Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft
File: vgMXYC-wyqOlEAaL2YnUba44TdI.mft (raw, json)
Hash identifier: n1VSCnCHmE2z3FAsfMvV18GsQmvYOR4uFiwny6Gjyy8=
Subject key identifier: 6B:8F:4B:8B:31:DE:9E:99:EF:59:38:23:27:96:BD:44:F0:33:62:54
Authority key identifier: BE:03:17:60:2F:B0:CA:A3:A5:10:06:8B:D9:89:D4:6D:AE:38:4D:D2
Certificate issuer: /CN=be0317602fb0caa3a510068bd989d46dae384dd2
Certificate serial: 0199C7C5D802D509845AECD666275CE7AEF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgMXYC-wyqOlEAaL2YnUba44TdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft
Manifest number: 0339
Signing time: Thu 09 Oct 2025 07:00:55 +0000
Manifest this update: Thu 09 Oct 2025 07:00:55 +0000
Manifest next update: Fri 10 Oct 2025 07:00:55 +0000
Files and hashes: 1: vgMXYC-wyqOlEAaL2YnUba44TdI.crl (hash: NC+lLRY3vjBjrD7Qufp4JykjOFLTJYAbgjkT/oUw3ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgMXYC-wyqOlEAaL2YnUba44TdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c7:c5:d8:02:d5:09:84:5a:ec:d6:66:27:5c:e7:ae:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be0317602fb0caa3a510068bd989d46dae384dd2
Validity
Not Before: Oct 9 07:00:55 2025 GMT
Not After : Oct 10 07:00:55 2025 GMT
Subject: CN=6b8f4b8b31de9e99ef5938232796bd44f0336254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:42:01:dc:cb:8a:a6:ed:0a:bd:70:00:9f:91:
5d:6b:0d:84:5d:ff:f7:ff:e3:2d:bd:13:18:64:06:
da:b2:3b:1f:74:a5:f6:17:f5:9a:1e:a8:fd:8b:92:
11:5a:8f:c3:0d:49:57:ec:d5:1a:a3:b8:56:b6:26:
88:30:35:9d:54:3f:66:60:52:3d:66:a5:0b:ef:71:
5b:de:f3:6e:46:93:05:4a:94:a3:55:58:e0:f0:ec:
ea:7e:74:cc:9a:5c:c3:70:56:b8:ac:c6:84:25:8a:
5d:a9:ce:2e:25:17:0a:b6:5f:89:0b:3a:ec:3f:0d:
df:9e:74:cc:53:5a:bc:45:ee:a1:8b:f4:ef:b6:50:
17:c2:d0:79:a7:90:15:fc:f2:c7:74:d5:89:1b:83:
86:f8:71:3d:21:7d:d0:5b:cd:98:9b:de:c0:40:25:
dc:6b:7a:87:eb:08:63:08:f2:b9:f7:4e:1a:1b:49:
ca:0e:b0:f6:48:6d:2f:ad:bc:93:19:23:08:f5:6f:
43:ae:dc:10:b7:0e:25:f8:87:0b:b3:c1:a8:94:14:
e9:92:61:87:9d:d3:88:90:07:cc:0a:d0:c9:ee:74:
7b:04:de:e8:dc:f3:54:07:58:25:41:f9:e7:57:b5:
3b:2b:b1:09:7c:03:78:64:8b:1d:c7:38:88:7c:04:
3f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8F:4B:8B:31:DE:9E:99:EF:59:38:23:27:96:BD:44:F0:33:62:54
X509v3 Authority Key Identifier:
keyid:BE:03:17:60:2F:B0:CA:A3:A5:10:06:8B:D9:89:D4:6D:AE:38:4D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgMXYC-wyqOlEAaL2YnUba44TdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:09:2d:71:4b:a0:ae:83:9e:c1:04:54:0e:c1:d5:b4:e0:ea:
7d:fb:7d:57:32:d8:85:c1:2e:12:ca:b0:d7:70:0d:97:f7:59:
f2:a4:07:f6:6a:8b:ea:f6:0d:59:59:fa:92:b0:30:b6:02:ba:
bb:f0:c0:77:2e:f3:a8:86:e7:15:0c:c7:30:c7:a7:f2:1e:3b:
6e:df:7d:5e:46:b4:15:5c:1f:c7:7f:a5:09:45:d7:c4:65:ac:
98:7e:df:c7:6a:d7:ce:31:eb:3f:df:81:7c:54:bf:96:c2:3f:
7e:a6:32:d8:95:46:fb:4d:41:79:e2:3c:6a:37:e0:de:76:9c:
c4:a3:1c:4b:fd:36:33:34:8c:07:1b:a8:31:0d:5f:56:12:cd:
21:c7:56:d4:e9:c3:24:2c:df:43:19:15:5c:f1:3b:a1:0d:a2:
22:cd:80:c9:a3:b9:cb:74:b5:b5:83:3f:01:b9:d9:66:5d:9e:
ae:e8:58:6b:fc:a5:b7:69:87:ba:55:d7:ca:f6:b4:77:e3:1f:
2c:a9:dc:74:4c:33:28:f3:36:40:f1:6f:34:42:59:ee:f5:a0:
b8:5b:67:a7:70:f2:67:73:c9:88:8c:45:b5:26:81:d3:15:32:
0e:eb:a5:57:c2:ba:3a:de:26:f2:62:d3:d2:11:68:2c:94:ce:
f2:d2:e2:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnHxdgC1QmEWuzWZidc567zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMDMxNzYwMmZiMGNhYTNhNTEwMDY4YmQ5ODlkNDZkYWUz
ODRkZDIwHhcNMjUxMDA5MDcwMDU1WhcNMjUxMDEwMDcwMDU1WjAzMTEwLwYDVQQD
Eyg2YjhmNGI4YjMxZGU5ZTk5ZWY1OTM4MjMyNzk2YmQ0NGYwMzM2MjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40IB3MuKpu0KvXAAn5Fdaw2EXf/3
/+MtvRMYZAbasjsfdKX2F/WaHqj9i5IRWo/DDUlX7NUao7hWtiaIMDWdVD9mYFI9
ZqUL73Fb3vNuRpMFSpSjVVjg8OzqfnTMmlzDcFa4rMaEJYpdqc4uJRcKtl+JCzrs
Pw3fnnTMU1q8Re6hi/TvtlAXwtB5p5AV/PLHdNWJG4OG+HE9IX3QW82Ym97AQCXc
a3qH6whjCPK5904aG0nKDrD2SG0vrbyTGSMI9W9DrtwQtw4l+IcLs8GolBTpkmGH
ndOIkAfMCtDJ7nR7BN7o3PNUB1glQfnnV7U7K7EJfAN4ZIsdxziIfAQ/yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGuPS4sx3p6Z71k4IyeWvUTwM2JUMB8GA1UdIwQY
MBaAFL4DF2AvsMqjpRAGi9mJ1G2uOE3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmdNWFlDLXd5cU9sRUFhTDJZblViYTQ0VGRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi82YmMxMTMtODlhYS00NWRlLTg4OTUt
MTRhYWVhMjA4ZjI1LzEvdmdNWFlDLXd5cU9sRUFhTDJZblViYTQ0VGRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi82YmMxMTMtODlhYS00NWRlLTg4OTUtMTRhYWVhMjA4ZjI1
LzEvdmdNWFlDLXd5cU9sRUFhTDJZblViYTQ0VGRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMAktcUug
roOewQRUDsHVtODqfft9VzLYhcEuEsqw13ANl/dZ8qQH9mqL6vYNWVn6krAwtgK6
u/DAdy7zqIbnFQzHMMen8h47bt99Xka0FVwfx3+lCUXXxGWsmH7fx2rXzjHrP9+B
fFS/lsI/fqYy2JVG+01BeeI8ajfg3nacxKMcS/02MzSMBxuoMQ1fVhLNIcdW1OnD
JCzfQxkVXPE7oQ2iIs2AyaO5y3S1tYM/AbnZZl2eruhYa/ylt2mHulXXyva0d+Mf
LKncdEwzKPM2QPFvNEJZ7vWguFtnp3DyZ3PJiIxFtSaB0xUyDuulV8K6Ot4m8mLT
0hFoLJTO8tLi6Q==
-----END CERTIFICATE-----
Generated at Thu Oct 9 11:13:31 2025 by rpki-client