Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
File: runVCGNpB2p412FjizKoqbjvcOc.mft (raw, json)
Hash identifier: wTzdzDGVJIE2neXfpmz3kgXkUqb0qWws2uJuGVFrhR4=
Subject key identifier: F6:C7:4A:FA:70:B0:FC:8C:66:E3:71:00:FC:CC:EA:23:58:32:77:B2
Authority key identifier: AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7
Certificate issuer: /CN=aee9d5086369076a78d761638b32a8a9b8ef70e7
Certificate serial: 019848C025D868D8DAFBD2ED43304200B15C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 22:00:08 +0000
Manifest this update: Sat 26 Jul 2025 22:00:08 +0000
Manifest next update: Sun 27 Jul 2025 22:00:08 +0000
Files and hashes: 1: TI9bfzfYT_e9UXoNSSRvZ0SIvco.roa (hash: ysZXRJJDaCEwr01HXDnbPPBij8sh3z42AGc9cvU+Xhg=)
2: runVCGNpB2p412FjizKoqbjvcOc.crl (hash: Mc88mVRWE3rN+B3TsEpu1dOURQjpCyB5euf9XkTyzA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:25:d8:68:d8:da:fb:d2:ed:43:30:42:00:b1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee9d5086369076a78d761638b32a8a9b8ef70e7
Validity
Not Before: Jul 26 22:00:08 2025 GMT
Not After : Jul 27 22:00:08 2025 GMT
Subject: CN=f6c74afa70b0fc8c66e37100fcccea23583277b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:33:bf:c7:41:57:53:e6:27:c9:db:5d:84:24:
aa:dc:e8:cd:f0:88:d5:89:4d:d9:8c:f9:85:82:58:
b2:8d:88:d5:dc:0b:b4:5e:dd:6d:2f:9c:7e:cb:0d:
59:92:e9:bf:96:cf:85:35:f1:2b:d9:ec:c5:2d:ac:
d6:46:17:89:f3:30:4c:83:08:c7:9f:61:80:d0:dc:
0f:81:ab:29:00:22:c4:95:00:fa:13:81:4d:0d:fa:
8b:7b:44:6a:cc:b1:c3:52:07:9e:89:ab:b6:77:2e:
8c:d3:0c:f4:b9:65:4c:dd:e9:0d:58:d2:7d:26:95:
97:9b:dc:fd:8c:05:a3:97:85:38:51:25:16:a1:9c:
3f:8d:f3:0f:25:55:78:48:1c:37:13:ac:b2:72:eb:
5e:ac:e1:7a:e5:14:81:66:d3:07:e4:c9:ac:fd:4b:
5c:c3:22:08:7c:85:e1:a1:b1:9a:f4:ff:a7:fa:8d:
82:9a:22:e5:6e:d3:09:99:3f:9d:1c:b3:d0:fa:65:
e2:90:f5:d8:fa:9f:e7:7a:ca:d3:53:7f:d5:62:57:
8f:df:14:fe:44:55:25:59:8c:3b:01:df:31:ce:3e:
78:60:06:a4:64:dd:0a:f0:91:de:ef:40:99:83:ef:
8f:ef:fa:a2:cb:55:11:4f:84:76:5c:be:29:a6:f8:
b4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C7:4A:FA:70:B0:FC:8C:66:E3:71:00:FC:CC:EA:23:58:32:77:B2
X509v3 Authority Key Identifier:
keyid:AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:12:cf:6e:10:96:35:de:2b:5e:39:bf:a9:cc:05:6e:40:58:
52:c8:89:27:7d:93:ca:62:9a:77:e6:aa:22:5a:e6:54:97:65:
38:b7:3d:24:18:0f:20:d7:82:51:24:e2:a4:27:64:4b:c1:29:
5c:5b:5f:90:82:60:ae:c8:92:36:1c:bc:8e:3e:46:d3:93:8b:
64:ea:84:3c:c1:95:d3:70:46:00:ac:b1:98:48:76:4f:b8:56:
79:22:3e:88:64:69:62:c7:87:13:e1:82:b7:86:8d:61:fb:ad:
56:32:68:d4:5d:5a:47:5a:1e:e5:a7:f3:5e:20:b0:ec:15:6d:
cf:4f:49:8b:e3:bb:76:bc:32:a1:04:21:94:b7:ee:c5:93:73:
28:9a:04:fa:db:4e:1b:d3:9a:13:10:6a:6d:99:4e:49:81:6d:
79:e1:f3:95:c0:f7:6c:db:7f:1d:21:8f:14:90:4a:1f:72:c6:
da:e2:99:47:b3:c4:e0:d9:f2:aa:a4:9c:7d:e0:ad:42:f9:3b:
4a:fb:0d:a5:da:0e:4c:35:48:f3:e4:39:97:e0:13:8a:d0:b6:
3b:ea:7f:cf:a6:1d:ce:d9:ea:91:b1:e6:42:58:7a:17:90:00:
b9:e3:44:82:21:d1:67:01:62:17:b9:ef:b5:0d:21:67:1a:4d:
ff:54:e3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:16:23 2025 by rpki-client