Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
File: vhqIfnZTot5E8TFj4YcDcyaimgM.mft (raw, json)
Hash identifier: 7HfxoyrL8H5P8PHxaVLF6XLkAKNOG6+thmvpfMY5+yw=
Subject key identifier: 10:47:01:63:E0:FC:7E:26:61:4D:BE:A8:3F:AE:6F:F9:55:CB:6B:86
Authority key identifier: BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03
Certificate issuer: /CN=be1a887e7653a2de44f13163e187037326a29a03
Certificate serial: 0197B6D78DD31F03A18C9ABEEDE29A4570B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
Manifest number: 15BB
Signing time: Sat 28 Jun 2025 14:01:09 +0000
Manifest this update: Sat 28 Jun 2025 14:01:09 +0000
Manifest next update: Sun 29 Jun 2025 14:01:09 +0000
Files and hashes: 1: Ae-diP3rVk-4sa-PXAYgbcBanm4.roa (hash: u0iGxdBhci5JERVXq9GDeBfY++asc/728T5ZMln1pyE=)
2: Z9qZa3inYQ6MRNBOPIdAZNAoS4Y.roa (hash: hXK11vHnwMejj7JOnaAkUByhg12mm0SXJ7OP6kT8Ve8=)
3: vhqIfnZTot5E8TFj4YcDcyaimgM.crl (hash: 5D8vrgjwsb4gMCvZttZk0CPdsoshia9kdpghgEK9MSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:8d:d3:1f:03:a1:8c:9a:be:ed:e2:9a:45:70:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1a887e7653a2de44f13163e187037326a29a03
Validity
Not Before: Jun 28 14:01:09 2025 GMT
Not After : Jun 29 14:01:09 2025 GMT
Subject: CN=10470163e0fc7e26614dbea83fae6ff955cb6b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9d:cd:41:87:76:5a:49:f7:00:31:38:9d:c4:
bc:91:81:7c:6c:ce:b7:eb:10:81:0a:6f:07:77:9d:
e8:57:fc:35:9f:95:4e:3a:72:2c:c2:19:70:f2:6a:
65:42:7b:de:e3:aa:cb:6c:a7:a0:e3:df:e4:42:d0:
c2:fd:18:8c:df:aa:28:88:88:a2:4d:ff:56:e1:22:
21:f6:97:5e:c1:bb:e6:76:ce:74:ff:9d:07:9e:de:
76:35:09:e3:a5:dd:7e:88:6a:a0:ad:10:d9:bb:c1:
56:b1:b6:e6:3c:f7:27:4f:ef:dc:ee:f3:83:2e:f5:
11:32:24:41:93:d2:26:2f:0e:d4:34:39:a9:c9:0d:
82:5b:55:40:99:e5:2a:14:54:07:3f:45:87:a0:f7:
b7:64:52:1c:1f:e7:50:99:45:e6:99:ca:08:b6:5e:
39:d9:ed:14:cf:b1:4c:bf:3c:62:ad:12:e8:eb:6d:
df:03:e7:ef:62:d1:4c:ce:93:20:7d:78:91:ba:08:
06:1a:f8:78:04:46:28:bf:f2:98:4d:17:78:d7:18:
c9:7d:d4:eb:be:10:e7:43:be:3b:a9:3e:c4:bc:d3:
3b:cb:1c:3c:80:fc:6e:ef:41:8f:a7:11:88:c1:bb:
7a:a0:1a:d9:22:f3:6d:3a:51:32:16:4a:8f:a2:68:
ba:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:47:01:63:E0:FC:7E:26:61:4D:BE:A8:3F:AE:6F:F9:55:CB:6B:86
X509v3 Authority Key Identifier:
keyid:BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:39:25:5b:ae:44:5d:16:50:04:dd:94:e9:fc:0f:1c:66:8d:
6c:e1:2f:65:0d:9d:09:2b:a4:e8:f5:59:4b:45:06:8d:7a:cc:
1c:55:9b:64:cf:5c:af:18:22:6f:19:1e:3c:dc:8b:f5:ce:0b:
d1:70:f2:bf:39:05:bb:ca:77:24:7a:97:29:1c:69:e1:8b:d2:
31:33:2f:7b:cc:6f:b2:40:30:a2:13:30:6c:f6:36:d5:6e:b8:
de:53:07:18:09:f2:bf:35:6b:be:d9:05:a9:fe:32:9e:19:ee:
40:c7:fd:72:06:41:2f:d5:8e:e0:8b:87:7a:09:47:df:89:ce:
7b:f2:e0:72:4d:76:75:a5:64:26:f9:de:d4:9f:27:ef:88:d8:
2f:57:3b:9a:57:78:c1:aa:57:df:09:28:1c:e9:58:36:7a:9e:
73:2f:d8:c4:c8:8f:74:15:da:98:01:ff:b9:ec:a7:60:bf:7a:
98:5d:53:b0:71:80:06:29:fe:d1:d1:00:d3:14:16:d8:d4:4c:
59:1c:7b:fa:e2:7e:fb:57:4a:0c:44:87:09:ee:52:a4:0d:11:
85:1d:6a:76:06:63:6e:fd:b8:f5:22:9c:3e:e9:fe:5d:4f:8e:
e2:72:6d:76:42:65:51:b8:ef:46:f6:46:34:a7:e8:72:ad:88:
3f:32:71:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:18:31 2025 by rpki-client