Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
File: VAQZQbFFDWuVtYyj8HfOII39-0s.mft (raw, json)
Hash identifier: rG+7l4dF2Cx1R5PA0SLelAnJf3e+Mz3W29ayUE3eATg=
Subject key identifier: 3A:A8:68:D6:BF:C5:F9:00:8F:E7:9F:97:2E:45:88:02:30:53:D5:06
Authority key identifier: 54:04:19:41:B1:45:0D:6B:95:B5:8C:A3:F0:77:CE:20:8D:FD:FB:4B
Certificate issuer: /CN=54041941b1450d6b95b58ca3f077ce208dfdfb4b
Certificate serial: 019769CF0B2624DC50140778FAEE1EA3BA9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
Manifest number: 062D
Signing time: Fri 13 Jun 2025 15:01:05 +0000
Manifest this update: Fri 13 Jun 2025 15:01:05 +0000
Manifest next update: Sat 14 Jun 2025 15:01:05 +0000
Files and hashes: 1: VAQZQbFFDWuVtYyj8HfOII39-0s.crl (hash: d/EIgO5XnJ+Lfvmf/tmxRv/QIG/Vs3458Eouuahc58A=)
2: _kct8kIbVboNtXmwY3sBZtxcNtM.roa (hash: T6JpWQH7nutNbYZnSGugyuq7ObfBwtPlbYrmzm3m20w=)
3: khPPmPdFt5NSW2cXj9IsrNyyMNA.roa (hash: YSUlml94r6G6gJB4NeI+X3NQi5Phdn1YlU4xpfbkY7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:cf:0b:26:24:dc:50:14:07:78:fa:ee:1e:a3:ba:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54041941b1450d6b95b58ca3f077ce208dfdfb4b
Validity
Not Before: Jun 13 15:01:05 2025 GMT
Not After : Jun 14 15:01:05 2025 GMT
Subject: CN=3aa868d6bfc5f9008fe79f972e4588023053d506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8c:ad:2f:a9:e4:03:ab:9f:dc:24:95:05:49:
a1:cb:36:6b:02:c8:54:ad:fd:93:d6:db:97:b7:d5:
f7:28:ff:6e:12:9b:f6:23:6c:ff:ae:6c:4b:1a:a9:
ef:16:e1:62:a9:71:06:6b:42:6e:e1:25:89:42:ec:
a7:47:18:e8:1e:f6:fc:9e:97:34:b1:81:98:c8:7e:
20:c2:98:70:85:94:89:be:be:94:d6:2b:85:f2:33:
b5:52:46:75:13:3f:52:dd:83:81:15:6f:40:5f:a3:
10:22:92:d6:53:44:1e:10:85:0c:64:20:23:95:8e:
71:84:f7:16:e0:29:60:06:43:d4:16:4f:ed:28:36:
1c:bc:c2:76:41:81:59:70:ff:04:53:61:31:5d:54:
73:fb:94:6e:b8:8a:86:6d:42:24:00:da:51:a5:76:
f3:83:3e:63:ae:fb:72:07:08:af:cf:0e:e3:46:7e:
c3:fa:88:6c:fb:49:95:1b:a0:69:ff:aa:ad:7d:38:
68:9e:fd:1d:0c:7d:e6:33:43:98:cc:73:9f:eb:e8:
99:9c:49:0a:11:b4:3b:17:e5:23:ca:83:25:3d:5d:
e6:b7:fe:88:a8:04:6b:93:12:2d:16:91:f1:46:13:
11:3b:b3:f9:c1:2c:af:6e:e2:ca:24:9c:cb:84:80:
d6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A8:68:D6:BF:C5:F9:00:8F:E7:9F:97:2E:45:88:02:30:53:D5:06
X509v3 Authority Key Identifier:
keyid:54:04:19:41:B1:45:0D:6B:95:B5:8C:A3:F0:77:CE:20:8D:FD:FB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a5:91:b9:f9:b9:e8:c3:58:0f:38:8e:6e:d1:4e:8a:9b:41:
8a:f2:c3:f1:5a:dc:06:aa:1f:ab:89:06:9a:7f:78:14:43:ec:
62:43:7e:c7:03:48:89:ab:58:0e:6c:0a:d6:ca:9d:a0:d5:59:
6c:71:07:84:e9:8f:87:15:11:e5:c5:7d:15:ad:61:66:af:7d:
ff:87:05:0a:c8:26:e0:75:65:d7:28:8e:db:f5:7a:a0:f2:1e:
d3:fe:2f:24:b0:f0:15:c3:97:da:53:e0:ed:e9:39:2d:54:bd:
32:62:f4:e3:5b:46:17:b0:69:cd:d4:22:9a:52:16:77:db:88:
52:8f:5a:cf:10:bc:8b:10:b6:c5:59:68:95:64:0a:6c:01:71:
a0:19:d9:c5:f1:e9:70:f2:f1:0e:25:b7:f8:d1:36:42:37:c5:
51:af:70:67:04:3c:c0:22:b0:5e:74:8f:a2:d9:ff:11:9b:4a:
0e:1b:db:2c:dc:07:a9:ac:6e:93:50:ff:11:04:64:6b:d0:ce:
64:fc:f3:40:4e:0e:a7:70:f5:b2:c5:27:c1:12:81:a1:9d:4f:
1c:bb:83:31:e4:0f:b7:25:23:9c:29:3d:a8:88:3c:e3:4f:4d:
fb:6d:89:87:e2:50:96:4e:7b:8a:5e:45:f1:5d:0a:06:57:f2:
5e:06:51:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:12:22 2025 by rpki-client