Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
File: vkCzwr54Ndeze1gmEC-HRqUZnUk.mft (raw, json)
Hash identifier: GI9T2beJKdeZguD//YLUayRx5ECKN0dczsmAbDb7LQI=
Subject key identifier: 32:E9:70:6F:62:4D:E1:84:2A:19:1D:8C:BA:66:E9:42:C2:8D:C5:88
Authority key identifier: BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
Certificate issuer: /CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Certificate serial: 019674C2CD7DF25A71F06BE19BE82AE6B7BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
Manifest number: 0DC0
Signing time: Sun 27 Apr 2025 01:00:45 +0000
Manifest this update: Sun 27 Apr 2025 01:00:45 +0000
Manifest next update: Mon 28 Apr 2025 01:00:45 +0000
Files and hashes: 1: CEmDIjlP69L5PYySR2T2iyXDrME.roa (hash: 05O1IW8aKnT4rdWzvAMHpHCluhTzbtIkW2W6rQbfTDo=)
2: PvXyotkF7CUuPU9IpGsqtPRuTDs.roa (hash: hlW2pG80ndqwHM6JsZ8rS5M7wLdO6b8IAZvrk0uvgBY=)
3: oCn4wpr5As_rj6i8SdJkg85R0Hc.roa (hash: 7S82NkRvXrpT2+oGArNGUxQHnJWcUMj49moLiAKQQWA=)
4: vkCzwr54Ndeze1gmEC-HRqUZnUk.crl (hash: Ht6CFnD+arV6UVy61gxPqUkrSoTN8DFNdzNc54LaYzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:cd:7d:f2:5a:71:f0:6b:e1:9b:e8:2a:e6:b7:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Validity
Not Before: Apr 27 01:00:45 2025 GMT
Not After : Apr 28 01:00:45 2025 GMT
Subject: CN=32e9706f624de1842a191d8cba66e942c28dc588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7e:83:af:b2:b1:54:2b:c9:91:ab:67:f6:39:
63:fd:83:71:d3:1c:b2:ef:d3:9d:4f:f3:d4:6e:a1:
fd:b0:32:74:f3:df:c2:43:44:80:b4:75:3f:18:24:
7e:c6:67:c1:2b:57:4c:b1:5b:de:58:3e:c6:d4:f7:
31:d3:47:72:d9:48:26:fd:6a:66:9e:a4:32:2c:2c:
b6:de:f9:47:13:f2:36:40:2b:91:16:a1:9e:76:00:
a7:ae:ca:4e:b1:ad:d8:1d:0e:82:a4:54:77:d5:1d:
ee:e5:f6:47:88:cd:6e:96:2c:2d:3c:20:cc:59:ca:
11:84:dc:2b:88:d5:a9:d3:61:17:a7:0a:1e:23:25:
43:c9:89:37:03:fa:eb:42:c7:47:17:7c:7e:4a:2c:
10:0c:0f:1d:9c:db:b4:7f:a3:08:ef:fc:3f:22:4f:
3c:ea:f9:1f:f9:a2:ca:9c:ca:ed:81:5f:3c:81:9b:
e9:9d:32:6d:a4:f1:d2:b7:1a:3f:1b:5a:53:25:7e:
c0:6d:0b:30:41:bd:74:c1:8c:ff:6c:be:2e:29:b7:
a7:1e:79:1d:4f:75:f3:dc:a0:d9:8b:ad:73:63:d3:
03:0e:81:5b:76:83:d3:e9:18:b3:0d:f2:0d:ab:24:
29:23:ad:ff:0d:73:d7:b6:66:3b:6d:31:07:2a:ec:
b6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E9:70:6F:62:4D:E1:84:2A:19:1D:8C:BA:66:E9:42:C2:8D:C5:88
X509v3 Authority Key Identifier:
keyid:BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a0:77:78:be:af:28:7d:fc:af:c8:2c:6c:31:d2:46:9d:a1:
3e:ea:ed:a0:00:bd:73:fc:7e:84:da:07:c2:9a:27:f8:38:ec:
86:e2:7b:84:f0:2b:ab:5e:a2:48:76:bd:a2:c5:63:0b:a7:97:
1e:1f:86:f2:3c:fd:0a:de:32:4a:a5:c1:85:d2:9e:b7:79:c1:
f9:46:af:fc:70:31:fd:31:15:c9:d0:32:8b:75:11:88:5e:40:
50:7b:cd:1b:10:bc:5d:6c:b3:62:24:4b:9f:7c:69:ac:10:19:
c8:75:f8:4b:39:8c:02:e3:53:18:54:21:06:d3:3e:8e:7b:78:
16:a1:ae:74:b9:69:c5:a5:f3:ca:79:5d:34:d6:cf:25:eb:b5:
98:54:de:60:a7:74:f8:22:5d:66:d2:f3:02:84:77:86:52:f5:
37:f4:8d:29:47:34:da:35:f4:dd:67:47:fe:54:68:37:86:1f:
0d:09:b0:13:09:61:27:d8:66:4a:6b:0d:56:67:83:bb:c9:8e:
f7:1a:48:5b:e3:67:8b:9b:8b:50:a1:63:4e:8b:d2:72:41:6b:
85:bc:c8:ae:18:7d:4a:fe:b1:99:68:0b:86:3b:3f:5a:48:f2:
93:cd:9c:00:4e:dc:cd:59:b5:0e:47:52:30:1c:b1:89:e6:a3:
8b:cd:a6:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0ws198lpx8Gvhm+gq5re+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNDBiM2MyYmU3ODM1ZDdiMzdiNTgyNjEwMmY4NzQ2YTUx
OTlkNDkwHhcNMjUwNDI3MDEwMDQ1WhcNMjUwNDI4MDEwMDQ1WjAzMTEwLwYDVQQD
EygzMmU5NzA2ZjYyNGRlMTg0MmExOTFkOGNiYTY2ZTk0MmMyOGRjNTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln6Dr7KxVCvJkatn9jlj/YNx0xyy
79OdT/PUbqH9sDJ089/CQ0SAtHU/GCR+xmfBK1dMsVveWD7G1Pcx00dy2Ugm/Wpm
nqQyLCy23vlHE/I2QCuRFqGedgCnrspOsa3YHQ6CpFR31R3u5fZHiM1uliwtPCDM
WcoRhNwriNWp02EXpwoeIyVDyYk3A/rrQsdHF3x+SiwQDA8dnNu0f6MI7/w/Ik88
6vkf+aLKnMrtgV88gZvpnTJtpPHStxo/G1pTJX7AbQswQb10wYz/bL4uKbenHnkd
T3Xz3KDZi61zY9MDDoFbdoPT6RizDfINqyQpI63/DXPXtmY7bTEHKuy2eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLpcG9iTeGEKhkdjLpm6ULCjcWIMB8GA1UdIwQY
MBaAFL5As8K+eDXXs3tYJhAvh0alGZ1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmtDendyNTROZGV6ZTFnbUVDLUhScVVablVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jNzE2MzYtZWRkOC00ZDExLTg1ZTgt
YjgzNGZhZjZhY2VkLzEvdmtDendyNTROZGV6ZTFnbUVDLUhScVVablVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9jNzE2MzYtZWRkOC00ZDExLTg1ZTgtYjgzNGZhZjZhY2Vk
LzEvdmtDendyNTROZGV6ZTFnbUVDLUhScVVablVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqB3eL6v
KH38r8gsbDHSRp2hPurtoAC9c/x+hNoHwpon+DjshuJ7hPArq16iSHa9osVjC6eX
Hh+G8jz9Ct4ySqXBhdKet3nB+Uav/HAx/TEVydAyi3URiF5AUHvNGxC8XWyzYiRL
n3xprBAZyHX4SzmMAuNTGFQhBtM+jnt4FqGudLlpxaXzynldNNbPJeu1mFTeYKd0
+CJdZtLzAoR3hlL1N/SNKUc02jX03WdH/lRoN4YfDQmwEwlhJ9hmSmsNVmeDu8mO
9xpIW+Nni5uLUKFjTovSckFrhbzIrhh9Sv6xmWgLhjs/Wkjyk82cAE7czVm1DkdS
MByxieaji82myw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:44:27 2025 by rpki-client