Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
File: VZxkpqxMSXatNiFBKhN0WeZJq54.mft (raw, json)
Hash identifier: lYY3GYz5YzgXnnT7ZUMKk/ObDIeEzNgyE6ZoM7lZXWY=
Subject key identifier: 2B:FA:73:B1:6D:10:69:C7:BC:A9:CA:F6:F9:6C:14:0F:80:73:9C:F8
Authority key identifier: 55:9C:64:A6:AC:4C:49:76:AD:36:21:41:2A:13:74:59:E6:49:AB:9E
Certificate issuer: /CN=559c64a6ac4c4976ad3621412a137459e649ab9e
Certificate serial: 0196B890FE05246FF95514809855DBFD6F67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
Manifest number: 10C9
Signing time: Sat 10 May 2025 05:00:31 +0000
Manifest this update: Sat 10 May 2025 05:00:31 +0000
Manifest next update: Sun 11 May 2025 05:00:31 +0000
Files and hashes: 1: VS9hlIblCqjoV7wOGER9HcFzw5g.roa (hash: ldQ9iAybiLA+phWuzQvG2tTPk8+fTFZlm2NUmijp+Ac=)
2: VZxkpqxMSXatNiFBKhN0WeZJq54.crl (hash: RALDixBpVJJ3V7Z73wtP5mJwF2hZ2OY0ObvIOuNHt2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:90:fe:05:24:6f:f9:55:14:80:98:55:db:fd:6f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559c64a6ac4c4976ad3621412a137459e649ab9e
Validity
Not Before: May 10 05:00:31 2025 GMT
Not After : May 11 05:00:31 2025 GMT
Subject: CN=2bfa73b16d1069c7bca9caf6f96c140f80739cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fd:64:4d:3a:05:c8:3f:c8:70:a5:93:61:82:
bb:bc:b1:e0:18:e4:9b:4b:d6:6c:73:9f:55:9b:8f:
96:6b:ec:26:b7:93:37:56:b3:ca:80:91:b1:d5:44:
50:e4:55:1d:dd:5e:d3:5e:72:4b:13:ef:48:27:73:
08:7e:ff:f0:0b:9a:75:b6:ed:56:30:a8:0b:9c:84:
c9:b3:ad:c7:e0:8f:09:13:7a:06:40:5c:b6:ea:15:
d3:81:f6:50:77:74:ca:74:38:31:2e:94:ce:57:ed:
e9:30:4d:28:d4:6c:08:80:18:5f:10:ba:32:76:a9:
f1:27:68:6f:3d:7a:91:4c:a0:74:7a:74:2c:82:28:
fa:44:8e:b7:b8:1f:53:99:b8:e0:44:64:ca:99:cd:
0c:34:ee:fd:91:a3:15:77:9c:5d:f1:1a:bd:38:fb:
60:55:fd:2a:5e:da:0a:13:81:0a:7c:07:4c:5d:74:
1d:41:01:79:99:99:ed:b9:dc:05:82:44:a6:c5:6d:
cd:44:ce:ad:45:1e:3a:8c:70:d8:4b:2a:9d:94:dc:
20:d3:27:3c:be:b9:fe:85:fb:e9:c6:e1:f4:ae:3f:
00:ca:6a:f5:2a:d9:17:cd:14:a4:32:98:51:1e:fc:
da:77:26:0c:ec:0c:cc:f3:57:4b:77:04:e4:c3:02:
ca:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FA:73:B1:6D:10:69:C7:BC:A9:CA:F6:F9:6C:14:0F:80:73:9C:F8
X509v3 Authority Key Identifier:
keyid:55:9C:64:A6:AC:4C:49:76:AD:36:21:41:2A:13:74:59:E6:49:AB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:08:3b:03:b7:55:77:c4:6c:f5:4f:e3:b2:ab:e6:04:c3:55:
6b:ca:be:9b:37:f7:46:c9:22:75:5f:77:40:ea:6e:bf:a8:71:
7d:2d:92:52:ff:5f:de:2a:39:33:93:47:14:61:c7:cf:d0:5f:
a9:ee:78:84:b5:26:a1:05:f3:80:53:f9:47:94:a2:aa:59:fe:
2a:31:6a:18:44:0c:6a:6d:8f:d1:f2:a8:cb:20:99:96:a0:7a:
b5:6c:14:1d:b3:9a:64:59:3e:a8:99:f0:d9:0c:ba:44:17:37:
7b:00:9d:3b:a2:ea:d0:51:92:44:32:2a:41:36:43:41:db:43:
4d:5b:0d:56:f5:f4:ae:de:d4:98:d9:14:fe:fb:c7:50:3e:c7:
d6:35:b2:0b:6e:3d:85:29:b9:78:cd:25:b6:50:ad:96:f4:8c:
ff:40:e7:7c:cd:cf:f4:96:5b:95:7b:39:63:37:90:72:0e:84:
32:41:ce:dd:c7:f8:08:3c:3d:11:fc:80:b3:62:87:5e:d8:b3:
fa:eb:81:b2:52:98:38:17:50:52:dd:aa:3a:35:58:a7:eb:98:
e2:ed:c6:cf:a9:c2:59:ed:3c:d6:40:6f:50:c4:2c:ca:b8:9b:
8e:3d:07:b2:5d:51:bf:f8:88:88:b0:90:4e:7f:fb:a4:e8:0c:
83:28:b0:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4kP4FJG/5VRSAmFXb/W9nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1OWM2NGE2YWM0YzQ5NzZhZDM2MjE0MTJhMTM3NDU5ZTY0
OWFiOWUwHhcNMjUwNTEwMDUwMDMxWhcNMjUwNTExMDUwMDMxWjAzMTEwLwYDVQQD
EygyYmZhNzNiMTZkMTA2OWM3YmNhOWNhZjZmOTZjMTQwZjgwNzM5Y2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyv1kTToFyD/IcKWTYYK7vLHgGOSb
S9Zsc59Vm4+Wa+wmt5M3VrPKgJGx1URQ5FUd3V7TXnJLE+9IJ3MIfv/wC5p1tu1W
MKgLnITJs63H4I8JE3oGQFy26hXTgfZQd3TKdDgxLpTOV+3pME0o1GwIgBhfELoy
dqnxJ2hvPXqRTKB0enQsgij6RI63uB9TmbjgRGTKmc0MNO79kaMVd5xd8Rq9OPtg
Vf0qXtoKE4EKfAdMXXQdQQF5mZntudwFgkSmxW3NRM6tRR46jHDYSyqdlNwg0yc8
vrn+hfvpxuH0rj8Aymr1KtkXzRSkMphRHvzadyYM7AzM81dLdwTkwwLKiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCv6c7FtEGnHvKnK9vlsFA+Ac5z4MB8GA1UdIwQY
MBaAFFWcZKasTEl2rTYhQSoTdFnmSaueMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlp4a3BxeE1TWGF0TmlGQktoTjBXZVpKcTU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yZTdmZDctMDU1Ni00ZGQ5LWI2YjIt
ZjMxNTEwNzcxMTg1LzEvVlp4a3BxeE1TWGF0TmlGQktoTjBXZVpKcTU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yZTdmZDctMDU1Ni00ZGQ5LWI2YjItZjMxNTEwNzcxMTg1
LzEvVlp4a3BxeE1TWGF0TmlGQktoTjBXZVpKcTU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQg7A7dV
d8Rs9U/jsqvmBMNVa8q+mzf3RskidV93QOpuv6hxfS2SUv9f3io5M5NHFGHHz9Bf
qe54hLUmoQXzgFP5R5Siqln+KjFqGEQMam2P0fKoyyCZlqB6tWwUHbOaZFk+qJnw
2Qy6RBc3ewCdO6Lq0FGSRDIqQTZDQdtDTVsNVvX0rt7UmNkU/vvHUD7H1jWyC249
hSm5eM0ltlCtlvSM/0DnfM3P9JZblXs5YzeQcg6EMkHO3cf4CDw9EfyAs2KHXtiz
+uuBslKYOBdQUt2qOjVYp+uY4u3Gz6nCWe081kBvUMQsyribjj0Hsl1Rv/iIiLCQ
Tn/7pOgMgyiwVg==
-----END CERTIFICATE-----
Generated at Sat May 10 13:56:21 2025 by rpki-client