Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
File: vMzI9LN9iSKM0CPSUh0plo3guSU.mft (raw, json)
Hash identifier: kKz3vYSCineWRCADnJoXYofgUuLJmuWBsokB2HPoeUw=
Subject key identifier: CF:D6:BA:6F:43:8B:A2:9E:31:34:14:D1:C4:D5:E8:94:F5:7F:F0:CA
Authority key identifier: BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
Certificate issuer: /CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Certificate serial: 0196A653ABD1E09DD18C107CCBCC36B1112E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
Manifest number: 0F4B
Signing time: Tue 06 May 2025 16:00:23 +0000
Manifest this update: Tue 06 May 2025 16:00:23 +0000
Manifest next update: Wed 07 May 2025 16:00:23 +0000
Files and hashes: 1: c9UMX3iq8tErq5TMlo_-MEWj5uw.roa (hash: 1c2+eOFvPteNDBjZlr3CfkaamwjtVyHeqkTL5YVw+fo=)
2: vMzI9LN9iSKM0CPSUh0plo3guSU.crl (hash: JBLqkSJwdlgu5bH56BA/V6SLt9U1pAAIuXjPb6YQgfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:53:ab:d1:e0:9d:d1:8c:10:7c:cb:cc:36:b1:11:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Validity
Not Before: May 6 16:00:23 2025 GMT
Not After : May 7 16:00:23 2025 GMT
Subject: CN=cfd6ba6f438ba29e313414d1c4d5e894f57ff0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7f:e3:72:12:ce:33:5e:0f:a4:9b:d3:05:c1:
02:e1:98:e4:11:cf:f2:4c:4a:e2:80:d6:04:a9:21:
d1:4b:8d:04:5b:85:22:11:c6:1c:d8:7f:77:98:6e:
7a:89:44:a3:72:94:24:78:a8:32:1f:6c:fb:d5:a5:
e3:64:1a:2e:74:c2:18:38:cd:ee:f7:39:ef:aa:0b:
41:e6:a9:c1:9c:8f:70:66:46:96:a7:bd:3c:e4:97:
4a:ac:03:7f:18:3d:86:5a:c8:f8:3b:04:89:8c:99:
c9:14:27:e2:d5:90:bb:87:53:e8:5e:27:fb:82:60:
c5:4c:58:ff:b5:28:c7:e3:dc:92:10:3f:0c:de:0c:
44:98:07:f7:4c:a2:90:77:cd:b3:65:fd:40:78:4a:
e7:cb:1a:c2:12:7b:4e:13:8b:11:e7:71:c7:ae:66:
a1:ee:24:f8:b7:29:4d:fb:99:7d:03:68:07:9c:70:
1a:98:85:6b:b0:da:3e:4f:84:4c:a2:cb:92:90:64:
5f:6c:b7:fe:54:59:fa:b8:d3:f2:23:3a:05:fb:88:
f9:c7:fa:89:ac:bd:31:21:81:a6:96:3b:dc:7c:d8:
e2:ad:39:48:66:c2:c9:e2:c1:9e:90:cb:d3:6f:a0:
b7:91:f8:2c:73:de:a3:b4:56:5a:04:fa:e8:d8:93:
ea:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D6:BA:6F:43:8B:A2:9E:31:34:14:D1:C4:D5:E8:94:F5:7F:F0:CA
X509v3 Authority Key Identifier:
keyid:BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:dd:ff:95:ff:f8:4f:2a:e3:68:1d:d3:2c:f0:4b:dc:f7:b4:
10:70:a8:8e:61:44:6a:23:26:bf:f0:75:03:56:24:d4:92:f5:
c9:57:3d:10:32:af:dc:e7:a2:f7:3a:48:07:6c:b7:fa:c1:a4:
a2:6c:41:f4:bc:b8:c1:b0:e4:6c:cb:37:62:98:fe:0c:92:56:
83:32:71:fb:f4:39:5f:a9:18:65:7c:b1:14:b9:7f:28:4a:a5:
3c:1d:3d:fc:63:48:b2:75:db:8c:aa:1a:d2:37:90:9b:b8:02:
6d:45:81:16:38:43:27:dd:ec:27:5b:a2:7f:84:c6:53:55:de:
4c:aa:76:e4:fa:83:3d:9e:a1:0e:3f:4b:8e:50:d2:fc:e9:5f:
dd:80:77:7e:9f:4c:bc:a7:99:c4:ba:d5:5e:f3:a4:06:21:63:
d7:6b:10:17:aa:31:dc:fe:c9:a4:3f:4b:44:3b:67:b9:1a:a5:
bd:dc:ef:f8:33:4a:33:47:23:cb:99:ca:2f:cb:7e:d4:19:24:
08:20:c2:a7:2c:96:f1:f8:78:81:a7:f0:e5:5b:bc:52:38:2e:
bd:96:42:d8:97:5b:42:81:97:51:96:e1:15:73:03:9f:a3:df:
f5:77:79:ec:39:57:7d:28:cd:d8:47:56:b8:ac:f6:63:8f:89:
3e:83:de:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZamU6vR4J3RjBB8y8w2sREuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjY2NjOGY0YjM3ZDg5MjI4Y2QwMjNkMjUyMWQyOTk2OGRl
MGI5MjUwHhcNMjUwNTA2MTYwMDIzWhcNMjUwNTA3MTYwMDIzWjAzMTEwLwYDVQQD
EyhjZmQ2YmE2ZjQzOGJhMjllMzEzNDE0ZDFjNGQ1ZTg5NGY1N2ZmMGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyn/jchLOM14PpJvTBcEC4ZjkEc/y
TErigNYEqSHRS40EW4UiEcYc2H93mG56iUSjcpQkeKgyH2z71aXjZBoudMIYOM3u
9znvqgtB5qnBnI9wZkaWp7085JdKrAN/GD2GWsj4OwSJjJnJFCfi1ZC7h1PoXif7
gmDFTFj/tSjH49ySED8M3gxEmAf3TKKQd82zZf1AeErnyxrCEntOE4sR53HHrmah
7iT4tylN+5l9A2gHnHAamIVrsNo+T4RMosuSkGRfbLf+VFn6uNPyIzoF+4j5x/qJ
rL0xIYGmljvcfNjirTlIZsLJ4sGekMvTb6C3kfgsc96jtFZaBPro2JPqJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/Wum9Di6KeMTQU0cTV6JT1f/DKMB8GA1UdIwQY
MBaAFLzMyPSzfYkijNAj0lIdKZaN4LklMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdk16STlMTjlpU0tNMENQU1VoMHBsbzNndVNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi84MThmMmMtY2U3YS00YjYxLWFhMGYt
MDIxNWM0ZWFhN2MzLzEvdk16STlMTjlpU0tNMENQU1VoMHBsbzNndVNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi84MThmMmMtY2U3YS00YjYxLWFhMGYtMDIxNWM0ZWFhN2Mz
LzEvdk16STlMTjlpU0tNMENQU1VoMHBsbzNndVNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB93/lf/4
TyrjaB3TLPBL3Pe0EHCojmFEaiMmv/B1A1Yk1JL1yVc9EDKv3Oei9zpIB2y3+sGk
omxB9Ly4wbDkbMs3Ypj+DJJWgzJx+/Q5X6kYZXyxFLl/KEqlPB09/GNIsnXbjKoa
0jeQm7gCbUWBFjhDJ93sJ1uif4TGU1XeTKp25PqDPZ6hDj9LjlDS/Olf3YB3fp9M
vKeZxLrVXvOkBiFj12sQF6ox3P7JpD9LRDtnuRqlvdzv+DNKM0cjy5nKL8t+1Bkk
CCDCpyyW8fh4gafw5Vu8UjguvZZC2JdbQoGXUZbhFXMDn6Pf9Xd57DlXfSjN2EdW
uKz2Y4+JPoPemg==
-----END CERTIFICATE-----
Generated at Tue May 6 22:38:28 2025 by rpki-client