Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
File: vlJx8OFYfBRDTySA-RQQGFUHz6E.mft (raw, json)
Hash identifier: uzafhUt3tnIZ0zUvbOc3jGsVuIWiJLR6Jva2BVucNWw=
Subject key identifier: B5:7B:97:11:9B:EC:5D:1B:77:04:87:8F:EE:51:0B:2D:AC:A2:24:36
Authority key identifier: BE:52:71:F0:E1:58:7C:14:43:4F:24:80:F9:14:10:18:55:07:CF:A1
Certificate issuer: /CN=be5271f0e1587c14434f2480f91410185507cfa1
Certificate serial: 0196C0EF643D37A780086855ACF73B2E8775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
Manifest number: 14C6
Signing time: Sun 11 May 2025 20:00:36 +0000
Manifest this update: Sun 11 May 2025 20:00:36 +0000
Manifest next update: Mon 12 May 2025 20:00:36 +0000
Files and hashes: 1: bxyMDkypoYoPE36odgLUanwOaLY.roa (hash: /Tdt2l601ImlNiIyf1pfayzYn4s0xCETamIww0AgaGc=)
2: vlJx8OFYfBRDTySA-RQQGFUHz6E.crl (hash: V52q/1TFOLK2UC8FRH8zHI8N9/nInGPCoKQyKXpgosg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:ef:64:3d:37:a7:80:08:68:55:ac:f7:3b:2e:87:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5271f0e1587c14434f2480f91410185507cfa1
Validity
Not Before: May 11 20:00:36 2025 GMT
Not After : May 12 20:00:36 2025 GMT
Subject: CN=b57b97119bec5d1b7704878fee510b2daca22436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:97:12:e0:da:24:7f:ef:42:b3:3f:c1:fa:e7:
3f:c2:ca:f6:c2:18:13:09:22:cc:e0:80:f3:38:77:
17:1e:64:8b:e8:b0:11:f1:7a:4f:97:06:63:56:2b:
9f:9e:81:a3:f6:22:f5:0e:93:f2:49:cb:84:fe:01:
cb:c1:b0:f9:6d:bb:46:01:e6:c2:fb:ed:f3:ef:fe:
46:f6:28:9f:85:3a:a7:ea:9f:02:1a:b7:be:4e:af:
8a:e3:4e:b8:d5:61:81:33:18:bf:c6:91:ff:26:2c:
c5:59:1d:61:9f:36:cc:3d:f5:44:94:1f:47:d2:ba:
36:81:5e:9f:dc:31:32:ed:3d:00:d6:36:b9:07:5e:
2c:02:3a:f1:d7:db:a9:d3:04:99:43:23:1b:69:e0:
8e:86:4f:ae:0a:82:34:79:04:48:3e:9f:2a:ed:88:
6a:45:09:f4:21:2f:e6:78:0e:64:0b:25:7d:a9:e4:
a1:ec:44:50:36:bb:6c:e9:15:d3:c4:aa:f1:3e:9e:
b5:c5:c5:38:7d:8c:f4:73:26:23:f2:05:82:a2:c1:
5d:d4:d0:fc:ea:f8:0e:41:6c:93:0e:cc:5b:56:de:
ac:e5:bf:a2:21:ab:32:95:60:1c:d5:ef:e3:3a:99:
c2:be:4c:ea:4e:23:02:c0:a2:58:bb:9a:07:6a:d1:
2a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7B:97:11:9B:EC:5D:1B:77:04:87:8F:EE:51:0B:2D:AC:A2:24:36
X509v3 Authority Key Identifier:
keyid:BE:52:71:F0:E1:58:7C:14:43:4F:24:80:F9:14:10:18:55:07:CF:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:cb:49:39:7a:63:e4:e5:f8:d2:62:cb:9d:32:f7:18:c5:4c:
0b:81:57:ae:df:17:a5:64:63:e9:d4:26:d2:d7:ce:0a:4b:20:
b7:96:02:b5:1f:c3:f4:8d:d3:eb:d7:1c:1a:30:32:1f:26:e4:
23:2e:ec:d2:b2:73:31:13:41:32:84:43:ad:ac:50:d5:46:00:
83:4e:d5:71:a2:69:4f:35:8a:b3:97:e2:11:5f:bc:32:74:36:
4a:25:be:b4:c4:42:dd:f9:41:93:9a:b0:da:80:d8:5e:0f:70:
77:79:3f:74:b2:35:20:c4:a2:13:82:ad:22:4c:20:44:e3:8a:
2b:95:d0:2a:73:36:e6:fc:7f:45:1a:a7:80:a8:b5:31:95:dd:
3a:69:60:7b:20:70:1e:fd:f7:fe:f1:e2:2f:9e:37:0e:3e:de:
36:52:46:43:64:8b:86:67:1a:c6:0f:4e:22:94:61:aa:59:4c:
9e:ed:ad:c5:50:38:eb:6e:53:51:48:2d:33:82:a9:61:ca:72:
69:16:65:f2:76:17:28:d1:74:71:0c:73:8d:b9:c5:5e:b5:f3:
ca:6b:8a:d7:7f:4d:ad:b1:13:5a:29:a3:8b:08:9e:d6:92:6b:
3c:c3:5e:fa:04:0f:18:44:82:c9:13:85:1a:47:63:1e:60:7e:
6a:1c:da:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbA72Q9N6eACGhVrPc7Lod1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNTI3MWYwZTE1ODdjMTQ0MzRmMjQ4MGY5MTQxMDE4NTUw
N2NmYTEwHhcNMjUwNTExMjAwMDM2WhcNMjUwNTEyMjAwMDM2WjAzMTEwLwYDVQQD
EyhiNTdiOTcxMTliZWM1ZDFiNzcwNDg3OGZlZTUxMGIyZGFjYTIyNDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJcS4Nokf+9Csz/B+uc/wsr2whgT
CSLM4IDzOHcXHmSL6LAR8XpPlwZjViufnoGj9iL1DpPyScuE/gHLwbD5bbtGAebC
++3z7/5G9iifhTqn6p8CGre+Tq+K40641WGBMxi/xpH/JizFWR1hnzbMPfVElB9H
0ro2gV6f3DEy7T0A1ja5B14sAjrx19up0wSZQyMbaeCOhk+uCoI0eQRIPp8q7Yhq
RQn0IS/meA5kCyV9qeSh7ERQNrts6RXTxKrxPp61xcU4fYz0cyYj8gWCosFd1ND8
6vgOQWyTDsxbVt6s5b+iIasylWAc1e/jOpnCvkzqTiMCwKJYu5oHatEq4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLV7lxGb7F0bdwSHj+5RCy2soiQ2MB8GA1UdIwQY
MBaAFL5ScfDhWHwUQ08kgPkUEBhVB8+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmxKeDhPRllmQlJEVHlTQS1SUVFHRlVIejZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83NmRiYTAtZDg2Yi00ZDg0LWIxNWEt
NGQ2ZDEyNTZiZjliLzEvdmxKeDhPRllmQlJEVHlTQS1SUVFHRlVIejZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny83NmRiYTAtZDg2Yi00ZDg0LWIxNWEtNGQ2ZDEyNTZiZjli
LzEvdmxKeDhPRllmQlJEVHlTQS1SUVFHRlVIejZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnstJOXpj
5OX40mLLnTL3GMVMC4FXrt8XpWRj6dQm0tfOCksgt5YCtR/D9I3T69ccGjAyHybk
Iy7s0rJzMRNBMoRDraxQ1UYAg07VcaJpTzWKs5fiEV+8MnQ2SiW+tMRC3flBk5qw
2oDYXg9wd3k/dLI1IMSiE4KtIkwgROOKK5XQKnM25vx/RRqngKi1MZXdOmlgeyBw
Hv33/vHiL543Dj7eNlJGQ2SLhmcaxg9OIpRhqllMnu2txVA4625TUUgtM4KpYcpy
aRZl8nYXKNF0cQxzjbnFXrXzymuK139NrbETWimjiwie1pJrPMNe+gQPGESCyROF
GkdjHmB+ahzaoA==
-----END CERTIFICATE-----
Generated at Mon May 12 05:00:42 2025 by rpki-client