Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
File: VRGWi3l6ylfWEYAak6hcuGTkPnI.mft (raw, json)
Hash identifier: T6GCmt/RF//3zHJfxkNMFpqJJYOxJXJrJZgbgnbZ//4=
Subject key identifier: CF:02:FB:28:09:E8:93:A4:16:24:29:B2:98:FA:4A:07:86:9A:08:9B
Authority key identifier: 55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
Certificate issuer: /CN=5511968b797aca57d611801a93a85cb864e43e72
Certificate serial: 0198D73B9352B337EC6CF7D0215B5D85F247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
Manifest number: 0F21
Signing time: Sat 23 Aug 2025 14:01:02 +0000
Manifest this update: Sat 23 Aug 2025 14:01:02 +0000
Manifest next update: Sun 24 Aug 2025 14:01:02 +0000
Files and hashes: 1: FkEK24gMOi9MxsRr642Srdl8lHQ.roa (hash: DtYbP2drcIzf0g2tEEsCLYpdXSaGIQ0MZgdI48xnP+Q=)
2: VRGWi3l6ylfWEYAak6hcuGTkPnI.crl (hash: YUMiMMLCfn7aZcyNy2SMLqTTS8GE10461YHsgcv2PMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:93:52:b3:37:ec:6c:f7:d0:21:5b:5d:85:f2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5511968b797aca57d611801a93a85cb864e43e72
Validity
Not Before: Aug 23 14:01:02 2025 GMT
Not After : Aug 24 14:01:02 2025 GMT
Subject: CN=cf02fb2809e893a4162429b298fa4a07869a089b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1a:ef:1c:a6:05:45:c1:8e:9c:f2:90:40:ee:
ef:3d:a3:4d:51:65:3f:29:83:5c:bb:6c:4b:de:60:
43:cf:88:78:df:8c:e3:c1:ef:a8:84:c9:af:c5:0e:
eb:4f:78:22:5a:72:69:91:c5:ae:34:61:19:d9:79:
b7:26:5f:c5:30:bc:c4:4a:30:ec:c6:21:d3:1e:98:
43:a8:3d:85:6a:39:3a:bb:46:94:ad:22:7e:0c:a5:
84:be:91:31:d0:2d:4a:59:b3:cc:64:74:f7:f9:0c:
6b:f2:e4:08:ac:72:ad:4a:f6:0a:f3:04:d9:6f:4d:
07:88:f4:37:b1:e9:f0:2b:d0:96:fa:63:7a:0d:2f:
e9:09:dd:a9:8d:27:54:ce:9d:71:2d:29:93:04:dd:
8d:ec:7d:41:07:95:14:56:5d:72:80:4e:83:0d:40:
fc:8d:ed:f4:46:36:44:59:22:7a:6a:eb:1c:6f:fe:
8c:a8:33:fc:0b:3a:8d:8a:a1:d7:e9:bc:f9:6a:e2:
55:e5:be:ee:8b:ae:bf:6d:43:a1:24:83:3b:3d:f9:
29:4c:27:8a:f5:50:1a:73:f9:e7:36:89:f6:9c:36:
86:06:48:b0:4e:46:66:84:b9:b3:0c:09:58:4f:03:
d9:ee:8a:56:0c:f9:f8:ba:ed:33:fe:35:40:00:b0:
bc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:02:FB:28:09:E8:93:A4:16:24:29:B2:98:FA:4A:07:86:9A:08:9B
X509v3 Authority Key Identifier:
keyid:55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:95:9b:0b:a3:ec:d6:b7:86:ec:94:0d:ad:b9:46:14:2f:67:
75:be:be:0b:83:de:d8:04:ff:40:b4:e1:e4:19:1d:98:fd:85:
28:56:78:c6:70:ac:76:5f:c3:45:ec:35:a4:29:a4:a5:23:5c:
66:51:b6:d4:e7:54:a4:bb:ef:64:d0:98:fe:83:06:9c:e4:39:
66:36:72:f5:59:3f:e5:16:3a:c8:e3:6c:43:c9:9b:cb:f8:4e:
ea:9b:b7:3c:6a:71:d4:b2:ab:20:b1:c8:83:be:f7:63:fa:29:
53:89:2f:d5:e9:07:19:d1:fe:4e:08:67:fa:3e:77:6d:0c:48:
11:51:85:cd:0f:e2:dc:2d:21:b3:ca:c0:ea:16:53:8b:f1:5b:
8c:de:1e:32:ba:87:89:9a:e5:19:47:90:af:57:1f:7f:a3:c1:
0b:07:3c:38:81:6f:ad:de:5e:68:f2:16:b6:f7:76:56:22:45:
3a:6b:ef:33:9f:86:f8:f0:8b:ce:0b:01:d6:96:a7:07:71:56:
15:ca:be:14:23:54:3e:d5:97:f5:5c:88:14:04:e0:1e:a4:3b:
57:16:01:1f:f0:75:96:44:0e:a7:2c:94:9a:a1:d1:1c:2f:c4:
fe:df:6c:ad:0f:7a:88:ba:75:6a:d3:70:d2:03:97:87:fb:e3:
f2:56:ee:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:45:51 2025 by rpki-client