Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
File: VvciqIWr65qv-zLadk7wkbWyA0A.mft (raw, json)
Hash identifier: eav9mBMAHi1kGEZo1zAT9qN1ol4qrwCIHhRkvfXvLLg=
Subject key identifier: 92:86:A7:17:82:74:2C:73:0A:64:5E:18:AD:23:BD:18:F3:30:F8:8D
Authority key identifier: 56:F7:22:A8:85:AB:EB:9A:AF:FB:32:DA:76:4E:F0:91:B5:B2:03:40
Certificate issuer: /CN=56f722a885abeb9aaffb32da764ef091b5b20340
Certificate serial: 0196CBA9E7DC08F910255CF979AE66017958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
Manifest number: 085D
Signing time: Tue 13 May 2025 22:00:31 +0000
Manifest this update: Tue 13 May 2025 22:00:31 +0000
Manifest next update: Wed 14 May 2025 22:00:31 +0000
Files and hashes: 1: VvciqIWr65qv-zLadk7wkbWyA0A.crl (hash: bvIxVSJ03vHGFefOcjfzTY05YL8iSSPGQPYLD4eCqLg=)
2: vpimmj50rM3b693dSW6yAkLWvvA.roa (hash: 5VKPzqmzdczcoLOJtvbaVQfmAQ+1p8lObAjIuI3KfsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:a9:e7:dc:08:f9:10:25:5c:f9:79:ae:66:01:79:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56f722a885abeb9aaffb32da764ef091b5b20340
Validity
Not Before: May 13 22:00:31 2025 GMT
Not After : May 14 22:00:31 2025 GMT
Subject: CN=9286a71782742c730a645e18ad23bd18f330f88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:56:86:89:db:6a:1a:01:73:c2:07:19:43:36:
23:16:ea:61:50:d9:c1:53:83:3d:dc:23:5e:a0:1d:
e7:93:1a:c2:d0:41:b2:5e:af:3d:3e:9e:d5:f1:68:
a9:3d:9a:6a:5b:da:f4:69:36:96:6b:f1:6b:74:39:
7b:cc:ac:06:48:43:e2:95:fb:0e:c6:33:81:af:92:
36:54:ce:78:a1:01:46:e5:00:28:62:31:f6:e6:7f:
ce:c8:b5:30:50:0d:fd:de:08:cc:64:b6:50:90:0f:
c5:ed:18:64:51:21:4f:f8:ea:f1:4c:47:46:5c:81:
a9:dc:10:1e:d7:18:47:f1:33:40:de:68:8d:0d:90:
f7:70:b9:c2:d0:ba:97:1f:28:92:09:6b:36:0b:ba:
00:b1:b1:96:8f:40:64:95:ec:f5:af:ce:f7:0c:06:
13:3f:3c:e5:86:8b:17:f9:01:55:e6:26:00:06:ab:
f4:eb:8e:e5:d5:19:12:74:77:e3:c3:bc:01:36:a8:
ba:4e:5b:01:d8:cb:36:f3:3e:06:5a:4c:dd:cc:56:
c0:4e:9e:73:bf:04:5a:42:27:0c:20:73:b6:c9:89:
f0:8e:9f:1c:c3:2b:b1:7a:fa:91:e7:a7:31:6f:db:
bd:5f:5e:dc:18:d7:c9:8c:f3:ef:36:3a:73:d0:ef:
2f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:86:A7:17:82:74:2C:73:0A:64:5E:18:AD:23:BD:18:F3:30:F8:8D
X509v3 Authority Key Identifier:
keyid:56:F7:22:A8:85:AB:EB:9A:AF:FB:32:DA:76:4E:F0:91:B5:B2:03:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a0:8b:b2:4e:75:7f:84:4c:44:b7:62:18:42:c3:63:82:b1:
fc:eb:b7:f3:93:a9:35:ad:6b:c5:6a:ed:08:d6:17:4a:bb:57:
1a:3f:d7:18:70:9c:da:4b:2c:46:89:df:85:dc:f3:a6:48:86:
ae:ae:df:54:c0:18:cf:86:b9:e9:cb:0e:ad:3d:94:43:a7:f5:
40:f5:a8:55:ae:9e:bc:cd:a2:5b:39:7b:0c:8f:2e:f1:51:ec:
11:70:f6:8d:0f:61:8d:f5:64:5e:fc:97:fc:04:7a:4a:44:8e:
cb:19:f6:da:03:90:eb:46:06:2e:37:8b:33:25:79:86:a1:a8:
40:60:c2:02:c6:ed:c0:93:c1:98:14:ce:bf:87:61:74:7d:32:
ae:35:8c:7c:7f:46:9f:70:c5:c9:c4:95:07:be:d3:a2:d2:01:
b9:81:24:8f:23:37:e1:3c:06:d1:db:82:50:c1:32:59:92:83:
b2:5d:65:25:3b:d7:5c:e0:b0:fc:cf:0a:97:fb:c8:f0:a7:f1:
bd:00:06:2f:86:fc:88:6c:35:fc:89:72:fc:c6:2f:4a:69:69:
90:92:ba:6e:69:38:97:21:d9:1c:7f:6f:a4:37:8f:50:af:0c:
51:c2:d7:b0:1c:d8:60:0a:7a:5d:24:6a:3e:fb:fe:f7:ca:7c:
36:29:d2:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbLqefcCPkQJVz5ea5mAXlYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZjcyMmE4ODVhYmViOWFhZmZiMzJkYTc2NGVmMDkxYjVi
MjAzNDAwHhcNMjUwNTEzMjIwMDMxWhcNMjUwNTE0MjIwMDMxWjAzMTEwLwYDVQQD
Eyg5Mjg2YTcxNzgyNzQyYzczMGE2NDVlMThhZDIzYmQxOGYzMzBmODhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlaGidtqGgFzwgcZQzYjFuphUNnB
U4M93CNeoB3nkxrC0EGyXq89Pp7V8WipPZpqW9r0aTaWa/FrdDl7zKwGSEPilfsO
xjOBr5I2VM54oQFG5QAoYjH25n/OyLUwUA393gjMZLZQkA/F7RhkUSFP+OrxTEdG
XIGp3BAe1xhH8TNA3miNDZD3cLnC0LqXHyiSCWs2C7oAsbGWj0Bklez1r873DAYT
PzzlhosX+QFV5iYABqv0647l1RkSdHfjw7wBNqi6TlsB2Ms28z4GWkzdzFbATp5z
vwRaQicMIHO2yYnwjp8cwyuxevqR56cxb9u9X17cGNfJjPPvNjpz0O8viwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKGpxeCdCxzCmReGK0jvRjzMPiNMB8GA1UdIwQY
MBaAFFb3IqiFq+uar/sy2nZO8JG1sgNAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnZjaXFJV3I2NXF2LXpMYWRrN3drYld5QTBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84OTkyYjEtMTYwMC00YjkyLTk5YTUt
ODE0MGMxMTZmMGM4LzEvVnZjaXFJV3I2NXF2LXpMYWRrN3drYld5QTBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni84OTkyYjEtMTYwMC00YjkyLTk5YTUtODE0MGMxMTZmMGM4
LzEvVnZjaXFJV3I2NXF2LXpMYWRrN3drYld5QTBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMqCLsk51
f4RMRLdiGELDY4Kx/Ou385OpNa1rxWrtCNYXSrtXGj/XGHCc2kssRonfhdzzpkiG
rq7fVMAYz4a56csOrT2UQ6f1QPWoVa6evM2iWzl7DI8u8VHsEXD2jQ9hjfVkXvyX
/AR6SkSOyxn22gOQ60YGLjeLMyV5hqGoQGDCAsbtwJPBmBTOv4dhdH0yrjWMfH9G
n3DFycSVB77TotIBuYEkjyM34TwG0duCUMEyWZKDsl1lJTvXXOCw/M8Kl/vI8Kfx
vQAGL4b8iGw1/Ily/MYvSmlpkJK6bmk4lyHZHH9vpDePUK8MUcLXsBzYYAp6XSRq
Pvv+98p8NinSgg==
-----END CERTIFICATE-----
Generated at Wed May 14 08:21:01 2025 by rpki-client