Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
File: VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft (raw, json)
Hash identifier: 02/ee5gxfEJANm0YMcwMvI5xJQ+V/lDNYL9btpZGvHE=
Subject key identifier: AC:03:97:45:4A:65:F1:0D:0E:76:FA:98:C3:25:FA:D5:8A:41:66:38
Authority key identifier: 55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37
Certificate issuer: /CN=552423ed905000f69ad93eefc666bb9b1addcb37
Certificate serial: 01969D1A33AA50A99C3D897D676738BC87BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
Manifest number: 1526
Signing time: Sun 04 May 2025 21:01:01 +0000
Manifest this update: Sun 04 May 2025 21:01:01 +0000
Manifest next update: Mon 05 May 2025 21:01:01 +0000
Files and hashes: 1: 2mQ_q8-dGNGRe3nqpXkavXNspDg.roa (hash: /3YCHcej9bstt2T6B00QHN8/IPSuEaJEhcwHBYjcdtw=)
2: 5SSOCLgHzcxdzYdGNpYRPqovl-A.roa (hash: PUdiBPSqRZwnkbR0oFATrv5zTfcNr+UqMdxjxEau1ew=)
3: VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl (hash: gMDyvFB+ElLNsL8n7OPXwdQ1dGp/9EIDE/I5nNrH2aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:1a:33:aa:50:a9:9c:3d:89:7d:67:67:38:bc:87:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552423ed905000f69ad93eefc666bb9b1addcb37
Validity
Not Before: May 4 21:01:01 2025 GMT
Not After : May 5 21:01:01 2025 GMT
Subject: CN=ac0397454a65f10d0e76fa98c325fad58a416638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0a:79:69:af:58:af:b8:2a:6f:8d:1b:e3:ba:
34:65:7e:76:18:53:66:10:2d:e2:b3:e4:e8:bc:0a:
13:56:e4:81:94:e4:36:61:60:92:68:4a:cc:b7:63:
21:97:c8:76:ed:c8:4e:41:cb:1a:ab:29:82:38:6f:
79:4d:dd:0d:35:1b:73:8b:45:37:90:6b:5b:e4:cb:
2e:83:71:e1:a6:e7:05:cb:86:f6:b9:72:ae:25:f9:
21:e4:45:67:78:b4:72:1a:42:b0:b0:1a:ac:02:1d:
43:cd:41:c4:70:b6:e6:3a:d3:06:28:96:c8:8f:92:
2e:ea:bf:35:5d:50:77:0c:38:2b:71:74:02:09:d7:
67:ab:77:86:d9:66:1e:71:db:32:c3:35:eb:8f:0d:
c2:1f:aa:88:02:27:1e:b1:19:d4:c3:a1:af:d0:9f:
8c:31:65:7d:e1:07:53:86:45:c6:8a:ca:ac:7d:3e:
59:d7:db:92:62:3c:90:51:de:65:45:73:70:2c:86:
b6:6e:ed:47:3a:af:fc:cd:06:42:97:0b:ba:82:0b:
58:b2:a3:ac:a4:cb:db:35:42:32:2b:91:bc:f9:5c:
51:5f:e5:7c:1a:16:d9:40:99:1c:f7:88:13:01:6a:
9f:86:a2:12:df:5f:ef:8a:e1:96:84:bd:96:dc:a1:
9f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:03:97:45:4A:65:F1:0D:0E:76:FA:98:C3:25:FA:D5:8A:41:66:38
X509v3 Authority Key Identifier:
keyid:55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c9:fd:fa:25:b6:08:0d:da:82:84:40:2f:57:99:b1:57:f7:
d2:0d:14:21:ea:d6:b6:de:4e:cf:e5:de:22:8c:b8:bf:36:da:
32:81:a3:43:a3:9e:f9:b8:33:01:90:89:82:07:cc:f2:a4:eb:
57:08:8b:ce:19:c6:61:6b:4e:29:3b:73:42:85:46:3c:84:3e:
d1:6f:cb:5f:ae:b3:37:85:ee:e2:b3:01:91:b2:dc:58:bd:03:
c7:a6:7e:7b:03:dd:4e:82:0e:ed:f0:60:a0:43:5b:0c:74:92:
ce:6d:24:ab:95:f2:97:26:af:8c:27:bb:2d:70:ac:ea:a2:79:
00:5e:a5:e8:41:da:76:02:c3:70:a7:45:12:98:93:96:f7:ae:
0b:33:3e:ce:d6:c8:c0:70:4d:2a:59:15:a5:02:03:b7:3e:a6:
16:e6:ab:be:b4:72:36:b0:88:f0:43:d8:79:2a:44:f4:f9:fc:
50:4e:e2:d5:56:67:9b:55:d7:2e:f8:e5:5d:76:39:5f:42:45:
38:6d:b6:63:9c:08:c4:8a:1b:ff:9a:83:c6:fb:e2:a7:d2:e2:
77:b5:c1:6a:bf:87:06:7b:55:87:bf:05:f8:6a:98:a8:44:19:
d0:1c:5f:38:82:04:67:c8:3a:cd:dd:f4:49:41:56:cc:74:9b:
01:f6:ef:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZadGjOqUKmcPYl9Z2c4vIe7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MjQyM2VkOTA1MDAwZjY5YWQ5M2VlZmM2NjZiYjliMWFk
ZGNiMzcwHhcNMjUwNTA0MjEwMTAxWhcNMjUwNTA1MjEwMTAxWjAzMTEwLwYDVQQD
EyhhYzAzOTc0NTRhNjVmMTBkMGU3NmZhOThjMzI1ZmFkNThhNDE2NjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwp5aa9Yr7gqb40b47o0ZX52GFNm
EC3is+TovAoTVuSBlOQ2YWCSaErMt2Mhl8h27chOQcsaqymCOG95Td0NNRtzi0U3
kGtb5Msug3HhpucFy4b2uXKuJfkh5EVneLRyGkKwsBqsAh1DzUHEcLbmOtMGKJbI
j5Iu6r81XVB3DDgrcXQCCddnq3eG2WYecdsywzXrjw3CH6qIAicesRnUw6Gv0J+M
MWV94QdThkXGisqsfT5Z19uSYjyQUd5lRXNwLIa2bu1HOq/8zQZClwu6ggtYsqOs
pMvbNUIyK5G8+VxRX+V8GhbZQJkc94gTAWqfhqIS31/viuGWhL2W3KGfKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwDl0VKZfENDnb6mMMl+tWKQWY4MB8GA1UdIwQY
MBaAFFUkI+2QUAD2mtk+78Zmu5sa3cs3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlNRajdaQlFBUGFhMlQ3dnhtYTdteHJkeXpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83Y2FhZTUtMDNhZi00N2Y4LWIyOWUt
ZTk1MWE3NDM0NmY5LzEvVlNRajdaQlFBUGFhMlQ3dnhtYTdteHJkeXpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS83Y2FhZTUtMDNhZi00N2Y4LWIyOWUtZTk1MWE3NDM0NmY5
LzEvVlNRajdaQlFBUGFhMlQ3dnhtYTdteHJkeXpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcn9+iW2
CA3agoRAL1eZsVf30g0UIerWtt5Oz+XeIoy4vzbaMoGjQ6Oe+bgzAZCJggfM8qTr
VwiLzhnGYWtOKTtzQoVGPIQ+0W/LX66zN4Xu4rMBkbLcWL0Dx6Z+ewPdToIO7fBg
oENbDHSSzm0kq5XylyavjCe7LXCs6qJ5AF6l6EHadgLDcKdFEpiTlveuCzM+ztbI
wHBNKlkVpQIDtz6mFuarvrRyNrCI8EPYeSpE9Pn8UE7i1VZnm1XXLvjlXXY5X0JF
OG22Y5wIxIob/5qDxvvip9Lid7XBar+HBntVh78F+GqYqEQZ0BxfOIIEZ8g6zd30
SUFWzHSbAfbvfQ==
-----END CERTIFICATE-----
Generated at Mon May 5 06:59:35 2025 by rpki-client