Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
File: vhqIfnZTot5E8TFj4YcDcyaimgM.mft (raw, json)
Hash identifier: s+1aeZ77Y+5U/3aq13lmrPZ8H0QbtVY/WZomi34/sxk=
Subject key identifier: 5E:2C:D4:1F:3D:AF:29:32:03:E7:2B:D2:68:81:81:8F:06:24:2A:05
Authority key identifier: BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03
Certificate issuer: /CN=be1a887e7653a2de44f13163e187037326a29a03
Certificate serial: 0196556E71EBAF6D6B3E3EBAC91723E8478B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
Manifest number: 1504
Signing time: Sun 20 Apr 2025 23:00:23 +0000
Manifest this update: Sun 20 Apr 2025 23:00:23 +0000
Manifest next update: Mon 21 Apr 2025 23:00:23 +0000
Files and hashes: 1: Ae-diP3rVk-4sa-PXAYgbcBanm4.roa (hash: u0iGxdBhci5JERVXq9GDeBfY++asc/728T5ZMln1pyE=)
2: Z9qZa3inYQ6MRNBOPIdAZNAoS4Y.roa (hash: hXK11vHnwMejj7JOnaAkUByhg12mm0SXJ7OP6kT8Ve8=)
3: vhqIfnZTot5E8TFj4YcDcyaimgM.crl (hash: m9+Kg+lOwI7grAeMlwpgXPq0x+JN4w8TS7Gyq/bORsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:71:eb:af:6d:6b:3e:3e:ba:c9:17:23:e8:47:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1a887e7653a2de44f13163e187037326a29a03
Validity
Not Before: Apr 20 23:00:23 2025 GMT
Not After : Apr 21 23:00:23 2025 GMT
Subject: CN=5e2cd41f3daf293203e72bd26881818f06242a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:50:2e:46:ac:31:c3:c3:29:70:e0:b3:99:4a:
c8:70:82:2c:6e:68:71:f8:ef:a6:26:ce:6b:27:65:
0d:13:81:67:5d:3c:87:2a:13:93:f1:bd:ad:e4:19:
37:5a:5b:cf:15:d6:4d:4d:a2:44:41:24:11:ea:25:
c3:b4:0c:7c:56:09:16:63:ba:df:a7:60:01:ac:a1:
b9:78:59:3a:ab:11:50:a8:7f:42:4f:6a:92:2f:cb:
21:f1:fe:f8:09:78:c4:bd:93:51:16:44:a3:f1:cb:
9a:0e:3b:b7:d2:a8:76:d8:91:c1:aa:27:e3:bd:a3:
55:0d:a2:a9:43:6b:12:72:76:dd:5a:22:c4:eb:e6:
00:5c:e3:80:a0:65:a1:61:7f:56:29:b1:e8:3e:de:
ed:ea:13:b8:a3:ba:76:7a:01:2e:5c:9f:f9:07:07:
4c:e4:fc:e8:6d:c7:dc:65:49:ce:c1:80:dc:41:16:
ee:a0:e9:4c:73:3b:06:a7:2e:ae:97:be:a9:d9:b9:
e8:dc:e9:da:5d:2b:de:b6:4a:15:76:cc:7b:2a:6b:
26:38:e2:b6:2b:59:98:ed:51:0e:c9:b2:5d:a7:9b:
05:81:5e:c0:05:10:c3:7b:0f:96:6e:cd:1c:00:50:
bf:22:7c:a6:94:22:8b:1d:a1:16:46:30:22:46:69:
6f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2C:D4:1F:3D:AF:29:32:03:E7:2B:D2:68:81:81:8F:06:24:2A:05
X509v3 Authority Key Identifier:
keyid:BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:88:33:4d:b2:ff:12:f3:ba:a5:99:4a:21:40:21:90:36:32:
72:a8:ca:e2:7e:51:23:a4:56:a3:08:ed:b2:45:b1:c4:3f:e9:
d4:ad:f8:85:df:88:0a:aa:41:39:cc:2d:19:46:b8:db:b3:74:
be:a4:50:24:ad:ae:b8:a7:3f:0f:9a:47:a6:ee:87:80:15:cc:
d9:de:12:42:5e:f5:c7:70:4c:49:cf:a0:62:af:f9:6f:13:74:
1b:34:8c:55:ee:4b:f9:fb:01:6f:b2:f6:f8:8f:b9:2f:6b:e2:
e6:4e:1b:4b:15:cc:da:98:28:3f:47:17:7e:02:cd:dd:8c:bf:
13:4a:8e:0b:02:af:0d:d0:7d:5a:2d:76:86:1f:63:db:6c:58:
8e:e0:c1:df:a0:81:0b:10:bc:02:a2:82:1c:d6:21:db:80:82:
8e:a1:a8:1d:08:47:2e:a1:1b:3b:bf:b9:6c:a5:ec:a8:89:d6:
f5:63:53:65:05:79:74:c0:f2:bc:b5:49:c4:8a:f6:94:6d:30:
1d:8e:da:1c:72:af:96:60:ca:73:df:73:dd:0f:22:fc:a6:36:
9f:be:57:cf:7b:61:82:c0:19:6f:7e:cd:2e:3a:96:b6:e1:30:
aa:c8:e8:f3:d3:06:81:bc:f2:e7:23:6a:7b:20:cd:bf:4d:28:
79:4e:b9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:23:25 2025 by rpki-client