Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
File: VG3jJt6VIr0pa-1II4XJdpJY2PE.mft (raw, json)
Hash identifier: gwa6C+D4SnDsWa4io18VxtEmZ8TNIeNJ4fkn7aFwgzs=
Subject key identifier: 46:28:35:ED:D4:78:B4:3F:20:35:91:E6:C6:3E:0B:33:62:A8:09:97
Authority key identifier: 54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1
Certificate issuer: /CN=546de326de9522bd296bed482385c9769258d8f1
Certificate serial: 0199FFC863BD57CFFD964511AD81B4E3A2C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
Manifest number: 0DCB
Signing time: Mon 20 Oct 2025 04:02:26 +0000
Manifest this update: Mon 20 Oct 2025 04:02:26 +0000
Manifest next update: Tue 21 Oct 2025 04:02:26 +0000
Files and hashes: 1: VG3jJt6VIr0pa-1II4XJdpJY2PE.crl (hash: gBg6msCDwO25W9yn9eM1sVWsVfqEnAIuV6bESeaBHOE=)
2: XqfeZQF_1MV97o_zjJHjyzS8MaA.roa (hash: 7t9vzZ6FV6EcfJzjLHhMVS7Ff0/+2ubtRR3JHX0+dlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:63:bd:57:cf:fd:96:45:11:ad:81:b4:e3:a2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546de326de9522bd296bed482385c9769258d8f1
Validity
Not Before: Oct 20 04:02:26 2025 GMT
Not After : Oct 21 04:02:26 2025 GMT
Subject: CN=462835edd478b43f203591e6c63e0b3362a80997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:89:ec:09:94:b2:bc:cc:08:50:79:cc:5b:d7:
74:d3:19:21:ce:ff:a4:9c:c5:2c:76:21:b5:cf:5e:
45:af:32:bb:ef:70:1a:f5:c3:4e:e2:c3:28:02:ce:
66:b0:52:c5:ab:e6:da:5d:c7:2a:d1:65:4e:ad:b0:
91:37:5e:f9:be:14:93:48:9b:03:7d:be:65:1b:a6:
68:34:68:86:bf:a2:94:54:15:6e:1f:3e:fb:d6:f2:
5a:8b:2e:5e:fc:f1:9b:9c:31:f7:e2:0e:84:69:68:
68:20:4a:75:40:dc:60:a3:11:2b:96:53:70:e8:b8:
2f:76:d0:63:2f:7e:b9:03:95:eb:eb:09:64:8c:5b:
33:7c:91:43:1b:63:3a:f6:b1:dc:99:30:7b:45:0c:
f1:8e:e7:4d:5e:d2:30:fc:97:72:8f:6e:64:45:1c:
7f:00:8e:25:7f:93:a1:6d:d0:03:37:70:5b:26:5d:
3d:b5:37:12:75:99:61:ca:ae:c0:03:b8:4d:e2:82:
7f:d6:6f:15:9f:21:34:7f:02:9e:5d:6e:d0:db:d7:
3e:72:c4:5a:46:dc:40:b7:10:b3:22:d0:61:63:ec:
93:db:ac:cc:81:df:87:12:fb:31:26:32:b4:7c:e4:
e0:a0:9e:90:52:0d:e9:22:60:66:87:11:57:48:40:
0a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:28:35:ED:D4:78:B4:3F:20:35:91:E6:C6:3E:0B:33:62:A8:09:97
X509v3 Authority Key Identifier:
keyid:54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:7b:01:a1:bd:66:6a:72:24:04:7f:78:c7:3c:69:ea:f2:5e:
de:84:56:ec:e4:ff:4f:75:8f:2f:e1:cd:64:fd:aa:ec:47:e2:
33:cc:df:31:0c:d6:68:e7:01:87:bb:b3:3f:b9:f4:6c:74:b7:
69:7e:6f:b5:69:ba:bf:0f:f9:21:d4:15:1e:6a:94:00:0e:83:
c7:86:7f:f2:8a:a3:1c:0c:aa:df:0f:af:70:ff:fd:d1:f5:1f:
4b:d3:60:d1:ea:27:6a:86:a3:13:fb:10:05:e4:00:cd:55:e1:
b1:4e:d8:5b:53:04:7c:8b:ed:01:69:31:cd:30:62:67:2e:9e:
26:d3:1e:8b:ea:90:9f:2c:ee:b4:96:da:1b:8b:f6:da:ed:df:
22:b8:5e:5e:c3:73:03:4c:a7:17:b5:14:d9:af:f3:d6:2f:2d:
4a:6c:fe:13:d4:75:30:72:88:4e:52:d8:07:ea:ce:d3:74:fb:
84:0e:bd:16:5c:f4:1d:f9:7a:53:5b:d5:55:23:09:86:44:51:
0c:5f:74:46:5d:39:85:8c:42:17:1c:fc:f8:bf:10:59:16:d4:
c2:96:80:d9:5e:26:20:f9:95:58:09:77:cf:32:05:66:95:a3:
63:ef:89:62:7a:9e:31:bf:75:64:cc:67:0a:2a:18:d6:19:51:
d2:ba:4e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:08:36 2025 by rpki-client