Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
File: vBWSH1umvRR_9AAReqlzhjPxWH0.mft (raw, json)
Hash identifier: WeODcmbFmcNep4642+ue1QyLm1UrJUqt3u+0zW1bkXs=
Subject key identifier: DF:DD:A4:EA:FA:BA:45:44:97:3C:89:CA:2C:2B:56:A3:A7:E1:13:BA
Authority key identifier: BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D
Certificate issuer: /CN=bc15921f5ba6bd147ff400117aa9738633f1587d
Certificate serial: 0196C5DEF9135EA246C60B542EB90BC37935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
Manifest number: 153E
Signing time: Mon 12 May 2025 19:00:46 +0000
Manifest this update: Mon 12 May 2025 19:00:46 +0000
Manifest next update: Tue 13 May 2025 19:00:46 +0000
Files and hashes: 1: 9cE7vjT6DzlEjW81UqTEgPCC5kk.roa (hash: YeyZuOMLUCYoKrtFyEejrMk173P/JZ9uykjJbI6/Rr0=)
2: U77ECX22fJUQ9Szp6lrBtYkTrQY.roa (hash: jYSTL2r9IXnyVhPYQjdEYfmkmSawy+babAO2lCpGCAs=)
3: vBWSH1umvRR_9AAReqlzhjPxWH0.crl (hash: xCBs32kl/l+aVA+8osSttSACwsz1OaS4wijKHvVrYOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:de:f9:13:5e:a2:46:c6:0b:54:2e:b9:0b:c3:79:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc15921f5ba6bd147ff400117aa9738633f1587d
Validity
Not Before: May 12 19:00:46 2025 GMT
Not After : May 13 19:00:46 2025 GMT
Subject: CN=dfdda4eafaba4544973c89ca2c2b56a3a7e113ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:33:51:af:ba:65:38:00:26:da:6d:58:45:38:
1b:d7:07:11:03:da:84:c9:ab:82:46:33:1a:bf:96:
47:96:01:67:f3:81:d1:2f:37:bf:31:ea:cc:e5:42:
e4:0c:21:5a:94:53:00:b1:64:95:9f:82:5a:ab:28:
ce:15:31:cd:f0:16:7f:77:36:0f:73:62:4d:f6:fb:
6a:4f:70:af:06:59:cd:98:c3:2c:bf:8f:2a:d9:78:
2b:40:f2:1c:13:5e:0c:80:50:d7:59:5c:5e:3f:d0:
c1:bf:92:8b:07:f2:ab:6d:bd:ed:02:c2:10:b7:aa:
4a:04:08:f5:b7:20:8b:67:c2:90:4b:27:e7:38:08:
41:c0:09:40:c0:4b:93:ac:79:ea:cb:40:e4:be:8e:
d0:05:c8:d0:31:ec:1a:05:7d:fd:45:68:1a:b9:76:
a9:3e:de:51:34:be:c6:d9:59:a5:0c:8b:1b:72:f7:
ec:5f:ac:a5:96:35:0d:64:45:d7:29:44:2a:b7:ec:
f5:c4:4f:0a:95:9e:11:c9:86:fd:d6:77:bd:82:bc:
8f:ed:97:15:30:92:7a:2e:8f:b5:12:6d:73:1a:7a:
02:be:c3:7a:1e:dd:14:79:ca:98:17:c5:82:eb:d5:
13:2f:cb:81:fe:f3:ea:6d:d1:b6:33:5f:45:c3:57:
f9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DD:A4:EA:FA:BA:45:44:97:3C:89:CA:2C:2B:56:A3:A7:E1:13:BA
X509v3 Authority Key Identifier:
keyid:BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:19:9f:66:d6:ae:50:8c:f1:a3:31:c7:ec:2b:a1:5d:ff:4d:
fb:32:22:42:bc:7f:b8:00:be:17:54:c7:43:c9:55:c0:47:57:
39:ae:14:43:24:d4:b2:3b:56:ce:64:62:9b:f5:81:4a:eb:fe:
75:db:71:61:c3:cc:67:ef:d1:0e:bd:46:ba:7c:e9:40:4e:eb:
64:5c:53:46:a1:b9:05:0c:a9:9c:e0:71:b3:eb:71:29:1f:98:
11:a2:b0:46:fc:a0:33:7f:1c:57:02:c8:ae:ac:af:a4:74:01:
ee:b4:f3:37:20:18:95:eb:0c:b9:15:84:11:c8:02:3d:e9:06:
14:93:1b:13:3f:fb:7f:1e:69:45:b2:a3:af:9a:a5:d5:c2:10:
b7:a3:c0:56:46:ab:e3:7c:65:cc:e1:cf:31:24:d5:a5:38:21:
6c:27:9e:8b:ef:79:76:dc:3f:6b:45:53:31:f0:e6:f2:d9:d4:
90:bc:c2:22:7d:08:45:e7:12:b1:ef:27:11:c2:dd:40:ca:d8:
f8:b7:dc:47:64:b1:fa:b2:73:e3:c6:1f:98:1a:a4:77:6b:02:
36:e7:eb:e1:4c:91:09:b4:b4:fe:e3:1e:71:e9:12:21:94:04:
ea:5a:be:76:06:bc:0a:c6:36:34:1e:bd:24:5f:5f:cc:70:4a:
be:2f:7e:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbF3vkTXqJGxgtULrkLw3k1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMTU5MjFmNWJhNmJkMTQ3ZmY0MDAxMTdhYTk3Mzg2MzNm
MTU4N2QwHhcNMjUwNTEyMTkwMDQ2WhcNMjUwNTEzMTkwMDQ2WjAzMTEwLwYDVQQD
EyhkZmRkYTRlYWZhYmE0NTQ0OTczYzg5Y2EyYzJiNTZhM2E3ZTExM2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDNRr7plOAAm2m1YRTgb1wcRA9qE
yauCRjMav5ZHlgFn84HRLze/MerM5ULkDCFalFMAsWSVn4JaqyjOFTHN8BZ/dzYP
c2JN9vtqT3CvBlnNmMMsv48q2XgrQPIcE14MgFDXWVxeP9DBv5KLB/Krbb3tAsIQ
t6pKBAj1tyCLZ8KQSyfnOAhBwAlAwEuTrHnqy0Dkvo7QBcjQMewaBX39RWgauXap
Pt5RNL7G2VmlDIsbcvfsX6ylljUNZEXXKUQqt+z1xE8KlZ4RyYb91ne9gryP7ZcV
MJJ6Lo+1Em1zGnoCvsN6Ht0UecqYF8WC69UTL8uB/vPqbdG2M19Fw1f50wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/dpOr6ukVElzyJyiwrVqOn4RO6MB8GA1UdIwQY
MBaAFLwVkh9bpr0Uf/QAEXqpc4Yz8Vh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkJXU0gxdW12UlJfOUFBUmVxbHpoalB4V0gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84ZTc5YWItYmE4My00NGNiLWFlYzAt
MDk5MGNlNzQ4MWU3LzEvdkJXU0gxdW12UlJfOUFBUmVxbHpoalB4V0gwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC84ZTc5YWItYmE4My00NGNiLWFlYzAtMDk5MGNlNzQ4MWU3
LzEvdkJXU0gxdW12UlJfOUFBUmVxbHpoalB4V0gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGhmfZtau
UIzxozHH7CuhXf9N+zIiQrx/uAC+F1THQ8lVwEdXOa4UQyTUsjtWzmRim/WBSuv+
ddtxYcPMZ+/RDr1GunzpQE7rZFxTRqG5BQypnOBxs+txKR+YEaKwRvygM38cVwLI
rqyvpHQB7rTzNyAYlesMuRWEEcgCPekGFJMbEz/7fx5pRbKjr5ql1cIQt6PAVkar
43xlzOHPMSTVpTghbCeei+95dtw/a0VTMfDm8tnUkLzCIn0IRecSse8nEcLdQMrY
+LfcR2Sx+rJz48YfmBqkd2sCNufr4UyRCbS0/uMecekSIZQE6lq+dga8CsY2NB69
JF9fzHBKvi9+qQ==
-----END CERTIFICATE-----
Generated at Mon May 12 23:02:34 2025 by rpki-client