Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft
File: V_ZNsaQq2-ncMibryAr7t11Kfxg.mft (raw, json)
Hash identifier: VnhSiiMezkQy5JgG2/Yq+8PyEF4k46pTcdxFL1MtP+c=
Subject key identifier: BE:1C:70:FF:45:43:76:BC:89:E2:74:9B:BE:4A:E2:33:5A:03:B9:6C
Authority key identifier: 57:F6:4D:B1:A4:2A:DB:E9:DC:32:26:EB:C8:0A:FB:B7:5D:4A:7F:18
Certificate issuer: /CN=57f64db1a42adbe9dc3226ebc80afbb75d4a7f18
Certificate serial: 0196C3823DD8F390D62BA1142BA0D36F799E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft
Manifest number: 14F2
Signing time: Mon 12 May 2025 08:00:14 +0000
Manifest this update: Mon 12 May 2025 08:00:14 +0000
Manifest next update: Tue 13 May 2025 08:00:14 +0000
Files and hashes: 1: A8RA-KyHreMNSgmJAylrJgsQAGI.roa (hash: nePGMmr2buSknOQjxf358rj5Sl4Q3WncEvIivf/SZEI=)
2: V_ZNsaQq2-ncMibryAr7t11Kfxg.crl (hash: FZaVbb5L/lLu5nWcmZ8ggVxgA9tlc6E+CkIA3OTEkw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:82:3d:d8:f3:90:d6:2b:a1:14:2b:a0:d3:6f:79:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57f64db1a42adbe9dc3226ebc80afbb75d4a7f18
Validity
Not Before: May 12 08:00:14 2025 GMT
Not After : May 13 08:00:14 2025 GMT
Subject: CN=be1c70ff454376bc89e2749bbe4ae2335a03b96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:91:9d:36:6f:cb:86:86:12:67:0c:e3:b0:96:
7a:5a:75:28:3e:82:73:7e:70:dd:05:78:08:74:81:
56:b5:a2:a5:27:0d:02:10:fd:f4:bc:76:d3:0a:be:
84:85:f5:74:be:95:20:13:b2:f3:2d:63:20:d8:06:
33:5d:e8:db:09:53:d0:70:c8:f4:59:56:e4:35:51:
4f:cc:67:96:0e:73:69:1f:4a:5e:25:2d:a7:5c:6b:
9d:ef:2c:f1:cf:e5:c6:a1:e7:39:02:91:eb:5f:3a:
eb:8f:79:95:3a:e0:3b:7e:1b:6b:ab:f6:ad:64:e4:
6a:54:0e:19:55:0c:8f:a3:36:d4:f8:d7:1a:01:e6:
f3:f1:0b:ec:0b:c6:80:01:1c:c3:c5:52:d2:d6:36:
02:6e:39:4b:cc:13:b6:e6:83:01:98:30:30:ea:ea:
25:32:6a:5f:eb:9e:f6:7c:bb:b4:17:fa:11:b1:2b:
ec:d0:ac:48:78:e5:5f:6e:84:6d:b6:04:72:4d:f8:
41:a8:95:0b:0d:a2:96:76:28:f8:48:5f:0f:28:42:
1c:77:99:f3:87:7c:de:4d:de:6f:49:b4:b1:66:fa:
e8:fe:ff:93:ae:11:9c:63:1e:bd:63:87:e5:86:ef:
c9:9c:a2:da:ad:64:b4:4f:7e:23:3e:64:d8:8b:e7:
ac:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1C:70:FF:45:43:76:BC:89:E2:74:9B:BE:4A:E2:33:5A:03:B9:6C
X509v3 Authority Key Identifier:
keyid:57:F6:4D:B1:A4:2A:DB:E9:DC:32:26:EB:C8:0A:FB:B7:5D:4A:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ff:25:bd:dc:63:7e:9d:53:6e:85:3e:b0:c5:40:83:e8:d6:
1b:0d:82:32:c6:e8:91:e7:92:e3:cb:23:3d:74:11:1d:6a:4a:
b5:82:a2:30:fa:ca:5a:2d:ff:31:cd:5e:54:2e:85:9e:c2:bc:
81:68:92:b3:f6:10:03:6e:9b:cc:d3:98:75:71:29:3d:12:9b:
c5:51:f9:47:f6:61:b7:ec:f6:f4:b8:7d:eb:ec:35:15:fc:eb:
6d:15:04:fd:eb:a7:9d:24:7c:9c:66:71:11:c7:12:5d:d5:8e:
19:21:27:9f:b1:1e:52:d7:20:0b:7d:7d:57:f3:10:49:6c:08:
e5:13:ec:54:05:58:fe:7b:a9:41:8e:68:fc:a0:cc:59:90:9e:
a6:f2:fe:b6:26:1b:80:66:5d:97:8f:d8:c6:81:b2:11:b8:f8:
52:d7:b7:70:0c:15:7d:17:f8:9f:b9:33:9d:16:c9:c5:c7:80:
90:2a:10:a8:9d:98:4c:a9:f8:0d:b4:55:b1:ed:2a:5b:4d:16:
b1:1f:f3:9e:0b:fa:b7:af:d0:fe:81:8d:b9:d9:7f:ba:b0:6b:
42:67:da:0d:aa:34:60:b4:ce:e3:d4:35:51:48:02:32:9f:53:
a0:f1:55:1b:fd:d6:cb:d3:cb:d3:71:eb:fe:2c:98:27:57:18:
7d:5e:dd:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDgj3Y85DWK6EUK6DTb3meMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZjY0ZGIxYTQyYWRiZTlkYzMyMjZlYmM4MGFmYmI3NWQ0
YTdmMTgwHhcNMjUwNTEyMDgwMDE0WhcNMjUwNTEzMDgwMDE0WjAzMTEwLwYDVQQD
EyhiZTFjNzBmZjQ1NDM3NmJjODllMjc0OWJiZTRhZTIzMzVhMDNiOTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pGdNm/LhoYSZwzjsJZ6WnUoPoJz
fnDdBXgIdIFWtaKlJw0CEP30vHbTCr6EhfV0vpUgE7LzLWMg2AYzXejbCVPQcMj0
WVbkNVFPzGeWDnNpH0peJS2nXGud7yzxz+XGoec5ApHrXzrrj3mVOuA7fhtrq/at
ZORqVA4ZVQyPozbU+NcaAebz8QvsC8aAARzDxVLS1jYCbjlLzBO25oMBmDAw6uol
Mmpf6572fLu0F/oRsSvs0KxIeOVfboRttgRyTfhBqJULDaKWdij4SF8PKEIcd5nz
h3zeTd5vSbSxZvro/v+TrhGcYx69Y4flhu/JnKLarWS0T34jPmTYi+esKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4ccP9FQ3a8ieJ0m75K4jNaA7lsMB8GA1UdIwQY
MBaAFFf2TbGkKtvp3DIm68gK+7ddSn8YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVl9aTnNhUXEyLW5jTWlicnlBcjd0MTFLZnhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lZTk2ZjAtYTA5MS00Yjg1LWFmZjkt
MWU4Mjg3N2MxNDYyLzEvVl9aTnNhUXEyLW5jTWlicnlBcjd0MTFLZnhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9lZTk2ZjAtYTA5MS00Yjg1LWFmZjktMWU4Mjg3N2MxNDYy
LzEvVl9aTnNhUXEyLW5jTWlicnlBcjd0MTFLZnhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARf8lvdxj
fp1TboU+sMVAg+jWGw2CMsbokeeS48sjPXQRHWpKtYKiMPrKWi3/Mc1eVC6FnsK8
gWiSs/YQA26bzNOYdXEpPRKbxVH5R/Zht+z29Lh96+w1FfzrbRUE/eunnSR8nGZx
EccSXdWOGSEnn7EeUtcgC319V/MQSWwI5RPsVAVY/nupQY5o/KDMWZCepvL+tiYb
gGZdl4/YxoGyEbj4Ute3cAwVfRf4n7kznRbJxceAkCoQqJ2YTKn4DbRVse0qW00W
sR/zngv6t6/Q/oGNudl/urBrQmfaDao0YLTO49Q1UUgCMp9ToPFVG/3Wy9PL03Hr
/iyYJ1cYfV7ddg==
-----END CERTIFICATE-----
Generated at Mon May 12 14:25:34 2025 by rpki-client