Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
File: vgXqx8OvU1UcnmI2U906198VVLs.mft (raw, json)
Hash identifier: e53gcrBl1UYm9uoKnIvywkd6mZp63d/sGj9z6U+PwjA=
Subject key identifier: 80:AA:CA:BA:A5:3A:0D:CB:8C:B2:DB:45:70:3D:40:B6:4E:7A:2D:BF
Authority key identifier: BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB
Certificate issuer: /CN=be05eac7c3af53551c9e623653dd3ad7df1554bb
Certificate serial: 0198D73B420383EAE20DB123E3F82489B177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
Manifest number: 072C
Signing time: Sat 23 Aug 2025 14:00:41 +0000
Manifest this update: Sat 23 Aug 2025 14:00:41 +0000
Manifest next update: Sun 24 Aug 2025 14:00:41 +0000
Files and hashes: 1: vgXqx8OvU1UcnmI2U906198VVLs.crl (hash: 2FXcyjF+DztHyyhxmsBX+KB7gyCKxnLi6ODiWfmk21I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:42:03:83:ea:e2:0d:b1:23:e3:f8:24:89:b1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be05eac7c3af53551c9e623653dd3ad7df1554bb
Validity
Not Before: Aug 23 14:00:41 2025 GMT
Not After : Aug 24 14:00:41 2025 GMT
Subject: CN=80aacabaa53a0dcb8cb2db45703d40b64e7a2dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:43:c0:27:09:45:66:df:da:28:c1:56:0c:17:
95:f6:22:6e:48:71:bc:85:93:b5:76:c1:2c:6b:f6:
94:62:a1:da:bd:61:82:80:4f:a5:dd:de:6d:12:a3:
9a:4e:ca:19:ef:e8:82:30:4a:64:85:53:c4:3c:1f:
16:e7:33:db:2f:70:d6:86:69:41:fc:ba:a9:4a:a6:
ab:3d:4f:0b:4f:8f:e2:e7:00:1c:4f:74:fd:37:c3:
ed:72:cc:87:5a:38:4f:52:2e:11:c0:ae:67:ae:96:
7e:c1:b4:81:aa:24:8f:1b:26:d8:09:72:69:43:90:
a6:86:ba:bc:c0:09:e7:1d:d2:65:3a:ab:63:b4:0e:
21:5d:d9:72:8f:6c:17:df:64:13:54:e2:62:a3:f6:
05:52:67:dd:55:93:a0:68:24:f2:bb:97:06:b1:93:
a3:14:50:ca:c8:70:cc:52:84:36:05:c0:70:63:28:
24:43:bb:b1:fa:aa:a2:b5:a8:6b:db:4e:09:54:28:
ac:80:c3:be:e2:52:f4:52:6e:92:f3:39:8b:4b:8c:
ea:76:1c:39:db:d8:a8:21:8e:1d:fd:bf:0f:5c:0d:
bd:8c:c2:50:3e:d8:5e:15:99:da:d4:ab:cb:f7:81:
dc:dc:59:38:d6:25:02:94:85:65:20:ba:69:b8:dc:
dd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AA:CA:BA:A5:3A:0D:CB:8C:B2:DB:45:70:3D:40:B6:4E:7A:2D:BF
X509v3 Authority Key Identifier:
keyid:BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:78:35:29:a9:1a:5d:0f:ef:13:e2:bb:cc:f3:c4:5f:5b:2a:
43:b3:16:45:2d:e4:a6:d2:d5:9a:b1:6a:57:5f:b2:8e:3b:56:
a0:53:c6:20:1b:c4:db:5a:b7:f2:17:51:32:88:c0:5a:d3:a6:
e3:1e:cb:8c:ee:53:11:c3:65:13:b4:07:44:37:44:71:8a:5f:
e1:fe:9c:05:e8:14:46:13:09:0b:d0:a0:28:fa:8a:05:06:97:
f9:c2:bb:38:84:2a:80:55:c9:ee:08:06:e4:d3:c3:62:6d:7c:
58:90:06:27:5e:0c:6b:43:be:1a:d9:68:8e:f0:e0:14:78:2e:
41:82:c7:16:ea:ee:cb:29:c3:09:d2:3f:1c:eb:ee:c9:96:e2:
77:0c:70:28:44:40:16:3f:55:d3:04:23:5b:35:15:3a:e0:ac:
51:41:c4:20:06:a7:4b:78:ba:e5:09:6a:ed:0f:e9:5f:db:5c:
cf:56:11:da:62:cd:34:fc:2b:5a:c5:a1:eb:5f:6f:71:10:df:
c4:a1:f9:cc:16:aa:df:4d:63:bd:d4:b3:79:84:04:59:7e:5a:
cb:5e:47:43:46:86:60:f8:b6:65:21:d0:88:16:97:9d:9a:9c:
0e:32:b3:34:d3:96:36:f9:90:4d:e8:e7:c3:81:bb:9a:2e:93:
a7:36:b1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:32:01 2025 by rpki-client