Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
File: VqSYe_jGtM3WV7vC0KXhPptibLk.mft (raw, json)
Hash identifier: erFRcQ9yiCi3a6Ggh4NzGF8pcHdw96GnGfmk05hwMnk=
Subject key identifier: A0:F2:A9:0F:CF:4D:52:1A:8E:9A:46:7C:74:53:A5:DF:3E:75:59:4E
Authority key identifier: 56:A4:98:7B:F8:C6:B4:CD:D6:57:BB:C2:D0:A5:E1:3E:9B:62:6C:B9
Certificate issuer: /CN=56a4987bf8c6b4cdd657bbc2d0a5e13e9b626cb9
Certificate serial: 0196789F837EA1F6750D0127C9DE2309CE61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
Manifest number: 1224
Signing time: Sun 27 Apr 2025 19:00:41 +0000
Manifest this update: Sun 27 Apr 2025 19:00:41 +0000
Manifest next update: Mon 28 Apr 2025 19:00:41 +0000
Files and hashes: 1: VqSYe_jGtM3WV7vC0KXhPptibLk.crl (hash: E4PZRN1hP0YH/YrdZPKN3Jez9v5er4iWvwCdPes7btk=)
2: jgA5-5m0UyuVWgnFyZNbLCOK9IQ.roa (hash: t5mhCTyUTy/bCRhrh8vt6CByWx1LXqZrxP4nWUFmAaA=)
3: nE_QwfUitMo59_GeTHUAGFmWaiU.roa (hash: t2Bgep4Co0ormJSkeJVCqufRE/GNmyY6yFg8KbHeDM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:83:7e:a1:f6:75:0d:01:27:c9:de:23:09:ce:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56a4987bf8c6b4cdd657bbc2d0a5e13e9b626cb9
Validity
Not Before: Apr 27 19:00:41 2025 GMT
Not After : Apr 28 19:00:41 2025 GMT
Subject: CN=a0f2a90fcf4d521a8e9a467c7453a5df3e75594e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:00:de:18:d1:67:4b:f1:fa:c8:0a:c0:a1:dd:
f7:67:90:b6:95:4f:de:f9:cf:b2:59:cd:da:c7:45:
15:0d:d1:e7:56:e3:6a:65:88:5b:76:2d:b4:ad:6d:
3c:cd:ee:be:35:49:ac:8e:8c:98:5d:ac:14:ce:00:
74:24:fc:15:4f:e8:d3:ab:34:19:09:9b:6e:61:2a:
ae:76:b3:a7:67:30:42:63:06:39:30:ac:be:c9:e6:
4e:d6:53:62:52:d9:c1:a0:b4:d0:42:84:01:a0:c5:
ec:07:3e:75:73:e9:7a:c6:e5:47:8f:f7:d2:aa:57:
12:cc:30:36:a2:95:07:5a:79:bc:da:95:64:72:20:
5e:ea:e7:1c:eb:87:9e:19:74:b3:60:b2:73:93:bb:
de:29:e4:2b:c4:8f:fa:8f:90:12:78:20:1e:7d:3b:
0e:4c:a4:fb:c6:2b:ed:19:95:3c:fa:0c:7f:5c:c1:
4d:ee:d6:b4:8e:d9:dd:48:51:44:5c:0e:91:d7:f3:
70:ac:ff:68:e9:b9:44:71:f5:0b:69:f4:f9:90:c1:
2a:43:7f:97:e6:b2:34:c0:c2:7e:4c:62:e1:52:15:
ca:c1:2d:04:d4:9d:5e:3e:d6:33:7c:d3:f6:20:41:
9e:ab:a3:75:70:52:ad:08:04:d3:c0:83:5b:91:8c:
e4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F2:A9:0F:CF:4D:52:1A:8E:9A:46:7C:74:53:A5:DF:3E:75:59:4E
X509v3 Authority Key Identifier:
keyid:56:A4:98:7B:F8:C6:B4:CD:D6:57:BB:C2:D0:A5:E1:3E:9B:62:6C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:95:d5:85:6c:27:7b:14:60:82:4f:6b:42:8f:71:96:20:27:
59:f7:4d:cc:99:07:d6:fb:96:40:b9:a5:e8:38:26:57:3a:97:
c4:43:82:e1:e1:07:42:e6:db:3c:d5:a7:ea:36:4a:72:5f:e0:
f6:31:a5:f3:cd:16:42:44:06:cd:7b:6d:c5:cd:35:ce:0d:ed:
25:e2:2b:9e:92:ae:09:b1:0a:8f:19:33:de:84:5f:6a:0f:e2:
02:ff:2e:4c:14:12:5f:3b:87:23:27:a3:44:68:6a:2f:db:c3:
f7:fd:80:60:ed:99:67:a7:1c:99:13:82:65:54:02:b4:5f:82:
46:29:c9:ba:64:af:0c:bd:86:4b:2a:a2:32:d4:11:55:1c:39:
f5:3f:63:fb:8f:62:45:33:84:f7:3b:21:00:f0:e8:e8:af:c5:
f6:eb:0a:75:5c:ea:90:68:2d:cc:46:f0:f9:3d:0a:b2:ef:56:
ee:9f:46:11:21:7b:cd:f1:38:77:5d:e0:a2:29:20:95:03:ac:
c2:57:6f:b0:ed:f2:75:f6:76:57:28:92:b6:3b:a7:50:96:33:
a8:25:44:01:7e:9a:df:56:b3:b2:5f:0a:8c:0a:f1:99:b3:95:
47:92:df:9a:ed:6a:4d:6d:0e:c3:eb:50:7c:91:7c:10:94:de:
3d:a5:a5:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4n4N+ofZ1DQEnyd4jCc5hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2YTQ5ODdiZjhjNmI0Y2RkNjU3YmJjMmQwYTVlMTNlOWI2
MjZjYjkwHhcNMjUwNDI3MTkwMDQxWhcNMjUwNDI4MTkwMDQxWjAzMTEwLwYDVQQD
EyhhMGYyYTkwZmNmNGQ1MjFhOGU5YTQ2N2M3NDUzYTVkZjNlNzU1OTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgDeGNFnS/H6yArAod33Z5C2lU/e
+c+yWc3ax0UVDdHnVuNqZYhbdi20rW08ze6+NUmsjoyYXawUzgB0JPwVT+jTqzQZ
CZtuYSqudrOnZzBCYwY5MKy+yeZO1lNiUtnBoLTQQoQBoMXsBz51c+l6xuVHj/fS
qlcSzDA2opUHWnm82pVkciBe6ucc64eeGXSzYLJzk7veKeQrxI/6j5ASeCAefTsO
TKT7xivtGZU8+gx/XMFN7ta0jtndSFFEXA6R1/NwrP9o6blEcfULafT5kMEqQ3+X
5rI0wMJ+TGLhUhXKwS0E1J1ePtYzfNP2IEGeq6N1cFKtCATTwINbkYzk2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDyqQ/PTVIajppGfHRTpd8+dVlOMB8GA1UdIwQY
MBaAFFakmHv4xrTN1le7wtCl4T6bYmy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnFTWWVfakd0TTNXVjd2QzBLWGhQcHRpYkxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84ODA5ZGQtNjY3YS00MDQ3LTgxMDQt
ZGU1ODY5OGI2NDcwLzEvVnFTWWVfakd0TTNXVjd2QzBLWGhQcHRpYkxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi84ODA5ZGQtNjY3YS00MDQ3LTgxMDQtZGU1ODY5OGI2NDcw
LzEvVnFTWWVfakd0TTNXVjd2QzBLWGhQcHRpYkxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEpXVhWwn
exRggk9rQo9xliAnWfdNzJkH1vuWQLml6DgmVzqXxEOC4eEHQubbPNWn6jZKcl/g
9jGl880WQkQGzXttxc01zg3tJeIrnpKuCbEKjxkz3oRfag/iAv8uTBQSXzuHIyej
RGhqL9vD9/2AYO2ZZ6ccmROCZVQCtF+CRinJumSvDL2GSyqiMtQRVRw59T9j+49i
RTOE9zshAPDo6K/F9usKdVzqkGgtzEbw+T0Ksu9W7p9GESF7zfE4d13goikglQOs
wldvsO3ydfZ2VyiStjunUJYzqCVEAX6a31azsl8KjArxmbOVR5Lfmu1qTW0Ow+tQ
fJF8EJTePaWlcw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:51:30 2025 by rpki-client