Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
File: 2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft (raw, json)
Hash identifier: ojwtJ6jT3AmufskiitU9krs/bawDMm4semxaQoXiSoo=
Subject key identifier: 96:6F:C2:A0:94:E4:0E:F5:35:4E:9F:B5:70:85:EC:FF:F3:9B:19:B7
Authority key identifier: D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D
Certificate issuer: /CN=d959676fe138d4eb2aae19bb6731fee6292d793d
Certificate serial: 0196C0B8739CB23EFBF82B4F90016FC90B2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
Manifest number: 1538
Signing time: Sun 11 May 2025 19:00:35 +0000
Manifest this update: Sun 11 May 2025 19:00:35 +0000
Manifest next update: Mon 12 May 2025 19:00:35 +0000
Files and hashes: 1: 2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl (hash: NJnc6uhwjvrvcRc6Q+cUW3UaT0GfAEvt2igIE8FfvaU=)
2: F5Bzgfu76RvZ3yR1y7zwFf6G4kM.roa (hash: ep3IMQ4ZZkY9pT/SX8gdzLkWK4LgBK5MsjhgdqazgtY=)
3: aqOGkykY9Ju12UAZyyt6XVgtms4.roa (hash: E4BJpz+NX3TX7uydvegd/qgoqkfPLAjjVrCasy2lcGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:73:9c:b2:3e:fb:f8:2b:4f:90:01:6f:c9:0b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d959676fe138d4eb2aae19bb6731fee6292d793d
Validity
Not Before: May 11 19:00:35 2025 GMT
Not After : May 12 19:00:35 2025 GMT
Subject: CN=966fc2a094e40ef5354e9fb57085ecfff39b19b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4a:d0:25:65:1b:e1:54:5a:1e:77:60:ee:a5:
27:f9:d9:ec:41:02:c3:92:43:61:1f:85:38:b7:03:
6a:31:df:4b:1b:29:81:46:5a:ea:02:5a:88:b5:42:
bc:ad:31:9c:70:5a:d4:1f:08:49:81:1b:75:02:6e:
69:6c:dd:84:8e:1d:57:88:02:16:b8:8a:1b:43:fa:
a5:2a:6c:f0:e1:e0:53:80:4a:71:4a:79:0b:e5:73:
65:fe:ab:4e:65:22:6b:23:22:34:4f:b9:23:c1:43:
df:58:82:28:dd:07:86:03:17:d8:f1:c1:96:41:8c:
cf:cf:d4:4a:4d:42:76:08:6c:0d:4e:85:b0:8b:cc:
5a:e3:cc:2f:f3:50:47:df:ec:69:09:fe:dd:6c:8d:
f3:30:5e:da:52:35:9e:f9:2e:87:c5:38:39:41:1e:
8b:45:1f:f0:c8:de:16:ac:87:0b:1f:49:66:db:f3:
5f:5e:13:42:42:69:eb:d5:94:d9:0c:a5:60:f6:a9:
e6:3c:4f:ac:41:a9:87:d1:eb:21:39:ee:0d:3b:7b:
fe:f8:70:da:9f:66:e3:9d:b7:84:c8:5c:df:bb:ae:
43:79:5c:8c:d2:69:23:ab:55:7b:53:53:a0:26:d2:
6e:8a:88:b3:9b:ff:80:03:c3:25:45:d0:ed:22:37:
17:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6F:C2:A0:94:E4:0E:F5:35:4E:9F:B5:70:85:EC:FF:F3:9B:19:B7
X509v3 Authority Key Identifier:
keyid:D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:95:57:8f:82:42:91:bc:c4:7b:69:f6:27:c5:c0:c2:de:f9:
7c:2a:48:af:db:0a:31:b1:fc:16:a5:b2:44:c3:c1:47:af:20:
32:c7:43:9f:16:89:a6:ab:d2:1e:2c:3e:af:7a:49:26:8e:73:
8e:5a:42:b3:83:60:78:ac:1f:11:df:82:3b:2b:b5:4c:33:08:
f8:a3:9b:e9:fc:a0:f5:04:a2:33:f6:0a:77:ad:81:61:a5:af:
61:9b:c7:69:e1:d9:89:a4:a6:bf:a5:b8:5d:fd:9a:95:7e:a5:
a2:a8:a7:8f:17:3c:b6:22:d9:01:7d:90:41:cd:15:87:76:55:
c7:de:4d:d1:ad:8c:db:b0:f5:e6:5f:c2:af:19:d7:f7:92:34:
9c:62:96:6e:06:a7:c7:81:8e:d1:0e:4f:69:f1:b0:a1:28:91:
3c:e8:df:d2:99:11:1f:76:46:29:4a:05:22:0d:1a:91:e0:14:
98:c7:29:f7:f0:71:8d:8d:35:ae:f0:e4:0d:17:77:73:71:ee:
c9:1e:b6:5a:3a:c0:15:45:5d:ba:19:2e:22:13:e3:0d:6e:56:
1d:ef:82:8f:c3:91:ae:fe:eb:2d:6b:3b:90:96:aa:0a:36:1f:
36:31:00:b8:35:ac:ef:f3:18:7a:f8:80:6a:59:80:c5:65:d2:
21:4a:77:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbAuHOcsj77+CtPkAFvyQssMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NTk2NzZmZTEzOGQ0ZWIyYWFlMTliYjY3MzFmZWU2Mjky
ZDc5M2QwHhcNMjUwNTExMTkwMDM1WhcNMjUwNTEyMTkwMDM1WjAzMTEwLwYDVQQD
Eyg5NjZmYzJhMDk0ZTQwZWY1MzU0ZTlmYjU3MDg1ZWNmZmYzOWIxOWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ErQJWUb4VRaHndg7qUn+dnsQQLD
kkNhH4U4twNqMd9LGymBRlrqAlqItUK8rTGccFrUHwhJgRt1Am5pbN2Ejh1XiAIW
uIobQ/qlKmzw4eBTgEpxSnkL5XNl/qtOZSJrIyI0T7kjwUPfWIIo3QeGAxfY8cGW
QYzPz9RKTUJ2CGwNToWwi8xa48wv81BH3+xpCf7dbI3zMF7aUjWe+S6HxTg5QR6L
RR/wyN4WrIcLH0lm2/NfXhNCQmnr1ZTZDKVg9qnmPE+sQamH0eshOe4NO3v++HDa
n2bjnbeEyFzfu65DeVyM0mkjq1V7U1OgJtJuioizm/+AA8MlRdDtIjcXgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZvwqCU5A71NU6ftXCF7P/zmxm3MB8GA1UdIwQY
MBaAFNlZZ2/hONTrKq4Zu2cx/uYpLXk9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlZsbmItRTQxT3NxcmhtN1p6SC01aWt0ZVQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9jZjAyOGUtNzU3ZS00ODQzLWExZWEt
NGM3NGQzMzJlYTU4LzEvMlZsbmItRTQxT3NxcmhtN1p6SC01aWt0ZVQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9jZjAyOGUtNzU3ZS00ODQzLWExZWEtNGM3NGQzMzJlYTU4
LzEvMlZsbmItRTQxT3NxcmhtN1p6SC01aWt0ZVQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZVXj4JC
kbzEe2n2J8XAwt75fCpIr9sKMbH8FqWyRMPBR68gMsdDnxaJpqvSHiw+r3pJJo5z
jlpCs4NgeKwfEd+COyu1TDMI+KOb6fyg9QSiM/YKd62BYaWvYZvHaeHZiaSmv6W4
Xf2alX6loqinjxc8tiLZAX2QQc0Vh3ZVx95N0a2M27D15l/CrxnX95I0nGKWbgan
x4GO0Q5PafGwoSiRPOjf0pkRH3ZGKUoFIg0akeAUmMcp9/BxjY01rvDkDRd3c3Hu
yR62WjrAFUVduhkuIhPjDW5WHe+Cj8ORrv7rLWs7kJaqCjYfNjEAuDWs7/MYeviA
almAxWXSIUp3Lg==
-----END CERTIFICATE-----
Generated at Mon May 12 01:32:30 2025 by rpki-client