Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
File: VG3jJt6VIr0pa-1II4XJdpJY2PE.mft (raw, json)
Hash identifier: +4e1j4uBtHfHx4aNHJRTma2fVpmJZBrBsaDWW8IxXoQ=
Subject key identifier: 82:DD:3F:C4:6D:58:3E:3F:28:1F:FA:EF:B5:00:B7:5A:B8:D8:A0:84
Authority key identifier: 54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1
Certificate issuer: /CN=546de326de9522bd296bed482385c9769258d8f1
Certificate serial: 0197B6A17193EBFAA90BBB7A4E2605E357F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
Manifest number: 0C9C
Signing time: Sat 28 Jun 2025 13:02:03 +0000
Manifest this update: Sat 28 Jun 2025 13:02:03 +0000
Manifest next update: Sun 29 Jun 2025 13:02:03 +0000
Files and hashes: 1: VG3jJt6VIr0pa-1II4XJdpJY2PE.crl (hash: zv4t/5504JKK/OPm5JXmg0H988ZuIbrd2tmJ7pVAM18=)
2: XqfeZQF_1MV97o_zjJHjyzS8MaA.roa (hash: 7t9vzZ6FV6EcfJzjLHhMVS7Ff0/+2ubtRR3JHX0+dlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:71:93:eb:fa:a9:0b:bb:7a:4e:26:05:e3:57:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546de326de9522bd296bed482385c9769258d8f1
Validity
Not Before: Jun 28 13:02:03 2025 GMT
Not After : Jun 29 13:02:03 2025 GMT
Subject: CN=82dd3fc46d583e3f281ffaefb500b75ab8d8a084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:74:92:ea:fd:8c:40:f6:98:bf:47:d8:31:cc:
b8:13:30:89:d6:f2:a4:a0:43:d4:d8:10:4d:65:91:
7c:d3:16:d8:f9:3a:c4:3e:0d:0b:07:f8:fc:73:fd:
f0:82:81:83:33:3f:40:bc:b4:a0:c1:c4:04:8e:f8:
5e:99:28:8b:da:38:ce:a7:b0:3a:e9:44:f8:0b:d0:
bc:a6:43:1d:a6:a1:5d:a2:cf:59:da:0b:f5:77:2c:
01:07:58:b2:ec:32:cd:61:1f:71:48:16:23:9f:25:
bd:60:2d:c7:9c:9f:2a:1f:7d:03:86:32:ae:27:c2:
7f:94:0a:10:16:17:e7:16:2f:0e:49:c6:08:41:df:
ad:28:ed:7f:31:98:cb:47:70:64:05:f9:12:c7:dd:
1d:f2:86:51:fb:da:ef:10:10:28:70:39:fe:75:ca:
27:66:38:7a:4a:24:d4:cb:0c:44:bc:c6:ba:34:a2:
d3:0b:5a:62:ae:ae:ab:d8:5b:3f:67:48:c1:7b:c6:
60:43:08:be:dc:8b:64:25:02:f5:9a:c2:7a:76:e4:
e2:1b:74:91:30:d3:50:a1:10:dc:7f:e0:15:ac:1c:
32:d3:ee:6e:db:61:b6:cf:2b:f3:8c:ab:a4:20:22:
f5:f0:1d:93:97:84:d7:3b:aa:65:1d:d0:21:b6:c2:
6d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DD:3F:C4:6D:58:3E:3F:28:1F:FA:EF:B5:00:B7:5A:B8:D8:A0:84
X509v3 Authority Key Identifier:
keyid:54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:fc:3a:dd:5d:34:7a:9d:55:ee:d0:a0:78:bc:e6:15:51:79:
1d:f5:b6:70:66:89:ad:de:4a:76:6f:dd:9f:cc:68:4e:b3:ab:
6f:84:3d:f5:6d:cb:d7:de:fc:1e:28:fe:40:1d:9f:b1:f5:9b:
5e:52:20:c3:84:79:e4:3f:16:12:4e:90:a7:77:79:85:e2:a0:
aa:ca:b6:f8:0d:98:ce:38:4c:40:ed:7a:4e:4e:27:30:ca:81:
06:83:9d:1c:12:b6:3f:18:13:4a:fe:51:cc:57:ac:cc:9a:12:
97:bc:93:94:72:6c:3a:9b:55:05:bd:65:96:60:c2:50:a6:b2:
c7:aa:d6:01:c8:e8:75:ea:ac:2d:f2:11:26:49:c9:20:f5:01:
a0:3a:26:36:e9:1f:06:90:8b:1e:5c:1f:73:1d:41:bc:5e:18:
1c:73:e7:28:1b:1d:ff:cc:46:66:73:73:86:37:7e:55:fd:b4:
71:be:83:47:a4:d2:64:f3:bd:3b:56:0c:44:93:12:90:3d:ae:
11:b3:e2:c7:93:a7:1a:f6:27:a9:d7:a3:71:de:de:74:b9:bf:
ec:bd:a7:d3:56:f6:d6:26:76:6b:c4:b3:91:6f:40:b2:ac:9d:
97:b6:64:ae:6b:c4:13:33:f2:97:02:a8:f4:bc:5b:10:a2:03:
b1:37:54:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:57:27 2025 by rpki-client