Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
File: vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft (raw, json)
Hash identifier: 9U8AvRqFEJ7xVGWRxot8tV55vcEY09rzTAZiuwqVeK0=
Subject key identifier: BF:E2:54:19:BA:A6:7F:B4:DA:6D:EB:96:82:D5:AC:86:82:67:0E:9B
Authority key identifier: BE:44:8C:67:A3:AB:0E:A3:75:FB:A8:48:C9:FE:8C:8E:B1:E8:4D:6F
Certificate issuer: /CN=be448c67a3ab0ea375fba848c9fe8c8eb1e84d6f
Certificate serial: 019681A2E32E04A6B1C947F0BC01EFDDF2DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
Manifest number: 0B06
Signing time: Tue 29 Apr 2025 13:00:57 +0000
Manifest this update: Tue 29 Apr 2025 13:00:57 +0000
Manifest next update: Wed 30 Apr 2025 13:00:57 +0000
Files and hashes: 1: 9UcomILdtAe6cNct4YOh4DKdhek.roa (hash: 5S+dEogRJfe8M30SkPrXb8z3+L8Fg1f4Nn7krQuU6Oo=)
2: vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl (hash: DkHmmWGbefBubBV5c1BUmFVwBy8XjQZASrkCRbGUvPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a2:e3:2e:04:a6:b1:c9:47:f0:bc:01:ef:dd:f2:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be448c67a3ab0ea375fba848c9fe8c8eb1e84d6f
Validity
Not Before: Apr 29 13:00:57 2025 GMT
Not After : Apr 30 13:00:57 2025 GMT
Subject: CN=bfe25419baa67fb4da6deb9682d5ac8682670e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2d:93:69:48:d0:82:37:79:ff:a8:40:b4:1d:
cb:43:5e:c1:9b:b9:fd:e0:c5:0b:25:08:4f:bb:dd:
3d:b6:49:2d:97:21:04:58:c5:a5:fc:3b:ac:bb:02:
87:06:69:81:29:6c:fa:76:e0:09:78:e0:ba:11:d9:
1d:7a:48:3a:6d:76:af:7a:c4:ac:56:72:9c:da:a2:
fb:88:2e:3d:6a:be:43:e0:fb:2d:5c:8a:38:de:de:
ef:18:88:b0:7c:4e:03:39:47:ad:0d:ba:a3:38:3d:
51:20:43:1f:86:b3:d2:17:85:21:b5:fc:0b:20:9b:
58:34:69:85:f4:b8:46:59:2d:f7:d1:72:bc:36:3d:
92:f4:7f:b6:27:c3:27:53:4d:6d:58:81:0d:d1:79:
54:41:cc:6a:d8:61:f8:65:d6:e9:60:23:34:93:67:
b3:39:94:20:85:eb:4c:06:01:a6:56:cf:b2:3f:bb:
a3:f6:4b:d3:ca:c0:83:1b:40:fa:c9:55:8b:50:72:
84:c0:0f:28:d3:f3:67:7c:78:2e:fa:e1:18:e9:ca:
e1:39:09:90:26:a2:dd:cf:fd:d4:6d:b6:cf:99:ec:
34:88:4a:43:34:99:e2:61:7f:b5:6c:42:cb:40:0c:
5f:bc:ff:9f:93:8e:44:b7:e6:35:1b:98:3d:c2:d0:
17:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E2:54:19:BA:A6:7F:B4:DA:6D:EB:96:82:D5:AC:86:82:67:0E:9B
X509v3 Authority Key Identifier:
keyid:BE:44:8C:67:A3:AB:0E:A3:75:FB:A8:48:C9:FE:8C:8E:B1:E8:4D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:00:d8:2e:fd:a2:10:f5:37:4c:a9:51:fb:0c:71:c6:3b:7c:
af:dd:c4:11:ee:20:c2:f6:a4:38:66:18:22:79:4d:ca:7f:a7:
3c:45:f2:2e:a3:0b:5a:76:5d:54:e6:38:a5:68:b1:07:79:f4:
1d:2a:b0:f5:41:7c:a4:63:7e:32:ac:43:cd:7c:c5:d3:d2:77:
cc:05:eb:ef:d3:ef:02:6e:26:1c:5c:46:19:08:71:88:42:8e:
e2:3e:04:5e:4c:43:f5:a5:82:3e:f5:55:02:89:11:3b:ac:95:
d2:7b:8a:8f:52:76:6b:1e:05:6b:c3:f0:74:05:63:aa:28:89:
71:5f:07:c2:57:5e:84:19:55:b2:ab:15:9f:58:38:0f:bd:66:
ba:d2:8c:32:e6:82:ec:49:d5:e3:e9:8e:6e:56:ec:42:27:f4:
f8:ad:1d:46:43:82:60:da:e6:05:af:6d:7c:8a:57:18:c4:fd:
2d:c6:7a:84:fb:4b:24:ea:8e:85:86:08:0f:4f:59:8c:d7:10:
77:ba:a1:8f:d7:94:50:88:b0:c1:30:24:8d:16:c9:56:ae:9b:
89:61:cc:7e:67:a7:a2:3d:8e:35:e6:e8:ec:d4:26:18:9d:0e:
a6:88:fd:66:e3:3f:a5:44:3e:b3:45:ba:13:23:2f:d2:db:f2:
66:a8:08:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaBouMuBKaxyUfwvAHv3fLbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNDQ4YzY3YTNhYjBlYTM3NWZiYTg0OGM5ZmU4YzhlYjFl
ODRkNmYwHhcNMjUwNDI5MTMwMDU3WhcNMjUwNDMwMTMwMDU3WjAzMTEwLwYDVQQD
EyhiZmUyNTQxOWJhYTY3ZmI0ZGE2ZGViOTY4MmQ1YWM4NjgyNjcwZTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi2TaUjQgjd5/6hAtB3LQ17Bm7n9
4MULJQhPu909tkktlyEEWMWl/DusuwKHBmmBKWz6duAJeOC6Edkdekg6bXavesSs
VnKc2qL7iC49ar5D4PstXIo43t7vGIiwfE4DOUetDbqjOD1RIEMfhrPSF4UhtfwL
IJtYNGmF9LhGWS330XK8Nj2S9H+2J8MnU01tWIEN0XlUQcxq2GH4ZdbpYCM0k2ez
OZQghetMBgGmVs+yP7uj9kvTysCDG0D6yVWLUHKEwA8o0/NnfHgu+uEY6crhOQmQ
JqLdz/3UbbbPmew0iEpDNJniYX+1bELLQAxfvP+fk45Et+Y1G5g9wtAXgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/iVBm6pn+02m3rloLVrIaCZw6bMB8GA1UdIwQY
MBaAFL5EjGejqw6jdfuoSMn+jI6x6E1vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmtTTVo2T3JEcU4xLTZoSXlmNk1qckhvVFc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lMjA5MzgtNDMzYy00YTI2LTg3NDUt
OWQ3NDdkOWEyNTBhLzEvdmtTTVo2T3JEcU4xLTZoSXlmNk1qckhvVFc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9lMjA5MzgtNDMzYy00YTI2LTg3NDUtOWQ3NDdkOWEyNTBh
LzEvdmtTTVo2T3JEcU4xLTZoSXlmNk1qckhvVFc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmgDYLv2i
EPU3TKlR+wxxxjt8r93EEe4gwvakOGYYInlNyn+nPEXyLqMLWnZdVOY4pWixB3n0
HSqw9UF8pGN+MqxDzXzF09J3zAXr79PvAm4mHFxGGQhxiEKO4j4EXkxD9aWCPvVV
AokRO6yV0nuKj1J2ax4Fa8PwdAVjqiiJcV8HwldehBlVsqsVn1g4D71mutKMMuaC
7EnV4+mOblbsQif0+K0dRkOCYNrmBa9tfIpXGMT9LcZ6hPtLJOqOhYYID09ZjNcQ
d7qhj9eUUIiwwTAkjRbJVq6biWHMfmenoj2ONebo7NQmGJ0Opoj9ZuM/pUQ+s0W6
EyMv0tvyZqgIaA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 19:57:09 2025 by rpki-client