Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
File: vptUWMI322WEjLKsvsbblCP8s6Y.mft (raw, json)
Hash identifier: Ln503juareLuz5rSIQYyVsMt9pis+y9Bm1k+CI9NVJg=
Subject key identifier: 24:DA:9E:A8:E6:F1:4C:85:B7:77:74:2F:1E:CC:B0:01:46:49:CA:D4
Authority key identifier: BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6
Certificate issuer: /CN=be9b5458c237db65848cb2acbec6db9423fcb3a6
Certificate serial: 019681D9347AC1105D732CD65AAAC160F34B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
Manifest number: 10AF
Signing time: Tue 29 Apr 2025 14:00:17 +0000
Manifest this update: Tue 29 Apr 2025 14:00:17 +0000
Manifest next update: Wed 30 Apr 2025 14:00:17 +0000
Files and hashes: 1: SPOdZUKsCzIXgJOCF_UL7n1RilU.roa (hash: AvcsY0IcsdeApRna15WxWc9F7nJGA8l55JTs96Qf9tg=)
2: vptUWMI322WEjLKsvsbblCP8s6Y.crl (hash: P5WYMULDe8lxyLnCNMMhV2J/Bt6ZMMdwqjvl5YOzLdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 14:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:d9:34:7a:c1:10:5d:73:2c:d6:5a:aa:c1:60:f3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9b5458c237db65848cb2acbec6db9423fcb3a6
Validity
Not Before: Apr 29 14:00:17 2025 GMT
Not After : Apr 30 14:00:17 2025 GMT
Subject: CN=24da9ea8e6f14c85b777742f1eccb0014649cad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3c:91:73:9b:dc:f1:0d:26:2a:72:7a:30:f2:
ec:9e:97:ef:d2:db:b0:2c:a0:92:88:07:79:b6:65:
ed:84:54:6c:67:7b:4f:37:4f:d9:6a:f4:f3:99:df:
56:67:88:59:9f:55:79:de:27:87:81:40:bc:de:2c:
41:0e:a6:15:2a:c9:43:f4:51:2a:c8:eb:49:65:6f:
b5:2f:d1:a8:0b:87:f4:d6:5f:85:dc:5d:f9:ad:12:
fe:05:93:23:dc:fe:d0:02:6a:c3:58:ce:a1:b4:f8:
49:2f:c4:5c:e0:2a:e1:1c:2e:45:73:4e:0c:e7:36:
5c:07:84:24:2b:08:0a:58:8b:e6:9c:c9:5f:1a:d9:
95:13:a5:13:1a:44:38:29:c3:93:d5:b3:36:ea:d4:
9f:54:7f:2b:dd:d8:0b:ef:e3:d3:17:60:13:8c:ce:
12:e9:ce:4f:ee:5d:b2:d4:62:04:1b:d3:5b:7a:3b:
ac:9e:22:68:98:82:cd:ef:31:c6:04:cf:8c:9a:3a:
44:f6:a9:df:1d:06:15:22:e2:ff:43:a9:40:ad:59:
91:98:85:7a:10:70:55:5f:b1:65:9d:91:3e:c9:a2:
69:63:fe:07:cb:eb:ff:98:b1:6a:47:fd:1c:6f:29:
31:1e:f7:43:04:fa:21:cc:d5:56:fe:d6:cb:45:df:
02:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DA:9E:A8:E6:F1:4C:85:B7:77:74:2F:1E:CC:B0:01:46:49:CA:D4
X509v3 Authority Key Identifier:
keyid:BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b0:af:6e:26:11:1e:e8:99:9f:8e:da:0f:60:79:67:6d:5a:
bc:76:13:9e:78:19:dd:39:73:54:38:b8:b2:d1:d3:ac:d4:19:
47:60:3e:6f:c3:9b:b1:6d:26:30:81:a9:c1:0f:26:e7:cb:f3:
c6:60:77:66:86:25:9d:36:f9:a2:11:56:62:c7:b3:27:e1:b8:
e1:db:f1:37:10:4c:a8:0d:ce:93:3a:6a:ce:f3:2c:be:c3:48:
d9:31:af:3d:c6:f1:d0:ae:21:d9:8f:b1:84:fa:3d:e0:71:9e:
af:03:8e:b6:13:d4:17:10:90:6c:ad:a5:f2:28:38:96:5d:5f:
2c:52:03:25:77:60:5b:b2:19:29:a2:50:99:2f:3f:a4:34:88:
e3:75:db:99:ba:78:da:3c:e4:b6:a0:1d:ef:f1:82:2b:51:3f:
9e:e8:9d:db:b3:f5:d0:56:c5:3e:e9:6c:43:5d:05:20:4d:08:
09:2e:db:2a:74:b6:97:20:fc:02:4e:91:44:1f:8a:fd:29:93:
1d:48:d6:8e:ac:ad:8f:b8:b4:98:b1:17:15:20:df:c3:ab:06:
96:e7:fc:2b:07:0d:cb:46:f8:62:2c:bc:c8:60:ba:16:31:5c:
a7:d4:d8:59:f9:1c:a4:2b:46:f0:37:5e:51:09:8e:f4:0f:96:
18:25:a2:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaB2TR6wRBdcyzWWqrBYPNLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlOWI1NDU4YzIzN2RiNjU4NDhjYjJhY2JlYzZkYjk0MjNm
Y2IzYTYwHhcNMjUwNDI5MTQwMDE3WhcNMjUwNDMwMTQwMDE3WjAzMTEwLwYDVQQD
EygyNGRhOWVhOGU2ZjE0Yzg1Yjc3Nzc0MmYxZWNjYjAwMTQ2NDljYWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jyRc5vc8Q0mKnJ6MPLsnpfv0tuw
LKCSiAd5tmXthFRsZ3tPN0/ZavTzmd9WZ4hZn1V53ieHgUC83ixBDqYVKslD9FEq
yOtJZW+1L9GoC4f01l+F3F35rRL+BZMj3P7QAmrDWM6htPhJL8Rc4CrhHC5Fc04M
5zZcB4QkKwgKWIvmnMlfGtmVE6UTGkQ4KcOT1bM26tSfVH8r3dgL7+PTF2ATjM4S
6c5P7l2y1GIEG9NbejusniJomILN7zHGBM+MmjpE9qnfHQYVIuL/Q6lArVmRmIV6
EHBVX7FlnZE+yaJpY/4Hy+v/mLFqR/0cbykxHvdDBPohzNVW/tbLRd8CoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTanqjm8UyFt3d0Lx7MsAFGScrUMB8GA1UdIwQY
MBaAFL6bVFjCN9tlhIyyrL7G25Qj/LOmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnB0VVdNSTMyMldFakxLc3ZzYmJsQ1A4czZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jZDFkYjMtMjg3Ny00ZjMyLTgzYzUt
MzcwYjgyZTlmOTBiLzEvdnB0VVdNSTMyMldFakxLc3ZzYmJsQ1A4czZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9jZDFkYjMtMjg3Ny00ZjMyLTgzYzUtMzcwYjgyZTlmOTBi
LzEvdnB0VVdNSTMyMldFakxLc3ZzYmJsQ1A4czZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbCvbiYR
HuiZn47aD2B5Z21avHYTnngZ3TlzVDi4stHTrNQZR2A+b8ObsW0mMIGpwQ8m58vz
xmB3ZoYlnTb5ohFWYsezJ+G44dvxNxBMqA3OkzpqzvMsvsNI2TGvPcbx0K4h2Y+x
hPo94HGerwOOthPUFxCQbK2l8ig4ll1fLFIDJXdgW7IZKaJQmS8/pDSI43Xbmbp4
2jzktqAd7/GCK1E/nuid27P10FbFPulsQ10FIE0ICS7bKnS2lyD8Ak6RRB+K/SmT
HUjWjqytj7i0mLEXFSDfw6sGluf8KwcNy0b4Yiy8yGC6FjFcp9TYWfkcpCtG8Dde
UQmO9A+WGCWi7w==
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:08:58 2025 by rpki-client