Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
File: VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft (raw, json)
Hash identifier: 4gOB3gvicHro4sDHGg84ZUk9e4BpAAqxJJS9kAe5fAM=
Subject key identifier: D8:0C:79:B7:1E:58:95:DA:85:6D:F2:1A:86:10:77:A7:D3:D2:A1:B4
Authority key identifier: 54:61:75:F2:E8:29:B4:66:57:59:6D:D8:F3:2E:1F:93:EC:BE:0A:24
Certificate issuer: /CN=546175f2e829b46657596dd8f32e1f93ecbe0a24
Certificate serial: 019923A073205E7F64E5A81F1C8AF0A9DB2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 10:02:21 +0000
Manifest this update: Sun 07 Sep 2025 10:02:21 +0000
Manifest next update: Mon 08 Sep 2025 10:02:21 +0000
Files and hashes: 1: VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl (hash: nC+sXuteysSVEiypViT2kPSM6chJmDzi+GHvdcGfMIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:73:20:5e:7f:64:e5:a8:1f:1c:8a:f0:a9:db:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546175f2e829b46657596dd8f32e1f93ecbe0a24
Validity
Not Before: Sep 7 10:02:21 2025 GMT
Not After : Sep 8 10:02:21 2025 GMT
Subject: CN=d80c79b71e5895da856df21a861077a7d3d2a1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cd:a8:a7:d9:77:00:a9:60:aa:32:64:25:ff:
22:56:f0:fe:fc:ca:8d:aa:e9:ff:2a:97:9e:a6:fe:
0f:58:fc:97:ea:3e:80:c5:d2:10:d2:fc:d5:2d:9e:
10:16:09:8b:e1:9d:ff:37:09:7f:51:eb:73:2f:4c:
fb:14:ce:0b:93:b5:c9:2d:ff:93:96:50:1a:08:64:
2e:f8:d8:4d:c1:26:07:68:80:5b:ec:33:3d:da:3e:
4d:65:9a:ab:94:0b:40:69:ea:08:00:48:6b:9a:ab:
d4:e4:7c:bc:80:6f:b8:6e:d1:d7:de:9c:00:8b:4c:
a5:3b:3a:8f:d2:97:ca:78:be:fb:cb:dd:c7:fe:be:
f1:be:d1:54:9b:74:ff:0b:44:11:b8:43:90:fb:d2:
f0:18:13:5c:cc:58:75:ad:93:84:b4:6e:c3:94:43:
f9:5a:4d:dd:78:52:49:73:0c:c7:95:bb:b4:6e:ae:
2e:20:b4:05:03:8e:0e:76:0a:9c:5a:bb:01:3a:6b:
65:f1:4d:91:13:de:9a:89:1d:15:d7:f7:9e:3b:ad:
32:25:d4:c9:28:17:6d:d9:89:17:a9:79:58:fd:66:
05:5c:5d:66:84:c0:8e:d0:da:f1:f3:57:60:cb:21:
01:c2:b2:6b:39:4d:31:2c:3e:38:7e:4f:7c:ee:dc:
c4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0C:79:B7:1E:58:95:DA:85:6D:F2:1A:86:10:77:A7:D3:D2:A1:B4
X509v3 Authority Key Identifier:
keyid:54:61:75:F2:E8:29:B4:66:57:59:6D:D8:F3:2E:1F:93:EC:BE:0A:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:3b:9a:77:54:9f:48:ff:71:36:38:0b:67:c6:b5:10:23:38:
ee:16:64:03:ce:0f:cf:87:9e:21:af:1c:af:72:59:7d:42:42:
a2:ba:d0:1c:24:02:e0:b5:ab:70:06:aa:72:61:76:7d:53:93:
39:6a:f0:62:f1:96:85:6a:b2:02:06:2e:ea:92:a4:02:ef:6c:
85:bf:11:23:b2:84:ba:43:e6:d5:32:e7:47:e7:6a:a2:fa:cf:
ad:2a:10:45:bf:c7:02:2d:7e:27:ed:50:cd:3a:c3:bd:26:6d:
80:38:76:96:55:bf:31:38:a2:f4:4f:bf:e9:41:9c:34:13:e8:
46:98:7a:3f:dc:05:55:22:6a:20:1b:db:19:d1:dc:26:48:9d:
7a:57:68:bf:ba:a7:83:07:fa:6a:cd:75:7a:08:1a:6a:54:2e:
33:73:90:8f:b7:12:da:fc:9c:2e:8f:a5:01:43:04:66:07:d3:
68:d0:7d:3b:8f:71:c0:56:99:f4:0b:8f:ce:9f:37:c4:14:d4:
fd:96:0d:1a:da:40:c7:69:46:51:65:16:39:a5:db:87:1a:d2:
2e:d7:2d:df:c1:34:de:d3:af:9e:f7:ba:32:59:73:64:66:92:
a8:ac:4e:42:c6:14:15:41:a8:b7:a5:a6:c0:5b:fc:9a:25:d1:
10:b8:1b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:54 2025 by rpki-client