Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
File: vpxSiWGxCzIPR-i3BlTurtLyRNM.mft (raw, json)
Hash identifier: KiKOTJ76tS7MNZM2Z8I764vjlGeAcJAEeviL8FgfhIc=
Subject key identifier: 90:40:58:44:A6:44:07:B3:D4:C9:2A:52:44:E2:DE:BD:B0:70:6D:88
Authority key identifier: BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3
Certificate issuer: /CN=be9c528961b10b320f47e8b70654eeaed2f244d3
Certificate serial: 0197B74577A040740B17BFDC19B22488ADF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
Manifest number: 0BA6
Signing time: Sat 28 Jun 2025 16:01:12 +0000
Manifest this update: Sat 28 Jun 2025 16:01:12 +0000
Manifest next update: Sun 29 Jun 2025 16:01:12 +0000
Files and hashes: 1: vpxSiWGxCzIPR-i3BlTurtLyRNM.crl (hash: qDaxj1QkF+BFwSEzI2wbcTLk9kJdLqqPxOoBSbd5oCk=)
2: wtrOxy-Cqrf4yPJ92NbD-E33BP8.roa (hash: HZVqoFJ1fSxzdnoOFKLqW1LRpp7/mkZ4xgc+aQGadyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:77:a0:40:74:0b:17:bf:dc:19:b2:24:88:ad:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9c528961b10b320f47e8b70654eeaed2f244d3
Validity
Not Before: Jun 28 16:01:12 2025 GMT
Not After : Jun 29 16:01:12 2025 GMT
Subject: CN=90405844a64407b3d4c92a5244e2debdb0706d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1f:31:3a:41:53:81:04:00:02:00:ed:07:60:
19:b0:ff:d0:ad:7f:60:7a:7e:73:c6:c1:23:b7:00:
6f:62:69:40:04:ce:e3:1b:67:10:2d:e7:6d:32:70:
90:39:ce:fe:08:23:df:d6:cd:99:43:84:57:3a:95:
c4:a7:87:76:4e:52:0a:fb:2e:ba:21:2c:f6:b5:f7:
31:d0:f1:d1:f3:79:5f:d2:05:60:be:30:2e:84:75:
99:02:5b:34:a9:57:71:87:fa:4a:68:bf:10:be:18:
bf:df:57:cf:bf:5e:23:cc:79:13:6e:01:a3:f2:68:
7a:c7:73:14:d2:a1:2f:26:86:2e:5e:a6:62:87:89:
b6:10:17:28:bf:3c:e5:b7:63:1a:60:8c:72:44:a0:
d9:6a:6c:b3:79:29:7e:fd:64:a9:a2:a2:01:77:76:
29:98:e3:b4:6e:d7:98:f0:98:dc:39:aa:58:e6:bc:
51:7e:41:a9:cb:c2:95:6d:41:dd:96:9b:c9:37:00:
64:c2:94:37:5d:96:9d:e7:85:07:09:57:d6:28:0c:
25:7a:fd:fe:ad:d7:4b:4b:3c:9b:5b:19:cb:44:1f:
56:d2:fa:e5:ef:26:18:b6:3f:ab:77:68:fc:e1:65:
90:66:c4:f2:67:6d:0c:af:c4:7d:64:ea:6e:c5:cd:
8f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:40:58:44:A6:44:07:B3:D4:C9:2A:52:44:E2:DE:BD:B0:70:6D:88
X509v3 Authority Key Identifier:
keyid:BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:5d:28:89:59:c2:ad:26:c6:9c:83:aa:5e:b8:02:6f:33:aa:
52:77:23:fd:30:52:bb:08:b2:10:b1:89:d3:6b:bf:42:9d:cc:
99:8f:ad:cf:20:c1:da:a6:48:30:02:1e:59:60:ff:45:34:a9:
4e:11:38:20:82:f3:67:a5:64:bb:29:a3:13:1a:d2:6a:02:8b:
51:02:3c:14:78:90:66:9b:b0:3b:b6:99:df:a7:c4:cf:30:9f:
4b:6b:ea:02:cb:92:e9:1a:4e:e4:a6:36:7d:22:a9:70:8e:de:
6e:dc:11:68:c1:4b:22:65:ac:6f:bc:e5:29:7b:96:0d:c4:00:
bc:53:a7:9a:05:97:40:b5:6a:44:e7:f7:14:64:ff:ec:f2:d1:
01:17:a3:f1:b8:9d:6a:f5:ca:57:ae:a9:3e:75:96:af:16:00:
63:6f:c6:fb:d2:56:d6:16:31:fa:3d:f8:6b:e1:80:63:17:45:
b7:72:d2:17:3c:fe:82:0f:43:a9:29:ab:62:df:a0:78:5c:83:
50:a7:3a:71:f8:c5:fc:91:a0:aa:a0:e1:dc:1a:c5:fd:71:96:
11:75:14:25:a8:9b:01:bd:36:75:9f:3d:09:6f:d0:75:3d:93:
ba:22:9c:fc:e4:8e:d6:80:32:33:bb:76:27:4e:64:d1:f0:13:
6c:17:e2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:24:27 2025 by rpki-client