Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
File: vhqIfnZTot5E8TFj4YcDcyaimgM.mft (raw, json)
Hash identifier: dYB3CdsYGYrEFs8C5m5IV6WEMPrhkMycpfMcjkUgBwM=
Subject key identifier: 3B:DB:7A:52:7C:A9:12:6F:83:E9:3F:9C:EA:3F:4C:07:1E:41:7B:83
Authority key identifier: BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03
Certificate issuer: /CN=be1a887e7653a2de44f13163e187037326a29a03
Certificate serial: 01974AB1C44AD5305B78887C15BD6037DD39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
Manifest number: 1583
Signing time: Sat 07 Jun 2025 14:00:53 +0000
Manifest this update: Sat 07 Jun 2025 14:00:53 +0000
Manifest next update: Sun 08 Jun 2025 14:00:53 +0000
Files and hashes: 1: Ae-diP3rVk-4sa-PXAYgbcBanm4.roa (hash: u0iGxdBhci5JERVXq9GDeBfY++asc/728T5ZMln1pyE=)
2: Z9qZa3inYQ6MRNBOPIdAZNAoS4Y.roa (hash: hXK11vHnwMejj7JOnaAkUByhg12mm0SXJ7OP6kT8Ve8=)
3: vhqIfnZTot5E8TFj4YcDcyaimgM.crl (hash: P7bXKVcM/m4B6xmi17IMGRtjkThmmPFDzaqSKaKL2yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:c4:4a:d5:30:5b:78:88:7c:15:bd:60:37:dd:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1a887e7653a2de44f13163e187037326a29a03
Validity
Not Before: Jun 7 14:00:53 2025 GMT
Not After : Jun 8 14:00:53 2025 GMT
Subject: CN=3bdb7a527ca9126f83e93f9cea3f4c071e417b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7d:2b:14:d2:67:34:99:b2:fe:19:79:13:30:
fc:66:7f:7e:c1:45:7a:50:a8:42:9b:cb:e9:45:82:
3d:74:51:0d:2d:20:de:9a:15:7b:a7:d9:7d:9a:4c:
1e:7d:7c:84:38:17:d4:1c:c5:3f:80:d7:96:53:f0:
6a:56:a1:36:d9:51:04:72:2f:ee:3a:3b:38:d6:eb:
cb:62:9a:ca:d2:61:85:ae:3d:55:54:25:7d:8b:7b:
23:b4:7a:e4:da:5e:73:b2:4a:ec:4d:3b:ed:0d:c8:
f2:53:07:6a:c9:91:de:8b:21:5f:b7:e9:b5:e0:a7:
0e:3a:a8:19:74:d9:74:81:8e:2f:b6:8d:b0:45:e4:
93:c4:56:59:b9:12:a8:61:c5:bc:b2:3b:14:3c:f3:
59:01:ef:f3:ad:63:17:6d:b4:35:c1:28:c4:3d:40:
00:81:75:8d:62:2f:7e:7d:33:b1:db:fa:ac:8c:29:
46:14:6e:8d:40:77:0c:9a:ac:b3:fc:3e:c5:2f:76:
69:9c:67:4b:bd:14:c4:29:00:33:95:ab:88:79:4e:
d3:94:ed:e4:4a:26:9f:ef:38:30:20:b8:22:19:ce:
77:d3:9d:8e:56:7a:d2:eb:1b:8f:5f:d6:1d:b9:28:
17:97:c8:81:10:12:9d:42:53:cf:f9:1b:b5:c2:25:
a1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DB:7A:52:7C:A9:12:6F:83:E9:3F:9C:EA:3F:4C:07:1E:41:7B:83
X509v3 Authority Key Identifier:
keyid:BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:de:c9:6c:43:5c:6c:72:5c:84:d3:c5:8e:54:04:23:c0:de:
fe:af:d8:63:3e:aa:09:98:45:56:1f:fa:bc:d1:35:65:3c:6b:
9b:89:a5:24:b2:ec:6c:10:29:67:57:45:40:15:ce:50:f3:a8:
6c:0e:6c:55:04:ee:c2:69:5a:3d:35:46:6a:1d:76:22:63:45:
ac:55:01:31:13:da:d1:cc:fd:7a:6c:55:e0:a5:83:aa:9b:01:
68:eb:82:c6:6d:84:5e:ef:92:37:ef:20:99:c3:de:00:e1:d8:
ef:a7:98:2e:79:15:3e:64:73:14:d0:f8:d9:67:02:fc:3c:58:
34:99:c1:fd:55:fd:08:08:00:f8:06:e8:2e:f8:56:72:3b:52:
31:bb:8c:7a:ef:f4:70:1d:ce:9c:80:72:e8:04:08:0c:3f:8d:
c0:42:88:b2:8c:b2:74:f7:a1:84:30:34:a9:f5:d0:41:09:cc:
23:e7:db:b4:49:44:d4:82:85:7e:25:1c:88:ff:5c:d9:1a:86:
e6:0b:65:a8:e3:d5:f3:d1:72:0a:2f:27:4c:2e:4a:44:39:9d:
bf:fe:71:84:58:28:52:dd:1d:e8:77:cd:19:98:24:7b:bc:06:
8f:7c:9e:9e:be:fb:fa:85:44:76:88:57:d9:8d:bc:cd:ca:db:
70:3e:48:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:52:02 2025 by rpki-client