Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
File: vhqIfnZTot5E8TFj4YcDcyaimgM.mft (raw, json)
Hash identifier: I3YcxNOICaWQF2wP89S4Fmsv5QBdhjQFymutTN0cBRk=
Subject key identifier: FC:58:E7:31:CC:42:EA:CA:75:74:CA:88:00:65:84:65:5A:2C:C7:66
Authority key identifier: BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03
Certificate issuer: /CN=be1a887e7653a2de44f13163e187037326a29a03
Certificate serial: 01969CE2C3C11B05DEEAEDE0F2E6F2FB64C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
Manifest number: 1529
Signing time: Sun 04 May 2025 20:00:29 +0000
Manifest this update: Sun 04 May 2025 20:00:29 +0000
Manifest next update: Mon 05 May 2025 20:00:29 +0000
Files and hashes: 1: Ae-diP3rVk-4sa-PXAYgbcBanm4.roa (hash: u0iGxdBhci5JERVXq9GDeBfY++asc/728T5ZMln1pyE=)
2: Z9qZa3inYQ6MRNBOPIdAZNAoS4Y.roa (hash: hXK11vHnwMejj7JOnaAkUByhg12mm0SXJ7OP6kT8Ve8=)
3: vhqIfnZTot5E8TFj4YcDcyaimgM.crl (hash: fbWPPXv7xRC5clNPEmKtOJma+iO9apbvjlzdkd26MqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:e2:c3:c1:1b:05:de:ea:ed:e0:f2:e6:f2:fb:64:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1a887e7653a2de44f13163e187037326a29a03
Validity
Not Before: May 4 20:00:29 2025 GMT
Not After : May 5 20:00:29 2025 GMT
Subject: CN=fc58e731cc42eaca7574ca88006584655a2cc766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9f:cc:a4:01:54:85:72:9c:17:86:fd:a6:9c:
f5:36:42:bc:c5:e7:91:09:a9:74:67:d9:cd:20:76:
29:5c:82:83:27:0a:63:25:c5:3f:5c:c0:0e:93:90:
fb:c8:e6:72:66:de:e5:89:7f:4f:53:32:2b:85:02:
65:44:5e:20:47:42:4c:82:b5:04:35:e4:0b:c9:08:
39:7b:12:c7:eb:5f:5e:c4:94:be:eb:67:34:44:6e:
2d:96:e9:aa:ee:0a:92:6b:1f:f5:fd:eb:06:8c:46:
4c:a9:0d:8c:62:ed:71:42:83:80:a6:e3:87:78:20:
95:a4:0a:fd:c6:4e:6f:78:28:cf:f6:c7:04:f9:53:
1e:1f:a4:c6:68:37:ce:74:af:48:8e:b0:47:04:7a:
75:55:b0:27:14:95:58:d5:41:eb:a4:e3:06:d2:9c:
af:9b:23:af:6e:39:b7:4b:b5:38:c4:c0:a4:55:9f:
5b:d6:ce:16:38:b4:12:80:5a:a3:34:77:36:fd:31:
f1:5a:b9:81:d3:ad:4a:ec:b8:50:79:4a:7d:49:0f:
7d:85:69:7f:b3:3f:19:5e:25:ba:7a:8e:cb:a4:fd:
4d:b5:95:6b:0e:2a:ee:5c:f5:bb:99:b1:83:c3:60:
4d:9b:cb:da:f4:93:1e:2e:fa:e2:6a:8f:e4:fb:db:
5c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:58:E7:31:CC:42:EA:CA:75:74:CA:88:00:65:84:65:5A:2C:C7:66
X509v3 Authority Key Identifier:
keyid:BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:88:e5:21:d3:c0:d8:39:17:9b:7e:b4:17:80:d6:04:0e:6f:
04:a4:a7:f7:da:3f:44:dd:52:70:65:2f:87:36:2f:f3:a6:f0:
fd:ca:f8:68:1e:cc:34:63:80:f7:6b:34:fd:ad:f8:ff:52:95:
84:4a:68:89:ba:a2:81:80:98:69:67:ff:81:cc:4a:e2:2d:ec:
8c:15:7a:32:73:a7:41:68:15:4f:4a:2e:80:d9:ce:23:30:7a:
51:78:97:d4:c5:33:35:55:0f:7c:5a:1e:77:45:34:fb:a2:dc:
23:fd:8a:fa:1d:82:4c:6b:e9:37:c3:98:94:79:d5:1d:25:b4:
11:2b:65:a5:25:d7:0f:09:37:62:cf:bb:d4:57:72:ec:97:80:
06:98:98:7a:a7:9e:84:17:dd:7a:42:48:19:93:3d:95:46:bc:
6b:91:a8:f1:be:38:ac:a5:d2:ed:18:2d:7f:4e:4d:64:c2:83:
9e:8c:4a:a3:1e:12:7a:57:76:51:db:e0:06:c7:07:c5:70:a9:
18:31:6b:25:31:bd:89:d8:89:fe:8c:e1:df:6c:ed:dc:b3:93:
59:ba:f2:b5:a0:ee:2a:c9:6e:9f:b1:a5:93:ce:4a:4e:d0:a2:
85:a3:f8:20:a5:90:ea:4f:fc:cf:38:ec:06:a9:f3:00:18:47:
65:13:24:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:49:54 2025 by rpki-client