Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
File: Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft (raw, json)
Hash identifier: pruSRBxPOIA61ATFUESuufo7Oea23BoWBcd2EWGi5lg=
Subject key identifier: E3:8F:B3:F1:F4:AC:6D:49:67:F1:69:18:E7:19:9F:2B:B2:B1:38:E3
Authority key identifier: 55:E7:39:7E:45:30:61:85:10:2B:FD:9E:E0:A1:F9:4D:1A:C0:10:12
Certificate issuer: /CN=55e7397e45306185102bfd9ee0a1f94d1ac01012
Certificate serial: 0196B8914C92C4872820019746C714E727DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vec5fkUwYYUQK_2e4KH5TRrAEBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
Manifest number: 0543
Signing time: Sat 10 May 2025 05:00:52 +0000
Manifest this update: Sat 10 May 2025 05:00:52 +0000
Manifest next update: Sun 11 May 2025 05:00:52 +0000
Files and hashes: 1: Vec5fkUwYYUQK_2e4KH5TRrAEBI.crl (hash: 7jWsm3fXNCPC0hSdc1v3Gi25Y6qTjrguQ7N5Stdj0AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vec5fkUwYYUQK_2e4KH5TRrAEBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:91:4c:92:c4:87:28:20:01:97:46:c7:14:e7:27:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55e7397e45306185102bfd9ee0a1f94d1ac01012
Validity
Not Before: May 10 05:00:52 2025 GMT
Not After : May 11 05:00:52 2025 GMT
Subject: CN=e38fb3f1f4ac6d4967f16918e7199f2bb2b138e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:92:23:f2:0a:eb:15:4e:d3:96:24:37:f8:4f:
db:4c:3d:d0:c6:72:41:df:e6:50:ee:c7:8a:f4:39:
0d:53:0e:3d:09:16:95:da:43:09:fc:ee:b7:db:2b:
63:80:03:38:24:fc:81:74:3d:d6:d5:ba:7a:e7:b0:
db:9e:91:a6:1c:61:01:9e:fd:39:95:b4:7f:8a:52:
ef:09:d3:3c:9a:07:ba:a7:05:0e:d9:a9:c6:c0:c9:
1d:cd:23:a7:1d:eb:2f:bc:d0:1f:a2:cf:17:7c:27:
92:25:97:3d:31:6e:a9:d7:dc:e7:41:f8:23:a5:3c:
e4:ff:c2:a1:07:a5:64:e9:76:f6:93:92:27:9a:8c:
d7:51:7d:ac:be:02:12:56:26:17:bc:ee:62:45:9e:
ab:6d:53:ab:66:e8:07:9a:e3:b5:3c:1f:78:c3:61:
b6:ff:37:c0:e8:dd:1b:34:41:3f:31:e1:e9:cf:54:
a0:2d:00:f9:92:79:87:a6:bc:07:6f:12:c3:72:7a:
57:fe:97:33:09:51:61:20:1c:9d:47:4f:a3:04:0e:
49:8c:95:dd:bf:3e:52:fb:9c:70:a5:df:84:8b:3b:
83:af:19:0a:db:13:1c:c7:ee:7b:20:08:0c:f2:1b:
44:9b:57:e7:21:ba:ac:07:5f:75:2a:34:0a:e1:0d:
e8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8F:B3:F1:F4:AC:6D:49:67:F1:69:18:E7:19:9F:2B:B2:B1:38:E3
X509v3 Authority Key Identifier:
keyid:55:E7:39:7E:45:30:61:85:10:2B:FD:9E:E0:A1:F9:4D:1A:C0:10:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vec5fkUwYYUQK_2e4KH5TRrAEBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:06:a0:12:00:94:66:8f:0c:b2:e4:7d:f3:77:e5:5b:eb:16:
42:4c:b3:a5:3d:23:67:3f:52:3d:0b:4d:12:2c:2c:98:e3:78:
3f:10:c7:ad:fe:5e:51:d9:7f:32:14:c4:5d:2a:ba:18:a4:67:
94:de:b9:ee:57:61:68:17:ba:61:1d:3c:4d:89:ec:9a:c0:8c:
f2:70:be:07:1f:9b:da:9c:fe:78:78:2c:51:9e:16:c2:e2:57:
93:3e:c7:1b:d7:b8:5f:9d:0b:37:b4:36:23:0b:4b:85:81:0d:
50:5e:91:30:bb:e3:84:e2:ed:ba:60:00:07:94:84:1a:92:a2:
ae:d3:e3:43:e4:85:4a:83:48:dc:f3:23:6d:95:62:67:a5:d0:
fc:d5:f0:91:3e:19:31:1b:43:c2:61:76:73:29:11:85:de:5c:
99:03:39:a6:39:c2:2e:bf:48:e2:c2:1d:d0:0d:0c:13:4a:45:
a6:eb:0f:f4:f8:4f:da:5c:89:ed:4e:76:47:b7:8f:ba:2a:92:
c4:01:b0:f8:b9:f4:b6:0c:d5:13:91:30:a8:a9:1d:42:58:22:
6b:2d:11:db:95:fa:30:2b:b8:76:c7:56:ec:3d:8d:53:82:5c:
56:19:c1:82:1d:bf:48:97:36:fc:e1:f7:11:3b:54:07:c0:c0:
95:6e:7d:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4kUySxIcoIAGXRscU5yfdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ZTczOTdlNDUzMDYxODUxMDJiZmQ5ZWUwYTFmOTRkMWFj
MDEwMTIwHhcNMjUwNTEwMDUwMDUyWhcNMjUwNTExMDUwMDUyWjAzMTEwLwYDVQQD
EyhlMzhmYjNmMWY0YWM2ZDQ5NjdmMTY5MThlNzE5OWYyYmIyYjEzOGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5Ij8grrFU7TliQ3+E/bTD3QxnJB
3+ZQ7seK9DkNUw49CRaV2kMJ/O632ytjgAM4JPyBdD3W1bp657DbnpGmHGEBnv05
lbR/ilLvCdM8mge6pwUO2anGwMkdzSOnHesvvNAfos8XfCeSJZc9MW6p19znQfgj
pTzk/8KhB6Vk6Xb2k5InmozXUX2svgISViYXvO5iRZ6rbVOrZugHmuO1PB94w2G2
/zfA6N0bNEE/MeHpz1SgLQD5knmHprwHbxLDcnpX/pczCVFhIBydR0+jBA5JjJXd
vz5S+5xwpd+EizuDrxkK2xMcx+57IAgM8htEm1fnIbqsB191KjQK4Q3omQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOPs/H0rG1JZ/FpGOcZnyuysTjjMB8GA1UdIwQY
MBaAFFXnOX5FMGGFECv9nuCh+U0awBASMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmVjNWZrVXdZWVVRS18yZTRLSDVUUnJBRUJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMDI3M2YtZDk5OC00NmU3LTg2MDgt
MzEwNTU0NjgyMjIzLzEvVmVjNWZrVXdZWVVRS18yZTRLSDVUUnJBRUJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMDI3M2YtZDk5OC00NmU3LTg2MDgtMzEwNTU0NjgyMjIz
LzEvVmVjNWZrVXdZWVVRS18yZTRLSDVUUnJBRUJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJwagEgCU
Zo8MsuR983flW+sWQkyzpT0jZz9SPQtNEiwsmON4PxDHrf5eUdl/MhTEXSq6GKRn
lN657ldhaBe6YR08TYnsmsCM8nC+Bx+b2pz+eHgsUZ4WwuJXkz7HG9e4X50LN7Q2
IwtLhYENUF6RMLvjhOLtumAAB5SEGpKirtPjQ+SFSoNI3PMjbZViZ6XQ/NXwkT4Z
MRtDwmF2cykRhd5cmQM5pjnCLr9I4sId0A0ME0pFpusP9PhP2lyJ7U52R7ePuiqS
xAGw+Ln0tgzVE5EwqKkdQlgiay0R25X6MCu4dsdW7D2NU4JcVhnBgh2/SJc2/OH3
ETtUB8DAlW59jg==
-----END CERTIFICATE-----
Generated at Sat May 10 09:47:40 2025 by rpki-client