Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
File: VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft (raw, json)
Hash identifier: 8NpGGy5KWMm0hKYBA+2i7EH/FPCreZ0xBls+xjccSSc=
Subject key identifier: BE:93:37:DF:F1:86:E9:47:04:86:50:8D:AA:E1:DB:D1:25:0A:12:09
Authority key identifier: 54:61:75:F2:E8:29:B4:66:57:59:6D:D8:F3:2E:1F:93:EC:BE:0A:24
Certificate issuer: /CN=546175f2e829b46657596dd8f32e1f93ecbe0a24
Certificate serial: 01988EEB77E4F7120838A92D5B8697FD6200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
Manifest number: 1621
Signing time: Sat 09 Aug 2025 13:00:52 +0000
Manifest this update: Sat 09 Aug 2025 13:00:52 +0000
Manifest next update: Sun 10 Aug 2025 13:00:52 +0000
Files and hashes: 1: VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl (hash: KxstsBHds9SNgqWkCYUIUDjn45BKPumLWLD9oEJ0WL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:eb:77:e4:f7:12:08:38:a9:2d:5b:86:97:fd:62:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546175f2e829b46657596dd8f32e1f93ecbe0a24
Validity
Not Before: Aug 9 13:00:52 2025 GMT
Not After : Aug 10 13:00:52 2025 GMT
Subject: CN=be9337dff186e9470486508daae1dbd1250a1209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0a:ba:49:07:ec:6c:1d:f5:59:1b:54:73:e2:
b3:a5:da:6a:81:7c:9a:f0:23:e0:ce:57:29:8b:52:
d0:c9:9a:60:52:65:6f:e7:3f:42:00:b2:77:1c:57:
e6:81:9a:3c:a6:1a:7a:9b:39:1c:b3:55:d4:cd:f1:
78:39:ce:74:98:39:8c:cb:08:08:ea:8a:8c:2f:9a:
f6:33:7f:9d:32:4b:a9:31:25:37:85:92:fc:fd:ee:
cf:c5:1e:c1:44:3f:b0:90:c6:09:1c:95:51:8f:68:
98:5f:1e:dd:ea:e1:2e:14:f6:4a:ef:5a:11:aa:ca:
85:dd:85:98:24:b8:6d:e9:bb:b7:d9:8a:5e:ef:32:
67:4a:c0:9b:44:89:2b:6f:68:1d:16:c9:3e:84:ca:
08:bc:0c:5a:4d:fe:2f:1a:14:07:79:9e:d6:71:a6:
8e:5f:07:8b:df:50:d2:81:a7:67:f6:22:41:bb:9c:
be:1c:69:a9:3d:8e:52:4c:84:b0:5f:2d:18:5a:d0:
82:a9:5f:3e:39:37:a3:75:ba:33:fe:7b:bf:e1:c4:
dd:e7:5c:d8:97:d7:7b:1d:ba:52:2a:c9:57:b4:a4:
43:13:12:4d:a2:e1:fb:93:92:03:b7:f3:74:1c:7d:
a9:bf:bd:43:88:29:85:ff:a1:92:34:3b:e3:47:4f:
92:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:93:37:DF:F1:86:E9:47:04:86:50:8D:AA:E1:DB:D1:25:0A:12:09
X509v3 Authority Key Identifier:
keyid:54:61:75:F2:E8:29:B4:66:57:59:6D:D8:F3:2E:1F:93:EC:BE:0A:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:92:2e:36:f4:98:57:9b:d8:31:a1:25:c1:ee:3a:44:7d:50:
33:0c:b2:28:a0:97:49:1e:75:c0:67:15:e4:63:00:f2:6b:66:
9a:bc:ff:e7:77:ae:d7:e4:e8:90:4d:45:50:04:57:fc:42:3a:
6e:f7:d1:71:1a:67:40:a9:27:0b:19:77:f5:94:0a:64:d2:2d:
81:9f:34:6c:bd:5f:0a:ef:37:d7:60:f7:73:86:b8:64:e3:3b:
80:4d:e4:91:b4:60:67:db:16:9d:90:7a:63:a7:e4:d8:bf:43:
df:08:51:0d:8c:0d:c5:86:01:b8:6a:f7:d9:99:e6:11:22:38:
ea:c6:9c:f8:3d:b7:0d:43:36:67:a1:92:04:29:5a:6a:a5:c3:
6d:d2:81:67:86:b8:33:89:a2:59:30:f3:e6:e1:1a:ee:9c:b4:
b8:fb:0f:82:85:dc:e0:bc:3c:26:91:17:29:5f:86:4e:ee:3e:
1e:b8:79:eb:df:31:01:18:6e:29:c8:2f:a4:23:06:4f:3a:59:
ff:f1:fa:39:82:c8:b5:e6:55:20:47:dc:50:fd:98:37:62:b4:
61:b0:2b:83:01:cb:8b:b6:f1:61:06:d1:cb:62:c5:35:40:82:
46:32:67:38:54:b0:af:ce:c1:cf:65:63:bc:c0:cc:59:6d:03:
28:37:6e:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiO63fk9xIIOKktW4aX/WIAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjE3NWYyZTgyOWI0NjY1NzU5NmRkOGYzMmUxZjkzZWNi
ZTBhMjQwHhcNMjUwODA5MTMwMDUyWhcNMjUwODEwMTMwMDUyWjAzMTEwLwYDVQQD
EyhiZTkzMzdkZmYxODZlOTQ3MDQ4NjUwOGRhYWUxZGJkMTI1MGExMjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQq6SQfsbB31WRtUc+KzpdpqgXya
8CPgzlcpi1LQyZpgUmVv5z9CALJ3HFfmgZo8php6mzkcs1XUzfF4Oc50mDmMywgI
6oqML5r2M3+dMkupMSU3hZL8/e7PxR7BRD+wkMYJHJVRj2iYXx7d6uEuFPZK71oR
qsqF3YWYJLht6bu32Ype7zJnSsCbRIkrb2gdFsk+hMoIvAxaTf4vGhQHeZ7WcaaO
XweL31DSgadn9iJBu5y+HGmpPY5STISwXy0YWtCCqV8+OTejdboz/nu/4cTd51zY
l9d7HbpSKslXtKRDExJNouH7k5IDt/N0HH2pv71DiCmF/6GSNDvjR0+SUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6TN9/xhulHBIZQjarh29ElChIJMB8GA1UdIwQY
MBaAFFRhdfLoKbRmV1lt2PMuH5PsvgokMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdGMTh1Z3B0R1pYV1czWTh5NGZrLXktQ2lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8yY2U3NzUtMzdhYS00ODQwLTk4NTIt
YmIxYjBlNDE4YTIxLzEvVkdGMTh1Z3B0R1pYV1czWTh5NGZrLXktQ2lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8yY2U3NzUtMzdhYS00ODQwLTk4NTItYmIxYjBlNDE4YTIx
LzEvVkdGMTh1Z3B0R1pYV1czWTh5NGZrLXktQ2lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgpIuNvSY
V5vYMaElwe46RH1QMwyyKKCXSR51wGcV5GMA8mtmmrz/53eu1+TokE1FUARX/EI6
bvfRcRpnQKknCxl39ZQKZNItgZ80bL1fCu8312D3c4a4ZOM7gE3kkbRgZ9sWnZB6
Y6fk2L9D3whRDYwNxYYBuGr32ZnmESI46sac+D23DUM2Z6GSBClaaqXDbdKBZ4a4
M4miWTDz5uEa7py0uPsPgoXc4Lw8JpEXKV+GTu4+Hrh5698xARhuKcgvpCMGTzpZ
//H6OYLIteZVIEfcUP2YN2K0YbArgwHLi7bxYQbRy2LFNUCCRjJnOFSwr87Bz2Vj
vMDMWW0DKDdu+Q==
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:28:05 2025 by rpki-client