Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
File: vgeJVzbtkoYPMTUAioWBP5i718E.mft (raw, json)
Hash identifier: 8wXUiFSTZmuuP4Jilbsu6+zMH6LfLZkznkjodFUoMsE=
Subject key identifier: C1:AC:0B:FD:5D:E4:8A:81:67:8B:62:19:64:C7:62:76:B2:FF:99:8F
Authority key identifier: BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1
Certificate issuer: /CN=be07895736ed92860f3135008a85813f98bbd7c1
Certificate serial: 0198586B23921A693E5D590E20B371651CB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
Manifest number: 1608
Signing time: Tue 29 Jul 2025 23:01:12 +0000
Manifest this update: Tue 29 Jul 2025 23:01:12 +0000
Manifest next update: Wed 30 Jul 2025 23:01:12 +0000
Files and hashes: 1: vgeJVzbtkoYPMTUAioWBP5i718E.crl (hash: fz73afmGE5BVl9JSFfaMdvoz5dgvSeAi0yLHsmfvXr8=)
2: z0Q3v_uWGQRHW3DWSvSjjl8qG2A.roa (hash: K7V12/jav6q6nJdIsu+PPDA7RxS4tktOMqpojP9r5X8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:58:6b:23:92:1a:69:3e:5d:59:0e:20:b3:71:65:1c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be07895736ed92860f3135008a85813f98bbd7c1
Validity
Not Before: Jul 29 23:01:12 2025 GMT
Not After : Jul 30 23:01:12 2025 GMT
Subject: CN=c1ac0bfd5de48a81678b621964c76276b2ff998f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:58:4e:38:29:89:e6:53:c9:01:4d:ae:83:e4:
27:20:25:09:be:ca:3a:b3:87:58:1f:73:42:a6:2e:
a8:1d:b6:b1:22:00:6a:ef:9f:a4:76:06:02:73:bc:
b3:39:b9:c2:3c:c6:e8:dd:5c:80:a2:5b:ab:f1:fb:
bf:d9:23:ce:94:28:78:e8:b6:4f:06:5f:e6:19:cc:
5b:0b:05:74:40:19:3f:b3:51:64:f4:f9:4f:f0:bb:
94:56:a2:e3:96:05:a0:ca:1c:f8:a5:b5:76:a5:ba:
90:27:1f:d3:3c:f3:cb:94:e4:32:22:3e:e5:dd:a3:
76:9f:be:9b:c4:e2:3b:02:77:e3:d8:b4:1f:1e:a1:
39:6d:a6:43:fa:2e:84:85:28:e7:e9:50:3e:fd:45:
ba:54:97:ed:c3:18:be:1c:60:4a:63:35:4f:6f:d0:
3e:49:fe:34:c4:31:43:40:6b:cf:25:1c:7e:d4:8c:
25:b9:e5:ad:fa:f4:af:af:d3:63:35:23:f1:d0:34:
77:f4:ba:3e:c3:b4:da:9e:bc:31:6d:1a:d6:8e:a3:
57:42:15:60:de:d4:ae:5e:8d:e9:eb:6e:31:52:9b:
34:f5:55:b8:f4:5c:3c:3c:0c:f0:b1:f3:89:d7:4a:
5a:be:97:89:fd:f1:31:fd:72:bb:df:20:c1:8c:dd:
e5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AC:0B:FD:5D:E4:8A:81:67:8B:62:19:64:C7:62:76:B2:FF:99:8F
X509v3 Authority Key Identifier:
keyid:BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:46:40:ac:2a:81:b6:52:0e:35:df:62:2f:6b:22:6a:56:d1:
aa:2d:7e:aa:8e:39:60:f3:cc:e8:36:74:79:1b:5d:c8:28:16:
35:4f:14:ae:53:b3:22:89:5e:19:c7:95:64:0f:08:db:63:85:
51:a9:aa:89:5f:e1:17:30:66:d8:6c:7d:4a:0c:0a:b3:c4:8f:
41:31:4f:f0:13:c4:eb:36:c0:13:41:0d:97:97:09:48:10:44:
ff:5b:87:8e:01:10:7b:d4:42:33:88:af:ba:bb:62:4a:47:7e:
79:db:a1:a5:7e:7d:78:b1:49:21:9c:0c:e6:28:39:ff:ae:39:
26:8c:d6:6a:b2:64:16:aa:ee:89:ea:3a:e6:b8:0c:78:30:ae:
5e:d2:7e:64:a4:35:41:ed:81:eb:d1:54:8c:c9:4d:3f:dd:f5:
ae:f7:74:30:24:db:ab:3f:c7:fc:90:24:5d:e9:4f:5b:51:50:
e6:49:09:d2:cc:2c:a5:3c:a7:e5:e2:e4:97:b7:0d:0f:eb:75:
63:d6:33:10:bd:12:0e:2d:3a:6d:5f:0a:94:b6:a1:d8:84:a7:
46:a1:6e:69:6a:ae:5b:3d:2f:34:eb:7f:ca:3f:17:00:1b:f3:
87:f3:06:09:ff:2a:75:21:8b:88:f5:a8:21:52:60:17:ae:0b:
c1:26:46:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:23:57 2025 by rpki-client