Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
File: VQt8DIuuYQ9-UZwEhaR3O860jas.mft (raw, json)
Hash identifier: uGRHUecVvJaxf6841/kQmeFbZq8V7nxmtNS5c8VoShM=
Subject key identifier: 90:6F:B2:6B:E1:A1:DC:8E:11:08:09:8A:DC:19:65:B3:BD:DD:F9:07
Authority key identifier: 55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
Certificate issuer: /CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
Certificate serial: 019752345C2F870368B356AE03069A09B2C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
Manifest number: 1584
Signing time: Mon 09 Jun 2025 01:00:52 +0000
Manifest this update: Mon 09 Jun 2025 01:00:52 +0000
Manifest next update: Tue 10 Jun 2025 01:00:52 +0000
Files and hashes: 1: 3qH8ZS9wbp4ZckrapmstLsBtl4U.roa (hash: 15PfLViKUV8ieAONMSTBZ+uuNJdfqoHQHR26dEyF8eQ=)
2: 5puypGdPqGafWp1AyvNSb1EuBNw.roa (hash: qaaid804rsK3hU7FOxciCy5ptxREK/wMCBWzAUs6cK0=)
3: VQt8DIuuYQ9-UZwEhaR3O860jas.crl (hash: qGcOex8m1+UFDxD6Hkr2nK3+PYh4ljCIBASY+3MaV7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:34:5c:2f:87:03:68:b3:56:ae:03:06:9a:09:b2:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
Validity
Not Before: Jun 9 01:00:52 2025 GMT
Not After : Jun 10 01:00:52 2025 GMT
Subject: CN=906fb26be1a1dc8e1108098adc1965b3bdddf907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7a:ba:d1:e1:0e:92:02:9a:a9:45:23:2b:7a:
d7:a9:3f:47:d9:75:7f:fc:57:a8:7d:c4:14:81:bd:
76:32:76:68:e8:c5:1f:0a:32:6a:d2:a2:58:03:72:
61:7e:dd:a7:b4:d4:66:08:8c:d8:f1:e0:a8:e3:52:
bb:4b:18:90:aa:56:dc:7e:ff:5b:77:53:4f:68:7d:
d7:a9:3e:6f:87:c5:85:85:f7:53:7c:44:98:56:9e:
a4:90:f1:cd:23:8b:e7:bd:e5:da:97:0b:04:0b:76:
7d:b5:9f:0d:56:18:7e:a3:92:25:0a:0c:2b:1d:25:
94:1b:75:59:89:ce:e5:a5:87:4a:6f:80:e5:7e:c5:
2a:ec:c5:54:93:2c:0f:1f:bf:2c:3a:16:ef:8d:76:
c8:57:cd:99:be:44:c4:49:da:5e:57:33:4e:c4:ec:
58:51:2b:e5:5a:ad:65:36:63:bc:59:ea:fd:e8:ac:
e9:61:90:24:a3:7d:17:05:03:6f:96:65:f4:b7:9a:
39:c7:e3:09:ef:2a:08:df:d4:56:db:2e:a9:99:74:
52:da:7c:d1:ed:35:07:aa:d1:b9:b9:df:94:db:ee:
91:bb:8e:0c:27:a0:72:90:65:3b:4a:4c:60:e1:2e:
cf:c5:3b:e4:51:63:78:22:74:72:a3:45:df:59:63:
85:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:6F:B2:6B:E1:A1:DC:8E:11:08:09:8A:DC:19:65:B3:BD:DD:F9:07
X509v3 Authority Key Identifier:
keyid:55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d7:88:75:32:ad:d9:4d:ea:be:57:5e:7a:df:6e:23:9b:1b:
8e:6e:8b:72:ed:00:37:79:95:62:aa:cf:0c:91:de:ab:79:27:
a7:ae:ee:5e:d1:20:28:a8:d0:5b:37:0c:02:a6:69:15:87:af:
e9:54:82:0a:2b:34:86:53:83:53:25:16:98:a5:84:95:6a:a0:
b0:1f:ad:ba:ab:81:14:3c:2f:a5:84:07:c4:5e:24:dc:fb:1d:
0c:b2:d9:49:52:b7:b8:11:b1:1e:5a:3e:80:5a:d0:07:1b:58:
42:ec:89:92:97:12:95:a5:cc:29:69:21:02:9c:ae:a7:f7:b2:
2b:c1:de:ac:72:de:15:d1:d5:53:c9:ac:80:78:b4:5c:9e:2a:
97:d2:dd:22:2a:94:58:67:37:e7:ba:71:a2:69:9a:d6:ce:43:
3f:28:59:8a:86:3b:b3:e0:91:d9:9b:fb:58:43:5e:7d:8c:d3:
68:f3:b3:17:37:61:53:8d:e9:35:2c:a1:a4:ab:b3:48:e0:d0:
9f:aa:61:0f:4d:50:cc:8b:ed:be:b0:e8:43:e7:8c:80:3c:a6:
bd:ef:5f:47:e0:b2:c8:43:6e:91:41:c7:75:39:96:25:ec:64:
54:c9:13:01:f8:f1:5d:cf:55:34:c2:3f:fa:a3:bc:01:6a:d5:
a2:78:3a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:07:24 2025 by rpki-client