Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
File: vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft (raw, json)
Hash identifier: oD0HRxOhKlWVtqu7RpOH6L+Ul3SraBfaGTEDgjform8=
Subject key identifier: 8A:98:05:73:9B:A1:BE:D3:6B:AF:F5:BB:0A:35:A4:40:CF:5A:54:1F
Authority key identifier: BC:D8:84:E1:54:C2:1C:9F:45:9F:42:A8:36:AB:CB:C8:AC:0F:41:5A
Certificate issuer: /CN=bcd884e154c21c9f459f42a836abcbc8ac0f415a
Certificate serial: 0196C1CAF2394B345D05AD5BDE8744239C79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
Manifest number: 0C1B
Signing time: Mon 12 May 2025 00:00:24 +0000
Manifest this update: Mon 12 May 2025 00:00:24 +0000
Manifest next update: Tue 13 May 2025 00:00:24 +0000
Files and hashes: 1: vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl (hash: mYJQvyqtFbVraK81Ken/nCuLHL0CwYJb3SDio44XfY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:ca:f2:39:4b:34:5d:05:ad:5b:de:87:44:23:9c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd884e154c21c9f459f42a836abcbc8ac0f415a
Validity
Not Before: May 12 00:00:24 2025 GMT
Not After : May 13 00:00:24 2025 GMT
Subject: CN=8a9805739ba1bed36baff5bb0a35a440cf5a541f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ec:b9:92:07:55:99:00:8b:c5:65:94:fc:99:
3a:8d:fb:0c:57:7a:60:1b:4d:69:13:3a:cd:71:64:
5a:a1:c8:8c:2e:05:00:91:28:83:ba:43:2f:95:02:
55:d1:f6:5b:2f:b2:cc:93:6a:df:59:bc:bf:75:d9:
65:4f:7b:1b:59:9e:ec:85:c7:06:4d:ec:f7:91:98:
e9:29:47:e3:69:87:5c:2a:73:f1:86:69:25:2f:03:
8a:22:a7:c8:c3:94:a3:f3:f5:91:0d:31:87:1a:9c:
55:c5:57:59:dd:81:1c:64:8f:6b:ca:f3:ad:f7:09:
ae:f9:5e:ac:b4:b0:71:d0:89:e9:c9:ea:6d:a6:50:
61:bc:88:d2:66:4b:08:ce:45:b9:2e:15:99:1e:a6:
0b:2a:d0:37:16:c4:37:18:24:53:c8:c7:d2:eb:83:
5e:07:3d:34:20:12:bd:3b:54:1a:28:c6:cb:aa:ea:
90:ec:2f:c2:48:48:7e:5f:de:35:92:26:23:1e:fd:
78:d8:cf:44:2e:bb:06:7a:9e:b2:87:7d:63:58:5c:
4a:6a:01:4d:c1:17:ee:70:e0:9a:93:6b:7b:a5:a7:
6f:6d:e7:86:7c:9a:d7:32:8a:7f:3a:c2:44:ee:8b:
c2:72:ae:89:e2:1d:c6:19:0f:0a:35:df:1b:4a:f1:
47:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:98:05:73:9B:A1:BE:D3:6B:AF:F5:BB:0A:35:A4:40:CF:5A:54:1F
X509v3 Authority Key Identifier:
keyid:BC:D8:84:E1:54:C2:1C:9F:45:9F:42:A8:36:AB:CB:C8:AC:0F:41:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:6d:5e:54:34:73:31:63:c2:e6:39:29:29:bd:c8:5c:3f:15:
aa:18:11:96:71:b2:28:5f:09:3c:64:79:79:af:28:cc:5d:c9:
47:6b:1f:7c:9e:9a:df:ae:cf:f0:e3:f4:da:7e:c6:1d:cd:8b:
a8:5d:92:9c:be:92:28:ea:26:5c:6c:54:f2:93:10:20:d7:d0:
1a:92:37:5e:ee:7c:da:16:2b:0a:f3:51:16:56:ab:c6:9c:c9:
ac:ec:42:1d:6e:64:86:58:7b:a9:40:6e:ea:7c:7d:e6:9f:7f:
cf:9d:f5:85:65:44:d1:06:36:cb:83:75:f3:cb:15:67:db:bc:
df:b7:96:5e:8b:65:09:98:78:9a:02:78:a5:a9:d2:23:e2:fb:
d8:37:e8:70:c8:44:ff:e7:2c:2e:d5:b6:ef:01:76:2c:b9:89:
fe:a1:20:0b:73:8a:a3:73:42:d3:34:bd:b1:b5:6f:71:53:73:
0e:5e:0b:e8:b6:15:0d:03:13:7b:25:3f:d0:7a:83:a5:11:81:
24:d9:f4:c3:53:2e:b9:ca:a2:ac:a2:cf:31:ed:2c:6d:5d:fa:
d6:87:99:2e:9d:4a:75:d0:5d:3f:90:c0:d4:f8:f3:ef:05:48:
34:6d:78:ae:e3:7b:bd:f5:25:e9:28:36:22:fc:c2:b4:26:34:
7e:12:9a:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbByvI5SzRdBa1b3odEI5x5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZDg4NGUxNTRjMjFjOWY0NTlmNDJhODM2YWJjYmM4YWMw
ZjQxNWEwHhcNMjUwNTEyMDAwMDI0WhcNMjUwNTEzMDAwMDI0WjAzMTEwLwYDVQQD
Eyg4YTk4MDU3MzliYTFiZWQzNmJhZmY1YmIwYTM1YTQ0MGNmNWE1NDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuy5kgdVmQCLxWWU/Jk6jfsMV3pg
G01pEzrNcWRaociMLgUAkSiDukMvlQJV0fZbL7LMk2rfWby/ddllT3sbWZ7shccG
Tez3kZjpKUfjaYdcKnPxhmklLwOKIqfIw5Sj8/WRDTGHGpxVxVdZ3YEcZI9ryvOt
9wmu+V6stLBx0InpyeptplBhvIjSZksIzkW5LhWZHqYLKtA3FsQ3GCRTyMfS64Ne
Bz00IBK9O1QaKMbLquqQ7C/CSEh+X941kiYjHv142M9ELrsGep6yh31jWFxKagFN
wRfucOCak2t7padvbeeGfJrXMop/OsJE7ovCcq6J4h3GGQ8KNd8bSvFHCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqYBXObob7Ta6/1uwo1pEDPWlQfMB8GA1UdIwQY
MBaAFLzYhOFUwhyfRZ9CqDary8isD0FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdk5pRTRWVENISjlGbjBLb05xdkx5S3dQUVZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YzI3NWUtOTBjNy00Yzk3LWE0OTIt
NWQzMThhMjJjYTk2LzEvdk5pRTRWVENISjlGbjBLb05xdkx5S3dQUVZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS84YzI3NWUtOTBjNy00Yzk3LWE0OTItNWQzMThhMjJjYTk2
LzEvdk5pRTRWVENISjlGbjBLb05xdkx5S3dQUVZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWW1eVDRz
MWPC5jkpKb3IXD8VqhgRlnGyKF8JPGR5ea8ozF3JR2sffJ6a367P8OP02n7GHc2L
qF2SnL6SKOomXGxU8pMQINfQGpI3Xu582hYrCvNRFlarxpzJrOxCHW5khlh7qUBu
6nx95p9/z531hWVE0QY2y4N188sVZ9u837eWXotlCZh4mgJ4panSI+L72DfocMhE
/+csLtW27wF2LLmJ/qEgC3OKo3NC0zS9sbVvcVNzDl4L6LYVDQMTeyU/0HqDpRGB
JNn0w1MuucqirKLPMe0sbV361oeZLp1KddBdP5DA1Pjz7wVING14ruN7vfUl6Sg2
IvzCtCY0fhKaAA==
-----END CERTIFICATE-----
Generated at Mon May 12 02:07:35 2025 by rpki-client