Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
File: vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft (raw, json)
Hash identifier: S9i9FjLQ4pnhIxxtsZl08IezCkFYtygYKWbcBJbsssU=
Subject key identifier: F5:43:8E:B3:A6:3A:78:E8:13:84:4A:B3:00:84:ED:CA:9F:60:38:AE
Authority key identifier: BD:D4:26:2F:64:2B:1B:B0:B5:3B:2A:6D:77:98:C0:89:9D:1E:4D:43
Certificate issuer: /CN=bdd4262f642b1bb0b53b2a6d7798c0899d1e4d43
Certificate serial: 0196C570DF3904B82E0BA3CC10A386389076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
Manifest number: 0A9C
Signing time: Mon 12 May 2025 17:00:30 +0000
Manifest this update: Mon 12 May 2025 17:00:30 +0000
Manifest next update: Tue 13 May 2025 17:00:30 +0000
Files and hashes: 1: 3Vc8GAv3OdpXw-IEwIeY1NxUP6c.roa (hash: qDWay94UtnkH+WvsjYkj9wPwpR3+5E60OgC2LXVgLK8=)
2: hj3e4V3BcXmmC3J4J-LR8jJvgpQ.roa (hash: ajCXRDGbAHENq7O0wMkVKgSnARDHbWRHh8qUlDNLW3k=)
3: o3kVjVR-Bk2kY6NJIMAGFLe8Jgw.roa (hash: RhEyDbo5nJOAevwisCtwUttff0SfpdFcDo7LzXQNDoo=)
4: vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl (hash: G4FPYetZLSI1zQTg4IDeKL5ccSTIsvt4T7TiXjCdkqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:70:df:39:04:b8:2e:0b:a3:cc:10:a3:86:38:90:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd4262f642b1bb0b53b2a6d7798c0899d1e4d43
Validity
Not Before: May 12 17:00:30 2025 GMT
Not After : May 13 17:00:30 2025 GMT
Subject: CN=f5438eb3a63a78e813844ab30084edca9f6038ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:04:7a:65:57:66:a5:f6:db:2a:eb:0f:38:68:
e7:a5:55:b1:f0:a8:82:32:5e:02:6d:4e:f2:f0:6f:
73:71:92:e0:78:11:06:50:2c:2c:aa:1e:d5:6d:7d:
1f:ca:f6:d6:0e:08:e4:37:0c:48:b2:0e:a3:32:03:
08:af:a2:f3:f6:ef:73:80:6a:ae:bd:f7:a9:5a:b9:
3e:5e:c9:cc:f8:49:db:05:28:07:66:ca:56:57:07:
c6:9d:cb:a7:ee:2b:b6:db:eb:57:cf:ec:83:36:4a:
79:5b:3e:9b:5b:8d:73:f1:b1:38:14:94:1f:81:55:
30:19:06:6a:4b:fa:f1:5f:f6:08:0d:ab:bd:25:24:
69:11:b8:fc:08:b0:b8:ca:22:c4:df:a9:3b:97:4c:
9f:ed:d8:2c:b2:7c:32:d1:46:e0:5b:48:fb:32:79:
59:66:7f:e0:0f:50:cc:cb:5d:aa:92:8e:54:a6:61:
15:4f:72:55:3b:c5:00:ac:c5:d6:46:42:cf:9f:74:
87:84:39:79:6f:c0:86:b3:15:65:ab:6b:cd:82:4b:
1d:c9:05:fd:e1:86:5a:bf:06:4e:05:37:c7:ee:34:
f3:8a:a1:23:59:f7:ce:1c:0a:82:b8:bc:b0:3d:41:
08:7e:4d:6e:1c:c9:84:9a:5f:ec:9f:18:ed:6c:fc:
3e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:43:8E:B3:A6:3A:78:E8:13:84:4A:B3:00:84:ED:CA:9F:60:38:AE
X509v3 Authority Key Identifier:
keyid:BD:D4:26:2F:64:2B:1B:B0:B5:3B:2A:6D:77:98:C0:89:9D:1E:4D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:2a:ab:5e:66:f8:88:21:f0:0a:e4:de:5c:3c:30:2f:40:1f:
61:02:fa:a6:42:6a:a2:26:16:33:7a:02:97:ca:57:18:79:6f:
a9:67:22:d4:ed:29:bb:ed:53:2e:4d:40:64:c5:1f:7f:5a:8f:
d8:bb:9f:1e:6d:ec:23:e3:dc:50:07:c5:4e:bb:fa:e0:fb:e2:
8d:f8:bb:4a:9d:ca:6c:fe:27:21:2a:5c:66:88:b8:49:0a:20:
00:95:dc:1e:69:74:69:ec:30:99:7e:16:f9:3e:66:23:a8:53:
2a:e8:53:83:01:c7:1c:c7:43:32:e1:cb:bc:d1:7c:c1:08:2f:
ec:fd:ac:7b:70:b9:c2:bd:99:7d:0b:a0:10:6f:37:94:37:ec:
38:4e:0c:76:c9:93:a0:eb:71:3d:b0:a9:bf:cf:17:ee:87:35:
13:b8:ef:00:f1:75:5b:9a:83:93:d5:57:0c:1e:88:00:9c:bf:
a8:ad:10:fc:54:33:11:81:4f:96:07:65:d0:d1:21:d0:b8:fd:
77:c7:24:74:e1:1b:66:ee:3d:98:0f:3a:f2:fc:9d:8e:74:4e:
41:31:81:89:19:2b:dc:5d:bb:08:92:af:31:d3:87:4c:43:b2:
3e:24:fd:cf:53:7f:99:45:b1:d4:df:59:24:bb:ff:c3:f0:f8:
b8:1b:00:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbFcN85BLguC6PMEKOGOJB2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZDQyNjJmNjQyYjFiYjBiNTNiMmE2ZDc3OThjMDg5OWQx
ZTRkNDMwHhcNMjUwNTEyMTcwMDMwWhcNMjUwNTEzMTcwMDMwWjAzMTEwLwYDVQQD
EyhmNTQzOGViM2E2M2E3OGU4MTM4NDRhYjMwMDg0ZWRjYTlmNjAzOGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQR6ZVdmpfbbKusPOGjnpVWx8KiC
Ml4CbU7y8G9zcZLgeBEGUCwsqh7VbX0fyvbWDgjkNwxIsg6jMgMIr6Lz9u9zgGqu
vfepWrk+XsnM+EnbBSgHZspWVwfGncun7iu22+tXz+yDNkp5Wz6bW41z8bE4FJQf
gVUwGQZqS/rxX/YIDau9JSRpEbj8CLC4yiLE36k7l0yf7dgssnwy0UbgW0j7MnlZ
Zn/gD1DMy12qko5UpmEVT3JVO8UArMXWRkLPn3SHhDl5b8CGsxVlq2vNgksdyQX9
4YZavwZOBTfH7jTziqEjWffOHAqCuLywPUEIfk1uHMmEml/snxjtbPw+qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVDjrOmOnjoE4RKswCE7cqfYDiuMB8GA1UdIwQY
MBaAFL3UJi9kKxuwtTsqbXeYwImdHk1DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmRRbUwyUXJHN0MxT3lwdGQ1akFpWjBlVFVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85MGM1YmUtMmY2ZS00NDQxLTk0NjEt
M2JkNzlmZmM2Mzk4LzEvdmRRbUwyUXJHN0MxT3lwdGQ1akFpWjBlVFVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy85MGM1YmUtMmY2ZS00NDQxLTk0NjEtM2JkNzlmZmM2Mzk4
LzEvdmRRbUwyUXJHN0MxT3lwdGQ1akFpWjBlVFVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOSqrXmb4
iCHwCuTeXDwwL0AfYQL6pkJqoiYWM3oCl8pXGHlvqWci1O0pu+1TLk1AZMUff1qP
2LufHm3sI+PcUAfFTrv64Pvijfi7Sp3KbP4nISpcZoi4SQogAJXcHml0aewwmX4W
+T5mI6hTKuhTgwHHHMdDMuHLvNF8wQgv7P2se3C5wr2ZfQugEG83lDfsOE4MdsmT
oOtxPbCpv88X7oc1E7jvAPF1W5qDk9VXDB6IAJy/qK0Q/FQzEYFPlgdl0NEh0Lj9
d8ckdOEbZu49mA868vydjnROQTGBiRkr3F27CJKvMdOHTEOyPiT9z1N/mUWx1N9Z
JLv/w/D4uBsAyw==
-----END CERTIFICATE-----
Generated at Mon May 12 18:38:45 2025 by rpki-client