Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
File: VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft (raw, json)
Hash identifier: /9P+OJtf3etrw+nBP5PKs2UReZKeJBDrrzNGwNG2uiI=
Subject key identifier: BC:9F:8F:D2:BD:E2:E2:E0:DB:12:59:B4:24:D0:74:AD:11:55:90:3C
Authority key identifier: 54:6E:C2:17:E9:B1:29:31:6C:23:A6:FA:9F:9A:72:1F:10:C2:D9:5D
Certificate issuer: /CN=546ec217e9b129316c23a6fa9f9a721f10c2d95d
Certificate serial: 019A24E5DBFA2114E33878DEEE01D42023F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
Manifest number: 0BD6
Signing time: Mon 27 Oct 2025 09:00:34 +0000
Manifest this update: Mon 27 Oct 2025 09:00:34 +0000
Manifest next update: Tue 28 Oct 2025 09:00:34 +0000
Files and hashes: 1: VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl (hash: DGb969g3zy6tCyQEnRXGD3y9Cd9DGXnNNEZ/fvW7IL4=)
2: yzHNRQN_LLYnv0tR5UiHfwPC7uw.roa (hash: xz6DLj2fmkfFVGM6LYkLVTKbdiAh+qRJd+w+TzRoaH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e5:db:fa:21:14:e3:38:78:de:ee:01:d4:20:23:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546ec217e9b129316c23a6fa9f9a721f10c2d95d
Validity
Not Before: Oct 27 09:00:34 2025 GMT
Not After : Oct 28 09:00:34 2025 GMT
Subject: CN=bc9f8fd2bde2e2e0db1259b424d074ad1155903c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:34:4e:da:6e:04:79:c3:76:d8:d1:1b:75:ce:
de:82:4c:f9:da:ba:c5:77:89:d5:29:32:36:d2:1d:
fe:95:f9:06:9b:5a:35:82:f0:a4:44:65:c4:6e:1b:
c6:9e:bb:24:43:fd:f1:97:ea:a1:de:5f:c6:d1:b9:
74:12:29:a7:a0:93:1b:6f:10:15:37:6e:d0:d4:66:
f4:34:31:6c:71:0e:47:db:c2:7a:1e:d3:78:50:89:
33:d3:d0:4e:67:92:64:91:03:ca:77:2a:5e:29:53:
45:48:26:c8:b6:5c:c8:14:9b:8f:6a:6c:a1:ac:78:
92:71:5b:d8:3e:d2:89:38:1e:61:45:91:b0:77:87:
2a:fe:74:10:2e:27:98:60:5b:f9:5b:61:62:1e:db:
de:f9:d3:b5:ae:ae:ba:0b:3c:30:ee:84:87:79:68:
4e:f3:dc:27:88:c8:b8:0b:44:2a:df:78:0c:3a:1a:
91:92:16:33:dd:b8:2c:1b:07:41:1a:fc:cd:11:d0:
8e:24:9e:89:d1:ff:d6:e3:0d:32:87:24:85:71:d3:
da:98:1b:1d:27:73:78:37:cb:dd:0b:2b:61:5c:13:
28:f8:42:04:ad:40:01:5b:f8:76:1f:c2:76:63:3b:
53:4d:4f:3b:05:94:e9:88:ca:98:f9:5e:aa:00:da:
5b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9F:8F:D2:BD:E2:E2:E0:DB:12:59:B4:24:D0:74:AD:11:55:90:3C
X509v3 Authority Key Identifier:
keyid:54:6E:C2:17:E9:B1:29:31:6C:23:A6:FA:9F:9A:72:1F:10:C2:D9:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:fc:50:ac:9c:e9:04:af:ba:f6:a0:2a:e1:48:35:dd:f8:aa:
07:90:fd:d0:ac:56:b7:98:18:85:54:5e:0d:e4:1d:80:1d:fe:
38:16:87:78:b3:60:ba:00:85:5b:f4:79:ba:dd:44:0c:f1:e9:
32:17:dc:65:1d:ea:90:f5:90:6f:fe:3f:80:88:a3:d4:e9:5a:
d6:e7:79:b3:a8:66:eb:cb:c6:70:bf:aa:2d:47:e1:8c:50:2e:
85:85:d6:93:17:a7:72:1a:c2:52:b9:81:5f:3e:9a:b9:38:2d:
37:80:bf:8b:ae:76:4d:77:6a:ce:71:76:d9:41:ef:8e:8b:21:
53:93:a1:62:8d:1b:76:66:2c:de:21:e1:b2:c1:ee:db:6c:b6:
a6:0a:cc:77:d5:b8:13:5e:f3:b9:84:49:53:4d:20:b5:2e:e9:
c0:df:30:a5:18:1f:cf:ed:1a:2a:26:15:cc:22:e1:c6:0d:97:
23:69:9e:1d:cd:fa:d9:29:cc:a1:56:8f:e8:98:58:35:2c:fd:
e7:b3:43:e0:26:3a:56:2b:ba:f1:75:33:93:5f:e8:42:5f:aa:
22:76:f0:06:6e:c1:cd:c8:2a:ee:35:c4:cd:3a:be:17:d0:72:
d8:df:8c:9f:4f:2f:09:11:fe:d9:6f:d3:00:ba:01:f3:44:89:
97:49:77:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:04:29 2025 by rpki-client