Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
File: RgVeggAswL17mYfl1zZUIOr9SXA.mft (raw, json)
Hash identifier: JShWMPFRfyjMt/86vczAb5QCIga0TTLmp6UM2LOkP4o=
Subject key identifier: 67:54:B9:C6:2D:F3:4E:C6:F1:83:BB:09:B5:29:67:18:0C:4B:CB:60
Authority key identifier: 46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70
Certificate issuer: /CN=46055e82002cc0bd7b9987e5d7365420eafd4970
Certificate serial: 0197B7456EA5E83A41089492FF973BB6AB45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 16:01:10 +0000
Manifest this update: Sat 28 Jun 2025 16:01:10 +0000
Manifest next update: Sun 29 Jun 2025 16:01:10 +0000
Files and hashes: 1: RgVeggAswL17mYfl1zZUIOr9SXA.crl (hash: hixw0316K72u6D2wVe8XsbL83MUHbzMcVdtR0QvVp+c=)
2: VJnm1AkHiE7SuesA5idFH1REQdA.roa (hash: 1LlBKB7vOsPJ8FvhzoxofY1Pd+poAd3OYPCwf4CTRNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:6e:a5:e8:3a:41:08:94:92:ff:97:3b:b6:ab:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46055e82002cc0bd7b9987e5d7365420eafd4970
Validity
Not Before: Jun 28 16:01:10 2025 GMT
Not After : Jun 29 16:01:10 2025 GMT
Subject: CN=6754b9c62df34ec6f183bb09b52967180c4bcb60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:74:00:ce:a9:e9:07:a9:2a:4f:63:ca:a2:f8:
0c:fb:67:b7:21:07:b2:18:21:17:38:4e:53:79:3c:
ed:61:a6:e3:26:8a:58:5b:03:da:59:d6:c9:6f:22:
b4:da:f6:7f:5e:dc:8c:e0:82:d0:83:4c:16:a6:78:
11:c9:2f:58:70:02:8a:7a:b0:70:27:5d:e7:03:e1:
86:72:92:4a:f9:b6:0a:85:dd:ae:0c:0e:4b:7f:63:
eb:2e:97:1b:bd:86:9c:a0:b6:af:ec:26:8c:d5:a0:
8c:d9:c7:51:82:e1:40:7d:8a:0b:70:78:a6:d9:4e:
76:b9:0c:5d:50:d5:af:03:dd:cd:c7:51:f6:05:61:
f0:f7:1e:9d:16:e2:b6:38:89:78:4a:5b:cb:79:f9:
a4:96:8d:91:9a:3e:3b:25:6c:d2:c4:12:97:56:db:
70:96:3b:a8:8e:fc:03:7c:05:f6:06:30:25:3e:28:
34:db:18:29:7b:db:f9:79:45:ae:b1:07:e0:2d:1c:
7f:4b:4d:be:b8:8d:2a:6f:0b:22:09:e8:7c:e4:ba:
59:c1:88:98:2b:20:e3:a9:3f:a3:21:14:ee:55:fc:
1f:b2:d5:f4:a1:01:c3:05:54:04:32:31:6a:c2:ef:
3f:21:6c:b3:26:d9:f4:47:01:29:6c:1c:96:04:e7:
a3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:54:B9:C6:2D:F3:4E:C6:F1:83:BB:09:B5:29:67:18:0C:4B:CB:60
X509v3 Authority Key Identifier:
keyid:46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:74:13:e6:fc:86:1a:3b:83:e0:6d:75:6c:73:92:99:ef:4a:
a7:95:3a:28:46:5a:86:0b:38:a4:c3:9a:38:eb:9c:c9:39:3e:
33:50:fe:e0:64:fc:06:13:98:27:63:3d:cd:c4:4f:9e:10:6b:
33:6e:44:15:b2:7d:76:16:11:56:21:b2:6a:70:de:ff:97:dd:
a6:c6:b2:cf:44:c2:a8:37:0d:86:87:63:a6:03:3c:0c:24:b8:
62:b2:b0:c0:32:9a:6f:c4:24:17:e4:80:2a:b5:5d:71:58:97:
9f:44:06:5a:c7:73:18:74:20:04:c0:82:dc:b8:83:2e:9a:d1:
22:5d:24:c3:74:50:ee:8a:f2:26:a8:75:7c:3a:3e:f5:d6:6e:
4c:70:cb:3f:9a:b7:81:0a:39:8a:fa:f7:bd:85:7e:8b:7f:3d:
69:32:c7:f0:80:c6:8b:f1:b2:1d:b0:5b:9f:dc:21:ba:a8:84:
46:eb:a6:7c:12:3d:e0:58:c8:5e:3a:6d:82:04:62:c3:5a:75:
4b:3e:82:d7:d8:ca:15:4e:65:ad:85:98:69:69:14:13:52:36:
fe:12:fe:e0:04:52:0a:6c:a4:1d:72:83:78:92:14:80:63:2f:
95:ba:6e:3e:ca:cf:d3:ed:26:a7:d3:22:9b:a7:af:52:df:66:
70:84:aa:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:06:18 2025 by rpki-client