Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
File: vIPChDwWSbAFTJEST-4DEUCV4WM.mft (raw, json)
Hash identifier: 72HpL0p6THjRCghwojRRmDelnbz70bLVrJ2KEovDQBo=
Subject key identifier: 8E:B3:1F:20:1F:1C:4D:CF:6A:4F:B0:F4:9B:01:C1:3A:4B:5B:E4:43
Authority key identifier: BC:83:C2:84:3C:16:49:B0:05:4C:91:12:4F:EE:03:11:40:95:E1:63
Certificate issuer: /CN=bc83c2843c1649b0054c91124fee03114095e163
Certificate serial: 0196A0892663F67C148C1D3B6166967038C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 13:01:04 +0000
Manifest this update: Mon 05 May 2025 13:01:04 +0000
Manifest next update: Tue 06 May 2025 13:01:04 +0000
Files and hashes: 1: SyfvPrUk0EqUlUibCeR9AFkwGwg.roa (hash: zvu0Xkf7wJgRiFUAHEOyER7LyU5jW8xnRDY/dZI92fo=)
2: vIPChDwWSbAFTJEST-4DEUCV4WM.crl (hash: zhHNvpG3xYrYXKqAdWRLggwMKDJynf4McWq8hN1+Q8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:89:26:63:f6:7c:14:8c:1d:3b:61:66:96:70:38:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc83c2843c1649b0054c91124fee03114095e163
Validity
Not Before: May 5 13:01:04 2025 GMT
Not After : May 6 13:01:04 2025 GMT
Subject: CN=8eb31f201f1c4dcf6a4fb0f49b01c13a4b5be443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:90:63:90:89:89:aa:20:c0:d0:ad:e0:05:a4:
2b:9e:89:be:23:8b:f1:86:95:c4:84:1c:58:70:24:
11:ac:28:91:02:80:24:d5:0e:e8:69:ab:ce:d4:74:
9e:72:51:41:0a:94:52:9e:ba:06:6c:5c:e1:64:f3:
c6:50:b1:ab:f0:f0:05:d6:97:23:0d:4b:56:7e:3f:
90:e3:04:f3:1a:47:55:a1:72:d2:d8:19:46:3b:d0:
34:90:a3:cf:4c:44:27:5a:fd:e8:56:7b:d1:14:7c:
5a:93:de:dc:83:2d:10:7b:1b:32:53:a1:37:48:89:
05:34:b7:af:37:e5:f4:77:d6:58:b6:de:ac:fd:f8:
b4:43:32:3b:8a:34:64:b9:78:c8:a3:02:3e:32:a4:
51:95:60:a3:a6:aa:ff:6f:52:00:7f:84:06:1d:79:
f0:6a:08:46:93:b1:b4:fc:93:e6:e3:7b:87:4d:f2:
65:76:3f:3c:3c:18:bf:e4:91:fd:cb:73:a8:91:2e:
a8:e3:5c:4b:a0:c2:e2:d8:9f:a1:9e:21:9b:02:f2:
84:12:40:6d:30:0f:73:97:ae:d1:37:de:58:77:96:
30:1b:dd:32:f6:8b:63:f8:9e:d6:84:0e:93:be:fc:
eb:bd:2a:1a:eb:71:2e:e6:6b:66:31:d5:67:68:0c:
7f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B3:1F:20:1F:1C:4D:CF:6A:4F:B0:F4:9B:01:C1:3A:4B:5B:E4:43
X509v3 Authority Key Identifier:
keyid:BC:83:C2:84:3C:16:49:B0:05:4C:91:12:4F:EE:03:11:40:95:E1:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:de:e6:8a:00:5f:5d:59:e7:4a:0a:eb:d4:22:eb:89:d1:e1:
d7:34:83:8f:fb:de:9f:43:13:3d:d9:f1:c6:aa:e0:99:4c:8f:
a5:d6:25:58:47:1a:2f:d1:83:86:e5:ef:b6:99:3a:b4:01:ea:
95:e0:5d:ba:d7:27:df:1c:be:54:74:67:b0:e5:e0:91:76:26:
df:fd:41:43:b5:a8:d8:c8:df:5c:30:56:4b:38:c0:96:b6:80:
d0:de:19:b0:a0:80:3e:d3:69:be:9e:2a:b6:68:25:1c:b0:93:
b3:db:14:6c:a8:02:85:32:69:42:7d:c2:39:96:d7:e7:e2:43:
27:82:d6:82:aa:4a:c6:f3:e8:35:52:36:ce:3d:9e:45:f9:1e:
84:83:c7:6c:e0:61:9f:d2:85:55:6a:a4:88:5e:7b:62:e7:8c:
8c:cb:29:bc:de:3e:46:c4:f0:23:a1:d9:75:cb:4e:3e:46:b0:
c0:3d:48:a8:22:c7:1f:ce:7b:6c:67:4d:78:89:e0:19:d2:b2:
77:19:25:4e:d7:18:57:e9:7c:e1:dc:ea:23:b3:b6:a7:e7:2c:
f5:b5:01:07:68:6c:0b:a8:17:33:0f:27:68:8c:4f:ef:d1:5e:
b8:93:c0:df:2b:d1:63:d3:6d:05:62:bb:57:d2:17:74:57:27:
c4:58:44:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZagiSZj9nwUjB07YWaWcDjGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjODNjMjg0M2MxNjQ5YjAwNTRjOTExMjRmZWUwMzExNDA5
NWUxNjMwHhcNMjUwNTA1MTMwMTA0WhcNMjUwNTA2MTMwMTA0WjAzMTEwLwYDVQQD
Eyg4ZWIzMWYyMDFmMWM0ZGNmNmE0ZmIwZjQ5YjAxYzEzYTRiNWJlNDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pBjkImJqiDA0K3gBaQrnom+I4vx
hpXEhBxYcCQRrCiRAoAk1Q7oaavO1HSeclFBCpRSnroGbFzhZPPGULGr8PAF1pcj
DUtWfj+Q4wTzGkdVoXLS2BlGO9A0kKPPTEQnWv3oVnvRFHxak97cgy0QexsyU6E3
SIkFNLevN+X0d9ZYtt6s/fi0QzI7ijRkuXjIowI+MqRRlWCjpqr/b1IAf4QGHXnw
aghGk7G0/JPm43uHTfJldj88PBi/5JH9y3OokS6o41xLoMLi2J+hniGbAvKEEkBt
MA9zl67RN95Yd5YwG90y9otj+J7WhA6TvvzrvSoa63Eu5mtmMdVnaAx/vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6zHyAfHE3Pak+w9JsBwTpLW+RDMB8GA1UdIwQY
MBaAFLyDwoQ8FkmwBUyREk/uAxFAleFjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdklQQ2hEd1dTYkFGVEpFU1QtNERFVUNWNFdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hNzU5NDYtNTdiNC00MWViLWI2YjUt
NTI5NWY1YjNmMTliLzEvdklQQ2hEd1dTYkFGVEpFU1QtNERFVUNWNFdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9hNzU5NDYtNTdiNC00MWViLWI2YjUtNTI5NWY1YjNmMTli
LzEvdklQQ2hEd1dTYkFGVEpFU1QtNERFVUNWNFdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmN7migBf
XVnnSgrr1CLridHh1zSDj/ven0MTPdnxxqrgmUyPpdYlWEcaL9GDhuXvtpk6tAHq
leBdutcn3xy+VHRnsOXgkXYm3/1BQ7Wo2MjfXDBWSzjAlraA0N4ZsKCAPtNpvp4q
tmglHLCTs9sUbKgChTJpQn3COZbX5+JDJ4LWgqpKxvPoNVI2zj2eRfkehIPHbOBh
n9KFVWqkiF57YueMjMspvN4+RsTwI6HZdctOPkawwD1IqCLHH857bGdNeIngGdKy
dxklTtcYV+l84dzqI7O2p+cs9bUBB2hsC6gXMw8naIxP79FeuJPA3yvRY9NtBWK7
V9IXdFcnxFhE4w==
-----END CERTIFICATE-----
Generated at Mon May 5 16:26:02 2025 by rpki-client