Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
File: VAQZQbFFDWuVtYyj8HfOII39-0s.mft (raw, json)
Hash identifier: 0ynTEZlLZTOQViU60hox8EUjVBOET2yyigXjg75uUo0=
Subject key identifier: 0B:0A:60:7E:2A:0B:A2:36:8F:49:84:8C:4C:61:3F:A8:22:DB:A8:A0
Authority key identifier: 54:04:19:41:B1:45:0D:6B:95:B5:8C:A3:F0:77:CE:20:8D:FD:FB:4B
Certificate issuer: /CN=54041941b1450d6b95b58ca3f077ce208dfdfb4b
Certificate serial: 0197B70EBD5FF4E4F58E4364913BE94C2705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
Manifest number: 0655
Signing time: Sat 28 Jun 2025 15:01:25 +0000
Manifest this update: Sat 28 Jun 2025 15:01:25 +0000
Manifest next update: Sun 29 Jun 2025 15:01:25 +0000
Files and hashes: 1: VAQZQbFFDWuVtYyj8HfOII39-0s.crl (hash: TPKDevEZjGzt+doi3zzLi44gLDcnM6hjAsDf/PYkm2o=)
2: _kct8kIbVboNtXmwY3sBZtxcNtM.roa (hash: T6JpWQH7nutNbYZnSGugyuq7ObfBwtPlbYrmzm3m20w=)
3: khPPmPdFt5NSW2cXj9IsrNyyMNA.roa (hash: YSUlml94r6G6gJB4NeI+X3NQi5Phdn1YlU4xpfbkY7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:bd:5f:f4:e4:f5:8e:43:64:91:3b:e9:4c:27:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54041941b1450d6b95b58ca3f077ce208dfdfb4b
Validity
Not Before: Jun 28 15:01:25 2025 GMT
Not After : Jun 29 15:01:25 2025 GMT
Subject: CN=0b0a607e2a0ba2368f49848c4c613fa822dba8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2b:58:2d:6d:0e:97:12:0d:39:3e:05:1f:1d:
0f:6f:04:e7:8f:5c:e3:80:24:4d:80:84:fe:95:10:
76:43:4c:91:06:c8:ad:1c:3e:71:92:58:60:fe:fc:
4f:81:61:e4:8a:29:60:51:a4:6a:da:ec:85:ee:6f:
af:c5:bf:c4:fe:b3:4a:82:e5:31:28:11:ce:a0:3c:
1d:74:28:65:db:66:cb:6b:a6:fa:38:03:a5:7e:b2:
1e:6c:0e:55:da:51:3a:ea:04:5a:b6:fb:29:00:51:
b9:bf:16:d1:c9:7e:96:25:59:a0:a9:5e:7a:f2:b5:
88:ce:96:25:4b:c1:37:03:11:2f:8f:c3:4a:bc:0a:
ac:1b:c1:37:06:25:01:9f:5f:ab:d0:25:d9:85:f9:
07:44:c5:4c:11:31:9e:23:49:8a:39:b4:0d:e2:e5:
91:c6:30:37:ed:3d:eb:36:80:9d:9c:24:7b:1f:90:
e7:be:c2:88:c5:0a:96:5e:39:e2:42:30:f9:99:c3:
7a:a1:e0:1b:d3:ce:46:6e:53:bc:83:a5:e8:4d:90:
c5:fa:19:d1:d0:e1:a6:10:7d:ad:b0:3c:94:a9:35:
21:11:b7:79:91:30:3b:7f:ab:d1:13:82:8f:7c:e1:
5c:8d:83:10:7f:83:39:99:31:c2:67:e1:cb:40:e3:
1f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0A:60:7E:2A:0B:A2:36:8F:49:84:8C:4C:61:3F:A8:22:DB:A8:A0
X509v3 Authority Key Identifier:
keyid:54:04:19:41:B1:45:0D:6B:95:B5:8C:A3:F0:77:CE:20:8D:FD:FB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:6d:0a:b9:8e:6e:5a:ce:ba:19:4d:db:ea:93:08:56:d3:2c:
21:0c:80:2a:0d:73:21:e1:e3:e9:fd:fc:ad:4a:fb:c5:b0:aa:
c6:83:c8:aa:cc:65:a1:fe:e3:2f:46:d3:cd:90:79:8f:0f:79:
b0:26:fd:66:b7:36:f3:c8:53:61:5c:db:a7:60:cd:ec:70:f6:
21:90:67:6a:16:dd:c6:d3:f1:b9:88:bf:55:51:90:f6:23:6d:
6f:d4:3d:a2:69:c0:c7:c2:f1:84:dc:6e:55:31:65:4a:c2:43:
b0:47:cf:71:49:b4:93:18:ae:57:e4:c8:cd:aa:d3:08:6a:d4:
e5:95:4f:5e:44:fe:f7:40:63:7a:a4:52:c3:84:76:77:df:ee:
df:74:53:ff:44:79:b8:7c:2f:d7:bf:2e:ea:a8:21:4e:dd:f7:
3e:9a:e9:47:73:2f:11:d6:a6:45:57:60:00:f5:3b:10:44:0c:
11:ed:4d:f9:2d:7c:50:5d:10:6a:ea:44:f2:1b:fe:58:be:f0:
a8:e6:ab:4e:40:ce:d1:06:23:34:47:70:c6:3f:4e:b4:24:c8:
29:ed:ff:d4:40:a0:8e:92:a3:c9:66:9e:65:f4:5b:52:52:08:
fc:48:11:eb:cc:a4:e5:f0:54:46:7f:41:d1:9e:bc:d3:62:b7:
cb:2a:81:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:56 2025 by rpki-client