Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
File: RgVeggAswL17mYfl1zZUIOr9SXA.mft (raw, json)
Hash identifier: ARPdXQj1W4a8nGPdWHP7pNffqDD8dtAk1MQZ+i2VInk=
Subject key identifier: 56:25:6A:59:AD:50:3B:DF:A9:05:8E:AC:30:FC:91:CE:C1:D7:CA:F2
Authority key identifier: 46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70
Certificate issuer: /CN=46055e82002cc0bd7b9987e5d7365420eafd4970
Certificate serial: 019A4F98D892550168BF342868DB378D1B43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 16:00:08 +0000
Manifest this update: Tue 04 Nov 2025 16:00:08 +0000
Manifest next update: Wed 05 Nov 2025 16:00:08 +0000
Files and hashes: 1: RgVeggAswL17mYfl1zZUIOr9SXA.crl (hash: 19qAUv+3C/3DWaNZxNRGPm/wAIlOJkf4fJujpiqKXME=)
2: VJnm1AkHiE7SuesA5idFH1REQdA.roa (hash: 1LlBKB7vOsPJ8FvhzoxofY1Pd+poAd3OYPCwf4CTRNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:d8:92:55:01:68:bf:34:28:68:db:37:8d:1b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46055e82002cc0bd7b9987e5d7365420eafd4970
Validity
Not Before: Nov 4 16:00:08 2025 GMT
Not After : Nov 5 16:00:08 2025 GMT
Subject: CN=56256a59ad503bdfa9058eac30fc91cec1d7caf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:50:dc:41:7d:29:7a:da:83:cf:83:b3:f8:c9:
f2:0f:55:83:cb:53:ba:c3:43:9a:c4:f6:72:21:46:
87:2c:18:26:b6:4b:05:0f:d0:a0:4d:d0:79:44:bd:
df:c6:6f:a0:56:be:eb:45:94:a4:08:ae:c3:53:bc:
cd:e6:ad:fb:de:52:4d:f9:0a:e3:61:bc:ae:17:6c:
c7:a6:12:6d:6d:7f:36:93:1e:b2:bf:31:d4:b5:4a:
ac:7a:0d:f2:f2:8e:f6:e3:1f:9d:08:92:7b:40:61:
c7:e3:b9:84:7e:2b:0f:07:6c:11:19:20:9b:90:d8:
a5:6c:1e:ab:35:df:6c:9e:9f:bf:28:df:88:58:25:
bd:9e:c5:ab:76:99:e1:32:fb:0a:2b:4b:a0:93:e8:
dc:85:d8:25:f3:49:50:e1:74:4c:99:8f:c1:8a:72:
26:88:2d:35:66:e9:92:04:d2:1c:f3:7a:81:39:4a:
6a:87:23:bd:c7:24:c0:62:2d:73:67:39:56:2a:8c:
a6:43:62:b7:13:ce:84:e0:b6:35:e8:12:b9:04:74:
9b:2b:f7:59:51:4f:88:00:17:c2:95:46:79:fe:c5:
01:9f:49:e8:ac:59:f3:b1:5b:10:e9:3a:5d:0a:e5:
4a:36:f6:79:c7:d0:be:b0:55:82:2b:9d:54:7c:3e:
d9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:25:6A:59:AD:50:3B:DF:A9:05:8E:AC:30:FC:91:CE:C1:D7:CA:F2
X509v3 Authority Key Identifier:
keyid:46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:99:d4:08:b5:0e:2b:d4:b3:ac:74:55:da:75:7e:7b:0a:8e:
ad:2a:3b:9d:c2:ab:e0:0b:78:00:66:6c:83:6e:34:ba:6b:e2:
c6:73:d3:a8:74:29:09:cc:aa:3b:82:c5:7e:ac:6e:5d:27:5c:
5d:fe:bc:80:60:37:65:72:59:10:ff:d8:e9:b4:95:3c:aa:3e:
c6:d1:d0:b0:4a:6d:22:3f:4b:f2:b2:64:dc:37:da:0d:67:ed:
c9:46:71:c2:a3:6d:0a:f1:ae:cc:3e:0d:38:b2:2d:2a:c7:8f:
45:e5:a4:44:ad:1a:b4:ca:04:01:21:92:3f:56:24:c0:98:27:
5d:0d:6c:4d:91:3a:08:5b:f9:ec:ec:47:f6:4e:3a:77:08:5b:
27:bf:66:43:4a:a3:6f:41:b0:e1:1a:1a:fc:eb:c6:ff:cc:57:
5e:6f:5e:48:0f:4c:8b:3d:6b:29:01:2d:4c:27:0c:74:a6:b6:
c0:a1:da:3a:0b:75:9f:f5:9e:ec:f8:9c:58:25:26:ce:78:36:
a3:78:03:00:0f:61:e2:e0:2e:86:d0:ef:cb:8f:5d:51:64:7c:
a8:8d:a6:f2:f6:78:4e:1b:b4:2d:77:b9:36:85:75:f6:37:5b:
ba:57:89:ea:30:14:48:2c:14:42:6d:81:83:f2:6d:b6:fd:1d:
9f:02:0d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:47 2025 by rpki-client