Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
File: vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft (raw, json)
Hash identifier: fFLR9nUlRl4hB1oyU9AQJdX7QVc+9OV/a/DIex0ElRU=
Subject key identifier: E9:09:18:D5:1A:EA:66:18:27:60:94:96:10:CE:01:EA:91:1B:EE:9A
Authority key identifier: BC:85:D3:79:1F:58:36:C4:15:FF:D3:91:F2:D5:85:C7:3D:BE:CA:39
Certificate issuer: /CN=bc85d3791f5836c415ffd391f2d585c73dbeca39
Certificate serial: 0196B9A3CF0648C96E0CEA0F90FDD749A6C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
Manifest number: 064D
Signing time: Sat 10 May 2025 10:00:42 +0000
Manifest this update: Sat 10 May 2025 10:00:42 +0000
Manifest next update: Sun 11 May 2025 10:00:42 +0000
Files and hashes: 1: L6lTyFXKtOF9j4M00RgctdL3DPI.roa (hash: 82l0fSJIXKbiY5RynH8uwdUeGbScGZ+VMQbyrw1pJ3U=)
2: vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl (hash: VbgkliBxkSj0so+86d1MvO7hAbjjKnkYaaz16tdpKCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a3:cf:06:48:c9:6e:0c:ea:0f:90:fd:d7:49:a6:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc85d3791f5836c415ffd391f2d585c73dbeca39
Validity
Not Before: May 10 10:00:42 2025 GMT
Not After : May 11 10:00:42 2025 GMT
Subject: CN=e90918d51aea66182760949610ce01ea911bee9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e5:44:f5:2b:b9:42:f5:b4:1a:1a:c9:c7:18:
a1:23:25:75:13:ac:06:28:a3:52:25:75:5e:3e:c2:
2e:0f:7a:f5:24:cb:99:b7:47:42:60:c9:46:1c:52:
52:60:1c:a2:c4:b2:09:ec:5e:18:7e:a8:42:63:f3:
9d:75:25:bd:ac:28:06:6b:38:4b:63:4a:5b:ea:e9:
c6:89:d3:8f:8a:11:87:bc:71:85:cf:b6:1d:d0:3f:
0c:be:3a:43:38:f8:de:76:c2:12:67:ab:f1:2d:15:
e0:66:49:17:7d:e1:51:d5:92:16:78:af:37:84:64:
90:92:2b:0b:be:8f:1d:3a:f8:81:f8:4d:c8:50:20:
3c:b6:bb:11:37:76:b0:79:4a:0b:4c:66:fa:f5:35:
60:20:d4:92:11:2d:62:02:ee:52:ad:71:eb:99:aa:
79:08:fc:07:df:71:8f:67:9d:bc:6e:a7:99:4c:66:
76:cb:7d:df:aa:7c:fb:65:a2:99:3c:25:48:8f:98:
6f:35:d5:6d:4a:91:db:04:2e:4f:bf:9c:63:29:e7:
90:5e:ec:5d:76:bb:e5:07:6a:ab:d0:6a:e9:34:93:
dd:d4:22:df:09:60:74:d3:cd:21:b1:70:ba:e6:a0:
59:de:6a:85:4a:53:a8:24:0f:55:66:5d:c2:d5:48:
ea:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:09:18:D5:1A:EA:66:18:27:60:94:96:10:CE:01:EA:91:1B:EE:9A
X509v3 Authority Key Identifier:
keyid:BC:85:D3:79:1F:58:36:C4:15:FF:D3:91:F2:D5:85:C7:3D:BE:CA:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:d1:6c:1e:87:78:85:f2:40:01:e5:f6:83:3a:b5:8f:8f:42:
cc:60:36:e1:b2:b1:ab:56:e6:8e:26:1d:d1:4c:fb:ac:9b:2a:
fd:37:3e:1a:47:7d:00:44:5e:74:6d:d3:fd:5a:33:8e:2c:4a:
78:0a:65:fc:17:1d:5f:e5:7b:5b:cb:28:03:16:b4:89:b8:2f:
dc:e5:9f:0b:6c:62:e9:cc:33:9b:d1:58:e3:f8:aa:95:79:d3:
1b:71:53:b2:d4:8c:d9:66:47:c8:5e:32:10:db:f1:86:bb:40:
91:28:6f:f3:a1:6b:b0:96:2f:5c:94:59:b4:e0:e8:a1:7d:ac:
bd:14:94:88:93:11:28:b6:26:d9:ef:9c:80:74:a5:84:ae:32:
b6:c4:db:68:dc:0e:a5:43:17:e9:a1:bc:ae:b4:56:ff:a2:2a:
b6:89:36:16:b0:34:aa:f9:20:12:2f:37:a1:49:0f:59:59:e9:
33:e8:d9:cd:50:64:f4:f7:d1:4f:a2:0f:85:09:34:28:ab:50:
d6:62:c7:73:55:88:2f:b3:ef:c3:af:82:55:05:c9:71:ff:34:
f0:02:1b:c2:58:09:78:d4:ac:9f:1f:f9:74:4f:27:83:01:02:
30:53:2a:ce:03:cb:25:70:03:2e:8c:1a:7d:f7:12:18:ad:26:
55:7a:38:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa5o88GSMluDOoPkP3XSabJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjODVkMzc5MWY1ODM2YzQxNWZmZDM5MWYyZDU4NWM3M2Ri
ZWNhMzkwHhcNMjUwNTEwMTAwMDQyWhcNMjUwNTExMTAwMDQyWjAzMTEwLwYDVQQD
EyhlOTA5MThkNTFhZWE2NjE4Mjc2MDk0OTYxMGNlMDFlYTkxMWJlZTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eVE9Su5QvW0GhrJxxihIyV1E6wG
KKNSJXVePsIuD3r1JMuZt0dCYMlGHFJSYByixLIJ7F4YfqhCY/OddSW9rCgGazhL
Y0pb6unGidOPihGHvHGFz7Yd0D8MvjpDOPjedsISZ6vxLRXgZkkXfeFR1ZIWeK83
hGSQkisLvo8dOviB+E3IUCA8trsRN3aweUoLTGb69TVgINSSES1iAu5SrXHrmap5
CPwH33GPZ528bqeZTGZ2y33fqnz7ZaKZPCVIj5hvNdVtSpHbBC5Pv5xjKeeQXuxd
drvlB2qr0GrpNJPd1CLfCWB0080hsXC65qBZ3mqFSlOoJA9VZl3C1UjqpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOkJGNUa6mYYJ2CUlhDOAeqRG+6aMB8GA1UdIwQY
MBaAFLyF03kfWDbEFf/TkfLVhcc9vso5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdklYVGVSOVlOc1FWXzlPUjh0V0Z4ejIteWprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9hZjk1MGYtYzE5My00NWRmLTkwZDct
Yjg0MmI5OTA2ODllLzEvdklYVGVSOVlOc1FWXzlPUjh0V0Z4ejIteWprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9hZjk1MGYtYzE5My00NWRmLTkwZDctYjg0MmI5OTA2ODll
LzEvdklYVGVSOVlOc1FWXzlPUjh0V0Z4ejIteWprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtdFsHod4
hfJAAeX2gzq1j49CzGA24bKxq1bmjiYd0Uz7rJsq/Tc+Gkd9AERedG3T/VozjixK
eApl/BcdX+V7W8soAxa0ibgv3OWfC2xi6cwzm9FY4/iqlXnTG3FTstSM2WZHyF4y
ENvxhrtAkShv86FrsJYvXJRZtODooX2svRSUiJMRKLYm2e+cgHSlhK4ytsTbaNwO
pUMX6aG8rrRW/6Iqtok2FrA0qvkgEi83oUkPWVnpM+jZzVBk9PfRT6IPhQk0KKtQ
1mLHc1WIL7Pvw6+CVQXJcf808AIbwlgJeNSsnx/5dE8ngwECMFMqzgPLJXADLowa
ffcSGK0mVXo4oQ==
-----END CERTIFICATE-----
Generated at Sat May 10 13:30:33 2025 by rpki-client