Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
File: vhqIfnZTot5E8TFj4YcDcyaimgM.mft (raw, json)
Hash identifier: 6pJ8OgAwdq0bA0hswx5dZO2VzuFsoFEbzxetU0XecDo=
Subject key identifier: A7:BB:3F:1A:9E:2B:A2:D8:E7:46:4D:7B:83:E3:DA:C9:7E:9E:6D:8F
Authority key identifier: BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03
Certificate issuer: /CN=be1a887e7653a2de44f13163e187037326a29a03
Certificate serial: 01967A2026C84EDBD241045A32C64821C89E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
Manifest number: 1517
Signing time: Mon 28 Apr 2025 02:00:49 +0000
Manifest this update: Mon 28 Apr 2025 02:00:49 +0000
Manifest next update: Tue 29 Apr 2025 02:00:49 +0000
Files and hashes: 1: Ae-diP3rVk-4sa-PXAYgbcBanm4.roa (hash: u0iGxdBhci5JERVXq9GDeBfY++asc/728T5ZMln1pyE=)
2: Z9qZa3inYQ6MRNBOPIdAZNAoS4Y.roa (hash: hXK11vHnwMejj7JOnaAkUByhg12mm0SXJ7OP6kT8Ve8=)
3: vhqIfnZTot5E8TFj4YcDcyaimgM.crl (hash: qGUDjBh+iRPwk2bgrzxRfGa9BFDDmFFNN1KhkocEvkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:20:26:c8:4e:db:d2:41:04:5a:32:c6:48:21:c8:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1a887e7653a2de44f13163e187037326a29a03
Validity
Not Before: Apr 28 02:00:49 2025 GMT
Not After : Apr 29 02:00:49 2025 GMT
Subject: CN=a7bb3f1a9e2ba2d8e7464d7b83e3dac97e9e6d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a2:1a:86:fc:39:05:97:a9:d7:f7:85:6c:47:
76:a1:5f:fa:9a:70:fa:26:3a:a0:b5:b5:51:73:81:
b6:c5:ee:7d:80:e2:ea:da:10:c9:45:73:db:95:1a:
32:6b:cf:0a:49:72:7d:aa:53:70:35:62:57:65:00:
02:ec:e8:48:95:1b:86:29:dc:72:6d:ab:09:91:23:
9a:5a:61:83:de:3f:e4:76:8f:7d:93:b9:8a:e2:a1:
0b:ef:ea:cc:08:43:28:4f:9a:cd:d1:db:c2:ec:24:
b1:72:d9:6a:54:8e:de:d1:48:54:a9:fb:fa:5b:3d:
6b:45:77:7b:83:18:c5:24:dc:e3:d2:e1:ae:c0:42:
52:da:24:e4:1a:97:72:88:a0:98:77:58:e6:f1:85:
7b:42:d6:d6:de:cf:61:b0:86:5d:40:68:30:ee:3e:
c1:ac:09:a3:81:8d:30:8b:65:ad:6d:ff:78:69:e0:
cb:f9:9c:8a:43:14:df:26:b0:85:89:c5:bf:e0:bd:
58:c5:7d:f8:4d:8a:8a:95:3a:b6:4c:2f:20:ad:a8:
36:1a:cf:aa:d5:cb:7e:7f:39:98:e1:1f:25:80:ba:
87:d2:51:17:3f:ad:22:45:92:f6:99:b6:36:da:ac:
2c:9b:a7:a1:a4:d7:4a:b4:67:1f:a8:2e:d7:8c:85:
59:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BB:3F:1A:9E:2B:A2:D8:E7:46:4D:7B:83:E3:DA:C9:7E:9E:6D:8F
X509v3 Authority Key Identifier:
keyid:BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:51:02:a4:41:e0:25:5a:72:d4:67:fe:21:4f:33:6f:43:6d:
89:a8:ef:92:61:05:a7:60:bb:0d:03:9b:0d:d6:a7:5f:1b:01:
f3:6f:44:83:45:8e:22:8a:41:d6:b3:74:8b:5e:f8:2e:9f:9a:
ae:17:ad:1e:18:79:df:c7:37:be:76:14:3f:e9:b0:cb:fd:88:
27:91:4a:46:1e:d4:a4:7d:85:34:5a:d1:1c:99:9a:e6:16:4c:
2a:04:a1:17:01:fd:92:6e:9e:3e:ac:d4:b9:41:0d:9e:da:dd:
9d:ed:ec:6f:8a:8e:6d:1f:8d:11:3f:60:9f:c5:07:cb:b9:f7:
e3:e3:8f:7f:c4:31:ce:0d:f4:ef:df:18:9a:65:82:39:fc:6c:
cf:08:d7:54:f5:99:2f:78:4c:63:65:9a:62:bb:22:db:56:4c:
d2:4b:10:83:94:39:ef:bc:33:f1:f1:c7:1b:f9:6e:37:e5:e8:
83:98:a1:99:50:93:9f:3b:b5:88:23:71:01:59:25:09:19:4a:
32:35:87:1a:4f:c2:81:f0:47:8a:bc:3c:3b:76:31:fa:e7:b7:
9f:8c:ef:43:cb:4a:da:8c:8c:0d:2b:ac:01:7b:f3:10:08:04:
8f:dc:d8:2d:0d:70:2e:6c:4e:ee:df:39:7b:51:39:af:29:a7:
5d:da:54:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:04:41 2025 by rpki-client