Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
File: vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft (raw, json)
Hash identifier: KtITDfYHSG07QIzYcyKOCqUTkkV1aB+jrqFc5DsAT64=
Subject key identifier: 58:00:84:23:D9:C7:28:F3:B6:46:02:A1:A4:97:1C:79:18:A7:1C:CA
Authority key identifier: BE:0F:8F:14:F2:20:E9:3E:E3:47:47:C4:D6:DB:F1:AD:35:B3:83:FA
Certificate issuer: /CN=be0f8f14f220e93ee34747c4d6dbf1ad35b383fa
Certificate serial: 019873E260110FD63F64762954E05BE514DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
Manifest number: 0CEB
Signing time: Mon 04 Aug 2025 07:01:12 +0000
Manifest this update: Mon 04 Aug 2025 07:01:12 +0000
Manifest next update: Tue 05 Aug 2025 07:01:12 +0000
Files and hashes: 1: vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl (hash: R/s0NG4WdHCBrmpmdJy/zwDS2FWAsFA05hu+FmGH8dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:60:11:0f:d6:3f:64:76:29:54:e0:5b:e5:14:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be0f8f14f220e93ee34747c4d6dbf1ad35b383fa
Validity
Not Before: Aug 4 07:01:12 2025 GMT
Not After : Aug 5 07:01:12 2025 GMT
Subject: CN=58008423d9c728f3b64602a1a4971c7918a71cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c1:44:1e:82:74:2c:03:87:77:a7:ca:43:3c:
44:d2:7b:02:35:3b:80:59:27:a9:29:e2:45:c8:52:
8c:5d:80:fb:4c:a1:b5:59:b7:4e:0b:6a:00:6e:f7:
77:c8:1d:df:b0:da:1e:6e:d8:0e:7b:89:8a:8d:60:
bf:d2:1c:c0:4c:d7:dd:64:1d:50:91:ba:76:88:a8:
7e:eb:ba:74:4d:ed:f8:76:7e:fe:30:36:7b:3c:90:
2e:f2:dd:5b:74:c6:fa:6c:fd:89:22:dd:3a:a9:22:
16:c7:17:fa:e4:88:56:a6:e0:b1:a1:e7:ba:41:18:
e8:2d:fb:ba:64:1e:65:d5:09:ea:0b:b2:34:9b:f2:
92:f4:3d:ef:ce:7a:9d:7a:96:f3:da:77:c6:9e:36:
d0:3f:c9:5a:62:9a:44:13:48:3d:23:57:4c:59:54:
27:2f:d7:85:71:33:27:d4:57:f8:c7:ac:db:68:9d:
a9:08:af:c4:3a:d7:fb:8b:17:0b:dc:14:92:6a:74:
9e:5a:8d:f7:f7:13:bd:9e:99:32:7e:17:37:18:88:
7c:df:cf:80:b4:90:7a:dc:cc:6d:22:a1:79:70:70:
8b:f3:cb:02:ad:d3:25:70:4f:34:a7:a4:55:40:06:
0b:0b:c0:78:05:50:60:7e:f2:a4:db:aa:39:92:c4:
ef:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:00:84:23:D9:C7:28:F3:B6:46:02:A1:A4:97:1C:79:18:A7:1C:CA
X509v3 Authority Key Identifier:
keyid:BE:0F:8F:14:F2:20:E9:3E:E3:47:47:C4:D6:DB:F1:AD:35:B3:83:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8a:5e:38:c5:c7:c4:91:9b:09:4c:9d:00:7c:2c:1f:c9:62:
be:27:ea:f8:c8:7b:e8:43:c8:ae:81:76:18:6b:0f:58:3d:93:
22:b4:91:05:02:b3:2a:43:84:dc:35:ae:6b:5d:93:3f:da:5a:
e2:a5:a7:ec:98:32:9e:78:13:8e:9b:5b:30:fd:70:45:83:10:
83:e9:d7:6b:6d:3a:47:14:09:d6:78:99:f9:b6:d2:90:be:a2:
89:82:06:70:81:2a:84:dd:17:6a:5f:a8:4a:5d:76:0f:51:8c:
69:f3:97:67:31:cd:18:2f:f9:d7:82:02:f5:f8:c0:f3:4b:26:
0f:e6:fc:40:46:34:9e:3b:ca:4c:6c:70:e2:ae:04:37:d1:a8:
de:7f:18:fb:ec:41:f5:71:c7:e7:57:06:6e:8f:9b:11:16:73:
e7:0a:a0:fd:d6:13:ec:cb:4c:ef:02:41:2a:9a:8f:9a:72:6c:
79:f1:ed:b5:3f:8d:d1:65:68:a8:4c:a9:00:c9:09:c4:e7:49:
0d:66:76:1f:b9:b2:f2:e3:76:00:02:3f:9c:96:be:86:46:be:
7d:a2:2f:df:0e:2e:87:30:a6:08:17:39:4b:0d:8b:8b:40:7a:
40:0f:e4:70:37:27:3d:3f:02:c4:f5:c8:b2:b3:1c:3d:bd:43:
d4:00:c3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:58:53 2025 by rpki-client