Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
File: VxRWZJaS5gVm3gCOEmu90dLr7UU.mft (raw, json)
Hash identifier: fco6aNcQrm/9xnWHBDOi4Xqth6y5IjTIOnQPO2eSYj4=
Subject key identifier: 0F:06:1C:2A:E6:44:11:BA:94:24:74:62:E7:D6:3A:72:97:94:6C:D9
Authority key identifier: 57:14:56:64:96:92:E6:05:66:DE:00:8E:12:6B:BD:D1:D2:EB:ED:45
Certificate issuer: /CN=571456649692e60566de008e126bbdd1d2ebed45
Certificate serial: 0196C34BE508CA4898A6C6A9DCBB0972C2D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
Manifest number: 0DB2
Signing time: Mon 12 May 2025 07:00:52 +0000
Manifest this update: Mon 12 May 2025 07:00:52 +0000
Manifest next update: Tue 13 May 2025 07:00:52 +0000
Files and hashes: 1: VxRWZJaS5gVm3gCOEmu90dLr7UU.crl (hash: OIhE2w+sxNxvM2knfg7TLybFSUsu9SwZ27kBXm0TuFI=)
2: t0KxoFR4-v-aF7ApZp5a51UCPdE.roa (hash: wDmBNX7FNw1Byb+j/pduuukElypr1eZvZiRjB9AwIB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:e5:08:ca:48:98:a6:c6:a9:dc:bb:09:72:c2:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571456649692e60566de008e126bbdd1d2ebed45
Validity
Not Before: May 12 07:00:52 2025 GMT
Not After : May 13 07:00:52 2025 GMT
Subject: CN=0f061c2ae64411ba94247462e7d63a7297946cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c1:c0:de:e6:90:a3:77:3f:66:3d:5b:50:bf:
5c:90:88:15:91:16:51:cf:b6:32:2d:f9:91:fa:5d:
21:5f:1d:d7:25:79:86:4a:28:8b:25:59:e9:01:fe:
18:e9:99:16:94:2b:7c:83:d1:1b:e1:d4:d6:7d:6b:
0e:3e:03:b9:97:7b:64:16:a4:84:69:88:2a:1a:3e:
19:26:66:7a:d9:e0:01:2e:4e:c4:6e:0b:2d:d6:b5:
90:e1:30:c1:98:6b:a7:0c:2a:55:65:20:fd:2a:84:
d0:95:00:59:fd:8a:a0:6c:23:f8:bc:f5:d2:29:f5:
d7:19:07:8d:bb:d8:da:5b:cf:a9:a4:10:ea:03:eb:
fa:f9:77:80:e0:f2:2e:fe:4a:3f:90:a8:25:77:8b:
22:a0:f9:d2:70:e5:1a:f8:34:82:be:31:e0:11:af:
29:34:18:3d:a7:f3:90:26:30:28:f3:f7:76:85:6e:
9e:17:47:c3:14:16:91:fe:97:54:af:64:ad:23:11:
80:bf:6f:8e:23:f4:43:e2:2a:b6:dc:f0:d6:7b:ca:
82:e2:92:6b:b4:76:4e:07:6a:2a:58:dc:b9:6e:54:
27:ca:fd:f6:98:d5:2c:72:f4:d5:5d:fd:15:c8:8f:
7b:e6:cb:10:6b:22:28:de:66:e7:f2:55:02:ad:c5:
12:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:06:1C:2A:E6:44:11:BA:94:24:74:62:E7:D6:3A:72:97:94:6C:D9
X509v3 Authority Key Identifier:
keyid:57:14:56:64:96:92:E6:05:66:DE:00:8E:12:6B:BD:D1:D2:EB:ED:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b9:34:2b:fb:00:9c:c4:a4:5c:6d:10:dc:ea:91:61:3c:93:
94:c7:8b:59:c4:67:85:19:c6:f3:37:40:09:9b:ca:f6:d2:ef:
c1:2c:fb:88:6d:3b:da:5d:ea:89:d8:7d:23:c0:aa:f9:8f:3b:
f9:c9:f5:2f:f6:fc:b4:97:fc:75:5b:d0:74:5e:a6:9c:02:f1:
9d:fc:a7:56:66:29:32:62:f4:87:88:9d:c0:c8:10:cd:a7:f1:
81:85:b4:88:04:8c:32:f7:a3:d6:b7:b9:e5:78:80:73:b4:70:
90:b3:da:af:bc:bf:5a:76:4b:fd:51:b8:e9:be:7b:e5:13:78:
89:3f:2d:fe:79:2a:18:a2:b7:39:04:19:98:0e:9f:1b:e2:2a:
78:d0:49:74:43:26:9e:a8:06:8c:11:e8:b0:fa:c1:7c:23:87:
9c:1d:e2:ab:c0:00:89:f2:e5:19:a9:ce:90:ab:2c:0a:2c:21:
cc:16:5e:8b:ef:a2:14:ad:37:e6:97:fe:57:0c:bf:02:c6:6f:
b1:60:aa:fa:7c:95:1a:84:df:2e:fc:7f:86:9f:11:ec:56:91:
8c:35:1c:01:2c:5b:9a:c6:1d:5b:65:98:c2:38:1e:cb:f6:aa:
c6:11:b5:2a:76:68:0c:fd:d8:a1:63:9f:d8:23:84:74:e7:e4:
5a:6d:5c:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDS+UIykiYpsap3LsJcsLQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MTQ1NjY0OTY5MmU2MDU2NmRlMDA4ZTEyNmJiZGQxZDJl
YmVkNDUwHhcNMjUwNTEyMDcwMDUyWhcNMjUwNTEzMDcwMDUyWjAzMTEwLwYDVQQD
EygwZjA2MWMyYWU2NDQxMWJhOTQyNDc0NjJlN2Q2M2E3Mjk3OTQ2Y2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMHA3uaQo3c/Zj1bUL9ckIgVkRZR
z7YyLfmR+l0hXx3XJXmGSiiLJVnpAf4Y6ZkWlCt8g9Eb4dTWfWsOPgO5l3tkFqSE
aYgqGj4ZJmZ62eABLk7Ebgst1rWQ4TDBmGunDCpVZSD9KoTQlQBZ/YqgbCP4vPXS
KfXXGQeNu9jaW8+ppBDqA+v6+XeA4PIu/ko/kKgld4sioPnScOUa+DSCvjHgEa8p
NBg9p/OQJjAo8/d2hW6eF0fDFBaR/pdUr2StIxGAv2+OI/RD4iq23PDWe8qC4pJr
tHZOB2oqWNy5blQnyv32mNUscvTVXf0VyI975ssQayIo3mbn8lUCrcUS8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8GHCrmRBG6lCR0YufWOnKXlGzZMB8GA1UdIwQY
MBaAFFcUVmSWkuYFZt4AjhJrvdHS6+1FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnhSV1pKYVM1Z1ZtM2dDT0VtdTkwZExyN1VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wOGE3ZmYtMmNlZi00MjQ4LTlmZTgt
MDRjOGYzZWVjZWViLzEvVnhSV1pKYVM1Z1ZtM2dDT0VtdTkwZExyN1VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8wOGE3ZmYtMmNlZi00MjQ4LTlmZTgtMDRjOGYzZWVjZWVi
LzEvVnhSV1pKYVM1Z1ZtM2dDT0VtdTkwZExyN1VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb7k0K/sA
nMSkXG0Q3OqRYTyTlMeLWcRnhRnG8zdACZvK9tLvwSz7iG072l3qidh9I8Cq+Y87
+cn1L/b8tJf8dVvQdF6mnALxnfynVmYpMmL0h4idwMgQzafxgYW0iASMMvej1re5
5XiAc7RwkLPar7y/WnZL/VG46b575RN4iT8t/nkqGKK3OQQZmA6fG+IqeNBJdEMm
nqgGjBHosPrBfCOHnB3iq8AAifLlGanOkKssCiwhzBZei++iFK035pf+Vwy/AsZv
sWCq+nyVGoTfLvx/hp8R7FaRjDUcASxbmsYdW2WYwjgey/aqxhG1KnZoDP3YoWOf
2COEdOfkWm1cVg==
-----END CERTIFICATE-----
Generated at Mon May 12 10:45:20 2025 by rpki-client