Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
File: vqbKA6jBNc7q4jLJN8HuC6uH54I.mft (raw, json)
Hash identifier: M4gBEW60lVu4rSnuzdJMOQQRjOCAVC9/tud/upaTKxI=
Subject key identifier: 95:2D:DA:2A:76:02:AA:53:E8:8C:6E:52:2B:43:1F:A1:13:C6:52:D8
Authority key identifier: BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82
Certificate issuer: /CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
Certificate serial: 0197B6A0C29C85385E89FD008BE7A59C4135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
Manifest number: 0DCE
Signing time: Sat 28 Jun 2025 13:01:18 +0000
Manifest this update: Sat 28 Jun 2025 13:01:18 +0000
Manifest next update: Sun 29 Jun 2025 13:01:18 +0000
Files and hashes: 1: RWAst6rhQtck0cf4rpJmbaVPDy4.roa (hash: ptBc35DUx8RheDUbwgxYVnrU5/IkEp9u9Ianwe8RHT0=)
2: dZgYAx_N36qliHArmqX1gaumeGY.roa (hash: f8R8/QcHyuVgs1r9zKBrMS4KaT9iNImM3nX83XfW2bA=)
3: vqbKA6jBNc7q4jLJN8HuC6uH54I.crl (hash: FzkT2n+1R6b3uVxLkudTF+r9ebS4wZ6qj5bv0BZENqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:c2:9c:85:38:5e:89:fd:00:8b:e7:a5:9c:41:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
Validity
Not Before: Jun 28 13:01:18 2025 GMT
Not After : Jun 29 13:01:18 2025 GMT
Subject: CN=952dda2a7602aa53e88c6e522b431fa113c652d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:54:33:36:af:ae:24:a7:45:5f:b5:ab:08:d0:
62:8b:0f:5c:d5:06:00:65:f0:58:74:0c:e7:45:4b:
e4:47:3f:86:01:ee:a7:f8:f4:c4:b8:fd:3d:6f:ce:
98:2f:1a:31:eb:eb:88:a8:98:6a:a9:07:79:9d:e0:
33:85:5d:84:f8:3a:95:4b:0f:f6:e2:c6:ea:89:80:
34:14:17:12:8f:ca:9b:50:19:da:c2:b2:ec:56:1e:
62:0f:a8:b7:ce:7f:3e:05:3a:80:42:ba:7d:6b:2f:
15:af:f8:dc:8c:85:86:d4:f7:df:45:f9:a8:86:8e:
b8:fd:94:eb:dc:0d:91:c7:e7:19:de:8d:d9:a2:f4:
4c:5b:51:16:4e:61:e9:31:62:d1:85:20:0b:d5:e9:
2a:40:52:68:d9:ce:3e:78:34:e0:e7:36:e6:f5:80:
f0:c3:c3:35:86:04:79:ee:29:85:0d:d1:dc:fd:03:
10:8c:a1:5a:e4:47:03:34:7f:0d:eb:fe:7d:e6:f6:
c9:57:59:0f:91:7d:55:a3:ef:20:07:49:e0:1b:48:
b3:57:6c:51:ee:d8:d4:88:f2:b6:1b:5a:3f:62:b5:
83:28:35:a1:4b:7b:ff:dd:25:91:29:64:6c:5a:18:
f6:6d:85:98:82:6d:04:ee:82:08:0c:a6:62:dd:35:
94:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2D:DA:2A:76:02:AA:53:E8:8C:6E:52:2B:43:1F:A1:13:C6:52:D8
X509v3 Authority Key Identifier:
keyid:BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:34:26:21:50:45:f8:48:42:88:40:72:5a:8f:b9:8c:f4:7e:
0a:a5:f9:1d:b7:6d:8e:fa:c6:83:a3:e1:c5:20:61:cd:33:fd:
a0:18:ef:7f:ff:d7:19:c3:1c:db:3a:54:37:83:55:99:dc:7b:
74:c2:fd:5e:e2:21:a4:49:85:d0:96:be:59:86:37:55:51:43:
dc:ee:48:3c:e3:7f:55:f6:99:7c:4d:de:64:da:06:71:ed:26:
37:71:0c:4c:69:82:ed:0a:5d:5e:a8:64:69:e0:90:6c:2d:2b:
a7:f5:ff:61:f4:c5:67:e1:88:4b:9a:06:22:95:1b:21:52:95:
30:bb:0c:1a:e3:62:91:a1:30:73:1b:ff:83:6e:77:c7:29:d2:
62:99:c3:48:bb:94:1b:90:ac:03:03:6d:b9:38:0a:3a:5d:b2:
62:07:3f:43:10:c5:0c:34:ba:9d:aa:a4:2e:d1:3b:5f:fc:9d:
82:b0:23:7a:d2:2b:f7:29:b1:fe:6a:47:ab:2b:64:ba:10:23:
91:33:f7:f7:f0:fc:5d:31:f1:3a:11:e7:b7:d2:fd:92:d0:12:
0a:a6:65:97:24:79:b7:27:06:0e:2a:c5:fe:44:60:2a:50:2b:
1c:00:e0:38:33:4f:30:eb:a2:85:ab:c6:41:b3:06:95:a0:dd:
f4:de:5f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:40:20 2025 by rpki-client