Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
File: vqPSZTUbZfI58pl94eioBneTOl4.mft (raw, json)
Hash identifier: hmNknmOizkQmQ8FJRfBVP1676VIwxnllNhHk/MU0Ius=
Subject key identifier: 8B:28:58:04:DF:75:92:6D:D1:31:23:EB:98:BE:BA:0E:36:78:B4:5E
Authority key identifier: BE:A3:D2:65:35:1B:65:F2:39:F2:99:7D:E1:E8:A8:06:77:93:3A:5E
Certificate issuer: /CN=bea3d265351b65f239f2997de1e8a80677933a5e
Certificate serial: 01964444B369ADBD04C54CF14F7BD3BDA977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
Manifest number: 031A
Signing time: Thu 17 Apr 2025 15:01:15 +0000
Manifest this update: Thu 17 Apr 2025 15:01:15 +0000
Manifest next update: Fri 18 Apr 2025 15:01:15 +0000
Files and hashes: 1: qeUjFmDBXRanRORKytHhxi_chXY.roa (hash: BDfZzOuGAgs1F3dD55NRk4ttvCosc+ZV+zf9zuFmFos=)
2: vqPSZTUbZfI58pl94eioBneTOl4.crl (hash: V7vjYswATrVpIUMcyEUfvFWp7Y9Kt/q7TAABH8XqEh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:44:b3:69:ad:bd:04:c5:4c:f1:4f:7b:d3:bd:a9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea3d265351b65f239f2997de1e8a80677933a5e
Validity
Not Before: Apr 17 15:01:15 2025 GMT
Not After : Apr 18 15:01:15 2025 GMT
Subject: CN=8b285804df75926dd13123eb98beba0e3678b45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a5:c9:c2:15:3f:1d:45:95:21:96:e8:58:a2:
6e:dc:b0:1c:05:63:99:2e:11:98:5c:73:60:8d:1b:
e8:00:6d:7a:f9:a5:a7:44:44:18:2f:77:f1:52:be:
87:5d:9d:d2:b1:03:d5:1d:ea:e7:f2:4d:d8:02:78:
9c:f4:3e:a1:98:98:f2:b0:d6:16:06:e0:5a:ff:d2:
aa:53:bf:f0:a7:70:90:26:16:ae:4a:24:89:e0:3a:
c7:30:ad:0f:47:7c:00:4e:b2:ca:de:cc:de:05:c6:
de:bf:16:2f:65:25:53:b4:f2:b2:57:7b:ab:7f:0a:
1e:1c:ba:7b:d4:d2:7b:6e:86:a3:a1:52:d7:ba:f9:
5b:14:50:ff:4e:0b:b3:f4:11:64:a7:70:b0:26:38:
35:ba:7e:72:d1:02:8f:1e:53:6b:a9:5c:61:71:36:
4d:1d:c8:1b:97:33:0b:0a:da:a1:61:37:bf:fe:b4:
6b:c7:27:70:52:00:c1:17:b1:90:2d:93:fb:24:83:
36:bb:2c:d7:a6:5a:6f:f5:7e:02:ab:e5:8f:b8:70:
99:30:bc:87:ef:4d:97:35:c7:77:e5:9c:d6:37:bd:
a8:a6:6c:81:e3:aa:8a:3b:79:3e:06:f3:e1:a5:e3:
4b:27:db:d6:f5:be:2d:e1:ba:85:54:ee:02:79:27:
23:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:28:58:04:DF:75:92:6D:D1:31:23:EB:98:BE:BA:0E:36:78:B4:5E
X509v3 Authority Key Identifier:
keyid:BE:A3:D2:65:35:1B:65:F2:39:F2:99:7D:E1:E8:A8:06:77:93:3A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:88:96:3e:40:4d:b8:c2:25:e8:37:44:31:f4:b6:8e:64:c7:
83:7b:c4:e7:28:5f:36:30:13:49:d5:7a:75:74:d0:4b:a2:f3:
b8:e2:58:6d:f3:2d:91:a9:e3:08:0f:0f:ed:65:d2:76:e6:e9:
f1:4e:15:0b:77:2d:f7:d4:4e:5c:b7:ac:63:ae:19:05:ae:7a:
fd:a2:9f:a6:5d:91:93:09:bd:f8:e6:e8:cf:14:f1:67:a3:13:
3e:f0:fb:20:86:66:31:01:10:d0:29:a7:2f:be:1d:34:e9:10:
17:3b:90:bb:14:ab:82:0e:88:99:e3:c3:9f:4d:fc:c4:1e:dc:
b9:29:29:83:c0:8e:48:45:b2:3d:60:23:7b:0e:58:c2:c3:27:
77:49:ab:ba:64:71:31:9a:3a:db:97:40:3e:51:ba:ec:69:eb:
13:b6:09:ce:17:f0:16:62:50:f1:3c:ef:8e:04:f0:e3:b1:65:
d1:95:f7:a6:1f:61:0d:a0:8d:fb:b0:02:ab:e9:84:8f:8f:93:
e5:b8:bb:7a:69:c0:65:11:82:a2:ee:9f:e2:ba:36:2b:35:64:
d2:83:fd:7a:50:b2:bf:5a:9a:74:89:f9:2e:18:63:99:49:89:
bd:32:8a:ae:9d:d3:e3:13:a3:68:07:10:13:2e:c2:54:b3:bc:
bc:63:bc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:20:44 2025 by rpki-client