Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
File: vqPSZTUbZfI58pl94eioBneTOl4.mft (raw, json)
Hash identifier: RqH/Xwbx08F3R4GpwcDERjdD7UTYq11SZ/BniQtAuMw=
Subject key identifier: 72:C6:9C:2C:58:56:1C:9D:2B:94:19:07:D0:A5:D6:93:54:ED:6D:63
Authority key identifier: BE:A3:D2:65:35:1B:65:F2:39:F2:99:7D:E1:E8:A8:06:77:93:3A:5E
Certificate issuer: /CN=bea3d265351b65f239f2997de1e8a80677933a5e
Certificate serial: 0196767A3F152277B62BA53694E7B7B2A84C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
Manifest number: 0334
Signing time: Sun 27 Apr 2025 09:00:45 +0000
Manifest this update: Sun 27 Apr 2025 09:00:45 +0000
Manifest next update: Mon 28 Apr 2025 09:00:45 +0000
Files and hashes: 1: qeUjFmDBXRanRORKytHhxi_chXY.roa (hash: BDfZzOuGAgs1F3dD55NRk4ttvCosc+ZV+zf9zuFmFos=)
2: vqPSZTUbZfI58pl94eioBneTOl4.crl (hash: QNYVB0dAK6AuBaJ9IGOjBIQUTI+tgzSwKuTHYPi3USI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:3f:15:22:77:b6:2b:a5:36:94:e7:b7:b2:a8:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea3d265351b65f239f2997de1e8a80677933a5e
Validity
Not Before: Apr 27 09:00:45 2025 GMT
Not After : Apr 28 09:00:45 2025 GMT
Subject: CN=72c69c2c58561c9d2b941907d0a5d69354ed6d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:88:f5:f8:33:a1:bb:8a:97:97:0b:14:a3:93:
bb:5a:42:8a:46:e6:f3:0e:8b:76:f4:e1:42:69:9c:
a1:9c:7e:94:a6:fc:2e:5e:b9:19:74:20:90:65:de:
01:5c:2b:0c:61:5f:5c:c2:41:05:a4:4a:45:1c:1f:
5a:70:2f:e0:af:df:de:61:0c:10:c4:2a:c4:ee:6c:
fd:5d:10:df:93:da:e5:6c:1c:cb:cf:3b:61:a5:73:
c6:0a:3b:84:30:66:44:b3:b6:c0:98:9e:5b:3d:dc:
2c:e6:ed:76:20:23:d5:5d:a1:25:9b:ea:b6:44:54:
80:f4:79:7e:70:b4:92:7a:f3:30:11:26:b5:2f:99:
7a:c4:8f:a8:5e:9b:ef:c7:94:ca:26:60:4a:ad:59:
ab:7c:e3:cf:10:10:9b:aa:28:e3:15:bc:e8:bf:d0:
b7:16:f0:68:15:4d:68:8f:87:a8:e4:1d:51:c4:95:
70:6d:c2:b0:b9:1f:7b:95:ec:70:2e:d5:ac:b6:dc:
b8:e6:1f:79:2c:b1:61:2e:63:55:a8:bd:94:b5:ff:
e3:f9:80:d2:b8:ed:f7:22:0c:53:a0:dc:38:9b:8f:
75:2d:a8:98:ce:96:7f:4b:d6:13:b1:2c:d1:96:50:
8d:3a:f4:ee:54:11:a5:5f:72:59:e2:ec:c8:f3:2b:
6c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C6:9C:2C:58:56:1C:9D:2B:94:19:07:D0:A5:D6:93:54:ED:6D:63
X509v3 Authority Key Identifier:
keyid:BE:A3:D2:65:35:1B:65:F2:39:F2:99:7D:E1:E8:A8:06:77:93:3A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c0:34:33:d1:ec:ad:b4:8a:59:75:8e:4b:75:26:c5:b3:7e:
1b:b6:44:5e:47:d3:3b:a5:c3:68:74:b2:92:13:cb:48:26:16:
10:f4:f0:29:85:94:8b:c7:90:93:62:39:47:0d:19:dc:11:12:
19:44:66:89:ba:22:45:dd:dc:54:21:50:cc:6c:c1:ca:49:9a:
c6:0e:b2:0e:24:dc:c9:c9:32:0c:e9:a7:d1:4f:86:d2:55:e3:
60:01:70:0b:1d:a5:18:19:eb:b3:6f:e6:9b:18:fd:76:5b:5a:
e0:e3:ae:2b:5d:7f:2f:8d:0b:1a:97:a2:31:6f:dd:63:dc:77:
27:eb:03:fe:35:36:6b:54:2e:ef:24:32:97:6b:e8:3f:4c:4f:
0f:5b:a3:e3:bd:2e:9a:15:db:d1:8f:29:3d:e6:75:0b:02:2d:
c6:2b:d8:8b:a6:59:f5:29:86:dd:ff:70:9a:17:7a:cc:48:60:
9b:51:7e:e8:14:0b:e2:6c:75:0a:24:73:0a:c7:c8:c9:a6:b6:
5c:fe:db:35:41:68:66:c6:40:02:59:3c:27:48:2b:ba:39:57:
09:a0:ab:ce:d0:9b:de:40:3d:c0:1d:9a:36:d4:3c:92:d2:a7:
f5:7b:49:45:68:da:85:91:21:cd:6b:fd:52:e5:78:3f:9e:22:
b1:d1:51:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:05:44 2025 by rpki-client