Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
File: vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft (raw, json)
Hash identifier: abA2J8A973JGcJ90Rrgg1kElHL7Vlt9M3I2YyLvMB+Y=
Subject key identifier: 40:E5:6C:88:C9:D6:AC:00:12:35:18:31:8A:BA:AC:E6:31:3C:3F:15
Authority key identifier: BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5
Certificate issuer: /CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5
Certificate serial: 0196B823C9849E2F9749772782DA55428955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
Manifest number: 1534
Signing time: Sat 10 May 2025 03:01:15 +0000
Manifest this update: Sat 10 May 2025 03:01:15 +0000
Manifest next update: Sun 11 May 2025 03:01:15 +0000
Files and hashes: 1: PtAXY24lYtkFRHade4pTjXormLM.roa (hash: 1elZ7b8fLDvNPO81SeVzVwIAYPfLoIwWb4acP64QkQU=)
2: vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl (hash: s6rIfPlilKH+E3tYTwuQ9HDlIdjUT1KtzzCku3sVQvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:c9:84:9e:2f:97:49:77:27:82:da:55:42:89:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5
Validity
Not Before: May 10 03:01:15 2025 GMT
Not After : May 11 03:01:15 2025 GMT
Subject: CN=40e56c88c9d6ac00123518318abaace6313c3f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:05:6e:7c:b5:2e:42:6d:83:15:89:37:36:5c:
c9:bc:43:da:33:e7:c7:e9:cc:b3:8e:ab:18:3e:70:
28:a5:4b:df:1b:96:00:79:11:5b:df:23:55:0d:cb:
ff:c8:06:b1:6d:a3:38:e0:6b:4e:da:e3:ab:28:12:
33:2c:6b:4f:dc:34:18:5b:d0:04:89:62:46:f9:99:
7b:69:6c:32:09:1d:0e:29:39:c4:7f:bc:69:55:51:
25:95:ab:3a:81:80:6d:2a:b9:86:37:c0:f4:8a:c5:
4e:24:55:09:91:f9:6c:98:f4:bb:e0:0b:22:03:79:
3c:eb:22:6b:67:a1:5b:6b:62:7f:49:ef:4b:72:53:
02:3e:47:6b:4a:06:63:8c:a8:29:7a:5b:6a:e9:58:
37:02:bf:44:81:24:d0:17:6d:ac:b9:c5:13:1f:8f:
32:24:3c:ff:63:fb:00:b8:9c:d1:16:db:34:21:62:
99:48:b3:c7:7c:ba:3e:32:cf:7f:04:5d:87:a2:b4:
f2:fe:1d:41:ef:43:b6:76:19:94:66:53:e8:2a:71:
c0:43:fa:6d:9a:57:b1:65:69:0c:da:ee:21:d9:68:
7e:45:24:1d:15:73:c3:41:fd:e0:50:f1:39:9e:5c:
1d:79:0a:e8:88:43:a8:63:21:b8:78:bf:00:b6:2f:
67:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E5:6C:88:C9:D6:AC:00:12:35:18:31:8A:BA:AC:E6:31:3C:3F:15
X509v3 Authority Key Identifier:
keyid:BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d5:d8:29:3b:ed:c8:cd:3c:cb:d9:40:a4:50:64:5c:9d:b2:
56:11:74:4e:9d:07:b4:07:fb:20:79:08:fb:99:17:c4:0d:8d:
ad:bc:0b:99:63:ca:c9:da:dc:81:06:d0:29:6c:15:c5:4b:a9:
b0:c1:60:a6:87:3c:75:e7:ef:1b:0c:28:58:99:50:8d:8b:55:
f7:5b:d4:a9:63:1d:5a:f0:ad:ed:ba:ea:f2:0e:90:83:78:fd:
81:7f:1d:7f:8d:1c:df:55:b1:8c:25:21:89:3a:8e:24:14:f8:
c2:90:d3:ea:48:94:47:bf:c0:49:11:db:1b:f1:57:d1:97:bc:
2e:99:98:7d:0a:43:ec:28:0f:72:0a:7c:82:f0:73:93:a2:7e:
46:0f:4b:db:50:df:64:cc:e6:0d:10:e9:e8:14:08:ec:10:11:
47:25:9d:1a:09:a8:ab:b4:52:c9:72:fb:ea:c5:12:b1:c0:2c:
60:30:c4:25:41:1b:16:b3:9f:9f:e5:82:94:ce:41:3f:4f:5f:
a9:e4:17:c0:dc:9b:c5:e8:75:40:5d:0d:5f:bc:ee:a3:15:31:
49:67:ed:14:56:71:3d:02:5c:a1:cb:d8:3c:8e:46:3b:56:a1:
ba:4f:db:15:18:38:49:41:42:b7:3d:a6:11:98:fc:70:26:da:
58:05:d8:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4I8mEni+XSXcngtpVQolVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOWQ3YzQyZTkxNzg0NGNiYzJkZTRhOTFjNmMxNzAxZGU1
OTcxYjUwHhcNMjUwNTEwMDMwMTE1WhcNMjUwNTExMDMwMTE1WjAzMTEwLwYDVQQD
Eyg0MGU1NmM4OGM5ZDZhYzAwMTIzNTE4MzE4YWJhYWNlNjMxM2MzZjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgVufLUuQm2DFYk3NlzJvEPaM+fH
6cyzjqsYPnAopUvfG5YAeRFb3yNVDcv/yAaxbaM44GtO2uOrKBIzLGtP3DQYW9AE
iWJG+Zl7aWwyCR0OKTnEf7xpVVEllas6gYBtKrmGN8D0isVOJFUJkflsmPS74Asi
A3k86yJrZ6Fba2J/Se9LclMCPkdrSgZjjKgpeltq6Vg3Ar9EgSTQF22sucUTH48y
JDz/Y/sAuJzRFts0IWKZSLPHfLo+Ms9/BF2HorTy/h1B70O2dhmUZlPoKnHAQ/pt
mlexZWkM2u4h2Wh+RSQdFXPDQf3gUPE5nlwdeQroiEOoYyG4eL8Ati9n9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDlbIjJ1qwAEjUYMYq6rOYxPD8VMB8GA1UdIwQY
MBaAFLydfELpF4RMvC3kqRxsFwHeWXG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkoxOFF1a1hoRXk4TGVTcEhHd1hBZDVaY2JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yOWFlYTItYjZjOC00YWY5LWFkODQt
MDNmYjU0MTg3ZWUyLzEvdkoxOFF1a1hoRXk4TGVTcEhHd1hBZDVaY2JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8yOWFlYTItYjZjOC00YWY5LWFkODQtMDNmYjU0MTg3ZWUy
LzEvdkoxOFF1a1hoRXk4TGVTcEhHd1hBZDVaY2JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9XYKTvt
yM08y9lApFBkXJ2yVhF0Tp0HtAf7IHkI+5kXxA2NrbwLmWPKydrcgQbQKWwVxUup
sMFgpoc8defvGwwoWJlQjYtV91vUqWMdWvCt7brq8g6Qg3j9gX8df40c31WxjCUh
iTqOJBT4wpDT6kiUR7/ASRHbG/FX0Ze8LpmYfQpD7CgPcgp8gvBzk6J+Rg9L21Df
ZMzmDRDp6BQI7BARRyWdGgmoq7RSyXL76sUSscAsYDDEJUEbFrOfn+WClM5BP09f
qeQXwNybxeh1QF0NX7zuoxUxSWftFFZxPQJcocvYPI5GO1ahuk/bFRg4SUFCtz2m
EZj8cCbaWAXYVg==
-----END CERTIFICATE-----
Generated at Sat May 10 05:09:16 2025 by rpki-client