Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
File: vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft (raw, json)
Hash identifier: jlj3d3HMPeDnlnZwghacuw0IyeX9CK6CYAQjACE6E8A=
Subject key identifier: 20:10:19:4D:11:90:50:07:4F:F2:A9:94:52:96:CC:F3:C3:53:E5:99
Authority key identifier: BD:A3:D0:BB:42:2B:0B:CA:70:67:16:C2:0F:7A:D5:8D:D2:76:54:71
Certificate issuer: /CN=bda3d0bb422b0bca706716c20f7ad58dd2765471
Certificate serial: 01974EFBF687712EBE234A93DE12F495BB08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
Manifest number: 14D5
Signing time: Sun 08 Jun 2025 10:00:24 +0000
Manifest this update: Sun 08 Jun 2025 10:00:24 +0000
Manifest next update: Mon 09 Jun 2025 10:00:24 +0000
Files and hashes: 1: 2NhKjFbuAMp_doRz4AUPYRbSyEU.roa (hash: IgIsz5WqF9AXjPzeVD1tKo5xC9L3dTvcfnef5uQtbKI=)
2: vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl (hash: fGJR3T+aNjdSmcss7pUXbp+pSU7KTU1RrN5jl/BDiY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fb:f6:87:71:2e:be:23:4a:93:de:12:f4:95:bb:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda3d0bb422b0bca706716c20f7ad58dd2765471
Validity
Not Before: Jun 8 10:00:24 2025 GMT
Not After : Jun 9 10:00:24 2025 GMT
Subject: CN=2010194d119050074ff2a9945296ccf3c353e599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a6:da:88:56:7d:8b:02:32:aa:39:fa:de:f1:
46:ad:2c:04:34:ac:d9:07:19:a3:ae:8f:d8:00:d6:
ad:64:76:f5:eb:04:07:04:97:de:a3:d1:b1:9d:d8:
1b:1a:25:47:4a:e1:c8:ad:fc:e6:8e:ae:e3:c8:f4:
f0:42:ed:3a:37:6f:6c:0e:02:db:72:03:d0:c9:00:
5b:3b:91:40:34:bd:85:72:99:22:b4:ff:20:95:48:
cf:3e:0c:05:d0:ea:bf:91:87:65:a5:6d:98:d7:56:
54:44:f6:28:dd:c8:39:d2:a0:08:21:f1:9e:39:d5:
fd:c8:de:94:c2:af:d3:76:ed:18:16:bb:03:e2:df:
55:e5:b9:8c:1f:b1:bf:78:3c:97:7c:01:2b:05:f4:
4d:a4:39:d1:23:bb:fc:ce:c7:0d:d7:41:a5:35:13:
fb:86:00:2b:33:2c:0b:11:b1:f0:98:af:91:c1:99:
48:38:a7:6e:8d:5e:6e:9f:56:98:15:89:53:d5:84:
29:93:9d:3e:0e:47:e1:48:42:03:72:cc:39:44:14:
48:c1:8f:11:5f:fa:92:7b:3e:91:ad:76:9b:01:ab:
df:41:b0:64:69:c2:b0:83:d5:cc:71:09:5e:a4:c8:
43:7a:39:e6:f3:c7:c3:34:f9:64:63:6a:07:94:16:
3c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:10:19:4D:11:90:50:07:4F:F2:A9:94:52:96:CC:F3:C3:53:E5:99
X509v3 Authority Key Identifier:
keyid:BD:A3:D0:BB:42:2B:0B:CA:70:67:16:C2:0F:7A:D5:8D:D2:76:54:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:49:9f:f4:a1:43:f6:32:de:01:73:40:91:73:7d:f9:09:a2:
27:e5:d3:f3:f3:f7:69:fa:0e:8c:c4:fe:7d:b1:dc:50:07:4a:
09:38:e9:de:db:ac:10:cc:e6:3e:09:0e:3f:ec:72:b8:98:b6:
3b:55:35:bd:38:46:25:6f:62:14:24:e0:4a:02:f9:5d:a4:81:
d4:5b:96:91:31:c8:12:1b:f4:08:83:3d:df:f4:73:f0:5d:32:
5d:3d:f4:e3:47:4b:6d:0a:01:fe:e3:bb:24:ac:f2:f4:aa:31:
bd:cd:70:83:f3:6e:1d:fb:03:ae:a3:84:9c:6b:10:11:be:7d:
ab:59:df:ec:53:fd:43:58:31:6d:90:cf:43:a4:8a:db:9e:93:
b6:0b:00:cb:cd:30:3e:4c:35:87:36:af:11:ac:27:66:9a:7e:
21:92:36:8f:b3:1a:51:38:ee:e7:66:b3:01:5e:48:3b:5a:4e:
95:d9:48:88:fe:bb:9e:a9:66:25:dc:db:77:5b:65:36:51:e1:
bd:cb:83:10:85:cb:9a:91:c7:1f:2f:61:90:6c:61:99:c7:ce:
c6:0a:ed:df:1b:0e:f0:b4:4f:5c:7d:cc:40:82:16:b0:8c:cc:
62:48:69:0d:40:f1:55:dd:09:de:85:32:6b:06:20:ce:da:a6:
97:e6:38:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:58:20 2025 by rpki-client