Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
File: vf89luiqFB0ixCQq7_eK9x74skQ.mft (raw, json)
Hash identifier: zJWKLqC6mSXwv6NaGYBjsu31NZjAxLnn2uIFnXwNZ3o=
Subject key identifier: 1D:41:06:23:3C:DA:79:18:A3:4D:0A:65:6C:70:F1:47:12:5F:41:84
Authority key identifier: BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
Certificate issuer: /CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Certificate serial: 0196C1CB8A283F70EA392B680FD10D6F4A23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
Manifest number: 14CA
Signing time: Mon 12 May 2025 00:01:03 +0000
Manifest this update: Mon 12 May 2025 00:01:03 +0000
Manifest next update: Tue 13 May 2025 00:01:03 +0000
Files and hashes: 1: 41AytB41hodYM5wYhqpxuiF8N9s.roa (hash: OnxInRURjXFa44Bu3c4RrKsYyRXWI0CzeYkFHBMxcR8=)
2: vf89luiqFB0ixCQq7_eK9x74skQ.crl (hash: h9YFxMt5CwCmMGggl3XC1s20oSySkEpZ3PSYe3ie000=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:8a:28:3f:70:ea:39:2b:68:0f:d1:0d:6f:4a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Validity
Not Before: May 12 00:01:03 2025 GMT
Not After : May 13 00:01:03 2025 GMT
Subject: CN=1d4106233cda7918a34d0a656c70f147125f4184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ea:98:17:3f:2f:cb:b5:c9:48:cd:9d:40:8d:
ab:2a:bf:f7:ae:ee:9c:18:e5:69:83:ad:92:b8:fb:
a6:a3:2b:ee:36:e3:cb:31:ed:da:a0:6c:f1:0e:a7:
1d:fc:83:81:70:d4:3c:14:df:50:43:5e:4e:6d:c9:
da:ef:1f:3a:d0:c8:ad:b7:80:24:46:bf:79:20:4e:
c7:89:3e:0a:99:bc:50:6c:18:9d:36:72:69:76:ce:
d0:c5:3d:84:74:f1:6c:8b:fd:73:97:47:f6:7b:31:
f5:4c:4e:28:1e:08:10:ed:18:d2:11:e2:5f:19:75:
e2:44:dc:64:85:87:7f:96:06:75:c9:6c:b5:cc:12:
f9:e6:bd:c1:8c:1a:0c:9c:e1:fc:1e:65:53:f4:39:
26:7c:07:45:eb:82:a3:b8:00:13:0e:d7:95:01:34:
b7:b4:00:4b:07:98:ad:72:2d:66:0c:f3:47:06:c3:
ad:05:2d:e5:74:15:bd:e6:c1:d9:c2:ef:71:7b:66:
86:23:ee:bd:cf:8c:c0:63:3f:40:09:4b:45:a1:5a:
1a:b6:7d:82:60:6f:f0:7f:34:0b:2e:d6:55:78:0c:
c0:71:1b:0e:71:b6:56:37:0f:8e:20:e3:c4:20:98:
3a:17:86:33:17:2b:59:9a:59:e7:82:0f:2e:42:ec:
da:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:41:06:23:3C:DA:79:18:A3:4D:0A:65:6C:70:F1:47:12:5F:41:84
X509v3 Authority Key Identifier:
keyid:BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:4f:ef:9f:d7:34:e9:57:46:4e:4a:40:fa:28:33:50:87:41:
95:46:af:11:52:13:6a:34:dc:5a:ad:cf:cf:e5:75:84:e4:e8:
68:72:09:05:50:97:a8:0b:f9:12:8a:3c:6a:27:26:82:62:f2:
4c:70:a7:9d:58:e1:7e:c3:43:d2:97:d6:c3:d7:70:8b:38:61:
6d:26:4b:17:2b:ae:f5:7e:82:f9:58:08:a2:2c:ea:01:30:39:
22:88:b5:50:33:01:95:05:e5:e6:b8:e7:27:8b:a5:fd:ad:aa:
8d:ec:f9:09:8e:c6:36:b9:8f:9c:7f:a4:43:b2:70:50:eb:cf:
0e:cd:fb:ce:30:23:cd:16:00:1b:55:e2:d2:c9:41:5d:e0:11:
6b:a3:f8:15:72:74:cb:45:db:f8:cc:04:e8:41:4d:fc:99:0d:
7e:98:69:74:79:ea:b3:77:6b:5d:87:5a:b5:10:bb:6f:48:3c:
94:c4:30:96:dd:f0:a2:e4:5d:11:86:98:18:e9:9b:61:94:43:
91:45:53:d7:82:4a:c6:68:ef:ed:3b:06:88:96:17:67:a1:31:
a4:ee:3a:08:f8:ce:92:00:e6:3e:2b:2a:c2:17:6c:40:21:51:
fc:75:b8:5d:16:6f:0f:66:b5:93:7d:af:fd:7b:1e:fb:7b:7e:
d9:46:16:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBy4ooP3DqOStoD9ENb0ojMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZmYzZDk2ZThhYTE0MWQyMmM0MjQyYWVmZjc4YWY3MWVm
OGIyNDQwHhcNMjUwNTEyMDAwMTAzWhcNMjUwNTEzMDAwMTAzWjAzMTEwLwYDVQQD
EygxZDQxMDYyMzNjZGE3OTE4YTM0ZDBhNjU2YzcwZjE0NzEyNWY0MTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOqYFz8vy7XJSM2dQI2rKr/3ru6c
GOVpg62SuPumoyvuNuPLMe3aoGzxDqcd/IOBcNQ8FN9QQ15Obcna7x860Mitt4Ak
Rr95IE7HiT4KmbxQbBidNnJpds7QxT2EdPFsi/1zl0f2ezH1TE4oHggQ7RjSEeJf
GXXiRNxkhYd/lgZ1yWy1zBL55r3BjBoMnOH8HmVT9DkmfAdF64KjuAATDteVATS3
tABLB5itci1mDPNHBsOtBS3ldBW95sHZwu9xe2aGI+69z4zAYz9ACUtFoVoatn2C
YG/wfzQLLtZVeAzAcRsOcbZWNw+OIOPEIJg6F4YzFytZmlnngg8uQuza9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB1BBiM82nkYo00KZWxw8UcSX0GEMB8GA1UdIwQY
MBaAFL3/PZboqhQdIsQkKu/3ivce+LJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmY4OWx1aXFGQjBpeENRcTdfZUs5eDc0c2tRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82MTFjN2YtYjEyNS00NzEyLTllZjct
M2M3OTg3YzQyYzE2LzEvdmY4OWx1aXFGQjBpeENRcTdfZUs5eDc0c2tRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82MTFjN2YtYjEyNS00NzEyLTllZjctM2M3OTg3YzQyYzE2
LzEvdmY4OWx1aXFGQjBpeENRcTdfZUs5eDc0c2tRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACk/vn9c0
6VdGTkpA+igzUIdBlUavEVITajTcWq3Pz+V1hOToaHIJBVCXqAv5Eoo8aicmgmLy
THCnnVjhfsND0pfWw9dwizhhbSZLFyuu9X6C+VgIoizqATA5Ioi1UDMBlQXl5rjn
J4ul/a2qjez5CY7GNrmPnH+kQ7JwUOvPDs37zjAjzRYAG1Xi0slBXeARa6P4FXJ0
y0Xb+MwE6EFN/JkNfphpdHnqs3drXYdatRC7b0g8lMQwlt3wouRdEYaYGOmbYZRD
kUVT14JKxmjv7TsGiJYXZ6ExpO46CPjOkgDmPisqwhdsQCFR/HW4XRZvD2a1k32v
/Xse+3t+2UYW1g==
-----END CERTIFICATE-----
Generated at Mon May 12 08:57:09 2025 by rpki-client