Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft
File: VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft (raw, json)
Hash identifier: IRNDg12wDf95bX4fVw3vWS3LcPadPF/IP7rqTJiC7iM=
Subject key identifier: BA:CC:10:AD:AD:6B:9B:7A:15:97:D8:34:A8:B5:05:0D:86:A0:E9:02
Authority key identifier: 55:5E:0D:73:0E:1A:56:D5:7F:82:7E:2E:54:46:D0:1D:8D:26:15:8E
Certificate issuer: /CN=555e0d730e1a56d57f827e2e5446d01d8d26158e
Certificate serial: 01967A1FD90DAAA1392B0BE53561D0C434BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft
Manifest number: 0D7B
Signing time: Mon 28 Apr 2025 02:00:29 +0000
Manifest this update: Mon 28 Apr 2025 02:00:29 +0000
Manifest next update: Tue 29 Apr 2025 02:00:29 +0000
Files and hashes: 1: VV4Ncw4aVtV_gn4uVEbQHY0mFY4.crl (hash: NzFOnbfDL9bB1cF/1a3k07dgl0QnbQnqaaunWEyZmwo=)
2: y77QbXKRiye418rSbAFqIemComQ.roa (hash: ssUcd0LDD/xfi2UdCI3WRFi3tuO7iUpDjNv4QY4EqSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:1f:d9:0d:aa:a1:39:2b:0b:e5:35:61:d0:c4:34:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=555e0d730e1a56d57f827e2e5446d01d8d26158e
Validity
Not Before: Apr 28 02:00:29 2025 GMT
Not After : Apr 29 02:00:29 2025 GMT
Subject: CN=bacc10adad6b9b7a1597d834a8b5050d86a0e902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:75:06:c1:42:a1:16:1e:38:1d:d9:31:fb:a2:
35:6e:62:b7:cb:a2:cb:91:b8:df:5b:e4:c2:d8:c1:
91:63:dc:19:8a:f9:e5:30:75:b1:ac:05:6f:74:4e:
55:82:8f:d7:82:f4:45:28:8e:fb:d0:0e:6c:7b:19:
5b:fb:da:a2:25:a1:ff:0b:9f:a3:fc:03:04:bf:96:
9e:f4:d8:77:70:a6:80:85:56:37:9c:11:a0:a1:c8:
77:81:37:d3:40:b4:52:82:3e:8c:c3:4a:c6:58:65:
a0:48:59:73:61:e5:1c:4a:58:0f:fd:a2:7f:de:a4:
0f:24:3e:61:4a:70:07:42:9e:88:3b:1f:b6:03:51:
e1:95:35:f4:9a:51:22:89:cf:00:3e:92:56:9c:90:
50:98:43:b0:4b:d9:fd:ff:7d:b2:d3:b8:cd:6b:3b:
a0:3c:92:a9:66:b2:b1:67:d7:28:05:91:19:b5:0e:
75:28:b8:24:5f:f6:3e:c0:16:be:a9:95:1c:b7:03:
1d:e0:d1:d6:92:4b:4f:6a:63:67:b5:78:b4:b4:ef:
4d:56:33:95:2d:6d:39:56:e1:d8:84:54:8b:0c:90:
50:f6:8e:dc:92:08:e0:9e:6b:52:ad:f1:94:dd:64:
b7:d5:07:74:64:8b:88:9b:2e:ae:46:e2:73:36:00:
27:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CC:10:AD:AD:6B:9B:7A:15:97:D8:34:A8:B5:05:0D:86:A0:E9:02
X509v3 Authority Key Identifier:
keyid:55:5E:0D:73:0E:1A:56:D5:7F:82:7E:2E:54:46:D0:1D:8D:26:15:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:33:cb:c0:d7:b3:84:e5:9a:25:ed:08:74:29:ad:37:30:7b:
ee:72:1f:bc:01:37:d5:17:a6:54:de:63:36:d8:45:e0:96:e3:
ae:da:23:72:87:58:e8:ea:af:cd:53:d4:f5:d8:8a:8f:b0:a2:
e4:aa:14:2b:39:6f:ea:43:27:66:14:ba:92:92:9b:7c:c9:65:
a8:62:2c:52:3a:a3:af:94:ff:f7:2e:12:c8:40:80:d5:b6:85:
0a:85:61:3b:4c:06:86:a3:8d:08:9e:86:d2:22:4a:2e:f5:97:
e6:50:dc:7e:d6:35:cb:63:0a:86:9b:bb:7a:2c:f3:a3:73:04:
71:7a:e0:27:01:3f:ab:16:86:e2:3d:ef:ad:ea:e9:e8:a5:a2:
c2:c8:97:99:a9:92:ff:40:1d:d5:cb:65:21:4f:89:0e:1a:e1:
ca:15:8b:db:21:2b:0d:10:31:d0:a9:da:62:ec:39:a5:c8:4a:
5b:09:24:64:72:12:eb:c2:0b:f1:7b:8f:82:88:18:8c:35:94:
83:23:78:23:06:23:90:b4:72:06:01:7e:53:bb:7c:cf:12:ad:
17:49:3c:47:56:b0:60:84:c3:08:39:99:52:d3:4b:69:cf:09:
99:48:28:6e:15:79:30:38:fc:68:fd:47:61:f2:7e:a8:f6:6b:
00:3a:8e:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6H9kNqqE5KwvlNWHQxDS7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NWUwZDczMGUxYTU2ZDU3ZjgyN2UyZTU0NDZkMDFkOGQy
NjE1OGUwHhcNMjUwNDI4MDIwMDI5WhcNMjUwNDI5MDIwMDI5WjAzMTEwLwYDVQQD
EyhiYWNjMTBhZGFkNmI5YjdhMTU5N2Q4MzRhOGI1MDUwZDg2YTBlOTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnUGwUKhFh44Hdkx+6I1bmK3y6LL
kbjfW+TC2MGRY9wZivnlMHWxrAVvdE5Vgo/XgvRFKI770A5sexlb+9qiJaH/C5+j
/AMEv5ae9Nh3cKaAhVY3nBGgoch3gTfTQLRSgj6Mw0rGWGWgSFlzYeUcSlgP/aJ/
3qQPJD5hSnAHQp6IOx+2A1HhlTX0mlEiic8APpJWnJBQmEOwS9n9/32y07jNazug
PJKpZrKxZ9coBZEZtQ51KLgkX/Y+wBa+qZUctwMd4NHWkktPamNntXi0tO9NVjOV
LW05VuHYhFSLDJBQ9o7ckgjgnmtSrfGU3WS31Qd0ZIuImy6uRuJzNgAnHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrMEK2ta5t6FZfYNKi1BQ2GoOkCMB8GA1UdIwQY
MBaAFFVeDXMOGlbVf4J+LlRG0B2NJhWOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlY0TmN3NGFWdFZfZ240dVZFYlFIWTBtRlk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi85NmNlOTktN2ViZS00ZThhLTk0YmQt
MGExY2E1NDkwYWZkLzEvVlY0TmN3NGFWdFZfZ240dVZFYlFIWTBtRlk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi85NmNlOTktN2ViZS00ZThhLTk0YmQtMGExY2E1NDkwYWZk
LzEvVlY0TmN3NGFWdFZfZ240dVZFYlFIWTBtRlk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWDPLwNez
hOWaJe0IdCmtNzB77nIfvAE31RemVN5jNthF4JbjrtojcodY6OqvzVPU9diKj7Ci
5KoUKzlv6kMnZhS6kpKbfMllqGIsUjqjr5T/9y4SyECA1baFCoVhO0wGhqONCJ6G
0iJKLvWX5lDcftY1y2MKhpu7eizzo3MEcXrgJwE/qxaG4j3vrerp6KWiwsiXmamS
/0Ad1ctlIU+JDhrhyhWL2yErDRAx0KnaYuw5pchKWwkkZHIS68IL8XuPgogYjDWU
gyN4IwYjkLRyBgF+U7t8zxKtF0k8R1awYITDCDmZUtNLac8JmUgobhV5MDj8aP1H
YfJ+qPZrADqOLg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:36:36 2025 by rpki-client