Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
File: VAQZQbFFDWuVtYyj8HfOII39-0s.mft (raw, json)
Hash identifier: Qnbg4NtsEig9shtlpAo3UHQGpaRMAXQ5g6OIRG98tp8=
Subject key identifier: 7E:98:F3:55:48:3E:D6:6B:FC:7A:F3:8C:6F:DF:01:F7:1A:1C:87:EB
Authority key identifier: 54:04:19:41:B1:45:0D:6B:95:B5:8C:A3:F0:77:CE:20:8D:FD:FB:4B
Certificate issuer: /CN=54041941b1450d6b95b58ca3f077ce208dfdfb4b
Certificate serial: 0196748C118FE2743C2184B33A10260A43D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
Manifest number: 05AE
Signing time: Sun 27 Apr 2025 00:00:58 +0000
Manifest this update: Sun 27 Apr 2025 00:00:58 +0000
Manifest next update: Mon 28 Apr 2025 00:00:58 +0000
Files and hashes: 1: VAQZQbFFDWuVtYyj8HfOII39-0s.crl (hash: n6Wt+y/mW5ZRB5Yg7pT85fHWZhU5Tj4wugxH1JO29PE=)
2: _kct8kIbVboNtXmwY3sBZtxcNtM.roa (hash: T6JpWQH7nutNbYZnSGugyuq7ObfBwtPlbYrmzm3m20w=)
3: khPPmPdFt5NSW2cXj9IsrNyyMNA.roa (hash: YSUlml94r6G6gJB4NeI+X3NQi5Phdn1YlU4xpfbkY7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8c:11:8f:e2:74:3c:21:84:b3:3a:10:26:0a:43:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54041941b1450d6b95b58ca3f077ce208dfdfb4b
Validity
Not Before: Apr 27 00:00:58 2025 GMT
Not After : Apr 28 00:00:58 2025 GMT
Subject: CN=7e98f355483ed66bfc7af38c6fdf01f71a1c87eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:59:63:4e:e9:77:6f:f9:93:56:39:f3:5a:86:
e3:79:30:9c:f5:f9:0b:29:c3:40:47:ae:0f:22:f2:
be:d5:96:66:d2:dc:96:02:5e:0c:2b:1a:76:3a:07:
bc:5a:61:83:a6:da:73:7f:91:8e:1b:14:ba:ec:06:
6b:6c:a3:b1:57:22:ef:67:6b:d2:69:75:a6:04:dd:
c6:0d:5b:04:27:54:0f:1f:be:17:26:08:b1:8b:45:
74:ad:d4:5d:e5:72:fe:f0:f3:26:9b:b9:26:d0:17:
c3:7a:9f:98:12:46:87:5f:be:40:96:75:4a:56:c1:
31:ed:34:12:15:51:69:16:43:87:6b:cd:0c:18:37:
02:0c:98:a6:5d:f8:e0:f8:c6:18:1a:8c:e9:27:ad:
8a:2c:fd:fe:8e:6f:bb:27:95:be:8f:06:1d:f1:9c:
bc:62:ac:bd:7d:87:c2:d3:d5:d6:1d:69:04:3a:08:
13:6d:de:18:4a:b4:72:83:39:c0:f9:64:fa:20:f6:
01:38:4b:f6:f9:0f:d0:4d:c7:8e:a8:e0:d2:94:a0:
0c:09:9f:12:25:a3:66:bd:21:76:f4:48:cf:15:a3:
a0:ea:2d:ec:28:e1:fd:68:79:5c:85:3c:72:60:18:
2a:58:d5:ab:d0:52:bd:00:b1:db:0e:bc:ee:77:df:
71:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:98:F3:55:48:3E:D6:6B:FC:7A:F3:8C:6F:DF:01:F7:1A:1C:87:EB
X509v3 Authority Key Identifier:
keyid:54:04:19:41:B1:45:0D:6B:95:B5:8C:A3:F0:77:CE:20:8D:FD:FB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:3d:93:ac:63:45:fe:ca:30:e2:3c:75:6e:2b:4b:f2:3d:b4:
4b:07:95:45:6a:12:82:8d:8f:cb:7d:66:76:e1:ea:70:4b:41:
f1:79:25:3f:51:a1:fb:18:4d:a7:9e:9b:c5:5e:68:58:0e:88:
4c:d7:ec:4b:ea:0e:98:ee:0e:a5:fc:f8:e0:9b:f1:23:ab:6d:
18:50:d9:9c:32:6b:00:e4:42:32:4c:42:da:ba:ed:8f:4a:12:
b7:8f:0b:87:a6:7f:e7:a4:2e:fd:cd:84:1f:e7:f0:e8:d6:88:
92:1b:8e:dd:f1:b8:cf:91:fd:90:45:03:0c:78:5a:76:e7:cf:
a4:01:a8:25:a0:4b:58:4b:52:85:a7:5c:60:6c:04:ed:49:1a:
df:ef:86:fa:09:6b:a8:66:80:f9:ec:08:03:d1:a2:62:6a:97:
e8:73:a3:58:e5:58:a5:d7:a6:ca:fe:c1:31:5e:b0:c0:d8:4a:
0b:e6:5e:41:1b:25:e1:6f:a2:21:f6:bf:ba:b3:0e:f3:dc:13:
81:6c:2f:d3:e1:1e:f5:41:5e:0d:84:55:c3:a0:40:03:6f:dc:
63:5a:0f:10:c9:63:72:43:7b:fd:3d:b2:a9:a0:43:72:8d:94:
8f:88:4a:8a:f9:d1:2a:19:47:fe:be:ba:49:ca:fa:cb:73:e1:
37:d1:1b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:54:26 2025 by rpki-client