Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
File: VG3jJt6VIr0pa-1II4XJdpJY2PE.mft (raw, json)
Hash identifier: iJ8NKch9Hgih5yf7tGd81ihb9KiL/w7z3942r5d0XVc=
Subject key identifier: 41:CE:8D:B6:11:57:C1:A7:D0:93:8A:4D:BC:15:3A:86:87:B9:1D:76
Authority key identifier: 54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1
Certificate issuer: /CN=546de326de9522bd296bed482385c9769258d8f1
Certificate serial: 0198D660A56270A4DE621897E22C209D1513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
Manifest number: 0D31
Signing time: Sat 23 Aug 2025 10:01:54 +0000
Manifest this update: Sat 23 Aug 2025 10:01:54 +0000
Manifest next update: Sun 24 Aug 2025 10:01:54 +0000
Files and hashes: 1: VG3jJt6VIr0pa-1II4XJdpJY2PE.crl (hash: XcLooP+yRxxXDjsaTlolp7IFzpm7xVIW98Xtu3GjGEk=)
2: XqfeZQF_1MV97o_zjJHjyzS8MaA.roa (hash: 7t9vzZ6FV6EcfJzjLHhMVS7Ff0/+2ubtRR3JHX0+dlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:a5:62:70:a4:de:62:18:97:e2:2c:20:9d:15:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546de326de9522bd296bed482385c9769258d8f1
Validity
Not Before: Aug 23 10:01:54 2025 GMT
Not After : Aug 24 10:01:54 2025 GMT
Subject: CN=41ce8db61157c1a7d0938a4dbc153a8687b91d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:46:88:55:bb:a0:a9:01:81:7d:86:49:59:37:
26:3b:50:80:df:9e:3d:37:75:9d:c6:4c:61:b5:e2:
82:27:e0:3b:9c:e6:ea:e8:c6:2f:ab:e8:ad:d6:a8:
6e:5e:e8:5a:46:a6:13:59:22:4a:47:a0:cf:b3:e2:
02:35:31:74:20:5e:d6:22:fc:07:cd:17:f5:fe:a0:
82:78:31:14:fa:9c:ea:b6:61:ad:de:fc:42:99:68:
07:e9:13:7b:e0:95:87:7c:be:4b:76:f0:17:38:72:
f6:43:c3:40:ba:db:c9:cb:ce:da:1b:3d:a9:68:ec:
38:54:7c:e8:6f:65:12:a0:ad:6f:a3:03:83:b2:98:
40:6b:48:24:e8:b0:57:4e:6e:ed:d4:bc:0e:9f:fa:
a3:aa:0e:50:17:1c:49:4f:63:9b:b4:99:d1:86:b5:
7f:6c:2a:f6:7f:9c:88:33:87:ee:0a:c1:b4:cc:e9:
c0:ab:fb:06:bc:1f:06:87:1f:63:b4:a7:20:a8:f0:
d7:0d:8a:84:1a:28:f2:3c:5f:ee:c5:a4:ce:bf:46:
aa:65:15:a3:ba:5b:18:91:42:d0:5e:49:11:3e:f8:
fe:55:d6:87:2e:c7:b3:55:a1:f5:b7:9b:16:b9:ee:
ff:1e:9c:08:12:91:40:ec:f4:e0:09:37:a6:af:fb:
3c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CE:8D:B6:11:57:C1:A7:D0:93:8A:4D:BC:15:3A:86:87:B9:1D:76
X509v3 Authority Key Identifier:
keyid:54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:77:08:77:0d:cc:c3:67:e2:bc:2a:fb:87:d4:a7:70:54:f7:
5d:e9:d6:93:61:40:60:2d:2f:82:fb:8c:b9:df:0d:54:0f:db:
47:7c:c8:75:1e:3d:ca:d3:ae:54:22:5a:f3:58:04:f2:ad:81:
74:d2:b4:74:bd:98:56:88:22:b9:40:1a:18:d6:98:c8:67:bf:
35:30:6b:92:fb:94:86:83:71:e4:07:3b:ac:7c:f3:0e:f1:a2:
10:48:cb:73:af:20:b7:f0:c6:78:7d:21:d9:f2:ab:f1:07:35:
df:86:6d:bd:25:40:17:9c:be:8f:4b:04:b9:fb:da:d0:74:5d:
19:df:77:89:76:e5:2f:2d:1d:ae:a8:a8:e9:fb:f8:b6:f3:d8:
96:83:42:a9:bf:f5:bf:e2:ce:05:c1:83:4e:e9:1d:db:44:a6:
a5:b7:f6:3e:e3:cd:67:d0:67:25:8b:8b:35:75:12:be:73:fa:
eb:90:ca:9b:2a:64:e7:0e:94:db:80:b4:d2:23:29:c8:a7:ec:
90:d2:15:79:a3:3b:d1:f0:30:7b:24:ca:60:7a:2f:bf:4c:cb:
01:e1:3d:5b:0c:aa:c9:27:b1:6f:c7:85:ac:d1:b5:4c:38:6d:
91:cd:46:e7:a9:65:d4:b1:d3:12:e4:ee:83:66:80:bc:49:a4:
82:17:df:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:28:39 2025 by rpki-client