Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
File: vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft (raw, json)
Hash identifier: R7z7Xf6piVKuW3+yQBYqG+VA2bVltzIgTeXno9Ax244=
Subject key identifier: 11:E5:B0:9F:EF:5A:48:5E:BB:5C:45:53:61:43:E6:24:84:B2:3A:8F
Authority key identifier: BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64
Certificate issuer: /CN=bea1890c305b0f2da420b01697e3bf23d485ab64
Certificate serial: 01974A437327DB72D508200E61CA05515367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
Manifest number: 0DBD
Signing time: Sat 07 Jun 2025 12:00:23 +0000
Manifest this update: Sat 07 Jun 2025 12:00:23 +0000
Manifest next update: Sun 08 Jun 2025 12:00:23 +0000
Files and hashes: 1: kwNFG0wAspm4fsxR2YrPKVGk1Ig.roa (hash: Mk2aoCm4frK824+nr9MmscS3ypVOVo2+1jHAmjQT/qI=)
2: vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl (hash: 0E0rDoQ7Q4848XPBW961bMQ0+wHXj/4BTQjB1rOxys8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:73:27:db:72:d5:08:20:0e:61:ca:05:51:53:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea1890c305b0f2da420b01697e3bf23d485ab64
Validity
Not Before: Jun 7 12:00:23 2025 GMT
Not After : Jun 8 12:00:23 2025 GMT
Subject: CN=11e5b09fef5a485ebb5c45536143e62484b23a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ba:73:7e:28:5b:b8:dc:b7:aa:25:f3:37:11:
18:df:4d:aa:2d:4f:e5:73:6f:eb:1a:a6:8c:de:80:
5b:52:34:1d:42:25:19:98:65:b8:10:31:29:83:79:
e7:05:a6:54:fa:f0:a2:c2:7e:33:60:4a:33:3f:99:
87:89:5f:be:9f:a6:af:8e:62:fb:74:53:ff:76:33:
32:83:ec:d6:49:92:b1:e5:e5:dc:54:94:06:6d:36:
8e:f7:f7:bc:d6:af:f4:ae:42:5b:da:7e:f9:32:9b:
1b:e2:59:90:b3:42:1a:0c:0f:63:3d:35:db:4a:0d:
f9:80:bc:9d:80:68:7d:a6:89:71:15:6b:87:75:1d:
73:42:27:01:ae:5e:58:88:ad:3f:1b:4f:96:98:df:
4c:f7:50:5f:d0:99:57:cf:bc:e1:37:2d:0b:b2:e7:
bc:c3:38:81:99:dd:cb:eb:3d:23:b7:a6:7f:05:af:
7c:97:67:5d:54:8b:52:e2:97:2d:b5:9e:cd:b8:5e:
1b:f1:8b:e6:99:ee:97:bb:c1:2e:5c:4d:96:96:13:
4a:33:5f:09:63:a2:5f:a2:d8:3e:7a:d5:ba:55:b3:
e9:f7:61:e9:b5:d3:ca:e0:80:97:5a:1a:60:96:09:
5c:2f:cd:ef:ff:07:b7:79:c9:bb:81:7c:84:12:8e:
9e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E5:B0:9F:EF:5A:48:5E:BB:5C:45:53:61:43:E6:24:84:B2:3A:8F
X509v3 Authority Key Identifier:
keyid:BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ac:d3:fd:1e:38:74:4a:47:1d:42:ac:ab:7f:ca:f7:f2:af:
0f:18:c8:59:e6:f3:48:02:73:e9:de:40:3e:7c:3d:22:e7:27:
a6:a3:66:3e:a1:2b:18:37:8f:13:e0:13:d5:b7:50:3b:7f:ee:
30:a5:2e:a7:78:3c:6e:4c:c2:fc:e4:b9:7b:82:c1:d1:44:25:
0d:a5:2c:cb:50:2b:f5:7d:49:aa:bc:fc:cb:6b:d2:bf:ae:3b:
7a:09:3c:e0:5e:34:c2:a1:54:63:45:c2:1e:d9:92:6e:9d:d3:
b4:2a:1a:c5:d7:ff:16:2c:ac:56:1c:4d:ee:3a:46:bf:53:65:
ff:0f:cd:04:90:5e:f4:9c:5a:31:57:98:9c:00:0f:b9:ae:79:
cd:cf:55:ee:b5:15:07:83:9d:8d:53:6c:64:05:5b:0e:7f:af:
0e:70:9a:d1:35:94:5b:3d:ad:87:f3:d9:b3:ca:b1:82:36:0c:
45:a6:aa:b0:62:90:8e:33:5e:4d:bf:8a:9b:1a:12:ff:b1:98:
c0:83:35:66:ce:10:14:35:45:93:08:43:ce:e2:68:2d:59:fb:
61:8d:db:f5:10:8b:3f:b3:50:68:3e:e6:dc:3d:91:37:f8:c0:
1e:13:9e:d5:30:f0:b9:c6:49:fe:b3:80:f6:ee:75:1e:a2:46:
30:c6:57:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:47:47 2025 by rpki-client