Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
File: vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft (raw, json)
Hash identifier: Dr/5k97GQi9NQtaS5/UnnL8/rG6uiQWag4dVMbeQkXY=
Subject key identifier: 6D:F3:3E:59:4C:B4:9C:C2:F9:73:1B:36:64:A8:CC:68:C7:BC:BD:1D
Authority key identifier: BE:0F:8F:14:F2:20:E9:3E:E3:47:47:C4:D6:DB:F1:AD:35:B3:83:FA
Certificate issuer: /CN=be0f8f14f220e93ee34747c4d6dbf1ad35b383fa
Certificate serial: 0199221E42FE0C472DD1CF7B3A3B448A72F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
Manifest number: 0D47
Signing time: Sun 07 Sep 2025 03:00:32 +0000
Manifest this update: Sun 07 Sep 2025 03:00:32 +0000
Manifest next update: Mon 08 Sep 2025 03:00:32 +0000
Files and hashes: 1: olc2Y8iylqMSKyCyshdN5SCe0vI.roa (hash: UAcPq7niB1CGXkTFu0WQUaf9we2Qrdpi5zBQPRcbjno=)
2: vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl (hash: 9u+/2d68oGAdCBTkQ1QHHH4W8/oiQkk5SFjbLWTgVW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:42:fe:0c:47:2d:d1:cf:7b:3a:3b:44:8a:72:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be0f8f14f220e93ee34747c4d6dbf1ad35b383fa
Validity
Not Before: Sep 7 03:00:32 2025 GMT
Not After : Sep 8 03:00:32 2025 GMT
Subject: CN=6df33e594cb49cc2f9731b3664a8cc68c7bcbd1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b7:e6:d5:76:34:e3:31:1c:42:df:c3:38:d1:
50:4a:f1:4a:3a:89:ea:ab:81:2e:54:b4:72:d0:73:
92:39:8f:42:d0:ff:18:9b:ff:97:b2:52:00:a4:4d:
46:9b:b2:4c:fa:4e:8b:09:63:09:e8:79:21:07:9c:
24:c6:cf:b0:c3:91:e3:f8:7a:af:d3:e8:e5:83:a4:
80:19:81:c5:33:7d:e4:de:78:3c:76:e3:1f:dd:8f:
0a:57:4f:3f:61:3c:34:d1:a6:39:d6:f7:ab:4b:33:
d2:19:60:ba:0a:24:34:ce:2c:ff:23:27:b6:b8:2f:
00:31:4d:f2:6f:b5:c7:6c:c0:5a:60:4b:13:3f:f7:
ec:9e:4e:51:71:01:6c:d6:20:63:3c:0f:1a:a2:e3:
b2:a5:d5:fa:57:57:62:eb:35:08:70:47:ca:dc:10:
1f:ca:75:b8:9c:48:23:54:c2:a4:7c:51:cd:2f:d6:
6a:ac:3e:86:91:ba:14:af:c5:e3:0b:2e:a3:d8:d3:
05:f3:98:41:60:ca:5f:74:8e:c6:fd:de:b1:ed:54:
e6:92:b1:19:98:75:d6:8f:37:bf:88:b5:df:d3:98:
0a:6a:1f:7a:01:39:ed:bf:b5:dd:ee:e1:f3:b0:09:
36:19:93:6f:43:a4:1c:54:ea:ad:d2:df:71:07:57:
c2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F3:3E:59:4C:B4:9C:C2:F9:73:1B:36:64:A8:CC:68:C7:BC:BD:1D
X509v3 Authority Key Identifier:
keyid:BE:0F:8F:14:F2:20:E9:3E:E3:47:47:C4:D6:DB:F1:AD:35:B3:83:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:59:7b:7d:e4:f5:35:81:02:08:a4:2c:ec:22:e6:4b:7f:0d:
ce:bc:3f:11:37:1f:bd:57:07:93:a7:89:92:b2:44:07:5c:b8:
ea:f1:bb:52:ea:d2:44:d9:c8:34:d2:26:fc:af:cd:10:3c:d0:
df:49:08:9d:f0:d9:87:2f:03:7c:c3:34:78:6f:f1:de:bc:2e:
b5:b7:3c:7c:cd:4b:02:00:1b:62:e3:52:b5:98:8e:b6:87:24:
1d:32:34:c8:4f:f3:3d:2a:d2:b1:5e:16:6e:c8:ac:7e:97:b1:
0a:4b:a5:f6:62:ad:37:51:43:00:94:e9:04:0f:ce:0f:29:0a:
20:45:c9:07:76:b2:83:79:fa:4d:13:68:f0:31:89:15:d6:10:
33:90:1a:b8:cc:6d:b6:a2:3a:15:4b:e6:dd:85:6b:f4:f0:69:
51:c5:13:19:e6:a1:e2:9d:12:07:78:41:c1:f9:81:f3:ca:23:
df:b5:9f:0a:e0:97:b8:2e:67:cb:db:11:17:c9:e3:76:6e:4d:
80:db:85:0a:0f:d1:4f:91:57:ea:7c:98:55:c8:e4:99:ee:a7:
01:78:23:b6:19:16:d1:00:e4:22:d4:8a:d6:dd:eb:b6:fb:22:
8e:e8:64:39:e4:8e:aa:8b:64:69:d8:a3:09:5c:0b:73:1e:8b:
36:cc:85:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:17 2025 by rpki-client