Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
File: vhqIfnZTot5E8TFj4YcDcyaimgM.mft (raw, json)
Hash identifier: 6BQk/ISRPAUZNDtH31oE+Pw6tCjgPmJaeJzQfph8VDk=
Subject key identifier: 9F:C1:C7:DD:29:E7:EF:50:CD:73:66:98:2B:02:FD:FD:12:20:FD:51
Authority key identifier: BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03
Certificate issuer: /CN=be1a887e7653a2de44f13163e187037326a29a03
Certificate serial: 01976997F71FB8A82A351E81686D13189494
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
Manifest number: 1593
Signing time: Fri 13 Jun 2025 14:00:56 +0000
Manifest this update: Fri 13 Jun 2025 14:00:56 +0000
Manifest next update: Sat 14 Jun 2025 14:00:56 +0000
Files and hashes: 1: Ae-diP3rVk-4sa-PXAYgbcBanm4.roa (hash: u0iGxdBhci5JERVXq9GDeBfY++asc/728T5ZMln1pyE=)
2: Z9qZa3inYQ6MRNBOPIdAZNAoS4Y.roa (hash: hXK11vHnwMejj7JOnaAkUByhg12mm0SXJ7OP6kT8Ve8=)
3: vhqIfnZTot5E8TFj4YcDcyaimgM.crl (hash: Vw6eGOdkT1ssUYY/IBgaptJr3nxQtg9OvWw3menPGWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:f7:1f:b8:a8:2a:35:1e:81:68:6d:13:18:94:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1a887e7653a2de44f13163e187037326a29a03
Validity
Not Before: Jun 13 14:00:56 2025 GMT
Not After : Jun 14 14:00:56 2025 GMT
Subject: CN=9fc1c7dd29e7ef50cd7366982b02fdfd1220fd51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4c:a0:37:13:72:ca:08:bc:f8:46:db:f2:2b:
e5:4a:2f:e3:95:d3:d7:0b:38:22:81:81:c3:90:23:
d8:fb:91:49:37:aa:db:14:5b:4f:f9:4d:63:fa:98:
c2:62:aa:a6:5c:c1:9a:09:3c:62:03:b7:06:0c:49:
f3:fc:4d:7e:94:0f:ac:3e:e6:fd:33:04:53:23:d0:
cd:d1:8e:8f:b8:a6:bf:b1:49:02:6c:fe:9a:c0:bd:
ec:4e:26:36:80:1a:c6:f2:02:5e:f3:e8:57:71:e4:
c4:99:37:c3:0a:1b:8d:f8:a0:4f:ab:82:fc:40:cc:
83:d5:f4:47:9f:6c:c5:26:b8:a5:a5:1a:12:66:f0:
c4:a4:ef:3c:16:20:4c:d0:75:df:52:76:ee:ee:f2:
c7:22:18:1d:60:10:ca:07:4d:f4:42:5c:80:e8:db:
ea:19:73:78:55:1c:63:d5:ff:b0:13:58:82:a0:8a:
26:58:c6:aa:f8:4a:52:25:a8:76:bb:9b:70:8b:e3:
54:87:7a:e7:a6:73:ad:38:ad:7a:10:73:3d:af:93:
e2:56:b9:1d:37:be:bd:a0:05:8a:28:41:4d:c6:95:
a3:eb:ca:d9:e2:fe:2e:97:42:4e:17:9c:22:37:0e:
d2:08:90:56:4e:51:b9:0b:75:63:dc:80:13:cc:9b:
96:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C1:C7:DD:29:E7:EF:50:CD:73:66:98:2B:02:FD:FD:12:20:FD:51
X509v3 Authority Key Identifier:
keyid:BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f5:13:9e:60:c7:ee:24:1c:7c:28:e3:c4:3a:ed:78:fe:f2:
f6:48:a4:05:1d:95:55:9b:d7:04:92:db:8d:4f:1b:a1:44:14:
65:de:2b:c8:90:2a:09:e0:e0:52:3b:46:28:c7:bb:e8:21:5b:
8a:3f:f7:5b:7c:27:38:42:1d:8e:13:b9:d3:99:bc:28:f1:d2:
01:cb:39:64:ab:1e:41:c2:cd:ca:5b:6f:02:c6:c1:05:1f:55:
ac:94:6a:37:73:ca:63:fe:5f:99:35:e9:16:d3:37:76:9e:a1:
8c:8a:7e:ba:33:d9:ee:77:f1:df:cc:b5:9a:09:1f:f4:5f:96:
e7:e3:a1:94:f8:5a:43:8a:94:2e:d7:3c:68:a2:86:ea:ff:2a:
47:58:16:64:08:7e:88:77:19:82:46:78:79:04:f6:94:12:82:
77:20:09:13:ab:e8:2b:cb:54:a5:cd:81:74:d7:d5:8f:a7:dc:
05:49:d4:eb:2f:10:5f:c0:4a:40:34:55:ac:68:34:ac:de:85:
27:dd:65:0c:35:2c:38:d9:fd:20:00:6a:dd:7b:c5:9a:aa:76:
f7:44:05:c6:51:c1:c0:a9:19:ec:bc:0c:32:1f:5e:4e:d4:0c:
b8:8f:85:cc:d3:1e:1e:d6:af:f5:2b:5e:be:96:19:3f:01:56:
8c:9e:40:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:17:14 2025 by rpki-client