Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft
File: VGLTx682xAGqlwlNPyOJ14ddFOw.mft (raw, json)
Hash identifier: bkTPyffDTPtsuSAoKE/dsKPusZ1o5Wzb3JQwwJ7Jd0A=
Subject key identifier: 29:DD:0E:5C:13:09:8C:27:8C:F3:21:F4:A6:C4:62:14:28:82:B5:90
Authority key identifier: 54:62:D3:C7:AF:36:C4:01:AA:97:09:4D:3F:23:89:D7:87:5D:14:EC
Certificate issuer: /CN=5462d3c7af36c401aa97094d3f2389d7875d14ec
Certificate serial: 019A72CAAA70AAB706C7C29C0BD961837F21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGLTx682xAGqlwlNPyOJ14ddFOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft
Manifest number: 0426
Signing time: Tue 11 Nov 2025 12:01:15 +0000
Manifest this update: Tue 11 Nov 2025 12:01:15 +0000
Manifest next update: Wed 12 Nov 2025 12:01:15 +0000
Files and hashes: 1: 1fACf-8RstZUTJjfnQCu3bC_4EM.roa (hash: y+Jyhi+AHKXvf5OSPohhDVxGrHaa58eOxr00zi1ZVhg=)
2: VGLTx682xAGqlwlNPyOJ14ddFOw.crl (hash: WQt5ylVxO7/hPxCRG0K031b5i3vqOW/AhPSktmBWaio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGLTx682xAGqlwlNPyOJ14ddFOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:aa:70:aa:b7:06:c7:c2:9c:0b:d9:61:83:7f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5462d3c7af36c401aa97094d3f2389d7875d14ec
Validity
Not Before: Nov 11 12:01:15 2025 GMT
Not After : Nov 12 12:01:15 2025 GMT
Subject: CN=29dd0e5c13098c278cf321f4a6c462142882b590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9e:af:fb:57:5a:0b:e0:5d:6e:d6:0d:98:b5:
9f:bd:81:20:95:3b:96:ec:b1:5e:5e:33:d9:47:34:
08:47:ec:95:98:dc:39:8a:70:c9:79:d8:97:66:58:
8a:57:97:9e:fc:74:3c:2b:b6:7c:1c:a6:19:e5:7c:
f9:b5:eb:df:8d:e2:7a:a1:83:7c:3b:9c:ef:18:27:
4e:22:cb:c6:02:d3:c1:81:8a:22:e8:82:8c:08:28:
5a:9d:e6:f3:de:bc:ce:41:c1:8e:ba:52:ce:2e:24:
14:bf:2d:5a:c1:fb:86:74:04:ce:ca:69:50:2d:2e:
0d:cb:5d:96:e6:7a:a6:49:25:80:aa:8f:b4:3d:bb:
58:0c:f1:8d:93:60:7b:60:6d:15:cb:3e:dc:a6:12:
c8:77:e3:55:c8:14:55:b7:11:b9:98:c9:7d:1a:fb:
7e:68:cb:73:9c:4b:6d:ed:ef:ec:aa:20:d8:a8:21:
00:70:be:f8:4d:fd:bd:62:19:02:d7:63:48:f9:d8:
40:89:4e:00:9b:04:92:e5:e0:3a:f2:07:6b:dc:d6:
3c:d9:b7:91:d5:10:2d:34:9d:cf:80:a8:85:af:3c:
68:a6:fe:5a:9f:bf:cb:7a:d8:20:07:96:3a:c6:b8:
81:aa:14:6b:24:d0:0f:ac:9a:b0:e4:be:09:84:aa:
9d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DD:0E:5C:13:09:8C:27:8C:F3:21:F4:A6:C4:62:14:28:82:B5:90
X509v3 Authority Key Identifier:
keyid:54:62:D3:C7:AF:36:C4:01:AA:97:09:4D:3F:23:89:D7:87:5D:14:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGLTx682xAGqlwlNPyOJ14ddFOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:05:81:0d:29:68:f0:93:8a:5a:76:b1:fb:e8:a4:d3:a7:e1:
d8:3d:65:96:aa:72:ee:58:ad:49:01:cb:15:9a:f1:3a:68:8b:
51:82:5f:2c:b9:0d:d2:d8:2e:00:5c:03:7d:fc:cd:83:cf:0b:
dc:60:a5:24:e2:60:11:cf:11:67:a9:ce:63:01:2f:d8:28:7a:
00:bd:d8:45:18:b1:e1:3c:d2:39:10:85:a4:3f:26:7e:77:73:
8e:11:a2:d2:d9:e9:e0:d5:bb:87:b5:1c:0b:6f:b5:c1:97:ea:
4a:b3:a6:1a:e8:05:9a:54:2e:f8:c5:aa:b7:5b:3e:4b:bb:18:
82:2a:f0:6c:67:f4:03:37:ae:bf:3d:a6:3b:df:88:93:e3:f4:
d5:2e:60:b8:d7:be:4b:86:dc:b0:49:82:5f:50:80:40:62:a3:
99:3b:36:e6:da:c9:6d:ed:6b:e9:6b:82:da:99:45:50:ed:b6:
d6:04:fd:49:35:cb:ce:f0:90:62:f1:8e:54:10:da:ac:cc:a4:
f0:a5:d6:1c:49:c8:1b:7d:c1:d2:03:be:90:99:f5:f2:0b:e3:
ec:cd:a2:64:84:67:35:c0:9d:11:02:4c:89:41:83:83:63:d7:
68:ef:d6:97:cf:5e:d5:36:d5:0c:f1:46:d1:cc:ce:74:38:a7:
a8:50:f7:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyyqpwqrcGx8KcC9lhg38hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjJkM2M3YWYzNmM0MDFhYTk3MDk0ZDNmMjM4OWQ3ODc1
ZDE0ZWMwHhcNMjUxMTExMTIwMTE1WhcNMjUxMTEyMTIwMTE1WjAzMTEwLwYDVQQD
EygyOWRkMGU1YzEzMDk4YzI3OGNmMzIxZjRhNmM0NjIxNDI4ODJiNTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv56v+1daC+BdbtYNmLWfvYEglTuW
7LFeXjPZRzQIR+yVmNw5inDJediXZliKV5ee/HQ8K7Z8HKYZ5Xz5tevfjeJ6oYN8
O5zvGCdOIsvGAtPBgYoi6IKMCChanebz3rzOQcGOulLOLiQUvy1awfuGdATOymlQ
LS4Ny12W5nqmSSWAqo+0PbtYDPGNk2B7YG0Vyz7cphLId+NVyBRVtxG5mMl9Gvt+
aMtznEtt7e/sqiDYqCEAcL74Tf29YhkC12NI+dhAiU4AmwSS5eA68gdr3NY82beR
1RAtNJ3PgKiFrzxopv5an7/LetggB5Y6xriBqhRrJNAPrJqw5L4JhKqdDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCndDlwTCYwnjPMh9KbEYhQogrWQMB8GA1UdIwQY
MBaAFFRi08evNsQBqpcJTT8jideHXRTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdMVHg2ODJ4QUdxbHdsTlB5T0oxNGRkRk93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xM2MwMmUtY2NhMC00ZGNkLTkxMjUt
OGIzMTUyMjk3NTdkLzEvVkdMVHg2ODJ4QUdxbHdsTlB5T0oxNGRkRk93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8xM2MwMmUtY2NhMC00ZGNkLTkxMjUtOGIzMTUyMjk3NTdk
LzEvVkdMVHg2ODJ4QUdxbHdsTlB5T0oxNGRkRk93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMAWBDSlo
8JOKWnax++ik06fh2D1llqpy7litSQHLFZrxOmiLUYJfLLkN0tguAFwDffzNg88L
3GClJOJgEc8RZ6nOYwEv2Ch6AL3YRRix4TzSORCFpD8mfndzjhGi0tnp4NW7h7Uc
C2+1wZfqSrOmGugFmlQu+MWqt1s+S7sYgirwbGf0Azeuvz2mO9+Ik+P01S5guNe+
S4bcsEmCX1CAQGKjmTs25trJbe1r6WuC2plFUO221gT9STXLzvCQYvGOVBDarMyk
8KXWHEnIG33B0gO+kJn18gvj7M2iZIRnNcCdEQJMiUGDg2PXaO/Wl89e1TbVDPFG
0czOdDinqFD38w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:17 2025 by rpki-client