Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
File: vstVJuhB53DLVWTzBMxmluqx5Ls.mft (raw, json)
Hash identifier: +ADXFnQRvarotLkWKbCPmaV7i/nXC3aOXJPwYS3pmgc=
Subject key identifier: F3:47:54:12:00:AA:3D:07:36:37:32:E0:8A:D8:F8:CB:AF:90:30:A4
Authority key identifier: BE:CB:55:26:E8:41:E7:70:CB:55:64:F3:04:CC:66:96:EA:B1:E4:BB
Certificate issuer: /CN=becb5526e841e770cb5564f304cc6696eab1e4bb
Certificate serial: 01968E4B6E1E6EA040FE73602EAFE37305CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vstVJuhB53DLVWTzBMxmluqx5Ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
Manifest number: 0457
Signing time: Fri 02 May 2025 00:00:30 +0000
Manifest this update: Fri 02 May 2025 00:00:30 +0000
Manifest next update: Sat 03 May 2025 00:00:30 +0000
Files and hashes: 1: HD7ZQ20BrfhIQig7jEtYMWBXqig.roa (hash: 0U8nx89LMB5Sbx+cfc6esGNSApn9xmAb50VsRUl9HHk=)
2: vstVJuhB53DLVWTzBMxmluqx5Ls.crl (hash: IEyNPmFygMRKfHfo8rquVhDYTQMJkaZW8aaIOzLyXmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/vstVJuhB53DLVWTzBMxmluqx5Ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:4b:6e:1e:6e:a0:40:fe:73:60:2e:af:e3:73:05:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=becb5526e841e770cb5564f304cc6696eab1e4bb
Validity
Not Before: May 2 00:00:30 2025 GMT
Not After : May 3 00:00:30 2025 GMT
Subject: CN=f347541200aa3d07363732e08ad8f8cbaf9030a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ba:92:1d:11:2a:44:61:62:03:b8:31:49:37:
29:a4:b9:b8:1e:ae:0f:71:92:dd:31:19:ae:65:1f:
c3:f3:9b:b6:b9:25:5e:76:e1:8f:88:9e:03:86:49:
c6:20:8b:37:fe:75:1a:7f:04:34:00:2a:17:cb:1f:
6a:0b:a5:d4:11:e6:d9:da:99:9f:b4:42:de:e7:6e:
f1:c6:c8:0a:85:6c:54:6f:05:fb:7e:e8:79:c3:1f:
e0:d0:fe:5b:3b:07:49:d7:7e:51:1d:0b:2b:d7:2a:
09:9f:20:ba:38:50:a3:a0:4c:3c:45:59:00:5e:cf:
7f:78:02:9e:a2:6b:8a:18:18:f6:75:9b:a9:41:64:
f0:c3:9e:a0:01:30:06:92:bd:53:11:6f:68:d6:bf:
9f:cb:f0:37:65:b0:dd:c3:f5:cd:e1:8d:a2:58:84:
c6:58:01:19:2c:94:ff:5e:d2:ce:26:10:12:0c:9e:
58:cc:32:bb:44:cd:e3:73:bf:8f:e9:15:2f:8b:2e:
05:ea:e1:23:96:9a:49:7e:1d:21:d2:66:49:83:0e:
32:63:7d:f5:74:4d:f9:65:66:20:8a:76:e4:c4:b9:
a6:55:8a:5c:f3:66:6a:6b:85:4b:f7:2d:8f:77:40:
40:e8:60:d8:47:b4:19:af:d6:55:3e:2b:c4:9b:56:
a8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:47:54:12:00:AA:3D:07:36:37:32:E0:8A:D8:F8:CB:AF:90:30:A4
X509v3 Authority Key Identifier:
keyid:BE:CB:55:26:E8:41:E7:70:CB:55:64:F3:04:CC:66:96:EA:B1:E4:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vstVJuhB53DLVWTzBMxmluqx5Ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:6b:89:b7:8a:4d:cf:8b:20:36:27:e4:f6:64:37:f1:9b:e0:
87:13:ed:46:6d:d6:b2:f3:56:63:33:1b:ff:37:f7:de:1f:dc:
a2:e0:ff:f2:c3:17:9c:24:4f:2c:75:9b:bc:73:3c:74:aa:81:
2b:78:e2:17:4d:15:1a:5a:b2:1e:f5:7d:9a:c3:67:db:40:69:
cc:20:29:99:4e:12:1b:f9:33:c6:7d:cb:d6:a4:72:7c:06:b8:
13:a9:3d:2f:24:cf:bb:27:0e:63:a8:2a:7d:e1:c3:49:01:ad:
27:83:6f:20:c9:1d:df:77:81:d4:29:21:b8:b1:f6:20:7a:5a:
f4:d6:12:43:f2:f3:31:78:f7:97:76:66:46:64:03:77:7e:05:
62:59:c4:6c:24:f5:b4:fe:7c:ea:ef:6a:8c:0e:e8:6f:0e:ac:
96:c8:b6:c4:fb:b2:c8:f0:c7:d5:18:ce:b0:fe:c4:47:84:8d:
eb:c2:8a:aa:f8:25:87:d5:50:67:1d:14:0c:73:3b:46:72:68:
02:0b:b4:c6:af:e5:9f:9a:91:1f:f7:a4:90:5a:92:75:59:61:
f1:b4:45:0a:7a:4c:cb:ec:2b:36:48:13:a2:d1:0c:61:93:33:
66:04:86:2f:16:a1:b9:5d:8c:ff:1c:31:a8:c6:74:3a:c4:89:
c1:5e:58:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaOS24ebqBA/nNgLq/jcwXMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlY2I1NTI2ZTg0MWU3NzBjYjU1NjRmMzA0Y2M2Njk2ZWFi
MWU0YmIwHhcNMjUwNTAyMDAwMDMwWhcNMjUwNTAzMDAwMDMwWjAzMTEwLwYDVQQD
EyhmMzQ3NTQxMjAwYWEzZDA3MzYzNzMyZTA4YWQ4ZjhjYmFmOTAzMGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrqSHREqRGFiA7gxSTcppLm4Hq4P
cZLdMRmuZR/D85u2uSVeduGPiJ4DhknGIIs3/nUafwQ0ACoXyx9qC6XUEebZ2pmf
tELe527xxsgKhWxUbwX7fuh5wx/g0P5bOwdJ135RHQsr1yoJnyC6OFCjoEw8RVkA
Xs9/eAKeomuKGBj2dZupQWTww56gATAGkr1TEW9o1r+fy/A3ZbDdw/XN4Y2iWITG
WAEZLJT/XtLOJhASDJ5YzDK7RM3jc7+P6RUviy4F6uEjlppJfh0h0mZJgw4yY331
dE35ZWYginbkxLmmVYpc82Zqa4VL9y2Pd0BA6GDYR7QZr9ZVPivEm1ao0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPNHVBIAqj0HNjcy4IrY+MuvkDCkMB8GA1UdIwQY
MBaAFL7LVSboQedwy1Vk8wTMZpbqseS7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnN0Vkp1aEI1M0RMVldUekJNeG1sdXF4NUxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi85ZDY5OGQtZDI3Ny00OTdmLTgzM2Qt
YTIxMjdjMmFhMWIzLzEvdnN0Vkp1aEI1M0RMVldUekJNeG1sdXF4NUxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi85ZDY5OGQtZDI3Ny00OTdmLTgzM2QtYTIxMjdjMmFhMWIz
LzEvdnN0Vkp1aEI1M0RMVldUekJNeG1sdXF4NUxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaWuJt4pN
z4sgNifk9mQ38ZvghxPtRm3WsvNWYzMb/zf33h/couD/8sMXnCRPLHWbvHM8dKqB
K3jiF00VGlqyHvV9msNn20BpzCApmU4SG/kzxn3L1qRyfAa4E6k9LyTPuycOY6gq
feHDSQGtJ4NvIMkd33eB1CkhuLH2IHpa9NYSQ/LzMXj3l3ZmRmQDd34FYlnEbCT1
tP586u9qjA7obw6slsi2xPuyyPDH1RjOsP7ER4SN68KKqvglh9VQZx0UDHM7RnJo
Agu0xq/ln5qRH/ekkFqSdVlh8bRFCnpMy+wrNkgTotEMYZMzZgSGLxahuV2M/xwx
qMZ0OsSJwV5Y1Q==
-----END CERTIFICATE-----
Generated at Fri May 2 06:26:06 2025 by rpki-client