Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
File: vqPSZTUbZfI58pl94eioBneTOl4.mft (raw, json)
Hash identifier: kOXSKizaAF3CsWj3GsoL3E748dsV3EdBOgQgiRAsLfI=
Subject key identifier: 8C:32:2C:C0:33:D4:0B:0C:1B:5D:DF:2F:39:82:23:DC:9A:47:84:BE
Authority key identifier: BE:A3:D2:65:35:1B:65:F2:39:F2:99:7D:E1:E8:A8:06:77:93:3A:5E
Certificate issuer: /CN=bea3d265351b65f239f2997de1e8a80677933a5e
Certificate serial: 01976DAB741019B72EB2763496DE747922B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
Manifest number: 03B4
Signing time: Sat 14 Jun 2025 09:00:42 +0000
Manifest this update: Sat 14 Jun 2025 09:00:42 +0000
Manifest next update: Sun 15 Jun 2025 09:00:42 +0000
Files and hashes: 1: qeUjFmDBXRanRORKytHhxi_chXY.roa (hash: BDfZzOuGAgs1F3dD55NRk4ttvCosc+ZV+zf9zuFmFos=)
2: vqPSZTUbZfI58pl94eioBneTOl4.crl (hash: xtllfeozC0wLCszDH6DsydkyDXXS9AMDsnOQBwxALK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:74:10:19:b7:2e:b2:76:34:96:de:74:79:22:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea3d265351b65f239f2997de1e8a80677933a5e
Validity
Not Before: Jun 14 09:00:42 2025 GMT
Not After : Jun 15 09:00:42 2025 GMT
Subject: CN=8c322cc033d40b0c1b5ddf2f398223dc9a4784be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:51:b1:2d:27:82:c0:a8:b4:ef:68:a1:46:98:
8b:eb:52:66:13:16:c8:54:74:31:c1:70:69:f3:fb:
cb:d1:63:0e:83:87:d7:87:eb:a7:1c:c9:3c:0b:81:
9f:06:0a:5c:e6:02:dd:74:46:9c:fc:d3:fa:c7:26:
f8:c2:e5:7d:32:da:be:df:31:01:7a:eb:b5:b5:78:
2d:f3:26:19:fb:48:93:21:1a:b7:fa:8d:71:b9:c3:
62:80:20:8b:7b:3b:68:d8:a0:7f:67:6c:d9:d9:6d:
8d:b1:11:ed:5f:7a:6f:a0:a3:d2:d0:de:e6:5f:65:
90:69:ae:3d:f8:85:eb:e4:b3:34:2b:29:19:77:63:
11:a2:fd:c1:0f:21:d1:5e:f7:87:42:75:8e:9d:98:
32:14:07:5c:7e:e1:2e:b3:28:a0:6e:71:f3:3a:f8:
ea:b4:a7:82:eb:48:9b:b8:1a:19:39:6a:fd:61:3d:
81:6e:9a:45:9f:2e:08:ea:5a:ea:2a:70:9a:80:06:
0a:b6:d0:9a:6a:79:29:47:af:20:02:44:a9:f4:95:
6c:48:03:ea:f9:98:2c:fe:1e:ae:5c:b2:2d:fe:e7:
86:db:18:05:ec:ce:cb:e0:2d:17:8c:87:10:98:1f:
e4:af:c7:f4:86:c4:7e:51:53:99:94:d7:9f:ae:47:
da:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:32:2C:C0:33:D4:0B:0C:1B:5D:DF:2F:39:82:23:DC:9A:47:84:BE
X509v3 Authority Key Identifier:
keyid:BE:A3:D2:65:35:1B:65:F2:39:F2:99:7D:E1:E8:A8:06:77:93:3A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b1:e7:5d:04:fd:bf:de:5c:4e:69:94:78:42:04:67:c7:fc:
1b:5b:26:70:ff:db:17:dd:e2:5b:fe:5e:6a:97:af:ab:bc:71:
41:6f:37:d4:88:e4:b9:54:c1:7d:75:c2:1e:4d:6a:e2:76:65:
27:50:04:cc:cb:c4:2d:48:99:37:f3:04:07:36:94:20:78:79:
d6:94:a6:4f:8d:1f:fb:b7:81:88:29:80:ff:d1:e5:bf:7a:08:
7c:7b:f0:ec:f2:e6:2d:99:63:52:3b:1e:db:37:db:75:c3:04:
d1:0d:d3:e6:f5:7a:45:6f:03:b5:53:b4:75:e1:50:36:71:71:
65:a0:e9:06:47:b6:eb:d6:9c:93:85:39:ea:b6:54:73:21:b7:
80:ba:ba:72:84:9f:1a:66:28:7d:02:1d:d9:64:78:76:9e:e9:
18:96:c2:1e:97:d0:90:c8:51:ae:08:ea:47:46:c5:1d:d6:eb:
97:ad:70:e2:7a:43:30:06:2b:0a:b0:a5:be:93:26:4d:3d:7a:
a8:d6:25:b4:e6:97:16:92:5d:d0:eb:2a:1f:15:b6:07:38:61:
b9:a5:e4:0a:31:5e:f0:4c:2a:97:94:e9:9e:56:b7:b6:a6:29:
aa:aa:8f:76:a3:8e:38:f4:fa:dc:45:fc:59:9a:e2:40:25:a7:
44:c7:0e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:47:50 2025 by rpki-client