Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
File: VAQZQbFFDWuVtYyj8HfOII39-0s.mft (raw, json)
Hash identifier: FDTqNBWvq77xT4kkmIVlL5zOcgTUbDK51J8exjmTzJs=
Subject key identifier: 10:CA:80:2B:5D:11:14:DC:FC:37:3E:8F:E4:11:ED:23:B6:A7:C9:E2
Authority key identifier: 54:04:19:41:B1:45:0D:6B:95:B5:8C:A3:F0:77:CE:20:8D:FD:FB:4B
Certificate issuer: /CN=54041941b1450d6b95b58ca3f077ce208dfdfb4b
Certificate serial: 01964BFE2AFA86359CBD8C9340CCD9C5EA43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
Manifest number: 0599
Signing time: Sat 19 Apr 2025 03:01:10 +0000
Manifest this update: Sat 19 Apr 2025 03:01:10 +0000
Manifest next update: Sun 20 Apr 2025 03:01:10 +0000
Files and hashes: 1: VAQZQbFFDWuVtYyj8HfOII39-0s.crl (hash: 0vypGHuVJ7fqYksrpHNqcgYTzosIzRWxIFnH4hTiFbQ=)
2: _kct8kIbVboNtXmwY3sBZtxcNtM.roa (hash: T6JpWQH7nutNbYZnSGugyuq7ObfBwtPlbYrmzm3m20w=)
3: khPPmPdFt5NSW2cXj9IsrNyyMNA.roa (hash: YSUlml94r6G6gJB4NeI+X3NQi5Phdn1YlU4xpfbkY7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fe:2a:fa:86:35:9c:bd:8c:93:40:cc:d9:c5:ea:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54041941b1450d6b95b58ca3f077ce208dfdfb4b
Validity
Not Before: Apr 19 03:01:10 2025 GMT
Not After : Apr 20 03:01:10 2025 GMT
Subject: CN=10ca802b5d1114dcfc373e8fe411ed23b6a7c9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9f:04:3d:da:01:17:e5:80:e4:05:12:17:04:
04:69:59:4c:2b:9c:6f:70:62:40:c8:68:1d:53:2d:
31:0f:db:f1:35:de:e8:1c:8a:4d:b4:ca:74:3e:3c:
50:e8:b1:24:87:2e:25:6f:13:74:55:b3:39:59:71:
46:5e:75:36:4c:53:37:db:05:f4:05:2d:89:f2:3c:
06:4e:f4:ea:74:7c:30:57:8a:b1:95:f1:cf:47:ff:
c3:30:e1:4d:2d:00:2c:20:ad:d5:25:24:51:fa:23:
6b:ad:34:2b:e2:44:75:71:3d:38:bb:3e:ec:9f:de:
34:63:1a:d7:91:68:c4:88:89:7c:fb:1d:9e:03:6a:
83:68:16:6e:5e:ed:6d:24:a5:2d:ba:5a:ac:51:6f:
f3:3c:c8:27:23:ae:07:21:55:91:9a:0d:59:cb:d9:
eb:c5:98:0d:60:89:ca:21:c8:c9:b6:1f:76:3a:7f:
6e:83:0c:70:3f:e0:59:3b:05:2f:ed:4b:f9:28:90:
a1:8a:ee:da:cb:09:61:1d:cb:dd:6b:02:79:e3:56:
2c:fe:7d:5c:c6:bb:ab:c9:5f:55:65:83:95:fe:92:
84:39:22:f5:bc:23:d3:5a:05:71:99:c0:73:1f:7a:
9e:53:30:17:0e:1d:ba:39:98:96:28:c5:8b:d1:d4:
cf:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CA:80:2B:5D:11:14:DC:FC:37:3E:8F:E4:11:ED:23:B6:A7:C9:E2
X509v3 Authority Key Identifier:
keyid:54:04:19:41:B1:45:0D:6B:95:B5:8C:A3:F0:77:CE:20:8D:FD:FB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:2b:1a:25:2a:5d:7b:6d:bf:9d:34:5b:74:4e:d9:8f:d4:53:
a1:73:43:42:b3:b7:2b:02:78:72:e6:85:79:bc:3f:9b:a6:51:
a3:22:dd:ee:2b:27:47:6b:40:13:6c:db:af:c1:a8:c6:63:40:
84:a8:ab:73:49:3d:e3:1f:dc:2b:2b:1e:93:72:3d:48:21:12:
f3:92:28:b5:00:e1:b2:5d:d4:f6:dd:74:dd:7c:0b:7f:4c:bf:
28:85:73:e6:1a:42:8c:b3:d9:e1:c9:fb:51:db:a7:4e:6c:ea:
0d:f3:7d:82:16:c7:4e:05:56:3e:65:14:31:6f:1f:e8:6a:36:
89:28:bc:70:80:52:f3:7e:1c:f2:05:23:b6:9a:a5:bd:c9:a0:
c9:25:12:85:88:19:a7:f0:22:85:15:a4:c1:43:85:e3:50:f5:
fd:c4:91:c1:8c:73:d7:8e:16:d3:7e:91:5e:ad:38:ac:b4:0c:
1a:e5:a9:65:c2:01:b3:9f:bb:78:b4:b1:70:26:de:b4:a0:0a:
20:2c:33:80:cc:4d:03:3d:3c:9b:d7:5a:09:0c:42:47:9d:10:
33:56:fb:9f:1f:b1:6e:f1:f3:41:b4:10:64:e6:7c:0d:cb:5e:
f3:dd:b1:72:b1:ba:3f:00:04:81:4a:76:dc:50:c8:ed:f9:c8:
08:08:df:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:13:34 2025 by rpki-client