Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
File: vqPSZTUbZfI58pl94eioBneTOl4.mft (raw, json)
Hash identifier: yZCEyKlbcQk+o4/EYGMf3Ag1U5ElcQrmc2YzDziKdak=
Subject key identifier: DD:60:13:8C:BB:85:76:CA:0F:95:2A:42:38:C1:95:3E:A0:8A:D1:A1
Authority key identifier: BE:A3:D2:65:35:1B:65:F2:39:F2:99:7D:E1:E8:A8:06:77:93:3A:5E
Certificate issuer: /CN=bea3d265351b65f239f2997de1e8a80677933a5e
Certificate serial: 0197470B70261657A24F4F682265890FA257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
Manifest number: 03A0
Signing time: Fri 06 Jun 2025 21:00:21 +0000
Manifest this update: Fri 06 Jun 2025 21:00:21 +0000
Manifest next update: Sat 07 Jun 2025 21:00:21 +0000
Files and hashes: 1: qeUjFmDBXRanRORKytHhxi_chXY.roa (hash: BDfZzOuGAgs1F3dD55NRk4ttvCosc+ZV+zf9zuFmFos=)
2: vqPSZTUbZfI58pl94eioBneTOl4.crl (hash: /bjQXcBr/m3IUWkAjopfdAjXs5/VuBY0adslFNr/Vkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:70:26:16:57:a2:4f:4f:68:22:65:89:0f:a2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea3d265351b65f239f2997de1e8a80677933a5e
Validity
Not Before: Jun 6 21:00:21 2025 GMT
Not After : Jun 7 21:00:21 2025 GMT
Subject: CN=dd60138cbb8576ca0f952a4238c1953ea08ad1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5c:ec:bf:8e:54:e7:0e:9c:84:19:23:66:ee:
b3:5b:b8:ca:40:f5:0f:56:55:fe:e7:52:ae:74:e2:
29:97:7a:14:00:5d:d2:de:d9:a5:5b:30:e2:c9:95:
4e:da:f7:bf:25:1d:b5:2f:44:62:24:ff:0f:22:47:
3a:13:60:c2:be:03:46:17:af:d9:30:89:03:32:7a:
5e:7b:53:cf:b8:40:4d:47:81:5c:bd:90:db:31:41:
04:02:67:04:6f:1c:1c:99:9d:64:1e:f5:e9:34:fd:
2b:87:4a:56:62:a4:90:47:b9:de:76:c1:cc:29:ca:
57:fe:74:8b:7a:25:65:2b:d4:7c:fa:9b:af:70:f2:
ca:f9:ca:98:66:16:7c:df:24:ed:1c:6d:c2:90:93:
3c:7b:f7:e4:39:f2:4e:8e:64:c6:cf:2b:b1:64:09:
bd:ef:42:57:39:98:7b:be:cb:50:ee:6a:1c:52:14:
56:d6:7f:9f:ce:07:0f:21:62:a9:cb:ae:6f:11:cd:
8f:e9:b8:ce:f4:4e:27:2b:f0:09:a4:29:c8:9c:02:
18:79:ca:bc:1d:f3:ce:20:d6:41:74:f7:7e:44:de:
0b:77:60:c4:92:7e:f4:5f:c8:58:56:ee:54:79:34:
b8:8d:63:78:75:41:fa:fd:7a:64:97:8f:47:e5:55:
ba:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:60:13:8C:BB:85:76:CA:0F:95:2A:42:38:C1:95:3E:A0:8A:D1:A1
X509v3 Authority Key Identifier:
keyid:BE:A3:D2:65:35:1B:65:F2:39:F2:99:7D:E1:E8:A8:06:77:93:3A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:01:3f:31:d4:d0:93:12:5b:7f:31:2d:e2:cc:10:da:90:27:
5d:b4:c3:f0:a8:3d:28:8b:33:bb:da:8a:52:71:3f:b7:89:2d:
5d:0b:f7:e3:29:97:81:95:36:94:4c:28:27:ab:44:0e:ea:c2:
4d:b3:85:3a:a6:67:9c:74:cf:04:4a:d9:07:5d:1b:c8:05:58:
21:ea:50:3d:15:5a:dc:7d:2b:be:b4:be:f9:b4:ea:3f:15:77:
38:d6:d9:96:6a:6b:50:17:63:65:4d:9e:8e:3e:7b:fc:54:c4:
46:e9:15:e5:f5:4a:5d:40:72:88:58:8b:bf:97:74:9f:fc:44:
76:ac:c1:b6:5c:eb:42:53:9d:f8:3c:5b:05:c9:28:ce:de:fe:
bd:f4:77:23:d9:2a:bc:b3:89:84:39:bf:93:5b:91:ec:e2:1a:
f8:e4:54:a7:05:2c:f4:65:be:8a:88:89:1a:02:b9:fd:b5:8d:
a6:9b:d3:2a:fb:b5:4d:ae:05:5c:5c:52:10:8b:a2:c7:e5:c4:
4e:6a:34:58:eb:40:a0:0d:fa:7a:09:29:83:a1:db:26:f7:e8:
9e:0b:f5:ac:92:81:f7:29:6f:1b:86:2e:56:23:20:56:5f:57:
38:04:1f:8a:44:a4:2a:24:7b:d6:4b:d3:b8:c2:0a:a0:b1:8b:
e4:3e:f3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:55:54 2025 by rpki-client