Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
File: VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft (raw, json)
Hash identifier: 8TbviDkpYPmHrdu/xGyT+oQyWzlpV9XcdFCoNrIkpBw=
Subject key identifier: 53:C4:CD:7D:2D:D0:D3:00:F6:D2:30:9E:E1:9A:49:0B:C7:0F:20:E8
Authority key identifier: 54:6E:C2:17:E9:B1:29:31:6C:23:A6:FA:9F:9A:72:1F:10:C2:D9:5D
Certificate issuer: /CN=546ec217e9b129316c23a6fa9f9a721f10c2d95d
Certificate serial: 0198518CFF17B1AFE287588CBB020161D5F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
Manifest number: 0AE4
Signing time: Mon 28 Jul 2025 15:00:51 +0000
Manifest this update: Mon 28 Jul 2025 15:00:51 +0000
Manifest next update: Tue 29 Jul 2025 15:00:51 +0000
Files and hashes: 1: VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl (hash: TA9CoNSjb7L8A5csYGx2udP6fTdbv5I6Qs6FlHxKl7I=)
2: yzHNRQN_LLYnv0tR5UiHfwPC7uw.roa (hash: xz6DLj2fmkfFVGM6LYkLVTKbdiAh+qRJd+w+TzRoaH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:8c:ff:17:b1:af:e2:87:58:8c:bb:02:01:61:d5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546ec217e9b129316c23a6fa9f9a721f10c2d95d
Validity
Not Before: Jul 28 15:00:51 2025 GMT
Not After : Jul 29 15:00:51 2025 GMT
Subject: CN=53c4cd7d2dd0d300f6d2309ee19a490bc70f20e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:90:77:8d:b1:ff:8e:2c:54:27:86:10:79:bb:
48:4d:f5:9a:92:8a:ad:35:52:65:20:e7:79:4b:80:
af:f1:e5:2d:1c:b4:b4:a3:f5:f0:01:61:59:7d:56:
5c:e6:c7:98:a1:38:ab:f1:27:0a:49:a9:7d:20:3d:
54:2f:74:2a:f5:16:c3:5d:9e:fa:17:cc:55:45:0b:
a7:c1:12:6e:72:d3:88:2a:91:92:8a:89:f9:25:63:
58:a0:56:f8:62:55:ca:08:f4:85:17:d3:44:a5:4d:
90:13:45:a5:de:e3:17:27:b5:77:31:22:a4:d6:35:
6e:a9:ef:71:b7:ae:5d:bf:4f:aa:02:8f:4f:b4:69:
81:a3:22:d6:6f:82:0c:65:7f:1d:a6:c8:eb:16:f3:
76:b0:75:7d:f5:1d:45:09:d3:d6:52:b9:ae:1d:10:
44:c7:90:db:59:d2:83:cc:2d:ec:c1:1b:c8:18:48:
68:86:fc:7a:55:97:f6:ef:5d:79:28:7a:2b:f7:fd:
82:58:98:ff:0a:be:e3:ed:ec:7c:58:21:24:84:32:
c7:4f:f2:23:5c:55:3e:13:06:2d:5d:47:09:27:ae:
c2:7f:7d:3f:40:b3:57:0d:12:d5:e7:ef:fb:03:02:
a7:87:08:c8:98:a3:be:21:c3:e3:bd:be:34:e0:fc:
c9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C4:CD:7D:2D:D0:D3:00:F6:D2:30:9E:E1:9A:49:0B:C7:0F:20:E8
X509v3 Authority Key Identifier:
keyid:54:6E:C2:17:E9:B1:29:31:6C:23:A6:FA:9F:9A:72:1F:10:C2:D9:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a3:ef:6e:c6:30:6f:ce:51:17:5b:d9:f0:cf:2e:18:5e:46:
59:bf:7d:01:23:26:fd:a3:b4:84:29:27:6e:93:67:9c:15:34:
5d:8b:82:68:88:a2:49:dd:80:aa:cc:62:6e:56:02:ea:2d:69:
d0:6f:e1:d1:0f:c1:98:b3:e6:32:74:09:0d:35:ea:f2:d6:a1:
17:82:6b:a7:20:ee:ef:88:e8:fa:83:53:82:c5:77:ad:08:96:
8d:30:e0:e2:f5:71:ba:26:0b:05:17:fd:a8:18:e6:3f:1a:72:
5a:00:51:1e:44:85:96:09:8a:ee:36:aa:ae:18:f3:e9:a4:7e:
2b:93:b8:de:5c:7f:e5:65:7b:9d:ee:b5:24:f0:ff:2a:48:8d:
2a:19:5e:27:9f:6a:38:80:20:21:f3:ad:72:b5:39:45:94:3b:
68:97:b7:bb:9d:63:70:c5:4f:63:f0:82:b1:f9:a6:10:61:88:
17:d0:f2:58:1f:50:17:c5:31:7f:d3:b2:29:88:78:34:e0:15:
52:4e:98:ab:06:ce:42:fe:33:71:ad:a1:ba:6d:4b:d8:ee:84:
77:d7:bd:e0:c2:37:5e:17:47:84:ac:59:25:e4:e8:31:cc:cf:
84:65:49:66:7b:cf:ce:cd:37:39:8b:1b:b2:98:f9:d5:32:44:
db:85:c0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 23:22:51 2025 by rpki-client