Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft
File: Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft (raw, json)
Hash identifier: nIajAnNqdfeKKa3N7nYN7Rx9B45jmrae/jNo0JP96X8=
Subject key identifier: 36:E4:FD:9D:68:11:78:15:70:3D:15:99:96:A5:78:2F:BA:80:E6:3C
Authority key identifier: 56:AA:1E:ED:99:0E:D0:31:EE:17:B0:B1:3D:A8:F8:3E:0E:FB:A2:B0
Certificate issuer: /CN=56aa1eed990ed031ee17b0b13da8f83e0efba2b0
Certificate serial: 0196C6160353C1248D648044F37D97D141AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft
Manifest number: 153B
Signing time: Mon 12 May 2025 20:00:53 +0000
Manifest this update: Mon 12 May 2025 20:00:53 +0000
Manifest next update: Tue 13 May 2025 20:00:53 +0000
Files and hashes: 1: 0yrxZSQJ1wUyH85Ez4W85_8deyk.roa (hash: oB/nrKT1HSAEvSmkGIU2bhiitJgSrJq6nsR9S6AnhzQ=)
2: Vqoe7ZkO0DHuF7CxPaj4Pg77orA.crl (hash: SVvFJN2AscImvWIFWbM7ycVM7Sc+AD6kXdjZpsNHkW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:16:03:53:c1:24:8d:64:80:44:f3:7d:97:d1:41:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56aa1eed990ed031ee17b0b13da8f83e0efba2b0
Validity
Not Before: May 12 20:00:53 2025 GMT
Not After : May 13 20:00:53 2025 GMT
Subject: CN=36e4fd9d68117815703d159996a5782fba80e63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:22:3f:a5:41:bc:d9:79:f4:2b:09:73:67:38:
db:71:c3:c7:9b:73:f0:df:2b:23:80:61:7b:d7:57:
98:bc:64:77:dc:b7:68:88:ba:55:49:f0:f3:2b:5d:
b8:25:46:8d:b6:8f:f4:48:e6:c2:da:69:15:5e:7c:
6a:59:5a:2f:62:ed:d9:c2:74:72:eb:96:9f:f9:3a:
c2:c1:18:61:6a:70:cf:7f:9c:63:99:ac:3a:e2:6c:
bd:88:de:07:71:b2:10:68:b1:84:89:27:79:cc:a8:
a2:4a:4d:a1:b8:e4:e7:d8:59:d2:ed:56:e5:36:76:
1b:46:e9:e1:c1:f1:b2:35:41:07:e4:a6:46:ff:d6:
16:16:a9:c3:ce:f9:5e:32:ab:3a:13:15:6e:56:dd:
fc:1e:24:7e:15:b4:76:6b:66:7f:90:fc:91:e6:a9:
6d:59:b2:70:03:cb:3a:4f:f6:21:05:f0:48:9b:e6:
f8:67:bb:aa:53:c1:0f:7e:06:b5:97:8e:9c:36:01:
d8:00:c4:b9:93:bb:ed:8f:22:1b:8c:fd:da:a3:b9:
50:1f:52:33:69:0c:3a:d4:0f:89:76:a2:47:78:f8:
76:a9:f9:de:3d:46:fb:07:94:b1:b8:6d:45:d6:5d:
da:32:9a:7b:5e:51:1e:74:bd:cc:9e:12:bb:d4:6e:
9c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E4:FD:9D:68:11:78:15:70:3D:15:99:96:A5:78:2F:BA:80:E6:3C
X509v3 Authority Key Identifier:
keyid:56:AA:1E:ED:99:0E:D0:31:EE:17:B0:B1:3D:A8:F8:3E:0E:FB:A2:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:df:c6:26:70:87:7c:96:3b:3f:47:a0:8b:51:f4:ff:33:cc:
f1:45:00:72:9e:c4:78:2d:42:4d:ad:24:3b:53:7d:bc:95:c7:
c8:47:0d:58:6e:ee:af:20:c9:6e:95:91:99:f9:f7:8d:f5:d3:
4f:77:79:03:57:4e:a4:a3:fb:3f:6d:e8:ed:f2:af:ee:a1:e5:
af:5c:dd:2a:df:2e:6a:58:86:64:c9:d2:58:d7:5b:0a:10:71:
87:f4:bc:d6:b0:33:c4:21:ad:b2:e7:84:8f:07:86:c9:f3:c5:
6d:32:b2:65:3f:31:a1:1a:db:bd:1f:ab:3c:e3:aa:ac:c3:46:
85:44:60:d6:12:5c:81:2e:ae:11:f0:75:bb:0c:44:3a:2e:3b:
36:1e:e3:b0:50:bf:eb:d5:b5:d2:0b:9a:7a:ae:d6:0d:85:ca:
19:f9:aa:0f:89:6d:bb:ca:4f:05:74:0a:a2:4b:72:e0:71:e7:
a9:55:a9:07:df:e3:15:fe:6c:11:3d:58:96:a4:75:f6:e3:2a:
e7:04:a5:08:5b:ff:cc:04:74:b8:04:5d:73:90:33:a7:42:c0:
e9:e3:48:cf:84:14:87:fc:5b:ed:c6:bd:85:73:6e:e1:74:a7:
61:47:1e:52:88:ff:a1:d8:16:ad:0e:49:c6:43:d8:ca:d8:79:
4c:b6:b4:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbGFgNTwSSNZIBE832X0UGqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2YWExZWVkOTkwZWQwMzFlZTE3YjBiMTNkYThmODNlMGVm
YmEyYjAwHhcNMjUwNTEyMjAwMDUzWhcNMjUwNTEzMjAwMDUzWjAzMTEwLwYDVQQD
EygzNmU0ZmQ5ZDY4MTE3ODE1NzAzZDE1OTk5NmE1NzgyZmJhODBlNjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyI/pUG82Xn0KwlzZzjbccPHm3Pw
3ysjgGF711eYvGR33LdoiLpVSfDzK124JUaNto/0SObC2mkVXnxqWVovYu3ZwnRy
65af+TrCwRhhanDPf5xjmaw64my9iN4HcbIQaLGEiSd5zKiiSk2huOTn2FnS7Vbl
NnYbRunhwfGyNUEH5KZG/9YWFqnDzvleMqs6ExVuVt38HiR+FbR2a2Z/kPyR5qlt
WbJwA8s6T/YhBfBIm+b4Z7uqU8EPfga1l46cNgHYAMS5k7vtjyIbjP3ao7lQH1Iz
aQw61A+JdqJHePh2qfnePUb7B5SxuG1F1l3aMpp7XlEedL3MnhK71G6ceQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbk/Z1oEXgVcD0VmZaleC+6gOY8MB8GA1UdIwQY
MBaAFFaqHu2ZDtAx7hewsT2o+D4O+6KwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnFvZTdaa08wREh1RjdDeFBhajRQZzc3b3JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi81ZDIwZjQtMjk3Ny00ZTA2LTllNzIt
YWM0NTQ5OTc3OTAxLzEvVnFvZTdaa08wREh1RjdDeFBhajRQZzc3b3JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi81ZDIwZjQtMjk3Ny00ZTA2LTllNzItYWM0NTQ5OTc3OTAx
LzEvVnFvZTdaa08wREh1RjdDeFBhajRQZzc3b3JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATt/GJnCH
fJY7P0egi1H0/zPM8UUAcp7EeC1CTa0kO1N9vJXHyEcNWG7uryDJbpWRmfn3jfXT
T3d5A1dOpKP7P23o7fKv7qHlr1zdKt8ualiGZMnSWNdbChBxh/S81rAzxCGtsueE
jweGyfPFbTKyZT8xoRrbvR+rPOOqrMNGhURg1hJcgS6uEfB1uwxEOi47Nh7jsFC/
69W10guaeq7WDYXKGfmqD4ltu8pPBXQKokty4HHnqVWpB9/jFf5sET1YlqR19uMq
5wSlCFv/zAR0uARdc5Azp0LA6eNIz4QUh/xb7ca9hXNu4XSnYUceUoj/odgWrQ5J
xkPYyth5TLa0Bw==
-----END CERTIFICATE-----
Generated at Tue May 13 05:44:31 2025 by rpki-client