Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.mft
File: VEGU-CSXc9PNb7ZUsjnedpxC6GQ.mft (raw, json)
Hash identifier: E357HfECsVb4UFex3sepZoI9+hzj2ta+UHzM7Lb5cDw=
Subject key identifier: D6:B9:45:4B:71:8D:95:AC:07:15:74:D0:23:EB:E3:C8:CA:84:02:06
Authority key identifier: 54:41:94:F8:24:97:73:D3:CD:6F:B6:54:B2:39:DE:76:9C:42:E8:64
Certificate issuer: /CN=544194f8249773d3cd6fb654b239de769c42e864
Certificate serial: 0199221F38DDFAB4CF93925FA229F465A27E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 03:01:35 +0000
Manifest this update: Sun 07 Sep 2025 03:01:35 +0000
Manifest next update: Mon 08 Sep 2025 03:01:35 +0000
Files and hashes: 1: VEGU-CSXc9PNb7ZUsjnedpxC6GQ.crl (hash: jIpPcsLWdjuGwDG2wSgiGGC1DYvU/aAs18IgBfqiNLg=)
2: wFRK2gFO2y-GioRIpDn5lp85ecQ.roa (hash: A8Q7B434lxyY0QPj8csraRvBG53nBnhwRwO+e87bSWA=)
3: xY9MZyofE4_6jiY0oDDhMJyfHtw.roa (hash: SNap0h28tjMNg/zc5gl63p8JrVkT7E4Wu94Pvosrm/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:38:dd:fa:b4:cf:93:92:5f:a2:29:f4:65:a2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544194f8249773d3cd6fb654b239de769c42e864
Validity
Not Before: Sep 7 03:01:35 2025 GMT
Not After : Sep 8 03:01:35 2025 GMT
Subject: CN=d6b9454b718d95ac071574d023ebe3c8ca840206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5c:0e:17:48:7c:65:23:f2:3d:ca:11:7f:9e:
78:32:88:9e:9e:ae:f9:0d:00:fe:4f:86:cb:79:91:
1b:b3:ac:a4:9c:69:9c:25:2a:4e:ea:a9:3d:b3:bc:
d1:f5:0a:98:e7:63:38:2b:86:ee:8e:e5:e5:9c:bf:
e9:09:3c:64:e7:41:c2:e0:eb:6d:7a:57:39:54:2c:
04:0d:82:b4:36:03:fe:55:6b:8e:67:dc:7b:c4:16:
09:65:df:00:52:4f:d1:ee:2f:32:0a:f6:a0:8e:5e:
23:ef:2f:2f:cd:29:51:72:6f:c0:57:34:c2:9f:73:
22:03:e5:cd:d2:b1:9d:09:1d:46:5e:10:28:24:77:
ca:67:a5:87:62:8f:dd:bf:c3:f3:f7:f8:33:61:86:
06:c4:39:fb:ee:31:2d:1c:d3:b4:7b:cc:f6:51:00:
eb:b9:0e:14:3f:e5:c9:85:be:b3:7a:50:7c:d6:9b:
6d:e5:68:e9:0b:96:b2:8b:0d:14:16:57:e2:4f:05:
5f:95:fc:0d:e8:36:c9:4d:e5:50:9b:5b:5f:72:b2:
c6:94:0b:ea:ef:47:82:a9:82:33:d7:5d:18:ce:70:
bd:3d:1a:f9:38:37:b3:11:a4:23:10:5d:d1:cd:b8:
e1:c6:52:21:6b:80:82:b2:a1:7b:4d:7c:4b:fe:86:
50:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B9:45:4B:71:8D:95:AC:07:15:74:D0:23:EB:E3:C8:CA:84:02:06
X509v3 Authority Key Identifier:
keyid:54:41:94:F8:24:97:73:D3:CD:6F:B6:54:B2:39:DE:76:9C:42:E8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:90:92:82:f0:8a:fc:c0:78:eb:1e:0a:f4:5a:7a:18:23:4e:
26:fb:bd:b6:dc:b3:4c:ab:4d:ed:9d:42:1b:6f:7f:e0:ba:0f:
f3:03:3d:63:3c:be:50:3b:de:7a:0a:c8:31:b0:a6:00:0c:76:
99:e9:73:4e:d2:23:c4:54:0e:48:05:0a:d3:94:58:34:37:22:
54:c3:e8:d7:df:66:6a:19:a0:2d:d7:75:36:5c:58:6e:81:70:
a3:57:eb:82:a1:53:1e:b8:38:bf:47:e9:b0:c1:e9:cd:43:25:
e6:ad:9a:78:6c:1f:cb:74:2f:cc:d0:e0:1c:c5:07:b4:30:ac:
17:ad:19:78:c7:f0:d1:19:6a:e6:20:82:26:ba:74:51:da:fc:
58:f8:64:75:48:71:f1:6f:bb:d6:e7:9d:b0:e0:c2:70:09:d8:
86:69:11:38:53:c8:7e:e5:6a:df:f8:37:2c:ba:72:d5:5c:11:
f2:3b:4e:08:64:2f:aa:bc:db:c0:ea:29:70:60:54:f4:ee:70:
37:a8:74:89:91:e2:d6:de:28:6d:2c:54:b9:8a:7f:f3:10:4b:
de:91:63:51:ce:cd:21:9a:2c:89:e0:ca:af:af:8b:c9:36:9c:
13:cf:7c:e7:08:47:7e:98:3d:32:f1:97:a8:3b:80:f7:fc:d1:
21:15:43:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:27 2025 by rpki-client