Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
File: vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft (raw, json)
Hash identifier: AZDUAKPifLrlAvoQlPh8zS10fFXCpaZsM9isja24Rik=
Subject key identifier: 10:20:EA:27:69:35:DD:C4:F2:A8:47:CA:01:29:74:26:9B:3A:6A:3A
Authority key identifier: BD:A3:D0:BB:42:2B:0B:CA:70:67:16:C2:0F:7A:D5:8D:D2:76:54:71
Certificate issuer: /CN=bda3d0bb422b0bca706716c20f7ad58dd2765471
Certificate serial: 01977978CA06D4392798DEE0029EA2EB9130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
Manifest number: 14EB
Signing time: Mon 16 Jun 2025 16:00:48 +0000
Manifest this update: Mon 16 Jun 2025 16:00:48 +0000
Manifest next update: Tue 17 Jun 2025 16:00:48 +0000
Files and hashes: 1: 2NhKjFbuAMp_doRz4AUPYRbSyEU.roa (hash: IgIsz5WqF9AXjPzeVD1tKo5xC9L3dTvcfnef5uQtbKI=)
2: vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl (hash: ImksZLsPDeYknEDF+ggMOyDF46ZeZdKsnjfLR0zmsXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:78:ca:06:d4:39:27:98:de:e0:02:9e:a2:eb:91:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda3d0bb422b0bca706716c20f7ad58dd2765471
Validity
Not Before: Jun 16 16:00:48 2025 GMT
Not After : Jun 17 16:00:48 2025 GMT
Subject: CN=1020ea276935ddc4f2a847ca012974269b3a6a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e9:19:3e:0e:57:a6:8d:c7:85:dd:20:98:34:
b4:20:89:10:7c:b5:95:de:ba:5a:b0:cc:95:ce:f9:
ef:5b:7d:74:1e:c0:cf:12:92:7c:d9:69:89:a7:ba:
4b:f4:ac:04:67:67:cb:ff:71:e4:6e:57:23:94:88:
3f:b1:85:d7:3a:d2:e0:24:b3:11:a3:d7:75:1e:9f:
e1:e8:36:c3:08:11:78:ef:43:f6:2f:02:d7:74:a4:
fe:89:5a:71:5d:5c:48:12:7e:f7:31:82:db:17:7b:
e4:74:c1:7e:9b:0b:fc:c3:86:f8:bc:ee:d7:b3:f7:
03:68:b5:8e:a2:d6:60:ac:b4:b9:b1:74:b2:86:69:
50:44:2f:6f:7a:89:5d:72:c8:ac:a4:55:9e:91:54:
16:b6:ac:dc:50:ef:17:56:19:b6:5b:e6:69:66:32:
72:ba:e5:9d:11:ce:d5:46:45:4d:3c:34:88:84:5a:
7f:33:bd:df:12:7e:49:b3:d2:d4:d1:fc:9f:4f:67:
2f:a5:3c:98:12:b4:8d:f2:ae:d8:59:0e:fa:b0:da:
bd:87:53:bb:25:cb:57:4b:98:2f:20:4c:e2:c0:67:
00:68:ff:83:c8:29:67:d5:ca:e7:3b:ce:d2:81:47:
df:c5:b7:bf:94:b9:b4:ea:38:4c:12:0c:21:ae:22:
3a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:20:EA:27:69:35:DD:C4:F2:A8:47:CA:01:29:74:26:9B:3A:6A:3A
X509v3 Authority Key Identifier:
keyid:BD:A3:D0:BB:42:2B:0B:CA:70:67:16:C2:0F:7A:D5:8D:D2:76:54:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:99:34:c0:d1:6e:a7:ae:e2:f0:00:00:64:f3:ab:42:85:4e:
d3:74:d2:85:e7:1e:4c:41:16:5b:8c:ea:00:5f:a6:3d:d6:07:
4f:ad:c3:c4:18:2f:0b:82:9e:4b:87:2b:72:e8:c5:1d:d7:38:
7a:c2:c5:80:69:50:ea:e4:bf:2d:64:74:03:60:55:5c:a5:a9:
27:0d:17:3d:2f:4c:3a:86:04:aa:aa:cd:2d:e7:32:05:54:a5:
c2:18:67:b8:b8:a9:81:fb:1e:8b:84:97:21:41:01:66:46:bc:
cd:5b:78:dc:6f:70:67:45:2a:10:d5:97:77:e7:2b:74:66:cb:
2d:a8:b5:d0:ec:84:47:06:bc:31:2f:37:37:42:a1:b2:c1:c9:
a7:eb:ff:e8:76:85:ea:b8:82:b5:42:09:91:53:45:f4:96:4e:
26:00:bb:b3:3b:ad:42:c4:f5:69:99:b7:b4:05:70:4c:fe:2d:
db:fd:bd:9e:25:e7:a5:3d:cf:cf:43:6b:ae:f5:f5:71:2f:e9:
5e:a3:72:6d:08:23:ba:ac:7d:49:27:7b:90:ac:e8:4c:9d:a1:
87:c7:9e:19:64:80:d7:b6:57:22:26:01:9a:8a:4c:75:f1:7c:
f4:bd:58:66:d7:bb:9a:1f:2c:5f:70:6b:c7:7f:0d:7e:c7:d7:
36:5c:79:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:13:53 2025 by rpki-client