Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
File: vqbKA6jBNc7q4jLJN8HuC6uH54I.mft (raw, json)
Hash identifier: uNp8cF6vVH7rUnNzWoT497KCh0G1UFKdPBZNteEsyBI=
Subject key identifier: 10:93:28:6D:B0:68:C3:7F:AA:7C:60:AD:4A:D5:FF:C5:7A:69:3C:42
Authority key identifier: BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82
Certificate issuer: /CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
Certificate serial: 0197428A02A0FFEEAE22DEAB619F0D6E0528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
Manifest number: 0D92
Signing time: Fri 06 Jun 2025 00:00:30 +0000
Manifest this update: Fri 06 Jun 2025 00:00:30 +0000
Manifest next update: Sat 07 Jun 2025 00:00:30 +0000
Files and hashes: 1: RWAst6rhQtck0cf4rpJmbaVPDy4.roa (hash: ptBc35DUx8RheDUbwgxYVnrU5/IkEp9u9Ianwe8RHT0=)
2: dZgYAx_N36qliHArmqX1gaumeGY.roa (hash: f8R8/QcHyuVgs1r9zKBrMS4KaT9iNImM3nX83XfW2bA=)
3: vqbKA6jBNc7q4jLJN8HuC6uH54I.crl (hash: lckP4ioHruUuEohninsY1KTgdr7K2OavtBuo7MfC9Ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:42:8a:02:a0:ff:ee:ae:22:de:ab:61:9f:0d:6e:05:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
Validity
Not Before: Jun 6 00:00:30 2025 GMT
Not After : Jun 7 00:00:30 2025 GMT
Subject: CN=1093286db068c37faa7c60ad4ad5ffc57a693c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1f:69:02:49:23:01:d2:ae:eb:e6:46:f3:c1:
ae:2c:79:2f:5a:f2:3f:b0:17:92:ad:fa:b3:7b:71:
22:10:37:db:e1:5d:c1:6f:87:5c:d9:9f:7f:73:f0:
e0:2f:64:96:62:b4:0c:6a:17:c2:df:61:0e:d2:94:
89:bd:68:0b:dd:12:bf:60:48:7e:99:3c:c2:ee:89:
2d:0e:32:6f:03:3f:7f:b0:83:b6:ac:b9:90:97:d7:
08:10:70:72:49:c6:a6:6e:e7:17:f7:53:21:6d:1e:
c9:15:af:de:bc:a0:c3:4a:78:2e:63:39:04:77:ee:
03:73:13:3b:e7:bb:f1:53:ff:70:99:05:05:84:f1:
8b:6b:8f:3a:8f:ce:49:e3:20:49:3b:e6:24:33:99:
e2:9c:15:ec:26:39:92:72:2b:f3:31:48:fe:c1:06:
5c:b0:77:fb:d7:0a:c0:b9:79:f2:93:1c:17:26:73:
97:1f:da:68:d5:b5:96:a7:de:12:72:3b:31:c3:74:
96:b9:7e:80:b4:d0:8f:cc:6b:a2:b3:49:9d:30:45:
22:28:42:6b:4e:ad:96:af:a7:a4:67:50:a0:2b:42:
fa:8b:6f:ad:41:7e:c3:87:6e:cc:44:7f:dc:76:e5:
6c:d9:82:0c:a4:b5:24:e4:8d:68:a1:62:9e:53:2b:
cd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:93:28:6D:B0:68:C3:7F:AA:7C:60:AD:4A:D5:FF:C5:7A:69:3C:42
X509v3 Authority Key Identifier:
keyid:BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:4b:32:69:64:42:b9:94:fd:7c:40:c5:62:ea:80:a4:af:84:
1b:85:32:37:7c:2e:db:5e:22:63:e5:50:bd:47:93:19:05:ec:
9c:1a:01:fd:c0:b8:60:c4:43:61:7e:dc:f8:ac:72:d6:3e:b5:
fa:f6:35:af:60:56:6d:3b:78:f9:6d:73:42:7f:73:d4:56:67:
27:82:37:d6:d1:a0:b9:4f:45:ec:5d:b2:3d:b7:53:14:ae:27:
24:02:ac:20:e1:f6:16:d4:8d:44:94:92:28:55:d0:88:55:fa:
e2:05:cc:4b:de:51:68:b9:96:cd:9e:4d:e9:75:0e:0e:db:6e:
12:97:f3:d3:4f:ef:d7:45:8f:05:94:c1:2c:b0:37:af:a9:5e:
33:ac:ec:6c:90:4b:27:c2:83:9e:99:f9:65:a9:f8:81:5d:74:
e3:48:60:2a:cd:15:d4:49:4e:4b:c5:ac:f0:c3:ee:c0:85:5e:
92:23:55:48:09:42:f7:5d:42:c6:0a:48:d9:da:60:0a:3a:44:
d4:9e:e4:94:65:f0:c3:f3:41:88:e2:5d:8b:f0:b2:74:0c:ef:
f0:88:79:63:c6:ac:39:65:0d:d7:29:3f:88:8d:76:35:12:88:
ec:98:18:52:97:55:60:30:e4:80:ea:15:94:a3:7c:ab:e0:dc:
be:4e:24:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 10:53:00 2025 by rpki-client