Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
File: VAQZQbFFDWuVtYyj8HfOII39-0s.mft (raw, json)
Hash identifier: z9STPQZsAM+3BXT0RG2jh93sZ2WhQlSTW7ZEv8gAkco=
Subject key identifier: 2E:A2:16:60:50:03:01:C1:06:A5:DC:30:D8:A3:80:73:15:38:88:89
Authority key identifier: 54:04:19:41:B1:45:0D:6B:95:B5:8C:A3:F0:77:CE:20:8D:FD:FB:4B
Certificate issuer: /CN=54041941b1450d6b95b58ca3f077ce208dfdfb4b
Certificate serial: 01974CD77F2A908D5CE89CC08D7E9EADE03C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
Manifest number: 061E
Signing time: Sun 08 Jun 2025 00:01:20 +0000
Manifest this update: Sun 08 Jun 2025 00:01:20 +0000
Manifest next update: Mon 09 Jun 2025 00:01:20 +0000
Files and hashes: 1: VAQZQbFFDWuVtYyj8HfOII39-0s.crl (hash: QwAe9Lnl1iH2sA1ivMw3wJ5/gd6ECQnBmi7TVRrxv0U=)
2: _kct8kIbVboNtXmwY3sBZtxcNtM.roa (hash: T6JpWQH7nutNbYZnSGugyuq7ObfBwtPlbYrmzm3m20w=)
3: khPPmPdFt5NSW2cXj9IsrNyyMNA.roa (hash: YSUlml94r6G6gJB4NeI+X3NQi5Phdn1YlU4xpfbkY7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:7f:2a:90:8d:5c:e8:9c:c0:8d:7e:9e:ad:e0:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54041941b1450d6b95b58ca3f077ce208dfdfb4b
Validity
Not Before: Jun 8 00:01:20 2025 GMT
Not After : Jun 9 00:01:20 2025 GMT
Subject: CN=2ea21660500301c106a5dc30d8a3807315388889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:64:5b:1c:22:0b:c5:0a:f7:05:19:ae:d5:32:
cf:d8:77:c9:2b:3f:5c:91:d9:bb:a6:f2:fc:68:8a:
f7:25:6b:92:3b:f6:e3:35:ea:3f:ec:b8:98:3d:d8:
e4:2b:c1:bf:c8:9a:8d:ce:34:36:c0:ba:a2:35:10:
6c:41:b1:34:ee:55:f2:c1:d4:ee:d5:d4:65:0b:4d:
8b:1d:c1:16:ad:33:86:6a:e7:14:98:30:c3:66:9c:
ad:72:8b:20:1d:fe:64:25:ed:4e:cd:47:c5:54:1b:
e0:17:f6:fb:32:a4:72:b9:69:f6:92:03:d4:fb:cf:
48:20:8b:eb:4e:40:61:9a:dc:25:bf:96:f0:74:0a:
1d:80:ca:99:65:f8:43:4c:e7:8a:d7:0c:27:37:e7:
ec:9d:39:f3:fe:16:0a:77:e0:c8:9f:d4:3b:2f:bf:
0c:98:94:de:0d:41:d5:e6:5c:7e:c5:6e:96:20:ca:
9d:10:74:73:b9:c2:10:79:41:95:41:7f:1a:b4:39:
01:f7:ed:c1:5c:7d:de:7b:65:fb:f5:34:3e:b9:b8:
49:6e:40:98:0a:8d:75:5f:01:45:8c:82:76:76:82:
95:ad:25:b2:5f:35:ff:4c:d5:0b:08:5b:ce:1e:40:
3e:10:a9:91:b9:80:46:8b:91:3a:af:45:81:92:fa:
a6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A2:16:60:50:03:01:C1:06:A5:DC:30:D8:A3:80:73:15:38:88:89
X509v3 Authority Key Identifier:
keyid:54:04:19:41:B1:45:0D:6B:95:B5:8C:A3:F0:77:CE:20:8D:FD:FB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:95:34:ad:d7:9f:cf:0d:bb:d3:0f:ac:fb:2e:8e:b5:e0:c9:
60:62:77:03:6f:c2:46:f8:3e:96:8a:2d:eb:75:34:7d:2c:87:
00:dd:95:9f:15:07:f9:28:f7:71:fb:d6:6b:2e:d6:47:d7:81:
12:e7:30:09:b6:46:08:f4:27:32:f1:99:64:77:18:74:45:8a:
84:01:82:ee:8a:e5:00:7d:ec:7a:b6:16:30:2c:03:25:12:e1:
c3:ba:28:00:02:6b:c1:af:5e:94:91:a1:6a:eb:5d:af:d7:3f:
f3:ab:01:a3:91:1a:ad:86:7c:44:83:5f:b9:d9:37:39:80:09:
22:6c:ee:09:6b:58:a9:d0:97:c9:3d:a8:16:f1:e3:0d:6d:2b:
14:5a:25:82:d0:05:35:19:31:b2:32:33:43:8c:ff:9e:2c:6a:
4a:6c:bd:fd:4d:ac:cb:30:25:d1:d1:a5:d0:c7:77:c0:37:4b:
f8:b7:1e:a0:d8:8e:17:7d:a3:f8:d4:a3:78:b9:2a:51:12:39:
32:fc:10:6c:63:08:2b:28:9c:ba:66:0f:1a:f0:58:a8:2a:30:
ed:c1:e6:94:98:e3:94:49:11:9f:78:5e:bb:41:8b:d0:9b:17:
5a:a7:3c:57:1a:df:b5:92:d9:43:e4:5b:b4:5a:f6:76:ad:20:
41:7f:bc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:56:02 2025 by rpki-client