Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
File: VG3jJt6VIr0pa-1II4XJdpJY2PE.mft (raw, json)
Hash identifier: UN+8qJaixQhQ+YB1JtHONF2XX5Qvt89gWWBFLX1z3RM=
Subject key identifier: 1D:32:3B:81:6A:5A:B6:B4:21:7D:D3:1B:1B:09:EA:1C:51:1E:E6:9E
Authority key identifier: 54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1
Certificate issuer: /CN=546de326de9522bd296bed482385c9769258d8f1
Certificate serial: 01984B54B20B2474052CF5144E656BC86F5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
Manifest number: 0CE9
Signing time: Sun 27 Jul 2025 10:01:38 +0000
Manifest this update: Sun 27 Jul 2025 10:01:38 +0000
Manifest next update: Mon 28 Jul 2025 10:01:38 +0000
Files and hashes: 1: VG3jJt6VIr0pa-1II4XJdpJY2PE.crl (hash: oExiUyvnK+7RLDWQn/j0hgBsM2xkMOUL9uTCtktqrRg=)
2: XqfeZQF_1MV97o_zjJHjyzS8MaA.roa (hash: 7t9vzZ6FV6EcfJzjLHhMVS7Ff0/+2ubtRR3JHX0+dlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:b2:0b:24:74:05:2c:f5:14:4e:65:6b:c8:6f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546de326de9522bd296bed482385c9769258d8f1
Validity
Not Before: Jul 27 10:01:38 2025 GMT
Not After : Jul 28 10:01:38 2025 GMT
Subject: CN=1d323b816a5ab6b4217dd31b1b09ea1c511ee69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1f:06:08:b0:5e:52:6d:0e:ff:2a:da:77:6d:
9a:57:fa:3d:21:e3:b5:83:a6:10:b0:b9:7b:50:41:
2c:40:81:b1:b9:7e:12:9e:1c:15:b6:67:b7:57:8d:
e8:12:99:71:61:79:e8:0f:0a:be:b5:34:fc:e0:b8:
b8:17:af:64:37:43:b2:20:c0:af:53:15:ae:40:71:
6c:82:63:63:cf:13:11:0a:a0:ca:a5:ab:e6:a7:28:
48:47:8f:f6:c9:fc:99:47:e0:c1:6e:f0:39:0a:5a:
b8:3c:e0:7a:5c:71:78:ce:1f:f3:f1:f6:fa:8a:2e:
34:a9:f7:65:48:bf:67:46:a7:ff:17:8d:ea:10:94:
ed:28:2b:71:82:c3:07:91:50:af:5f:d5:61:fe:0f:
f4:bb:a5:e1:bc:c6:76:ed:5a:9b:35:5c:b5:4c:dd:
4c:df:ef:ec:6f:4a:36:ad:e9:f4:ce:3a:5c:ad:48:
6f:85:98:50:a1:49:52:95:ee:35:17:03:7c:99:d6:
a1:c0:4f:47:06:de:86:1c:66:45:8d:16:3f:4c:08:
8d:91:3e:8a:cc:a9:2e:22:b1:c5:ef:fa:89:d6:1c:
67:e8:cd:2d:4d:5b:97:0e:b2:f4:f2:0f:86:88:0e:
2d:fa:9e:92:50:8f:4a:31:b9:61:1c:ba:ac:c4:97:
6b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:32:3B:81:6A:5A:B6:B4:21:7D:D3:1B:1B:09:EA:1C:51:1E:E6:9E
X509v3 Authority Key Identifier:
keyid:54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:59:83:72:19:7e:87:40:a5:c9:91:4e:f4:4e:43:ce:2b:e2:
11:1b:63:46:09:54:91:30:10:c6:d7:dd:b4:a6:ca:6f:27:f9:
bf:6c:75:bf:e6:03:8e:5a:c2:b6:47:17:ed:b5:c9:22:db:37:
26:9b:51:78:66:96:62:2c:de:a5:80:c0:1f:55:25:02:c4:9e:
c3:48:59:23:57:6c:47:a6:76:0e:c0:aa:df:c4:53:74:90:3e:
6f:e8:c3:c1:3b:c6:52:47:d0:47:cd:42:b2:7e:1d:e3:bc:4e:
be:79:1b:d0:a8:2c:15:48:ba:f6:16:c5:23:f0:be:6b:be:01:
36:e2:62:d3:f5:dc:1f:ed:5e:bd:03:e1:40:c7:ab:55:82:4e:
82:bc:f7:d2:5b:26:8d:0b:44:eb:b8:9e:35:7e:a6:fd:d3:f5:
7c:ae:b2:89:5a:89:61:14:af:6b:19:21:c3:11:3a:71:d3:f1:
d0:ed:f1:9a:0d:d8:0c:da:d1:63:b9:4c:32:44:12:e8:56:b4:
a5:4a:be:56:0c:26:a4:9b:1f:e5:a6:d6:3b:a1:cb:dc:6e:75:
e0:0c:10:9b:9a:7b:42:cb:13:d1:1d:66:d3:72:ec:0f:5c:fd:
df:1b:12:af:b5:0e:23:09:70:55:5a:d9:19:a0:d8:c2:3b:d5:
81:20:f2:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLVLILJHQFLPUUTmVryG9bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NmRlMzI2ZGU5NTIyYmQyOTZiZWQ0ODIzODVjOTc2OTI1
OGQ4ZjEwHhcNMjUwNzI3MTAwMTM4WhcNMjUwNzI4MTAwMTM4WjAzMTEwLwYDVQQD
EygxZDMyM2I4MTZhNWFiNmI0MjE3ZGQzMWIxYjA5ZWExYzUxMWVlNjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR8GCLBeUm0O/yrad22aV/o9IeO1
g6YQsLl7UEEsQIGxuX4SnhwVtme3V43oEplxYXnoDwq+tTT84Li4F69kN0OyIMCv
UxWuQHFsgmNjzxMRCqDKpavmpyhIR4/2yfyZR+DBbvA5Clq4POB6XHF4zh/z8fb6
ii40qfdlSL9nRqf/F43qEJTtKCtxgsMHkVCvX9Vh/g/0u6XhvMZ27VqbNVy1TN1M
3+/sb0o2ren0zjpcrUhvhZhQoUlSle41FwN8mdahwE9HBt6GHGZFjRY/TAiNkT6K
zKkuIrHF7/qJ1hxn6M0tTVuXDrL08g+GiA4t+p6SUI9KMblhHLqsxJdrFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0yO4FqWra0IX3TGxsJ6hxRHuaeMB8GA1UdIwQY
MBaAFFRt4ybelSK9KWvtSCOFyXaSWNjxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkczakp0NlZJcjBwYS0xSUk0WEpkcEpZMlBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8xYmFkN2UtY2Y1Yy00ZDFjLTg2NGEt
NDkzNzYwMWM4ZmVhLzEvVkczakp0NlZJcjBwYS0xSUk0WEpkcEpZMlBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8xYmFkN2UtY2Y1Yy00ZDFjLTg2NGEtNDkzNzYwMWM4ZmVh
LzEvVkczakp0NlZJcjBwYS0xSUk0WEpkcEpZMlBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1mDchl+
h0ClyZFO9E5DziviERtjRglUkTAQxtfdtKbKbyf5v2x1v+YDjlrCtkcX7bXJIts3
JptReGaWYizepYDAH1UlAsSew0hZI1dsR6Z2DsCq38RTdJA+b+jDwTvGUkfQR81C
sn4d47xOvnkb0KgsFUi69hbFI/C+a74BNuJi0/XcH+1evQPhQMerVYJOgrz30lsm
jQtE67ieNX6m/dP1fK6yiVqJYRSvaxkhwxE6cdPx0O3xmg3YDNrRY7lMMkQS6Fa0
pUq+VgwmpJsf5abWO6HL3G514AwQm5p7QssT0R1m03LsD1z93xsSr7UOIwlwVVrZ
GaDYwjvVgSDyIQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 18:37:02 2025 by rpki-client