Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
File: vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft (raw, json)
Hash identifier: 0LWI3sTUBbTNBEiHqyCSwXkrFFh6tKxBDV3voM7+nfY=
Subject key identifier: 64:70:E5:BA:E9:0E:94:36:03:13:78:B9:4F:72:95:8C:1A:16:76:62
Authority key identifier: BE:0F:8F:14:F2:20:E9:3E:E3:47:47:C4:D6:DB:F1:AD:35:B3:83:FA
Certificate issuer: /CN=be0f8f14f220e93ee34747c4d6dbf1ad35b383fa
Certificate serial: 01974E57EC0F60F43FABBF2A190D3F05BFE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
Manifest number: 0C53
Signing time: Sun 08 Jun 2025 07:01:14 +0000
Manifest this update: Sun 08 Jun 2025 07:01:14 +0000
Manifest next update: Mon 09 Jun 2025 07:01:14 +0000
Files and hashes: 1: vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl (hash: /TTydbMwRdONKaHHGpVRGgb4tRMswATo3wLnZZgHLPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:ec:0f:60:f4:3f:ab:bf:2a:19:0d:3f:05:bf:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be0f8f14f220e93ee34747c4d6dbf1ad35b383fa
Validity
Not Before: Jun 8 07:01:14 2025 GMT
Not After : Jun 9 07:01:14 2025 GMT
Subject: CN=6470e5bae90e9436031378b94f72958c1a167662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:db:8f:18:1c:80:4c:e6:3b:39:ba:cc:f8:5b:
01:54:08:64:d1:ef:f9:2d:6d:8d:e3:85:42:8d:13:
f9:02:1c:8a:b5:15:7f:6b:e0:e0:6f:28:31:d3:94:
7a:03:93:5e:58:fc:25:a7:b7:d8:c0:fc:ad:e8:59:
c5:63:28:c1:ac:af:02:b5:3e:c6:aa:b9:3b:17:be:
79:4f:ee:77:a7:52:4e:b3:e0:c4:de:5b:25:83:13:
df:0f:17:04:e9:32:ce:66:a0:47:c8:8f:17:9f:f9:
21:ca:0d:54:1a:58:67:02:00:85:ab:ab:a5:21:cc:
b6:5b:88:c5:b3:cb:ea:ce:1a:4b:c8:96:5b:d0:e5:
30:81:5c:96:1e:9d:67:b5:5f:44:e8:75:1e:81:72:
ea:53:be:27:ec:b3:f0:4d:2e:68:4b:76:43:4d:54:
bf:6e:2a:21:53:b6:54:c1:7e:30:f4:ad:35:e2:78:
2e:c7:c3:7c:97:0c:00:52:81:24:ba:60:bc:1c:ce:
ef:50:4c:14:97:9e:01:b6:2c:4a:4f:93:8a:91:c6:
64:f2:2b:0f:5d:76:8b:6b:f6:d2:6a:a6:36:2b:27:
2c:1e:44:d8:ca:a6:6a:43:5e:c9:19:84:ad:ea:07:
2d:69:44:ac:7e:21:26:d3:b4:5d:d0:f0:cd:6d:f5:
fe:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:70:E5:BA:E9:0E:94:36:03:13:78:B9:4F:72:95:8C:1A:16:76:62
X509v3 Authority Key Identifier:
keyid:BE:0F:8F:14:F2:20:E9:3E:E3:47:47:C4:D6:DB:F1:AD:35:B3:83:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ca:da:5e:43:05:ea:9e:bd:c0:66:71:2b:9c:05:79:d4:2b:
5a:92:0d:64:9f:12:64:6f:4b:ae:94:ec:f6:2f:d7:22:74:64:
03:12:b5:62:f5:54:c3:16:45:21:cb:bf:d5:1a:ec:2c:2e:9d:
8a:c3:3b:88:ea:4b:e0:09:61:83:5f:83:61:3c:0c:c5:4e:fa:
37:11:b0:0d:a6:0e:6b:21:c5:56:89:fa:92:4e:0b:6a:84:fb:
25:81:fc:a6:ed:f3:af:78:72:26:cb:a4:de:99:eb:78:82:70:
d4:84:38:ac:bb:59:15:49:b2:aa:ec:30:41:1a:6e:99:50:c7:
be:06:7b:54:a2:76:39:b4:ea:20:be:47:2a:9f:a0:4d:22:e6:
b3:20:0e:0e:38:1e:ce:2d:a3:8c:74:d3:5d:34:00:f3:cb:0e:
53:10:87:9f:27:c1:99:c0:88:4e:9c:93:c1:d2:69:13:04:8b:
2f:6d:9a:7e:31:14:d2:40:e2:9c:15:f6:20:63:f1:c2:06:d2:
38:bc:b9:e9:0e:d3:d1:d7:0a:cf:e9:32:12:5c:5d:36:e8:01:
90:09:ee:dc:46:e3:a1:66:78:30:b1:2d:21:a7:2f:bc:86:50:
25:b9:f1:c6:e2:2c:58:cc:93:ff:85:b2:e2:2e:bf:81:d4:92:
90:44:4e:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOV+wPYPQ/q78qGQ0/Bb/gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMGY4ZjE0ZjIyMGU5M2VlMzQ3NDdjNGQ2ZGJmMWFkMzVi
MzgzZmEwHhcNMjUwNjA4MDcwMTE0WhcNMjUwNjA5MDcwMTE0WjAzMTEwLwYDVQQD
Eyg2NDcwZTViYWU5MGU5NDM2MDMxMzc4Yjk0ZjcyOTU4YzFhMTY3NjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8duPGByATOY7ObrM+FsBVAhk0e/5
LW2N44VCjRP5AhyKtRV/a+Dgbygx05R6A5NeWPwlp7fYwPyt6FnFYyjBrK8CtT7G
qrk7F755T+53p1JOs+DE3lslgxPfDxcE6TLOZqBHyI8Xn/khyg1UGlhnAgCFq6ul
Icy2W4jFs8vqzhpLyJZb0OUwgVyWHp1ntV9E6HUegXLqU74n7LPwTS5oS3ZDTVS/
biohU7ZUwX4w9K014ngux8N8lwwAUoEkumC8HM7vUEwUl54BtixKT5OKkcZk8isP
XXaLa/bSaqY2KycsHkTYyqZqQ17JGYSt6gctaUSsfiEm07Rd0PDNbfX+gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGRw5brpDpQ2AxN4uU9ylYwaFnZiMB8GA1UdIwQY
MBaAFL4PjxTyIOk+40dHxNbb8a01s4P6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmctUEZQSWc2VDdqUjBmRTF0dnhyVFd6Z19vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mYWY0ZWEtYTUwYS00MGUwLThhYmQt
YjBjNjA0NjRkZjA2LzEvdmctUEZQSWc2VDdqUjBmRTF0dnhyVFd6Z19vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9mYWY0ZWEtYTUwYS00MGUwLThhYmQtYjBjNjA0NjRkZjA2
LzEvdmctUEZQSWc2VDdqUjBmRTF0dnhyVFd6Z19vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbsraXkMF
6p69wGZxK5wFedQrWpINZJ8SZG9LrpTs9i/XInRkAxK1YvVUwxZFIcu/1RrsLC6d
isM7iOpL4Alhg1+DYTwMxU76NxGwDaYOayHFVon6kk4LaoT7JYH8pu3zr3hyJsuk
3pnreIJw1IQ4rLtZFUmyquwwQRpumVDHvgZ7VKJ2ObTqIL5HKp+gTSLmsyAODjge
zi2jjHTTXTQA88sOUxCHnyfBmcCITpyTwdJpEwSLL22afjEU0kDinBX2IGPxwgbS
OLy56Q7T0dcKz+kyElxdNugBkAnu3EbjoWZ4MLEtIacvvIZQJbnxxuIsWMyT/4Wy
4i6/gdSSkEROGw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 10:29:16 2025 by rpki-client