
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.mft
File: VggFtzAYcRab0JuIZWnR9p3Bm1c.mft (raw, json)
Hash identifier: lswruqthrGLQT/h8YrVrqiYqq3NABBSpeENioBdi4Tc=
Subject key identifier: 5E:DA:2E:15:6E:7B:99:37:F6:46:6F:77:9F:2D:AE:56:30:BE:30:B0
Authority key identifier: 56:08:05:B7:30:18:71:16:9B:D0:9B:88:65:69:D1:F6:9D:C1:9B:57
Certificate issuer: /CN=560805b7301871169bd09b886569d1f69dc19b57
Certificate serial: 0197B70ED54F22C883328CDDBC1932F69962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VggFtzAYcRab0JuIZWnR9p3Bm1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 15:01:32 +0000
Manifest this update: Sat 28 Jun 2025 15:01:32 +0000
Manifest next update: Sun 29 Jun 2025 15:01:32 +0000
Files and hashes: 1: VggFtzAYcRab0JuIZWnR9p3Bm1c.crl (hash: p4boJ+koE60sNFQah/mWsjwFGyWys2bLzzMF6jQ0Nm4=)
2: yXXR2fzrFaQnF3NWV4_d0yBPIgU.roa (hash: nTOlg6X5m06JtLL56eIgSs3eGUVRFrI3X2RQbngIypQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VggFtzAYcRab0JuIZWnR9p3Bm1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:d5:4f:22:c8:83:32:8c:dd:bc:19:32:f6:99:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560805b7301871169bd09b886569d1f69dc19b57
Validity
Not Before: Jun 28 15:01:32 2025 GMT
Not After : Jun 29 15:01:32 2025 GMT
Subject: CN=5eda2e156e7b9937f6466f779f2dae5630be30b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fa:f8:bc:eb:0c:bf:8f:dc:28:65:75:e5:4f:
0e:ea:4c:d9:59:bc:86:54:29:60:42:02:a6:45:3c:
8e:f6:47:55:cd:46:7a:9c:fa:0a:bb:21:e9:f0:fd:
af:8e:31:1b:7d:97:20:f5:c1:bd:fc:a9:52:40:6b:
73:f9:af:62:de:f0:95:f3:c5:00:56:28:36:fe:ca:
dc:ea:da:95:75:d0:f0:09:70:07:1a:75:57:c7:e2:
be:5d:69:31:7b:ae:74:ab:12:5b:31:94:9f:a5:0b:
64:81:00:42:bb:d9:94:cd:fd:d7:31:a6:0d:05:a7:
07:50:d2:bb:f4:f2:86:f8:32:25:da:84:93:2d:03:
e7:b7:3b:88:7b:84:a3:81:0a:e7:71:81:4a:fd:8f:
88:05:b3:03:41:1b:2d:5b:10:22:00:df:c5:c7:58:
36:87:6d:c8:59:90:b9:0d:e5:6f:26:96:4a:2d:e6:
d4:7b:74:ee:a6:b1:4d:bb:fd:65:09:91:87:a2:89:
4e:b4:23:e5:41:2e:2f:5e:6e:4f:82:5c:64:41:63:
b0:30:2d:1c:fc:1b:fd:5e:db:23:95:75:23:e1:f8:
68:d5:c2:f3:9e:4a:5f:7d:2f:f3:1a:36:18:b5:c2:
8a:d0:b0:cd:65:e6:6a:e3:8c:15:4d:e1:aa:42:fb:
3e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DA:2E:15:6E:7B:99:37:F6:46:6F:77:9F:2D:AE:56:30:BE:30:B0
X509v3 Authority Key Identifier:
keyid:56:08:05:B7:30:18:71:16:9B:D0:9B:88:65:69:D1:F6:9D:C1:9B:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VggFtzAYcRab0JuIZWnR9p3Bm1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c7:ff:99:b3:6b:b1:65:de:93:be:3d:96:7d:3c:eb:65:fc:
53:70:55:4c:07:b7:c6:60:7b:93:53:36:ef:cb:56:91:c6:d6:
75:8d:94:6e:5b:09:6b:f5:0d:ab:1c:80:97:51:72:c8:14:c7:
96:90:38:ee:b5:ad:10:85:9e:b7:6b:70:b5:5b:ca:4d:20:59:
74:c0:57:d3:5f:f5:6e:31:46:3e:be:03:e8:1e:5d:07:70:d4:
27:e4:e3:7b:c3:27:16:8c:aa:77:b8:1b:87:07:f2:cc:70:a6:
dd:3f:38:4e:20:fa:b4:00:5f:d8:65:2d:88:9b:cd:a4:c8:d3:
58:76:73:79:50:e1:75:ad:e1:4b:7b:dc:ac:b0:25:1e:0a:68:
b5:4e:0e:5f:ca:ad:fb:e5:aa:56:30:e1:25:5d:8f:df:42:90:
58:56:51:6c:25:51:22:4f:c3:6a:4a:f5:b5:e1:2c:50:04:d9:
c9:f2:02:fa:ee:40:dd:cc:9b:94:cc:13:1c:40:32:77:d0:dd:
ab:8b:db:26:56:ea:a6:09:8c:21:59:75:6d:ed:10:10:91:e6:
36:7f:ce:38:86:0b:35:bc:ed:03:18:59:21:52:c2:55:cb:24:
c9:03:35:39:bd:71:8b:b3:3b:c2:6b:03:4b:ea:f4:5d:37:ff:
8d:7a:26:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:17 2025 by rpki-client