Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft
File: vgMXYC-wyqOlEAaL2YnUba44TdI.mft (raw, json)
Hash identifier: IskncfXAB73DKuIcvQpG2ATFOQBBpvfaf/Ejz/Y1uvo=
Subject key identifier: 4A:16:D2:29:70:39:BA:4D:7F:69:43:94:A6:30:5F:2C:3B:E3:7B:66
Authority key identifier: BE:03:17:60:2F:B0:CA:A3:A5:10:06:8B:D9:89:D4:6D:AE:38:4D:D2
Certificate issuer: /CN=be0317602fb0caa3a510068bd989d46dae384dd2
Certificate serial: 0198892104E254DB57263E6786AA3B9F2AEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgMXYC-wyqOlEAaL2YnUba44TdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft
Manifest number: 0294
Signing time: Fri 08 Aug 2025 10:01:39 +0000
Manifest this update: Fri 08 Aug 2025 10:01:39 +0000
Manifest next update: Sat 09 Aug 2025 10:01:39 +0000
Files and hashes: 1: vgMXYC-wyqOlEAaL2YnUba44TdI.crl (hash: sRiTjJRD9X9+uApb3LNBlA3uXnbRMWEZ5SLYnEZ4nCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgMXYC-wyqOlEAaL2YnUba44TdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:21:04:e2:54:db:57:26:3e:67:86:aa:3b:9f:2a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be0317602fb0caa3a510068bd989d46dae384dd2
Validity
Not Before: Aug 8 10:01:39 2025 GMT
Not After : Aug 9 10:01:39 2025 GMT
Subject: CN=4a16d2297039ba4d7f694394a6305f2c3be37b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c5:3f:28:ea:fb:2f:7b:57:fa:ff:a7:39:9f:
7c:78:05:d9:39:f0:f9:33:36:8e:60:5d:20:dc:7d:
57:d2:e6:af:43:7e:1d:47:d3:6e:34:cc:97:5d:d7:
65:eb:19:05:d3:84:9e:57:dd:88:d3:0c:d0:b1:1d:
4c:e6:e9:5a:15:13:37:2f:27:46:0e:a7:67:e1:e7:
6c:33:13:03:80:62:f0:30:40:42:4e:5f:3b:3b:d9:
5f:fc:9a:ec:1c:29:be:ba:4b:49:7e:f1:7b:57:44:
e5:1f:1d:ee:02:0f:22:32:cc:98:2e:26:b5:92:8f:
30:6e:fa:9b:2c:a6:84:f1:c7:a7:75:ca:36:56:c2:
d3:04:8e:84:be:87:aa:d1:c1:f7:0a:5d:29:1c:ef:
5a:d2:70:64:ee:76:78:3b:d9:ab:ff:20:74:d0:4a:
dc:88:ba:42:95:a7:7b:c4:6b:7f:a3:63:d7:c9:e9:
d6:6d:1c:f6:8c:de:be:34:e1:2b:00:e1:b8:cc:61:
62:81:2a:98:d8:32:ce:e1:b5:6a:73:0a:39:ce:3c:
f9:14:8a:86:78:34:25:14:8b:c7:dd:5e:24:ce:12:
bb:46:46:91:0e:9b:91:c0:3b:3c:5c:b1:e3:1b:94:
13:9d:2e:60:5f:bb:1c:67:28:67:8f:5a:1a:42:97:
a8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:16:D2:29:70:39:BA:4D:7F:69:43:94:A6:30:5F:2C:3B:E3:7B:66
X509v3 Authority Key Identifier:
keyid:BE:03:17:60:2F:B0:CA:A3:A5:10:06:8B:D9:89:D4:6D:AE:38:4D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgMXYC-wyqOlEAaL2YnUba44TdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6bc113-89aa-45de-8895-14aaea208f25/1/vgMXYC-wyqOlEAaL2YnUba44TdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:82:b6:30:56:0b:92:87:20:8a:9e:63:bf:91:ce:33:c4:7b:
2b:56:f7:3d:1c:d8:46:42:82:50:cc:de:95:a1:f7:a7:c1:7d:
63:26:93:63:7a:dd:d0:9e:cb:79:b9:1f:62:ed:31:d2:0f:9d:
e4:71:61:21:24:55:26:0c:08:ec:fc:d2:c9:59:82:1b:5d:ce:
11:95:6e:4e:f4:e8:27:66:e3:cc:51:c7:bf:15:7a:f2:8d:e4:
8a:8a:7f:46:10:c4:a8:23:7b:95:ca:f4:4b:33:07:7b:07:8e:
7b:de:a1:49:94:47:c7:9c:4c:fb:2f:42:bb:1c:08:52:b0:94:
ec:cc:68:47:6b:e5:68:ee:39:31:a0:08:08:73:2c:3d:c9:76:
9e:f2:26:ad:e7:65:d6:b4:ff:91:9e:1f:2f:37:47:7f:02:a2:
a5:e6:90:7f:30:60:ad:60:fb:bd:64:29:f4:2f:9b:ab:e9:3f:
55:52:cb:5d:e3:d8:95:de:a6:da:6c:48:01:56:af:5b:d1:c4:
ea:e0:ed:84:f4:4b:85:4d:84:88:bd:db:fc:b3:ee:c5:d4:e6:
c5:77:9f:44:5e:34:d3:da:63:2c:f6:c9:b4:eb:3f:b9:b8:97:
57:d0:ee:c2:2d:ce:72:50:78:f4:76:09:a5:b6:db:f1:b5:fc:
49:47:4f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:22:21 2025 by rpki-client