Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft
File: VGLTx682xAGqlwlNPyOJ14ddFOw.mft (raw, json)
Hash identifier: mqwPlwTmZ3UfyUdg8BIggYJbKtmEBqvUzr4Vj4NVLJA=
Subject key identifier: C0:9C:44:BA:E1:60:F5:E3:9A:32:55:0B:9A:22:BF:ED:5D:07:93:9F
Authority key identifier: 54:62:D3:C7:AF:36:C4:01:AA:97:09:4D:3F:23:89:D7:87:5D:14:EC
Certificate issuer: /CN=5462d3c7af36c401aa97094d3f2389d7875d14ec
Certificate serial: 01987CAE2C716C79EAE3EE19831F7BF563EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGLTx682xAGqlwlNPyOJ14ddFOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft
Manifest number: 0322
Signing time: Wed 06 Aug 2025 00:00:45 +0000
Manifest this update: Wed 06 Aug 2025 00:00:45 +0000
Manifest next update: Thu 07 Aug 2025 00:00:45 +0000
Files and hashes: 1: 1fACf-8RstZUTJjfnQCu3bC_4EM.roa (hash: y+Jyhi+AHKXvf5OSPohhDVxGrHaa58eOxr00zi1ZVhg=)
2: VGLTx682xAGqlwlNPyOJ14ddFOw.crl (hash: gFOh0rTnsNXwJ/X9eN0R/mKFKFNsY4HkZw2O88iOokE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGLTx682xAGqlwlNPyOJ14ddFOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:2c:71:6c:79:ea:e3:ee:19:83:1f:7b:f5:63:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5462d3c7af36c401aa97094d3f2389d7875d14ec
Validity
Not Before: Aug 6 00:00:45 2025 GMT
Not After : Aug 7 00:00:45 2025 GMT
Subject: CN=c09c44bae160f5e39a32550b9a22bfed5d07939f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e1:37:b9:7a:86:41:68:6e:78:af:c9:41:73:
78:53:24:98:56:fa:81:b2:5c:71:3e:23:de:e6:4d:
9f:e2:ae:3e:92:49:b6:7d:36:bc:64:7a:5e:35:c8:
be:88:2b:48:e6:ec:2a:ab:8e:86:46:f8:44:3d:69:
f6:ec:7e:8e:e7:2e:1e:1c:eb:6a:9f:73:a0:d3:8b:
af:13:54:00:8b:8a:33:a1:c3:b7:66:27:fe:a4:c5:
ee:9b:69:a7:c3:82:d7:77:8e:37:8e:07:93:75:5e:
62:48:0a:42:98:cf:0c:25:8b:0a:cd:12:e8:1c:8a:
2c:e8:eb:2d:5a:f6:65:8c:4c:ef:8f:c1:ab:8f:02:
78:98:29:e0:7b:67:2c:6a:e5:92:2b:05:60:93:13:
5f:d2:c1:ef:0a:19:e8:8d:6f:b4:3f:6b:f1:c6:ea:
8a:e6:f1:81:f5:67:d2:31:9b:21:f9:05:e0:66:36:
d0:e0:a4:c5:88:5d:83:c2:c4:9d:c8:a8:cb:62:c6:
7f:1a:bf:7c:f0:bf:7d:95:d4:42:de:18:c9:62:a6:
cd:26:f9:25:4a:6d:46:0c:27:a8:63:e4:01:78:a0:
ca:f4:ba:0f:f2:a9:b1:41:89:ac:c9:72:5c:b9:ca:
8d:7b:01:28:39:6f:f3:5c:7f:59:05:c5:5d:e7:59:
f0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9C:44:BA:E1:60:F5:E3:9A:32:55:0B:9A:22:BF:ED:5D:07:93:9F
X509v3 Authority Key Identifier:
keyid:54:62:D3:C7:AF:36:C4:01:AA:97:09:4D:3F:23:89:D7:87:5D:14:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGLTx682xAGqlwlNPyOJ14ddFOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:5b:2f:ef:72:90:10:e3:fc:7d:a0:a8:ef:b0:b7:3a:f4:5b:
af:6c:dc:ce:87:19:67:d9:23:e7:20:e6:d1:78:4d:9d:4e:b8:
d1:96:3a:72:17:65:67:ee:b4:7b:8c:d3:53:f4:fd:3d:2d:8b:
14:c4:51:cf:3b:92:4a:d1:e8:8e:d4:86:c0:c7:9c:a9:d5:dd:
69:9e:ed:30:f4:a5:65:6e:2d:d4:74:f2:58:be:fc:f4:18:3a:
06:79:0e:5f:d9:f1:fc:2a:0c:d6:b4:08:a1:8d:3e:42:f9:0e:
01:40:d2:e5:8d:35:f2:47:4b:22:02:db:07:f4:4b:72:9c:52:
21:26:b7:92:bb:69:b5:68:a7:56:26:c4:97:42:7a:2d:30:fe:
95:7c:38:95:35:2d:d8:96:70:a0:b8:f2:c3:ff:d8:d3:8c:6c:
e7:bd:fb:f8:3a:e8:39:79:a2:ee:10:6c:59:7d:ad:25:99:d2:
da:87:bd:a5:51:35:d4:60:02:c1:e8:7b:98:fd:1a:c2:c8:65:
78:92:9d:5a:f9:ee:c6:71:5a:1a:70:27:c2:52:2d:e2:88:f6:
6a:49:67:c8:85:33:c0:45:b1:2c:a3:e1:84:41:c7:5c:2a:7f:
76:9a:14:ae:f1:7e:8e:9f:3a:20:e5:7a:ae:03:00:59:5e:76:
be:69:6b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:49:19 2025 by rpki-client