Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.mft
File: VV10LVJ_lwDMAEfX1hv9gih42x8.mft (raw, json)
Hash identifier: ntUBunqpZputYiCITq2KkAKS/xLJWsg50TmNPy2CmNs=
Subject key identifier: F7:9A:21:76:6B:0E:69:19:5D:4B:37:B4:B8:E3:1E:8A:38:00:31:9C
Authority key identifier: 55:5D:74:2D:52:7F:97:00:CC:00:47:D7:D6:1B:FD:82:28:78:DB:1F
Certificate issuer: /CN=555d742d527f9700cc0047d7d61bfd822878db1f
Certificate serial: 0196BDEEA69E6240EDE43E6010DE9EC5331C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VV10LVJ_lwDMAEfX1hv9gih42x8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.mft
Manifest number: 150D
Signing time: Sun 11 May 2025 06:00:56 +0000
Manifest this update: Sun 11 May 2025 06:00:56 +0000
Manifest next update: Mon 12 May 2025 06:00:56 +0000
Files and hashes: 1: DYecUh-DxqkXQO2e7g2xu3pUfow.roa (hash: YUWrnAO2Gq94plJUaewAQTbWDDY7NY6O0vRYXx6edu0=)
2: VV10LVJ_lwDMAEfX1hv9gih42x8.crl (hash: 7s7yhoy2224es7d2Gm8Cj13avwA85lS8p6VY/wNV+DI=)
3: hNRdZItPl-_x1hY3C3RjmRZbjnY.roa (hash: RX1AwwjMh7GoVfAGeesdzdmROnn3H+S+x/ans2oUFUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VV10LVJ_lwDMAEfX1hv9gih42x8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:a6:9e:62:40:ed:e4:3e:60:10:de:9e:c5:33:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=555d742d527f9700cc0047d7d61bfd822878db1f
Validity
Not Before: May 11 06:00:56 2025 GMT
Not After : May 12 06:00:56 2025 GMT
Subject: CN=f79a21766b0e69195d4b37b4b8e31e8a3800319c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:91:77:2e:11:62:50:55:6d:eb:a5:02:3b:a1:
f1:e9:ce:44:f2:21:8c:a0:cb:16:5f:0e:c9:05:65:
d8:09:31:27:52:d5:28:a1:db:61:a5:fb:0a:27:1d:
20:9a:64:c6:1c:13:4b:7c:9f:e0:e1:2f:5d:7d:71:
d2:82:2f:71:bf:42:cc:ae:a4:dd:f6:60:77:5c:f4:
7f:45:92:14:23:f5:46:cb:a4:74:99:fd:3f:20:74:
73:7b:c4:f8:79:fd:09:b5:3b:a3:00:81:fc:28:34:
ab:e0:e0:6c:91:ed:82:77:b2:d3:33:28:7b:f1:20:
8e:e4:0b:7d:ca:6f:81:8c:42:1d:16:0c:4d:e8:57:
8b:67:55:54:54:15:ee:b5:d3:51:50:78:7c:8c:1a:
a9:0b:1c:ae:a9:ff:97:61:dc:67:40:c7:8a:28:99:
7f:3c:e7:8b:0e:d3:20:56:dd:49:29:fd:5c:e3:e3:
93:d8:7d:70:46:86:dc:4a:31:ae:70:80:0b:6a:28:
7d:fe:53:12:98:22:49:ea:8a:32:47:47:f1:71:c8:
8d:70:17:92:56:be:b5:aa:b6:b5:2b:dc:5f:74:37:
68:61:33:9c:d5:b0:d1:2a:c5:16:5a:cf:dc:4f:49:
e3:59:e3:45:a5:c2:35:88:4e:d8:3a:6b:6b:5c:18:
9d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9A:21:76:6B:0E:69:19:5D:4B:37:B4:B8:E3:1E:8A:38:00:31:9C
X509v3 Authority Key Identifier:
keyid:55:5D:74:2D:52:7F:97:00:CC:00:47:D7:D6:1B:FD:82:28:78:DB:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VV10LVJ_lwDMAEfX1hv9gih42x8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:37:07:8e:00:11:bf:8f:bf:19:d0:ef:d8:76:3b:72:1a:b9:
b9:ea:13:37:b6:a0:c5:ce:31:50:94:4b:e4:9c:86:6f:ec:14:
04:79:50:c4:57:27:30:bc:53:62:2e:43:fa:b7:b2:f1:d2:04:
fb:d5:1e:c1:d6:bb:04:86:87:69:78:28:08:03:56:90:d2:fd:
56:dc:db:50:e9:0d:2c:66:6d:ec:af:61:84:10:17:c7:b4:c9:
63:25:58:d8:4e:f6:48:77:05:cf:14:72:60:49:07:69:da:34:
6c:81:4c:28:41:3a:4a:4e:f0:b2:fc:b5:8a:af:2a:a7:c4:f2:
42:fb:ad:75:eb:1f:9f:a8:cc:8e:f9:75:cb:c8:a2:9b:69:8f:
0d:88:a1:70:d0:32:c8:94:03:ca:50:62:d1:89:33:74:2e:dc:
9f:9c:ac:06:5b:9a:e8:6f:d2:6e:73:7f:59:88:e0:dc:2c:e0:
fd:83:16:59:4e:44:f1:5c:ca:42:70:75:f0:3e:b4:51:25:0a:
af:a9:7f:b2:82:05:9b:d5:9d:87:54:1a:f0:93:e7:24:97:da:
dd:cf:aa:a0:33:90:cf:e9:a9:93:91:ac:aa:b4:47:3d:aa:ed:
da:09:4d:6c:a5:c3:27:6b:0f:47:93:e0:b8:99:cb:09:46:52:
1d:2c:8b:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa97qaeYkDt5D5gEN6exTMcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NWQ3NDJkNTI3Zjk3MDBjYzAwNDdkN2Q2MWJmZDgyMjg3
OGRiMWYwHhcNMjUwNTExMDYwMDU2WhcNMjUwNTEyMDYwMDU2WjAzMTEwLwYDVQQD
EyhmNzlhMjE3NjZiMGU2OTE5NWQ0YjM3YjRiOGUzMWU4YTM4MDAzMTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJF3LhFiUFVt66UCO6Hx6c5E8iGM
oMsWXw7JBWXYCTEnUtUoodthpfsKJx0gmmTGHBNLfJ/g4S9dfXHSgi9xv0LMrqTd
9mB3XPR/RZIUI/VGy6R0mf0/IHRze8T4ef0JtTujAIH8KDSr4OBske2Cd7LTMyh7
8SCO5At9ym+BjEIdFgxN6FeLZ1VUVBXutdNRUHh8jBqpCxyuqf+XYdxnQMeKKJl/
POeLDtMgVt1JKf1c4+OT2H1wRobcSjGucIALaih9/lMSmCJJ6ooyR0fxcciNcBeS
Vr61qra1K9xfdDdoYTOc1bDRKsUWWs/cT0njWeNFpcI1iE7YOmtrXBid2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPeaIXZrDmkZXUs3tLjjHoo4ADGcMB8GA1UdIwQY
MBaAFFVddC1Sf5cAzABH19Yb/YIoeNsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlYxMExWSl9sd0RNQUVmWDFodjlnaWg0Mng4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9mZjVlYzktZTIyZS00MDMwLTgzMzQt
ZDVkZDQ2YWFhNDAxLzEvVlYxMExWSl9sd0RNQUVmWDFodjlnaWg0Mng4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9mZjVlYzktZTIyZS00MDMwLTgzMzQtZDVkZDQ2YWFhNDAx
LzEvVlYxMExWSl9sd0RNQUVmWDFodjlnaWg0Mng4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfzcHjgAR
v4+/GdDv2HY7chq5ueoTN7agxc4xUJRL5JyGb+wUBHlQxFcnMLxTYi5D+rey8dIE
+9Uewda7BIaHaXgoCANWkNL9VtzbUOkNLGZt7K9hhBAXx7TJYyVY2E72SHcFzxRy
YEkHado0bIFMKEE6Sk7wsvy1iq8qp8TyQvutdesfn6jMjvl1y8iim2mPDYihcNAy
yJQDylBi0YkzdC7cn5ysBlua6G/SbnN/WYjg3Czg/YMWWU5E8VzKQnB18D60USUK
r6l/soIFm9Wdh1Qa8JPnJJfa3c+qoDOQz+mpk5GsqrRHPart2glNbKXDJ2sPR5Pg
uJnLCUZSHSyLug==
-----END CERTIFICATE-----
Generated at Sun May 11 15:35:38 2025 by rpki-client