Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
File: vqse58Ta0p0SfVZdG5N5RlwoiTc.mft (raw, json)
Hash identifier: G8cAt4w27co2uk1Z1PVa2tI92WEJ86fFJqWw9587iEs=
Subject key identifier: E0:E1:BF:F0:8F:58:B7:C3:2C:54:66:58:65:75:07:A3:35:2F:ED:BD
Authority key identifier: BE:AB:1E:E7:C4:DA:D2:9D:12:7D:56:5D:1B:93:79:46:5C:28:89:37
Certificate issuer: /CN=beab1ee7c4dad29d127d565d1b9379465c288937
Certificate serial: 01968A37C495B3E1C6AC4D2B00DD3B0D68CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
Manifest number: 1518
Signing time: Thu 01 May 2025 05:00:32 +0000
Manifest this update: Thu 01 May 2025 05:00:32 +0000
Manifest next update: Fri 02 May 2025 05:00:32 +0000
Files and hashes: 1: M6HhHlPpshdNz9eD4RpZo054CNI.roa (hash: Oj0e4uW1W20zki7xK3pquycyEqfpqSDKDUOaElxS5vM=)
2: vqse58Ta0p0SfVZdG5N5RlwoiTc.crl (hash: GMtc3id/dnXCS9bSyquwf14/+f1uZKi+Lcebq+6D0H8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:37:c4:95:b3:e1:c6:ac:4d:2b:00:dd:3b:0d:68:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beab1ee7c4dad29d127d565d1b9379465c288937
Validity
Not Before: May 1 05:00:32 2025 GMT
Not After : May 2 05:00:32 2025 GMT
Subject: CN=e0e1bff08f58b7c32c546658657507a3352fedbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:94:23:3b:a6:ea:92:b1:e1:2a:3f:79:47:ee:
c9:42:27:a9:f5:ff:a7:fa:2a:29:a9:00:51:18:ff:
d1:c8:95:48:de:58:f5:51:03:db:23:dd:d9:5a:b9:
80:3e:f8:39:36:c9:2c:df:d5:95:dc:ac:74:ab:a5:
ab:8a:ac:47:85:51:12:b9:ed:56:86:b6:36:e3:b9:
2d:e2:c4:b5:96:bc:b1:40:f6:c8:b9:35:d5:bc:47:
ac:58:f7:29:e9:d9:a2:0d:8e:ee:b4:13:d9:a8:08:
56:f4:56:5e:47:9b:95:f8:1f:d1:97:7e:a1:5e:1b:
eb:c1:f1:40:13:b0:04:ce:49:03:85:4a:2d:ab:be:
19:17:b8:09:9e:bf:1b:79:d3:98:e4:56:fd:34:80:
4d:3a:21:7e:94:e0:20:f5:ac:63:78:99:d7:ea:f0:
3f:8d:b2:30:27:7b:9f:b4:2b:4f:51:4a:8d:1c:76:
fa:77:95:62:98:fe:a8:12:47:63:75:b5:98:7c:a4:
80:ef:b2:1c:bc:94:1b:0f:e9:38:04:ea:f3:54:26:
d3:4e:33:4a:6d:a4:d2:3c:ef:dd:95:54:43:c6:06:
7f:87:57:76:e8:f3:d5:be:8c:1d:03:20:54:e1:f2:
05:79:e9:d5:91:10:86:17:a0:02:21:87:5f:ab:1f:
db:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E1:BF:F0:8F:58:B7:C3:2C:54:66:58:65:75:07:A3:35:2F:ED:BD
X509v3 Authority Key Identifier:
keyid:BE:AB:1E:E7:C4:DA:D2:9D:12:7D:56:5D:1B:93:79:46:5C:28:89:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:91:58:f3:a4:9d:0c:23:f6:92:7d:f5:68:1b:fd:0a:67:c3:
83:ea:b6:b7:d9:a9:a5:15:f7:23:6a:92:05:cc:24:6e:97:a5:
b1:9d:8b:5c:0d:d3:49:5a:af:6e:17:c5:a3:11:66:c9:6d:a3:
05:97:ba:e5:81:c7:08:18:36:fd:cd:cc:cc:1c:67:53:39:62:
e8:54:01:c4:44:cb:37:88:42:9f:9b:08:2a:0a:90:c2:9c:7f:
8b:e2:cd:89:1f:1d:a1:88:1e:71:18:d7:7e:e9:09:7f:57:ab:
c9:82:19:da:54:86:32:08:ab:cf:08:1a:18:40:a9:9a:bd:08:
bd:c7:1a:eb:e6:04:d2:43:3a:b7:37:ea:fb:3c:38:cc:4c:8c:
d3:9d:22:e9:bc:90:52:e2:9c:a1:b4:78:b9:d4:13:48:b1:e6:
18:50:39:6b:35:df:a5:fe:c4:28:9e:bb:51:95:7b:1d:95:ff:
7f:d1:52:54:60:8a:3b:be:a7:ca:26:43:11:f9:47:22:f9:12:
f6:08:d8:af:35:3f:a3:c4:0f:de:3a:9f:f2:6f:8e:44:24:97:
cf:14:fa:7c:c0:29:fb:9d:ed:1f:67:16:3e:14:b7:b7:c1:c5:
ae:ba:37:14:ac:5f:b9:fe:08:13:3a:ba:6f:0b:98:d0:73:90:
68:9f:3d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:16:25 2025 by rpki-client