95:90:b9:
b6:13:44:1c:a9:8a:81:a3:07:3b:f5:18:51:aa:d6:
ec:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E0:D9:86:F7:E2:B7:15:7D:DC:FF:31:63:BD:9A:41:E2:91:A9:4E
X509v3 Authority Key Identifier:
keyid:BE:0F:8F:14:F2:20:E9:3E:E3:47:47:C4:D6:DB:F1:AD:35:B3:83:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:15:13:86:65:f5:01:60:f9:a6:4b:86:e2:ca:df:78:06:53:
94:16:1c:d3:3c:7a:10:7b:40:44:f3:ee:0e:5f:6d:c0:ef:7f:
45:0d:6d:52:29:97:1d:1e:03:65:a3:15:bf:8d:e2:82:5e:f7:
ce:e3:94:bd:62:81:cd:27:f5:d9:e7:b9:fe:a2:88:d4:b3:69:
ba:a7:ae:9b:f5:2e:6e:5b:13:5f:30:18:dc:0d:54:d0:2f:92:
28:55:02:26:66:93:78:b4:4b:e4:a7:f7:b9:69:5d:0f:29:15:
60:f7:96:0e:8b:30:a0:f0:5f:ce:8d:48:08:5d:13:71:4e:77:
68:b5:47:c8:8c:d0:89:0b:f7:51:0c:ae:f7:48:13:70:82:de:
11:fe:11:13:0b:ad:77:7a:e4:76:5f:73:8b:eb:f6:b2:80:9b:
2e:65:99:bf:73:06:ac:7c:4e:0f:f8:2f:62:23:c3:67:d4:60:
16:f2:5b:3e:a7:4e:c4:18:15:2d:a1:58:4f:f4:68:b0:01:b7:
e8:03:ec:65:f6:fe:12:d0:c6:db:38:f0:76:fd:ad:b7:f3:b1:
4d:bf:30:9f:48:a6:b2:0b:f3:38:95:fc:4d:b9:7c:23:94:17:
bc:40:45:18:6a:76:e8:da:e5:d5:63:6f:f0:6c:1c:75:9b:3a:
f9:b9:2e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:07:03 2025 by rpki-client