Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
File: vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft (raw, json)
Hash identifier: lcrfp3sPDLTNysf3YIj/RhIBxyIZLqFLAL7q/bpwj70=
Subject key identifier: 76:67:F0:62:38:A1:09:04:62:73:B1:BD:1F:42:2D:BE:64:99:B5:7C
Authority key identifier: BE:0F:8F:14:F2:20:E9:3E:E3:47:47:C4:D6:DB:F1:AD:35:B3:83:FA
Certificate issuer: /CN=be0f8f14f220e93ee34747c4d6dbf1ad35b383fa
Certificate serial: 0198D6CDF76F00F54FD10A27BCB8CFF73B6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
Manifest number: 0D20
Signing time: Sat 23 Aug 2025 12:01:19 +0000
Manifest this update: Sat 23 Aug 2025 12:01:19 +0000
Manifest next update: Sun 24 Aug 2025 12:01:19 +0000
Files and hashes: 1: olc2Y8iylqMSKyCyshdN5SCe0vI.roa (hash: UAcPq7niB1CGXkTFu0WQUaf9we2Qrdpi5zBQPRcbjno=)
2: vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl (hash: Z7yJhb6c9y3DcWAck4uabyxO6nQ3A1CY0lbTnwdI9fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:f7:6f:00:f5:4f:d1:0a:27:bc:b8:cf:f7:3b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be0f8f14f220e93ee34747c4d6dbf1ad35b383fa
Validity
Not Before: Aug 23 12:01:19 2025 GMT
Not After : Aug 24 12:01:19 2025 GMT
Subject: CN=7667f06238a109046273b1bd1f422dbe6499b57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:0b:58:1f:85:95:e6:6f:c7:93:3c:cd:22:
66:c6:26:2e:d1:2c:76:c5:24:7b:10:f7:71:2b:74:
3e:c0:2e:61:8c:74:d2:ed:03:02:39:85:df:5a:d1:
6d:1b:33:13:da:f8:fd:4b:c0:56:96:1b:72:39:68:
90:58:87:dd:7a:a2:5e:c2:2e:a7:a6:30:21:fe:9d:
6f:f1:28:fe:11:7d:5b:03:81:67:28:80:c5:1b:c9:
15:04:2d:2a:b3:db:52:51:82:ab:37:fa:25:42:5c:
3f:b0:7f:11:ad:ec:cc:a4:8e:cc:db:b9:b9:0f:0d:
de:5a:be:cb:13:8f:c1:08:14:7c:47:cd:52:96:96:
dc:23:4f:14:b6:a5:88:7f:39:84:c4:c2:40:26:61:
92:06:c3:b3:71:9f:66:27:b3:83:05:0f:1a:9a:9e:
80:0c:ce:93:88:4c:3a:46:0d:f9:a7:eb:fd:44:58:
d7:58:f3:60:9d:f7:26:17:76:c6:a9:15:6b:dc:dd:
a2:a3:53:b1:89:32:f1:ec:82:42:90:da:cb:92:27:
60:ac:7e:4f:2b:bd:a9:a6:38:ea:4f:3f:5d:af:0c:
d9:27:49:35:8e:f3:e4:b6:ed:cb:45:c5:e8:ec:e9:
2b:3e:92:8c:44:f1:ef:29:ca:ad:7d:48:77:d5:73:
26:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:67:F0:62:38:A1:09:04:62:73:B1:BD:1F:42:2D:BE:64:99:B5:7C
X509v3 Authority Key Identifier:
keyid:BE:0F:8F:14:F2:20:E9:3E:E3:47:47:C4:D6:DB:F1:AD:35:B3:83:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b7:45:b5:69:27:b4:84:5c:95:17:5c:72:4a:3c:88:d9:e5:
db:0c:a7:b2:28:24:0f:42:60:93:96:bc:4e:80:19:a9:0b:96:
12:56:3b:e5:be:a1:2e:d7:8e:51:fc:95:91:47:eb:05:27:e1:
1b:86:cf:09:37:bd:f9:dc:20:09:56:ad:90:2e:24:e0:f7:a4:
0f:4c:8f:f7:c5:db:00:7c:e4:ae:6c:dc:31:69:57:78:c0:a2:
f8:29:69:6a:5c:0d:f8:a1:11:cc:1a:fb:3c:db:40:d7:80:36:
d7:64:5e:1d:37:2e:24:fc:12:50:7b:fd:29:80:1a:be:e0:f2:
5b:f3:a7:32:f3:f1:05:50:66:0a:fc:22:e8:f0:83:87:82:48:
9d:d5:d5:f7:b4:45:5e:bd:29:73:40:40:38:7d:e3:60:42:43:
06:06:f1:2c:aa:61:d6:06:8b:fb:25:5c:66:04:bd:fe:f6:32:
08:40:5a:41:a7:69:0f:01:2d:31:99:5d:e6:60:76:1a:99:de:
08:59:b6:12:c3:3a:84:15:32:5d:ac:8e:5c:89:00:49:d5:c9:
9c:74:a2:2f:1b:05:cc:42:61:54:4a:30:62:41:7d:db:a9:43:
2c:a4:e2:af:e3:9f:55:56:90:28:08:59:89:4d:9d:ed:2e:b2:
51:b8:1c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:21:45 2025 by rpki-client