Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
File: vqPSZTUbZfI58pl94eioBneTOl4.mft (raw, json)
Hash identifier: v+EfN4tC8UN2gihRWpCwblv1Gp1cjLo30hD9Co0y1qg=
Subject key identifier: 46:2A:24:05:73:66:31:B5:3D:EC:97:3F:DA:07:38:4D:24:86:C7:B3
Authority key identifier: BE:A3:D2:65:35:1B:65:F2:39:F2:99:7D:E1:E8:A8:06:77:93:3A:5E
Certificate issuer: /CN=bea3d265351b65f239f2997de1e8a80677933a5e
Certificate serial: 0197B70EC2C411B5BC2507473AFB50FD0424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
Manifest number: 03DA
Signing time: Sat 28 Jun 2025 15:01:27 +0000
Manifest this update: Sat 28 Jun 2025 15:01:27 +0000
Manifest next update: Sun 29 Jun 2025 15:01:27 +0000
Files and hashes: 1: qeUjFmDBXRanRORKytHhxi_chXY.roa (hash: BDfZzOuGAgs1F3dD55NRk4ttvCosc+ZV+zf9zuFmFos=)
2: vqPSZTUbZfI58pl94eioBneTOl4.crl (hash: mNJc6dtUnDwV+xG1TTIlTNqljuyroXJet13AOGkHWVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c2:c4:11:b5:bc:25:07:47:3a:fb:50:fd:04:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea3d265351b65f239f2997de1e8a80677933a5e
Validity
Not Before: Jun 28 15:01:27 2025 GMT
Not After : Jun 29 15:01:27 2025 GMT
Subject: CN=462a2405736631b53dec973fda07384d2486c7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:43:0f:ee:5e:32:2b:55:0a:49:41:22:08:55:
ab:d6:cf:0f:33:a1:71:0d:04:3b:da:00:61:32:ae:
23:24:ef:dd:3b:7c:bb:84:e6:c6:e2:38:67:6a:6f:
10:e3:77:21:32:2a:dd:d6:2a:7e:2d:ef:36:7c:59:
10:62:25:9e:d1:74:3e:fc:5e:ec:09:16:44:2f:17:
b9:20:44:c5:6c:9f:7b:ab:ae:97:16:88:d4:9f:ff:
4b:1c:d3:84:63:c0:2c:3e:38:e4:3c:a3:b3:69:46:
28:d1:e4:de:d0:05:55:9b:5e:35:2d:d1:85:10:54:
c5:cb:31:83:48:01:ce:bc:5e:1d:d1:c2:48:77:29:
bf:84:0d:41:6c:98:73:09:9d:7d:e0:71:f7:4d:db:
ee:f8:2d:43:a4:3b:d4:2f:d2:9b:b7:68:42:3c:bc:
a0:6b:b9:ee:bc:f9:da:3c:08:0c:13:a5:ec:97:e0:
66:b9:bc:61:c7:81:ae:46:94:73:b4:a1:ad:4f:5a:
d3:81:db:7b:7f:99:73:4d:5c:9f:25:e8:39:82:99:
fd:f1:36:5f:35:47:11:bd:4f:7f:0e:65:26:1d:a0:
40:6e:24:b2:8f:05:7f:c3:f4:21:1c:40:98:0f:ab:
5b:22:0a:7f:90:d8:17:b7:3b:b2:88:3a:60:eb:4e:
7e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2A:24:05:73:66:31:B5:3D:EC:97:3F:DA:07:38:4D:24:86:C7:B3
X509v3 Authority Key Identifier:
keyid:BE:A3:D2:65:35:1B:65:F2:39:F2:99:7D:E1:E8:A8:06:77:93:3A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:4e:89:6c:31:e6:77:2a:db:2c:7c:97:d2:d0:4d:e3:db:5f:
a2:25:61:4e:c0:1c:95:63:a1:6b:8b:f0:50:1f:b8:15:9e:dd:
63:7f:4e:e0:f7:48:7e:28:42:8f:65:d9:bd:32:f1:27:66:d7:
97:01:c9:92:9b:47:15:fe:79:9c:57:f1:ca:ef:ab:2d:c5:75:
66:9b:0a:40:c2:a5:fa:05:48:9c:16:ea:89:00:53:9d:e3:d8:
fd:25:54:f6:4a:22:e6:98:d2:90:f5:41:d1:ba:5a:e9:15:a0:
83:41:fb:07:3c:e1:fb:78:ce:5b:79:af:d0:1b:5e:7f:f4:a2:
a5:f4:65:85:48:ed:61:fc:84:9c:cc:82:66:9a:f2:bf:03:90:
13:f1:d2:67:e0:ee:e2:4e:72:36:ef:f5:7b:df:16:1d:70:ba:
40:98:c9:69:92:52:0b:c9:5d:48:2a:d2:3c:8a:e3:f3:0f:71:
03:80:67:a0:9c:13:f5:d7:13:eb:28:1b:28:3e:37:79:a5:bd:
85:d2:ca:8b:07:b3:be:3b:9a:a2:bc:77:68:0d:55:54:35:c2:
a2:d7:47:d8:25:a1:15:f1:e0:20:a8:86:e7:67:35:71:1e:90:
f7:08:b7:e1:32:b9:43:67:5a:c3:09:b6:b1:1b:42:f7:25:5e:
dd:60:ab:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:20:20 2025 by rpki-client