Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
File: VytO2SaC1xio_ESIFAAnQGlgeV8.mft (raw, json)
Hash identifier: vKM/Iruo8XeO7uNp41WpwnuPfDDgvGeXo40s026t64c=
Subject key identifier: 54:D8:81:1B:0D:A9:F6:C6:84:59:CD:F6:27:F4:24:4C:FA:C9:2B:39
Authority key identifier: 57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
Certificate issuer: /CN=572b4ed92682d718a8fc4488140027406960795f
Certificate serial: 0196BDEE8503A4F223535270CBEB9EAEB47C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
Manifest number: 0B8D
Signing time: Sun 11 May 2025 06:00:47 +0000
Manifest this update: Sun 11 May 2025 06:00:47 +0000
Manifest next update: Mon 12 May 2025 06:00:47 +0000
Files and hashes: 1: VytO2SaC1xio_ESIFAAnQGlgeV8.crl (hash: WvwWa5y8iaPeLAV5DuXWkoagPujTZNACEhEVNL4BK1I=)
2: xc-UZLTq46CsoQwfrFH96loErL8.roa (hash: imTueTgO4U1HucCZCJDX7it/v879nWtNhBcC9zIM6Z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:85:03:a4:f2:23:53:52:70:cb:eb:9e:ae:b4:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572b4ed92682d718a8fc4488140027406960795f
Validity
Not Before: May 11 06:00:47 2025 GMT
Not After : May 12 06:00:47 2025 GMT
Subject: CN=54d8811b0da9f6c68459cdf627f4244cfac92b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:81:f5:72:af:91:ac:d6:7a:35:4e:54:76:fe:
1a:02:00:4b:9c:26:9b:42:a7:2c:3d:15:98:ba:72:
e8:df:57:d7:68:75:74:97:f5:f7:54:be:cd:f6:6b:
a5:b7:ea:59:6f:1f:fa:a5:08:19:a2:fd:4e:e9:f1:
92:21:fb:a3:a2:00:bc:2f:52:ee:f6:a1:7e:e3:e9:
dc:32:c0:8c:fd:6a:32:e2:81:2f:cd:21:0f:ef:c9:
89:6d:ba:67:f3:c8:cc:ef:0e:94:77:54:cc:55:06:
c8:a2:07:2d:5f:ee:42:31:2e:bc:98:75:d5:3d:85:
79:c1:a3:ad:8a:e7:42:6f:d6:2f:18:e9:7e:a6:8a:
f8:47:6a:3d:f7:97:dd:5a:a4:d3:15:16:b2:44:47:
7c:01:7e:05:cc:75:de:16:c5:81:4b:70:53:b2:e7:
47:15:31:a6:46:a7:a6:20:03:8f:9f:05:73:d8:f9:
cf:ca:42:da:6c:82:06:77:77:17:45:09:03:d0:c8:
35:48:4d:eb:a7:0c:4d:42:ff:b7:79:21:c0:bb:64:
9b:d8:9d:f6:0f:9e:fd:d4:f5:0d:70:82:c2:e8:ad:
32:19:e8:28:7b:f8:6f:04:17:7d:9d:61:dd:ee:de:
54:2f:f4:ed:e3:1b:f8:8a:a2:c6:3b:06:30:ac:62:
9d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D8:81:1B:0D:A9:F6:C6:84:59:CD:F6:27:F4:24:4C:FA:C9:2B:39
X509v3 Authority Key Identifier:
keyid:57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:20:73:0e:eb:3e:94:78:e6:e8:f8:be:91:d5:3e:a1:55:67:
67:68:8b:3b:51:89:5b:71:6e:00:54:0e:81:6c:b8:2f:9d:9c:
48:21:83:d1:ad:d9:15:ff:d5:07:e5:65:87:0a:12:4f:f7:47:
78:2d:dc:40:84:08:f5:63:e0:65:15:bc:60:eb:35:dc:e1:b3:
ff:db:fa:45:92:06:9a:5d:fc:da:1a:6e:40:28:35:ec:f7:c1:
b4:3f:ab:4f:91:f9:34:af:e6:b4:0e:2d:20:88:f4:10:a0:6f:
43:99:d8:ec:35:d8:41:00:3b:ac:13:98:e0:a8:c4:e3:b3:31:
93:70:e7:14:a9:e4:f2:a7:9a:1d:9b:e8:28:a1:61:98:70:60:
b8:18:98:2a:cd:0c:32:a3:3f:94:4e:b4:0a:45:0b:65:1a:a6:
af:be:81:35:b7:50:e0:73:b4:13:8c:24:8f:b2:2e:3d:8c:af:
5d:54:83:f6:87:d9:ea:93:38:87:ba:8a:9a:2d:69:8d:5b:fc:
8e:d7:e5:ca:70:8f:c7:50:8a:8c:63:90:ed:88:19:94:87:0d:
88:e1:66:1b:e4:4b:35:5a:27:22:70:93:04:ed:3d:cb:41:2b:
61:60:a5:2f:c6:a2:f3:71:06:54:15:6c:80:04:74:a5:b9:ba:
f8:22:34:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa97oUDpPIjU1Jwy+uerrR8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MmI0ZWQ5MjY4MmQ3MThhOGZjNDQ4ODE0MDAyNzQwNjk2
MDc5NWYwHhcNMjUwNTExMDYwMDQ3WhcNMjUwNTEyMDYwMDQ3WjAzMTEwLwYDVQQD
Eyg1NGQ4ODExYjBkYTlmNmM2ODQ1OWNkZjYyN2Y0MjQ0Y2ZhYzkyYjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIH1cq+RrNZ6NU5Udv4aAgBLnCab
QqcsPRWYunLo31fXaHV0l/X3VL7N9mult+pZbx/6pQgZov1O6fGSIfujogC8L1Lu
9qF+4+ncMsCM/Woy4oEvzSEP78mJbbpn88jM7w6Ud1TMVQbIogctX+5CMS68mHXV
PYV5waOtiudCb9YvGOl+por4R2o995fdWqTTFRayREd8AX4FzHXeFsWBS3BTsudH
FTGmRqemIAOPnwVz2PnPykLabIIGd3cXRQkD0Mg1SE3rpwxNQv+3eSHAu2Sb2J32
D5791PUNcILC6K0yGegoe/hvBBd9nWHd7t5UL/Tt4xv4iqLGOwYwrGKd+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFTYgRsNqfbGhFnN9if0JEz6ySs5MB8GA1UdIwQY
MBaAFFcrTtkmgtcYqPxEiBQAJ0BpYHlfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnl0TzJTYUMxeGlvX0VTSUZBQW5RR2xnZVY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84ODRjMzEtZTUwOS00MjJiLWIwYTEt
YWY5ZmMwMTJiZDU0LzEvVnl0TzJTYUMxeGlvX0VTSUZBQW5RR2xnZVY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84ODRjMzEtZTUwOS00MjJiLWIwYTEtYWY5ZmMwMTJiZDU0
LzEvVnl0TzJTYUMxeGlvX0VTSUZBQW5RR2xnZVY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZSBzDus+
lHjm6Pi+kdU+oVVnZ2iLO1GJW3FuAFQOgWy4L52cSCGD0a3ZFf/VB+VlhwoST/dH
eC3cQIQI9WPgZRW8YOs13OGz/9v6RZIGml382hpuQCg17PfBtD+rT5H5NK/mtA4t
IIj0EKBvQ5nY7DXYQQA7rBOY4KjE47Mxk3DnFKnk8qeaHZvoKKFhmHBguBiYKs0M
MqM/lE60CkULZRqmr76BNbdQ4HO0E4wkj7IuPYyvXVSD9ofZ6pM4h7qKmi1pjVv8
jtflynCPx1CKjGOQ7YgZlIcNiOFmG+RLNVonInCTBO09y0ErYWClL8ai83EGVBVs
gAR0pbm6+CI06g==
-----END CERTIFICATE-----
Generated at Sun May 11 09:38:00 2025 by rpki-client