Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.mft
File: VEGU-CSXc9PNb7ZUsjnedpxC6GQ.mft (raw, json)
Hash identifier: EW/YaZBzJBhCW56Nb8IBOmfPf7nYyt9/g8zb50vRp9w=
Subject key identifier: 46:A5:85:04:62:32:B9:26:A3:61:6C:55:F4:C9:FD:64:AA:62:FF:F7
Authority key identifier: 54:41:94:F8:24:97:73:D3:CD:6F:B6:54:B2:39:DE:76:9C:42:E8:64
Certificate issuer: /CN=544194f8249773d3cd6fb654b239de769c42e864
Certificate serial: 019A1B3DEBE62D5E11D14F309C4A6770CB12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.mft
Manifest number: 16F5
Signing time: Sat 25 Oct 2025 12:00:34 +0000
Manifest this update: Sat 25 Oct 2025 12:00:34 +0000
Manifest next update: Sun 26 Oct 2025 12:00:34 +0000
Files and hashes: 1: VEGU-CSXc9PNb7ZUsjnedpxC6GQ.crl (hash: 0nhckODz9n0vWk+g6BT9luEQlU/K1y7W54+XNwG3P/I=)
2: wFRK2gFO2y-GioRIpDn5lp85ecQ.roa (hash: A8Q7B434lxyY0QPj8csraRvBG53nBnhwRwO+e87bSWA=)
3: xY9MZyofE4_6jiY0oDDhMJyfHtw.roa (hash: SNap0h28tjMNg/zc5gl63p8JrVkT7E4Wu94Pvosrm/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:3d:eb:e6:2d:5e:11:d1:4f:30:9c:4a:67:70:cb:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544194f8249773d3cd6fb654b239de769c42e864
Validity
Not Before: Oct 25 12:00:34 2025 GMT
Not After : Oct 26 12:00:34 2025 GMT
Subject: CN=46a585046232b926a3616c55f4c9fd64aa62fff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3b:76:08:2b:85:ab:4a:86:77:b3:58:de:0f:
59:6a:ed:0a:91:5a:0e:ba:5d:81:34:a7:b6:99:10:
d6:4e:7d:49:da:74:17:f7:2f:59:4c:26:27:fc:93:
71:67:0d:96:fd:18:4f:19:1d:33:81:55:6a:44:11:
b5:2c:5c:21:56:1e:16:15:77:3f:9f:57:3f:87:a1:
8d:da:7e:de:ad:9b:9b:bc:85:9b:b3:d4:6d:95:62:
c0:eb:c1:8b:ed:cf:14:b9:0f:ca:a3:95:4c:55:10:
aa:7e:c6:c9:f1:fe:54:01:a0:b0:6d:a0:65:08:fc:
36:05:ba:8c:17:f6:84:8c:1c:df:fa:5a:8a:06:2c:
2c:2e:0f:3d:3b:8e:f8:de:31:da:a0:b1:52:2f:40:
3c:be:77:5a:b0:d0:6e:3c:c1:ae:27:7e:4b:94:ea:
58:93:50:a6:5d:4c:bc:39:11:1e:a5:a2:63:cf:3e:
fa:3d:41:fd:5e:bb:76:13:86:9d:86:28:27:d3:10:
5f:d6:45:91:45:f5:3a:61:c1:c0:3f:09:d8:ac:2e:
b9:64:d1:59:bc:7f:51:dc:a8:6e:c1:45:a8:48:0b:
4d:46:a0:ac:90:d1:16:b1:9b:9a:7b:43:23:24:5d:
72:eb:7d:ec:f7:81:da:1d:bd:2e:ba:d7:21:52:d5:
e8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A5:85:04:62:32:B9:26:A3:61:6C:55:F4:C9:FD:64:AA:62:FF:F7
X509v3 Authority Key Identifier:
keyid:54:41:94:F8:24:97:73:D3:CD:6F:B6:54:B2:39:DE:76:9C:42:E8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:20:04:11:fe:70:54:31:36:cb:01:1b:96:85:02:be:bd:96:
8c:ed:d4:ef:b0:67:c4:fb:16:92:2f:32:a9:f8:6a:1e:2d:b5:
14:eb:1b:d8:88:d1:6f:e0:92:a0:23:cf:27:85:ec:8c:2f:dd:
13:14:f8:11:13:d8:35:8e:05:db:24:fd:94:1f:0b:de:66:82:
5a:0c:69:49:51:e6:3c:cb:01:dd:7f:57:68:1a:62:ea:2f:36:
9c:21:99:07:4d:bc:6b:8c:0b:af:fc:b3:5c:48:7c:11:ec:a2:
68:0e:3f:ab:65:e6:55:ca:e8:7a:90:4c:ac:1c:48:33:92:a3:
da:4e:e1:47:da:ce:26:3d:6c:97:4b:6e:eb:94:d9:6b:8f:49:
90:d5:a4:19:17:6c:5f:49:34:63:87:07:24:e7:b6:0c:de:ef:
37:93:50:08:2f:22:be:87:9b:b4:51:3c:ef:99:76:cd:f1:6f:
1e:e4:23:2f:4e:4a:c7:73:71:7c:38:d2:09:a0:2c:5b:29:32:
d2:3f:8f:dc:cd:6b:78:ac:5f:42:09:c3:5d:83:7d:6a:a7:e1:
e8:fa:7a:0f:b5:90:9f:59:c5:9a:a4:f1:62:01:4e:c3:95:0d:
36:4b:ba:a6:20:84:e7:87:d0:a2:64:ad:48:e8:2a:d5:7d:ab:
ed:f9:72:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 18:23:55 2025 by rpki-client