Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
File: RgVeggAswL17mYfl1zZUIOr9SXA.mft (raw, json)
Hash identifier: uW2eWb/AqQHRyefpL3FagGPAesJbe/2aOe35kF0Xl34=
Subject key identifier: 2A:18:27:AA:1B:19:75:43:36:E4:73:F5:87:58:C2:99:E0:68:32:87
Authority key identifier: 46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70
Certificate issuer: /CN=46055e82002cc0bd7b9987e5d7365420eafd4970
Certificate serial: 01984A09F78CF01853EDD6708F776E20C13D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 04:00:23 +0000
Manifest this update: Sun 27 Jul 2025 04:00:23 +0000
Manifest next update: Mon 28 Jul 2025 04:00:23 +0000
Files and hashes: 1: RgVeggAswL17mYfl1zZUIOr9SXA.crl (hash: ll7m/S3jO5CDbSRn2OgAzteSPuFUI3f8UpsX2CbB+vA=)
2: VJnm1AkHiE7SuesA5idFH1REQdA.roa (hash: 1LlBKB7vOsPJ8FvhzoxofY1Pd+poAd3OYPCwf4CTRNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:f7:8c:f0:18:53:ed:d6:70:8f:77:6e:20:c1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46055e82002cc0bd7b9987e5d7365420eafd4970
Validity
Not Before: Jul 27 04:00:23 2025 GMT
Not After : Jul 28 04:00:23 2025 GMT
Subject: CN=2a1827aa1b19754336e473f58758c299e0683287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bf:7b:f4:1a:74:99:f4:a6:06:39:48:e4:1d:
be:a1:f1:64:f6:1e:f3:ee:9a:48:3c:5e:08:d9:4f:
3a:97:df:c2:7f:38:2d:f8:18:10:32:d0:2c:3b:70:
6c:d6:c9:b0:fc:2e:93:71:ef:ce:02:e9:a0:59:59:
8a:3f:0e:77:3e:db:51:77:6c:3a:fb:3c:01:f6:dc:
ab:7c:d4:7c:58:f7:48:33:d3:b0:2b:9d:ed:15:d6:
d1:41:0b:9f:1f:d8:04:1a:bf:f6:47:ae:f6:88:ad:
98:93:29:52:75:2d:5f:af:78:79:db:24:2d:51:2e:
5b:f3:63:9a:e4:ac:e1:db:65:4c:0f:5b:fc:67:a5:
63:1b:5a:39:41:47:45:0a:2b:d0:6e:0c:ca:12:80:
e4:7f:ae:5e:70:78:75:eb:3f:b8:df:b6:52:de:db:
2d:7e:b1:21:7e:07:33:a2:40:83:8d:9e:98:21:25:
7f:21:ad:3f:d6:44:60:0d:2b:c1:ca:97:02:0c:d1:
d6:60:ef:a3:c7:59:2d:d4:3a:14:28:60:25:55:a8:
3c:75:da:b0:e1:b2:5b:43:02:56:2b:0c:b9:19:86:
e6:c7:73:73:bc:9c:47:10:44:05:6a:a6:99:2d:8c:
9c:07:62:f5:1d:63:d0:5a:1b:d5:69:6c:4b:7e:56:
c7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:18:27:AA:1B:19:75:43:36:E4:73:F5:87:58:C2:99:E0:68:32:87
X509v3 Authority Key Identifier:
keyid:46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b1:9c:e9:08:5f:20:63:2c:4f:d2:de:d2:2f:86:17:78:f5:
9f:32:65:36:da:0f:57:c4:37:4f:8d:56:3a:4d:a0:69:e5:42:
1a:63:ca:82:1f:3e:f6:d0:b0:c3:72:b4:02:35:df:c0:2f:e1:
7e:29:5f:2f:49:6d:89:88:7b:2b:c9:e6:03:57:1a:24:ee:b2:
b6:97:05:5e:08:18:2a:25:a1:9b:5f:25:d7:bb:52:be:eb:df:
bb:8e:a8:e3:a4:2a:d0:2c:e4:a1:94:3c:45:bd:61:e8:f9:28:
5f:7d:3a:b5:ac:91:10:31:0b:c4:52:b4:56:19:18:93:1e:90:
dc:8d:21:7b:24:26:1f:3c:44:a3:03:0b:b9:1e:36:26:33:61:
00:9f:70:22:68:b3:29:85:2e:3f:0f:f5:d9:91:59:91:d2:b6:
64:6e:28:38:dc:18:58:13:d5:ca:f9:e9:59:42:cb:75:bd:5a:
3e:6c:67:53:04:82:30:d2:db:d8:80:d8:5b:c0:f0:1e:bb:04:
ea:b2:0a:8d:d1:2d:e1:7e:a5:18:8c:55:a4:62:60:9a:62:f3:
81:91:25:42:b4:63:c9:37:55:08:46:50:6b:cc:e4:f3:ca:dd:
16:90:66:b3:78:1a:19:cf:08:d0:77:c8:4a:82:6d:5f:8c:68:
a2:65:04:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCfeM8BhT7dZwj3duIME9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MDU1ZTgyMDAyY2MwYmQ3Yjk5ODdlNWQ3MzY1NDIwZWFm
ZDQ5NzAwHhcNMjUwNzI3MDQwMDIzWhcNMjUwNzI4MDQwMDIzWjAzMTEwLwYDVQQD
EygyYTE4MjdhYTFiMTk3NTQzMzZlNDczZjU4NzU4YzI5OWUwNjgzMjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL979Bp0mfSmBjlI5B2+ofFk9h7z
7ppIPF4I2U86l9/Cfzgt+BgQMtAsO3Bs1smw/C6Tce/OAumgWVmKPw53PttRd2w6
+zwB9tyrfNR8WPdIM9OwK53tFdbRQQufH9gEGr/2R672iK2YkylSdS1fr3h52yQt
US5b82Oa5Kzh22VMD1v8Z6VjG1o5QUdFCivQbgzKEoDkf65ecHh16z+437ZS3tst
frEhfgczokCDjZ6YISV/Ia0/1kRgDSvBypcCDNHWYO+jx1kt1DoUKGAlVag8ddqw
4bJbQwJWKwy5GYbmx3NzvJxHEEQFaqaZLYycB2L1HWPQWhvVaWxLflbH1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCoYJ6obGXVDNuRz9YdYwpngaDKHMB8GA1UdIwQY
MBaAFEYFXoIALMC9e5mH5dc2VCDq/UlwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmdWZWdnQXN3TDE3bVlmbDF6WlVJT3I5U1hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80OTkyNGQtNzY5OS00YWY0LWFmZjkt
MjJhYTRmM2E3NjE1LzEvUmdWZWdnQXN3TDE3bVlmbDF6WlVJT3I5U1hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy80OTkyNGQtNzY5OS00YWY0LWFmZjktMjJhYTRmM2E3NjE1
LzEvUmdWZWdnQXN3TDE3bVlmbDF6WlVJT3I5U1hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLGc6Qhf
IGMsT9Le0i+GF3j1nzJlNtoPV8Q3T41WOk2gaeVCGmPKgh8+9tCww3K0AjXfwC/h
filfL0ltiYh7K8nmA1caJO6ytpcFXggYKiWhm18l17tSvuvfu46o46Qq0CzkoZQ8
Rb1h6PkoX306tayREDELxFK0VhkYkx6Q3I0heyQmHzxEowMLuR42JjNhAJ9wImiz
KYUuPw/12ZFZkdK2ZG4oONwYWBPVyvnpWULLdb1aPmxnUwSCMNLb2IDYW8DwHrsE
6rIKjdEt4X6lGIxVpGJgmmLzgZElQrRjyTdVCEZQa8zk88rdFpBms3gaGc8I0HfI
SoJtX4xoomUE/w==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:20:57 2025 by rpki-client