Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
File: VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft (raw, json)
Hash identifier: lgr6a0YJoE8FU7st4r/zWLtYeIyS5CtCxBgWY6KSDwM=
Subject key identifier: 98:CF:BE:92:CF:A6:A2:D8:BD:30:D0:0C:DD:B0:2A:36:98:DB:F9:FC
Authority key identifier: 54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89
Certificate issuer: /CN=543c54067385a765b1d5617c43331956fb208e89
Certificate serial: 0196BFA598B712EF72010547A77E0FF7FD64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 14:00:22 +0000
Manifest this update: Sun 11 May 2025 14:00:22 +0000
Manifest next update: Mon 12 May 2025 14:00:22 +0000
Files and hashes: 1: VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl (hash: Z3esXP4eE5OKpC1JZ/RT2MwZ/+Y6J/Tk3MN8Wq7HpoM=)
2: z735G_UD7XSfWpNDTnzeaf_tL4w.roa (hash: DkYxS6x4qA1lOII9eThmWP47P9TbdKeyTU6VofiN3dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a5:98:b7:12:ef:72:01:05:47:a7:7e:0f:f7:fd:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c54067385a765b1d5617c43331956fb208e89
Validity
Not Before: May 11 14:00:22 2025 GMT
Not After : May 12 14:00:22 2025 GMT
Subject: CN=98cfbe92cfa6a2d8bd30d00cddb02a3698dbf9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a5:2b:a0:c7:9f:a1:c0:c2:fd:d0:73:32:f4:
46:e5:a2:6b:86:8c:01:81:3a:22:24:33:31:18:5e:
ba:1e:95:f3:4e:a9:5c:18:24:df:11:19:09:a4:82:
68:db:49:8c:a8:71:a3:d6:78:85:23:40:93:2d:42:
26:d1:e7:56:9d:3f:d6:1b:03:05:b5:83:08:76:09:
68:66:1e:de:20:77:66:01:b1:4e:81:0c:41:d8:b7:
3f:3f:7f:86:10:1b:13:56:0e:b2:a2:97:9e:a2:a1:
5a:9c:16:d9:3a:0a:f8:f7:f8:c5:e8:6b:73:85:59:
dd:63:5e:97:1c:24:9b:30:fa:01:32:d3:2e:31:c3:
f2:db:13:69:3d:d9:30:83:84:93:dd:30:37:a2:39:
d1:22:4f:56:e4:62:7c:da:ad:9c:3b:3b:11:2c:fe:
e0:98:12:7f:65:af:ca:98:88:4b:d2:40:5d:d1:4f:
48:45:bc:5b:2d:7f:7e:c7:e9:5a:96:cd:60:0b:2a:
42:ce:bb:bc:c2:ce:a6:a2:57:76:5a:be:76:b4:a8:
0d:09:46:39:38:d9:86:62:1f:96:d8:ed:3e:87:f7:
0a:27:e7:b4:db:63:e7:71:71:9c:60:67:34:5f:7b:
18:a8:aa:77:92:1f:04:4e:14:bb:71:57:e6:17:22:
25:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CF:BE:92:CF:A6:A2:D8:BD:30:D0:0C:DD:B0:2A:36:98:DB:F9:FC
X509v3 Authority Key Identifier:
keyid:54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:7c:5a:2c:ef:93:e1:ed:7d:3a:3a:85:c3:b3:26:08:ab:1d:
4e:d7:d1:d0:c0:71:43:8b:ad:2d:aa:ec:68:60:40:e2:9a:cc:
01:b8:c3:d9:32:93:32:9d:d2:4c:d3:ba:b0:d3:0e:3e:48:aa:
51:a1:4d:fe:82:ad:67:23:10:3b:e3:e6:26:ff:f8:44:7d:c0:
e3:37:01:88:61:db:c3:49:f6:d4:90:4e:d6:83:7d:eb:86:71:
1f:ab:e9:e5:d7:1b:de:28:5e:84:c7:dc:6f:8c:9a:9d:e6:75:
a9:e3:42:58:66:2a:41:b0:da:57:c1:34:7b:7d:f0:8d:f5:f9:
7e:8e:b7:92:47:f9:c3:cf:a9:03:aa:a8:d1:0f:2d:db:e2:ac:
79:1c:98:ab:bd:67:09:bc:f2:1a:31:bf:81:07:92:19:ef:1d:
e8:4c:6f:e4:a7:13:b1:4a:ce:4a:9a:8e:37:4f:27:2e:a4:ba:
7b:83:b9:be:f2:c1:1d:16:f4:a4:34:f9:33:24:11:53:a3:f8:
3d:43:83:6b:79:da:c6:a5:84:da:0c:9b:19:f3:f7:84:7f:ce:
8f:84:6a:1a:3e:f9:80:92:a6:02:4a:7f:34:5c:38:89:b8:f6:
44:28:ff:54:ea:89:da:20:e1:b7:42:95:60:d5:e6:ab:a8:33:
4d:dd:f3:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/pZi3Eu9yAQVHp34P9/1kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0M2M1NDA2NzM4NWE3NjViMWQ1NjE3YzQzMzMxOTU2ZmIy
MDhlODkwHhcNMjUwNTExMTQwMDIyWhcNMjUwNTEyMTQwMDIyWjAzMTEwLwYDVQQD
Eyg5OGNmYmU5MmNmYTZhMmQ4YmQzMGQwMGNkZGIwMmEzNjk4ZGJmOWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKUroMefocDC/dBzMvRG5aJrhowB
gToiJDMxGF66HpXzTqlcGCTfERkJpIJo20mMqHGj1niFI0CTLUIm0edWnT/WGwMF
tYMIdgloZh7eIHdmAbFOgQxB2Lc/P3+GEBsTVg6yopeeoqFanBbZOgr49/jF6Gtz
hVndY16XHCSbMPoBMtMuMcPy2xNpPdkwg4ST3TA3ojnRIk9W5GJ82q2cOzsRLP7g
mBJ/Za/KmIhL0kBd0U9IRbxbLX9+x+lals1gCypCzru8ws6mold2Wr52tKgNCUY5
ONmGYh+W2O0+h/cKJ+e022PncXGcYGc0X3sYqKp3kh8EThS7cVfmFyIlAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjPvpLPpqLYvTDQDN2wKjaY2/n8MB8GA1UdIwQY
MBaAFFQ8VAZzhadlsdVhfEMzGVb7II6JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkR4VUJuT0ZwMld4MVdGOFF6TVpWdnNnam9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82M2ZiZjgtNWNmZi00OTkxLThmMjct
YTQxYTQ4MzRlY2FhLzEvVkR4VUJuT0ZwMld4MVdGOFF6TVpWdnNnam9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS82M2ZiZjgtNWNmZi00OTkxLThmMjctYTQxYTQ4MzRlY2Fh
LzEvVkR4VUJuT0ZwMld4MVdGOFF6TVpWdnNnam9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcnxaLO+T
4e19OjqFw7MmCKsdTtfR0MBxQ4utLarsaGBA4prMAbjD2TKTMp3STNO6sNMOPkiq
UaFN/oKtZyMQO+PmJv/4RH3A4zcBiGHbw0n21JBO1oN964ZxH6vp5dcb3ihehMfc
b4yaneZ1qeNCWGYqQbDaV8E0e33wjfX5fo63kkf5w8+pA6qo0Q8t2+KseRyYq71n
CbzyGjG/gQeSGe8d6Exv5KcTsUrOSpqON08nLqS6e4O5vvLBHRb0pDT5MyQRU6P4
PUODa3naxqWE2gybGfP3hH/Oj4RqGj75gJKmAkp/NFw4ibj2RCj/VOqJ2iDht0KV
YNXmq6gzTd3zUg==
-----END CERTIFICATE-----
Generated at Sun May 11 19:55:09 2025 by rpki-client