Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
File: VG3jJt6VIr0pa-1II4XJdpJY2PE.mft (raw, json)
Hash identifier: 8zfQjnQRya12Tlr9MGbIrkBqsv79AV+0lwZO7WVptM0=
Subject key identifier: 59:20:B0:79:E7:F7:B7:CF:D3:D3:BD:FE:A9:40:EA:89:74:CB:64:E5
Authority key identifier: 54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1
Certificate issuer: /CN=546de326de9522bd296bed482385c9769258d8f1
Certificate serial: 019A16F3F9DE818C5C7BE21F3C9A0C6A9E8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
Manifest number: 0DD7
Signing time: Fri 24 Oct 2025 16:01:19 +0000
Manifest this update: Fri 24 Oct 2025 16:01:19 +0000
Manifest next update: Sat 25 Oct 2025 16:01:19 +0000
Files and hashes: 1: VG3jJt6VIr0pa-1II4XJdpJY2PE.crl (hash: HeEdwqGQT2lXhxU9CZTeZ4iSuDJwmd3FpgFRnIaU6e0=)
2: XqfeZQF_1MV97o_zjJHjyzS8MaA.roa (hash: 7t9vzZ6FV6EcfJzjLHhMVS7Ff0/+2ubtRR3JHX0+dlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:f3:f9:de:81:8c:5c:7b:e2:1f:3c:9a:0c:6a:9e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546de326de9522bd296bed482385c9769258d8f1
Validity
Not Before: Oct 24 16:01:19 2025 GMT
Not After : Oct 25 16:01:19 2025 GMT
Subject: CN=5920b079e7f7b7cfd3d3bdfea940ea8974cb64e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:82:9e:b9:92:69:ee:55:c1:5a:89:8c:ba:f7:
15:9f:0a:a4:82:57:0b:8e:05:5e:85:40:63:54:ac:
69:81:f0:db:6c:71:31:d6:aa:d5:00:4a:68:ad:eb:
f3:9c:4f:ba:f8:18:56:58:ce:61:f5:20:c3:3b:a3:
05:ee:6e:7c:da:09:ee:07:02:a9:b4:d4:bd:7c:bf:
88:11:4f:33:61:62:ce:a6:e9:e2:75:a4:5f:09:1b:
fb:2a:e0:59:9a:49:4f:73:95:3e:fd:48:49:07:4a:
0b:d4:b7:50:27:32:5d:25:1e:ee:09:af:fa:14:f9:
f3:ba:ea:2f:78:4b:ab:5a:24:dd:56:b3:a8:79:45:
f4:11:ca:6e:c2:22:da:72:c9:25:49:89:11:51:30:
75:c4:01:dd:1e:af:97:0d:f3:36:c2:46:c5:1f:02:
2b:04:22:68:b3:07:b0:a5:ff:86:2e:8f:63:5e:14:
d6:86:5d:14:4c:12:2e:4d:71:53:07:4f:d1:2c:7f:
ae:bb:11:4e:ce:f4:47:38:e5:ee:67:f4:98:ab:56:
42:a8:4f:e3:d8:a9:89:0e:65:a5:66:e5:a0:0f:42:
f3:ca:32:69:27:1b:78:5c:72:a5:6a:c4:cc:f7:4c:
db:6b:f2:55:bd:b1:22:82:f1:33:61:36:72:56:9a:
96:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:20:B0:79:E7:F7:B7:CF:D3:D3:BD:FE:A9:40:EA:89:74:CB:64:E5
X509v3 Authority Key Identifier:
keyid:54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:42:8c:79:b9:7c:42:f4:6e:1c:70:03:2c:8b:e6:96:4e:3c:
14:29:dd:f2:83:40:4a:cf:34:bd:27:86:03:f1:70:9c:31:7f:
9e:cf:bd:06:c5:8c:0e:e7:2c:99:3e:6f:81:d5:3e:1e:01:31:
7c:c2:45:0f:17:aa:83:e8:19:de:d9:0f:47:94:9e:bc:7d:c6:
d4:77:87:14:ac:31:2d:95:1e:01:c1:27:0e:0a:3f:5a:a3:cc:
73:8f:06:86:96:3d:38:ab:ba:a4:9a:e9:29:a4:dd:a5:bf:69:
7c:fb:2e:5d:19:93:db:96:76:08:ea:28:4c:dd:df:c8:5b:10:
98:29:d1:4b:46:e3:fd:c4:ed:ac:68:30:80:78:73:a8:e6:c0:
cd:d2:4d:c7:7f:fb:ff:b9:53:1f:72:a3:bb:59:02:1a:4f:05:
6c:9e:50:08:74:4d:51:46:e0:61:f1:4a:5c:85:dc:05:0d:9c:
01:11:86:b0:e9:78:86:69:00:c9:f7:3d:34:5a:e7:b1:7e:fb:
15:31:a5:db:c7:4b:78:18:e0:33:af:02:99:ca:63:21:39:bf:
9e:76:87:9d:e4:40:34:66:b3:7b:74:5d:98:c1:1b:d7:93:53:
55:56:fe:0e:1a:2c:70:56:dd:d4:5d:ed:06:eb:16:db:68:81:
5a:03:5e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 20:42:54 2025 by rpki-client