Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
File: vqbKA6jBNc7q4jLJN8HuC6uH54I.mft (raw, json)
Hash identifier: PqEbw9kZX0rdcd8U+85vlfrJl4ahUklSY59P+cUjGNg=
Subject key identifier: E6:8E:7D:66:D2:67:17:CC:CF:27:00:84:20:26:84:28:D4:72:D9:C0
Authority key identifier: BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82
Certificate issuer: /CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
Certificate serial: 01969E63378A09DBD834202897C37EC11DDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
Manifest number: 0D3D
Signing time: Mon 05 May 2025 03:00:24 +0000
Manifest this update: Mon 05 May 2025 03:00:24 +0000
Manifest next update: Tue 06 May 2025 03:00:24 +0000
Files and hashes: 1: RWAst6rhQtck0cf4rpJmbaVPDy4.roa (hash: ptBc35DUx8RheDUbwgxYVnrU5/IkEp9u9Ianwe8RHT0=)
2: dZgYAx_N36qliHArmqX1gaumeGY.roa (hash: f8R8/QcHyuVgs1r9zKBrMS4KaT9iNImM3nX83XfW2bA=)
3: vqbKA6jBNc7q4jLJN8HuC6uH54I.crl (hash: oWisVYHQGXkiW9Wn5CA1vD0knq4Ti3NZRAlIYL5CMRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:37:8a:09:db:d8:34:20:28:97:c3:7e:c1:1d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
Validity
Not Before: May 5 03:00:24 2025 GMT
Not After : May 6 03:00:24 2025 GMT
Subject: CN=e68e7d66d26717cccf27008420268428d472d9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0f:97:a6:e3:dc:8a:8f:7f:aa:9c:cd:0a:48:
cf:17:94:68:6d:ea:88:54:6d:80:ee:66:5c:62:e1:
2c:cb:ee:e5:77:48:cf:d1:23:5d:63:6e:7d:74:c1:
8d:a5:88:53:37:85:fe:b1:b5:bb:57:65:37:22:c7:
a4:f6:c8:30:ef:6c:d5:41:64:c0:e9:93:39:a7:9d:
ed:91:ff:1d:da:2d:f9:5b:bb:e4:8c:8b:52:45:33:
e5:fd:14:76:77:b2:17:ad:33:8b:b3:9c:3b:bd:ab:
5a:e1:fb:05:09:49:6e:7c:79:5a:19:32:11:64:e6:
79:9c:8f:be:1a:f4:c5:5e:39:f9:97:84:11:db:0e:
87:19:3d:41:b2:ea:32:aa:3d:dd:c1:2f:e3:f0:fe:
fb:8d:c3:11:df:ac:0d:c1:5e:3c:54:4e:9b:bf:aa:
c3:e4:b7:25:f8:4d:59:0a:71:2f:fe:6d:28:87:26:
ef:fd:63:e5:8d:54:cf:54:81:a1:b2:77:0f:7b:e7:
09:12:12:eb:97:d6:b9:82:0d:ff:ef:f8:64:28:7d:
57:b7:30:af:50:c3:8a:e0:e5:f7:52:14:02:be:57:
05:5f:9b:d6:99:9c:90:bd:b6:f6:5a:c9:b2:ce:b9:
39:74:8c:cf:b5:7d:fc:a1:f7:96:8b:af:7e:23:52:
df:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8E:7D:66:D2:67:17:CC:CF:27:00:84:20:26:84:28:D4:72:D9:C0
X509v3 Authority Key Identifier:
keyid:BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:00:c7:2a:32:55:a8:3b:75:ff:e9:ce:49:64:1b:21:63:a2:
8c:74:3a:a5:4c:21:20:c8:6d:85:95:20:dd:65:28:07:f3:ca:
2a:3b:76:61:cb:f2:1a:ce:10:1e:ec:5a:a4:f5:43:2f:45:df:
a5:63:9a:5b:77:45:d9:bd:ed:1a:63:96:ee:95:3d:24:db:d3:
d1:44:ef:b7:09:83:c3:6b:49:2f:75:f9:2e:38:f0:45:76:2e:
74:c2:3b:03:28:d8:42:89:01:a1:56:cc:09:a6:b7:eb:85:ec:
13:08:89:3d:96:79:37:b8:9b:36:fa:cd:91:3f:9e:f7:a2:a4:
0d:30:ba:9b:a2:fe:86:b6:1f:6c:c5:a7:c3:9d:d1:48:5b:72:
27:c2:2c:b0:3c:c5:6d:ad:9c:42:95:0e:06:7c:5d:55:cc:13:
10:d4:88:a3:6b:59:a7:8f:84:7d:e2:86:39:74:5f:d8:ce:3f:
f3:d1:6e:0d:e8:b5:0f:90:7b:48:97:70:b3:b1:ed:90:f4:9a:
98:ef:cf:d9:22:56:47:42:08:13:ed:89:d7:09:4e:0d:b6:45:
8a:d1:49:08:9b:7e:95:52:33:e2:d3:5e:75:89:8a:3a:2c:61:
e9:9e:bb:b7:16:b3:13:c2:39:79:50:97:64:d0:22:39:d7:41:
e0:8c:7f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:04:49 2025 by rpki-client