Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
File: VLSHMeKfJ9aHV21oY629oIBwm_4.mft (raw, json)
Hash identifier: PDX736v/TkFdo0rOJ1SuQu9znupKkk5feH1YRwlgiGE=
Subject key identifier: 67:31:3D:09:0F:16:13:C8:0C:98:83:40:FE:64:66:C2:81:F5:D7:F0
Authority key identifier: 54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
Certificate issuer: /CN=54b48731e29f27d687576d6863adbda080709bfe
Certificate serial: 01968AA6203671E3537408E521C3A14E36C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
Manifest number: 0998
Signing time: Thu 01 May 2025 07:01:05 +0000
Manifest this update: Thu 01 May 2025 07:01:05 +0000
Manifest next update: Fri 02 May 2025 07:01:05 +0000
Files and hashes: 1: 09p6kbowRqEqmGsIE-X77ssBdvE.roa (hash: aNbCunzaHj8fcPNQtO0tqEMAuZSFNh6caJLvvgjcZUM=)
2: BP3U6kFnmdq-Ooz7okVHVreJwX4.roa (hash: 8ZRH6f2/mVLLc0PYuU8YNWUcegB85lCqTXWXtLUxfLM=)
3: VLSHMeKfJ9aHV21oY629oIBwm_4.crl (hash: U44aWHiYmJvORirmrhCus0dZdwpwoqOgsIyO/tkvMoQ=)
4: pH__rL1RVjxMSUxHKGG7zRUGK1o.roa (hash: jLPbh/4LV4yxXAw9vyooJrfcnHymRshQqR67+HD469o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:a6:20:36:71:e3:53:74:08:e5:21:c3:a1:4e:36:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b48731e29f27d687576d6863adbda080709bfe
Validity
Not Before: May 1 07:01:05 2025 GMT
Not After : May 2 07:01:05 2025 GMT
Subject: CN=67313d090f1613c80c988340fe6466c281f5d7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:aa:a8:ad:14:fb:2c:0d:09:51:7f:46:72:13:
1b:f7:f9:2d:09:22:d4:76:bc:21:6f:01:24:93:1e:
09:8c:5f:17:7b:26:11:d8:f9:8f:d8:2e:24:1d:78:
49:5e:f7:f6:6b:4c:75:35:68:d1:bd:9d:b7:a6:65:
d0:c8:09:a4:5c:15:90:4f:3a:f2:77:1a:52:2a:77:
c0:1f:ab:70:51:a6:66:3c:4d:b4:83:a0:b2:94:77:
ec:f0:76:f0:87:fc:25:c2:af:9d:30:76:ba:b7:9f:
8a:a3:be:7e:6b:66:f2:00:ef:68:e6:fb:d5:0e:0b:
b0:c0:b5:4b:f9:18:06:11:f8:3b:24:d2:25:4c:7d:
4c:61:43:67:57:7b:b0:3a:7e:cb:a2:9c:c8:0f:87:
40:19:3f:28:8f:26:4c:43:42:eb:82:57:39:ce:a4:
3e:df:db:2e:c2:03:34:14:31:8a:8d:ec:73:aa:b4:
ef:f7:3f:7b:2a:7b:fd:65:c1:1f:33:20:6a:df:76:
73:e8:74:e2:53:aa:7d:17:22:d5:b0:e5:fd:d8:cc:
31:7f:5f:5d:17:f5:04:1c:cc:66:d6:f0:9f:6b:08:
88:9c:dd:d3:73:6d:90:8f:6f:c8:7c:e2:ed:de:19:
39:97:2d:70:61:aa:6a:c0:68:b9:25:08:51:14:29:
4d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:31:3D:09:0F:16:13:C8:0C:98:83:40:FE:64:66:C2:81:F5:D7:F0
X509v3 Authority Key Identifier:
keyid:54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:55:6f:f8:6e:f1:6b:ea:0a:6d:83:b8:fe:a0:b9:04:20:a8:
52:6a:2a:c7:5e:43:fd:b7:a8:97:3b:3f:58:a6:e5:57:ef:1f:
00:be:b6:ec:d0:73:3d:fc:2d:a0:24:f0:cf:8e:77:4b:44:89:
8a:5c:34:ad:97:e6:a2:41:09:f7:37:ec:b6:8c:db:7e:46:eb:
9c:12:ac:e9:1d:94:18:d0:7e:34:6f:23:aa:52:03:74:4b:97:
ef:b6:a2:47:80:b8:47:27:97:20:11:2b:e7:17:ee:5d:4b:af:
ac:5c:62:bc:58:7c:56:fc:9a:64:79:55:6c:30:c2:e0:a0:a5:
8c:f5:39:27:0a:1d:d8:ed:54:5d:97:5c:f2:60:e0:ae:e9:79:
4a:8b:7c:a2:bc:b8:5a:8f:2d:43:4e:f0:e9:b3:22:7f:d2:a4:
75:9f:f3:5a:92:e9:d3:51:5e:e7:9c:0d:00:59:f4:9c:df:00:
35:e6:b4:18:fb:9c:e5:9d:40:11:f5:02:a6:5a:c7:64:21:5f:
64:72:47:06:93:2e:b2:c4:42:b7:4f:a4:e7:4e:98:31:b7:a3:
33:28:08:70:04:a9:48:0e:46:99:2c:77:52:f1:6f:7a:a2:7d:
5c:0f:bb:c9:c4:69:e2:97:e3:1c:be:5d:53:e4:2b:d5:65:2a:
d2:d2:a3:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaKpiA2ceNTdAjlIcOhTjbBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YjQ4NzMxZTI5ZjI3ZDY4NzU3NmQ2ODYzYWRiZGEwODA3
MDliZmUwHhcNMjUwNTAxMDcwMTA1WhcNMjUwNTAyMDcwMTA1WjAzMTEwLwYDVQQD
Eyg2NzMxM2QwOTBmMTYxM2M4MGM5ODgzNDBmZTY0NjZjMjgxZjVkN2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaqorRT7LA0JUX9GchMb9/ktCSLU
drwhbwEkkx4JjF8XeyYR2PmP2C4kHXhJXvf2a0x1NWjRvZ23pmXQyAmkXBWQTzry
dxpSKnfAH6twUaZmPE20g6CylHfs8Hbwh/wlwq+dMHa6t5+Ko75+a2byAO9o5vvV
DguwwLVL+RgGEfg7JNIlTH1MYUNnV3uwOn7LopzID4dAGT8ojyZMQ0Lrglc5zqQ+
39suwgM0FDGKjexzqrTv9z97Knv9ZcEfMyBq33Zz6HTiU6p9FyLVsOX92Mwxf19d
F/UEHMxm1vCfawiInN3Tc22Qj2/IfOLt3hk5ly1wYapqwGi5JQhRFClNQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGcxPQkPFhPIDJiDQP5kZsKB9dfwMB8GA1UdIwQY
MBaAFFS0hzHinyfWh1dtaGOtvaCAcJv+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkxTSE1lS2ZKOWFIVjIxb1k2MjlvSUJ3bV80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wZTdiMjktNjI5Ny00MmNhLThmMzMt
NWRmY2NkNjFhOWIxLzEvVkxTSE1lS2ZKOWFIVjIxb1k2MjlvSUJ3bV80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wZTdiMjktNjI5Ny00MmNhLThmMzMtNWRmY2NkNjFhOWIx
LzEvVkxTSE1lS2ZKOWFIVjIxb1k2MjlvSUJ3bV80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhlVv+G7x
a+oKbYO4/qC5BCCoUmoqx15D/beolzs/WKblV+8fAL627NBzPfwtoCTwz453S0SJ
ilw0rZfmokEJ9zfstozbfkbrnBKs6R2UGNB+NG8jqlIDdEuX77aiR4C4RyeXIBEr
5xfuXUuvrFxivFh8VvyaZHlVbDDC4KCljPU5Jwod2O1UXZdc8mDgrul5Sot8ory4
Wo8tQ07w6bMif9KkdZ/zWpLp01Fe55wNAFn0nN8ANea0GPuc5Z1AEfUCplrHZCFf
ZHJHBpMussRCt0+k506YMbejMygIcASpSA5GmSx3UvFveqJ9XA+7ycRp4pfjHL5d
U+Qr1WUq0tKjdw==
-----END CERTIFICATE-----
Generated at Thu May 1 11:10:21 2025 by rpki-client