Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
File: vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft (raw, json)
Hash identifier: kWLapCEk8OYDNMl8YEePLQwiSUQBY0Nbc+6UYfJdZcM=
Subject key identifier: 99:A9:FB:39:20:7D:01:A7:3F:F3:B3:1E:36:C0:4A:D5:FD:5F:A6:48
Authority key identifier: BE:0F:8F:14:F2:20:E9:3E:E3:47:47:C4:D6:DB:F1:AD:35:B3:83:FA
Certificate issuer: /CN=be0f8f14f220e93ee34747c4d6dbf1ad35b383fa
Certificate serial: 019A72267C780C942701FBD528CECB66DF3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
Manifest number: 0DF5
Signing time: Tue 11 Nov 2025 09:01:56 +0000
Manifest this update: Tue 11 Nov 2025 09:01:56 +0000
Manifest next update: Wed 12 Nov 2025 09:01:56 +0000
Files and hashes: 1: olc2Y8iylqMSKyCyshdN5SCe0vI.roa (hash: UAcPq7niB1CGXkTFu0WQUaf9we2Qrdpi5zBQPRcbjno=)
2: vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl (hash: 2KCNb9KzfC4Vm1f8hn81+rvB3h9syD3D3Ht+i9x+9hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:7c:78:0c:94:27:01:fb:d5:28:ce:cb:66:df:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be0f8f14f220e93ee34747c4d6dbf1ad35b383fa
Validity
Not Before: Nov 11 09:01:56 2025 GMT
Not After : Nov 12 09:01:56 2025 GMT
Subject: CN=99a9fb39207d01a73ff3b31e36c04ad5fd5fa648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:61:6a:fd:b5:82:d4:43:fc:a5:19:1a:09:7c:
95:ec:b7:c0:ea:64:cb:33:69:e0:60:9e:b4:3d:13:
9a:d4:dd:24:4d:01:b5:78:f9:2e:c4:63:e2:fe:54:
dc:74:c1:27:17:53:26:03:00:99:df:94:84:52:d2:
2a:f7:09:fd:a3:76:d3:ac:3a:e3:81:fb:e4:07:3e:
19:d6:d8:a1:8f:02:76:96:69:f2:e4:12:3f:4f:6a:
90:ee:bf:72:f5:7c:34:84:ea:11:43:aa:aa:d9:dd:
c7:4c:c4:9c:b5:e9:0f:24:a6:49:81:43:9f:30:37:
a8:12:9d:e3:08:cf:c2:cb:cc:1d:32:8d:e8:cb:82:
e8:9b:21:a1:9c:02:11:ae:fe:a4:26:71:48:30:9d:
d6:5f:ee:8d:5e:da:f3:c5:b9:2a:d6:3a:05:1b:60:
62:51:eb:2b:80:9f:1a:33:05:9f:6f:2b:29:6f:ef:
fa:e5:0d:04:c1:0e:98:dc:c2:fb:59:f9:cc:89:66:
2d:f9:eb:cf:94:ed:2b:ef:ef:de:78:22:99:5d:67:
e0:ef:99:ea:33:ac:b3:ef:81:8b:85:ec:42:7c:0f:
e6:06:20:0c:3b:50:a2:a4:85:f3:ba:28:eb:d7:d3:
f7:79:2c:43:48:aa:71:ce:19:c1:0b:4e:98:4c:e2:
eb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A9:FB:39:20:7D:01:A7:3F:F3:B3:1E:36:C0:4A:D5:FD:5F:A6:48
X509v3 Authority Key Identifier:
keyid:BE:0F:8F:14:F2:20:E9:3E:E3:47:47:C4:D6:DB:F1:AD:35:B3:83:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:e1:7e:80:11:fe:f4:ca:b5:70:5a:be:0f:14:a0:84:b6:75:
ca:4e:a2:0b:26:c5:47:8e:7e:54:34:e1:e9:db:f4:fa:56:9b:
20:15:b2:f6:2e:4f:8b:ec:f8:54:0e:ea:15:6f:e9:0d:91:61:
1b:97:80:e0:a0:d3:a3:d4:22:5a:d8:82:e8:15:c4:64:79:86:
d0:c8:f5:d4:9b:f0:4d:00:03:3c:64:52:e0:72:a5:ce:3d:62:
02:ac:89:54:0f:9e:a2:c2:8d:18:14:6c:85:98:83:61:d1:e9:
40:65:26:da:a4:54:56:98:1d:6c:b2:56:68:99:76:d8:ab:2b:
f2:88:76:2b:32:35:e4:e3:77:81:9c:47:a3:4b:d2:18:08:ea:
2b:8f:02:32:5d:e7:29:3e:f6:f0:66:86:99:90:4d:06:91:3a:
89:16:cc:a6:74:32:f2:9a:16:e9:87:63:f0:d5:97:c8:fd:dd:
64:df:31:d3:64:1f:c3:cb:13:e7:38:c3:40:87:cc:e5:ce:c0:
9e:06:8b:b9:dd:33:53:75:34:f3:24:8c:af:79:48:30:d0:af:
df:a3:5d:d9:23:27:1e:41:56:83:65:dd:d2:56:22:31:be:f6:
37:46:cd:bd:f3:1c:24:39:52:01:c9:35:7d:aa:93:7b:54:b9:
16:a0:0e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:48 2025 by rpki-client