Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
File: vP0tpUR9AHYW693Cpw_qxed8Sos.mft (raw, json)
Hash identifier: O1DvYOHxoaAE3Iu0CG1OeTh4gTv9YAamOqJt+nONQ1w=
Subject key identifier: 46:26:39:EC:71:FB:1E:B5:07:00:FF:40:65:B6:B8:1C:DA:D3:19:09
Authority key identifier: BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
Certificate issuer: /CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Certificate serial: 0196789F9AFACDFA2AC38B70D0A7F6AE5EAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
Manifest number: 0D97
Signing time: Sun 27 Apr 2025 19:00:47 +0000
Manifest this update: Sun 27 Apr 2025 19:00:47 +0000
Manifest next update: Mon 28 Apr 2025 19:00:47 +0000
Files and hashes: 1: 8qm9bEbxwfNKbG7VK6lFr1L7h68.roa (hash: 75uVkQx0ihlVy8p/hI6UBtxjUc4hu50c+jP7jjKtmh4=)
2: CwdCUQsFV7CyApTMyt6j3A_OJVA.roa (hash: SME0C7xkpjziLPa0GzpInguFdkdM75z/nCo/zXQqOyk=)
3: vP0tpUR9AHYW693Cpw_qxed8Sos.crl (hash: S0FQIOQFOV6OGJJCiMFHKdBDf9U33el/f8H6Ws4o5Vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:9a:fa:cd:fa:2a:c3:8b:70:d0:a7:f6:ae:5e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Validity
Not Before: Apr 27 19:00:47 2025 GMT
Not After : Apr 28 19:00:47 2025 GMT
Subject: CN=462639ec71fb1eb50700ff4065b6b81cdad31909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6f:70:9a:dc:4d:de:aa:ef:49:20:a2:fe:47:
b9:96:9a:cf:45:3a:88:94:7b:59:a3:61:7e:6b:26:
a9:0f:b3:9e:35:59:e5:d9:06:f4:67:f3:80:7e:59:
33:be:79:f7:32:18:b0:99:5b:b6:20:88:0f:f3:55:
0e:64:78:8b:da:a7:b7:02:cd:e7:c6:7e:a2:ca:c2:
3c:d2:9e:15:05:aa:3f:77:ea:d9:2f:f4:99:b3:35:
52:32:a8:fa:c5:1a:02:6c:40:4a:94:49:4e:46:2b:
74:88:8c:4c:87:c2:c1:c4:3c:d0:e6:5d:ff:bb:a4:
8f:c5:ae:ba:b9:df:eb:d7:38:7e:1d:39:9b:79:9b:
38:e1:69:84:9d:a3:06:bd:f9:61:8e:00:03:67:6d:
78:14:ed:04:a7:2b:19:30:c3:9f:d2:42:51:ba:78:
10:95:ac:c2:dc:4e:ea:5f:27:70:27:29:79:c8:ce:
c2:75:21:74:ad:18:b8:28:49:fe:95:dd:d5:a8:18:
2e:d5:7c:3a:a9:50:61:59:b4:c4:2a:9a:3b:26:74:
49:99:28:85:34:aa:85:7e:ec:bf:06:bf:52:6c:e8:
95:25:43:ed:26:6b:94:4c:5c:79:85:c2:5d:da:a7:
64:2f:e0:47:e5:69:32:60:8d:d0:a6:71:4f:c2:cb:
54:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:26:39:EC:71:FB:1E:B5:07:00:FF:40:65:B6:B8:1C:DA:D3:19:09
X509v3 Authority Key Identifier:
keyid:BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e4:eb:65:92:80:f4:6d:5c:16:10:9c:87:b9:5a:a2:c5:b4:
e9:5c:2d:72:c0:a7:65:71:1d:d4:a6:7a:09:cc:1c:03:60:4e:
bc:8b:b6:51:f0:f3:24:5f:3e:97:40:63:a7:25:87:7c:5c:73:
b2:16:8e:c9:da:e1:54:1e:d3:20:fc:02:6b:6f:de:2d:9b:31:
48:1e:7e:b7:76:1b:67:fa:4f:a5:3e:fb:20:24:09:af:94:c0:
45:6c:ef:a9:b7:f8:01:bb:c9:42:a5:29:98:ed:4a:63:95:0a:
36:a0:06:8e:bc:13:a4:85:59:bb:1d:d4:a4:14:ba:18:fe:16:
d9:90:b3:0e:e3:23:9a:6b:a8:ab:ce:02:42:29:79:de:95:23:
f9:3d:cf:aa:e2:40:25:3b:46:c4:5a:07:20:66:f6:c3:42:eb:
d3:9e:23:b9:ac:62:4a:27:c6:41:e2:fb:3d:3c:06:5a:b4:21:
cd:ff:32:ee:97:28:74:66:76:e9:f9:df:d8:b7:28:a3:76:fe:
d0:8d:90:52:12:17:52:b7:f7:44:1c:33:54:87:fc:8d:d1:b6:
8b:38:8b:65:5f:3f:3f:d6:35:35:0b:53:7f:c8:81:c1:10:dc:
26:2b:62:b1:66:3e:ed:c4:a8:a1:4f:52:74:ce:0e:96:4b:ec:
0e:fc:0a:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4n5r6zfoqw4tw0Kf2rl6tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZmQyZGE1NDQ3ZDAwNzYxNmViZGRjMmE3MGZlYWM1ZTc3
YzRhOGIwHhcNMjUwNDI3MTkwMDQ3WhcNMjUwNDI4MTkwMDQ3WjAzMTEwLwYDVQQD
Eyg0NjI2MzllYzcxZmIxZWI1MDcwMGZmNDA2NWI2YjgxY2RhZDMxOTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW9wmtxN3qrvSSCi/ke5lprPRTqI
lHtZo2F+ayapD7OeNVnl2Qb0Z/OAflkzvnn3MhiwmVu2IIgP81UOZHiL2qe3As3n
xn6iysI80p4VBao/d+rZL/SZszVSMqj6xRoCbEBKlElORit0iIxMh8LBxDzQ5l3/
u6SPxa66ud/r1zh+HTmbeZs44WmEnaMGvflhjgADZ214FO0EpysZMMOf0kJRungQ
lazC3E7qXydwJyl5yM7CdSF0rRi4KEn+ld3VqBgu1Xw6qVBhWbTEKpo7JnRJmSiF
NKqFfuy/Br9SbOiVJUPtJmuUTFx5hcJd2qdkL+BH5WkyYI3QpnFPwstUnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYmOexx+x61BwD/QGW2uBza0xkJMB8GA1UdIwQY
MBaAFLz9LaVEfQB2FuvdwqcP6sXnfEqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlAwdHBVUjlBSFlXNjkzQ3B3X3F4ZWQ4U29zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85MTlmZmYtMjUyZi00NzIwLWFkZTQt
YmJmZTIxOTZjNmFmLzEvdlAwdHBVUjlBSFlXNjkzQ3B3X3F4ZWQ4U29zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS85MTlmZmYtMjUyZi00NzIwLWFkZTQtYmJmZTIxOTZjNmFm
LzEvdlAwdHBVUjlBSFlXNjkzQ3B3X3F4ZWQ4U29zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAreTrZZKA
9G1cFhCch7laosW06VwtcsCnZXEd1KZ6CcwcA2BOvIu2UfDzJF8+l0BjpyWHfFxz
shaOydrhVB7TIPwCa2/eLZsxSB5+t3YbZ/pPpT77ICQJr5TARWzvqbf4AbvJQqUp
mO1KY5UKNqAGjrwTpIVZux3UpBS6GP4W2ZCzDuMjmmuoq84CQil53pUj+T3PquJA
JTtGxFoHIGb2w0Lr054juaxiSifGQeL7PTwGWrQhzf8y7pcodGZ26fnf2Lcoo3b+
0I2QUhIXUrf3RBwzVIf8jdG2iziLZV8/P9Y1NQtTf8iBwRDcJitisWY+7cSooU9S
dM4OlkvsDvwK9g==
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:01:33 2025 by rpki-client