Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
File: vfW3EvLkkywcAwMS0ZSll4g_PV4.mft (raw, json)
Hash identifier: WI2lChhEkfhvLB1Ly+bNrt0Wp7WAdkPbSvrzBBisv+o=
Subject key identifier: 40:91:B6:B7:33:F3:4D:B4:4B:3F:DE:0D:FD:79:E0:97:23:7B:89:E7
Authority key identifier: BD:F5:B7:12:F2:E4:93:2C:1C:03:03:12:D1:94:A5:97:88:3F:3D:5E
Certificate issuer: /CN=bdf5b712f2e4932c1c030312d194a597883f3d5e
Certificate serial: 019679B230403947932AE99DA22B0C24B072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 00:00:42 +0000
Manifest this update: Mon 28 Apr 2025 00:00:42 +0000
Manifest next update: Tue 29 Apr 2025 00:00:42 +0000
Files and hashes: 1: BBvcU1rTQglpBpaZ0QSgMGmSs3Y.roa (hash: CTLLrnC8K2O/r8N1tX8rlBGB23cEp0OueaV8H2QNefc=)
2: vfW3EvLkkywcAwMS0ZSll4g_PV4.crl (hash: ARNH1QZ5dH0XxJMll8mFIVdIw5Qmu8z6WErxtannBuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b2:30:40:39:47:93:2a:e9:9d:a2:2b:0c:24:b0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf5b712f2e4932c1c030312d194a597883f3d5e
Validity
Not Before: Apr 28 00:00:42 2025 GMT
Not After : Apr 29 00:00:42 2025 GMT
Subject: CN=4091b6b733f34db44b3fde0dfd79e097237b89e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:da:ca:62:0b:2f:ac:9e:b6:12:be:5e:be:0a:
3a:af:93:a8:70:9e:ba:cd:20:f2:05:3c:69:93:3e:
73:77:b6:11:d9:03:61:94:e1:61:c6:af:67:ef:44:
7b:16:bb:98:0b:e3:06:30:9e:a4:05:af:9e:bf:c2:
59:19:ea:18:ab:34:ec:7a:bd:5b:3a:d9:bf:49:27:
9c:72:31:65:56:b4:28:04:1b:9f:49:4c:b3:11:dc:
3e:8f:8d:9f:be:d2:b8:27:d6:4d:38:b2:14:08:46:
8f:20:e8:31:9f:21:6a:0b:3f:8f:21:8d:1d:17:f4:
b8:42:41:ca:89:e6:41:dd:aa:c1:ea:fd:76:f6:6c:
71:56:91:1d:6e:d9:18:0c:59:77:96:08:dd:b6:3a:
bb:97:f8:5f:5b:9c:3d:0b:8b:5b:76:83:20:3c:ea:
1e:46:df:51:ed:5f:6d:0e:48:25:42:ec:19:22:78:
5a:46:cc:62:9a:08:6e:00:b1:55:88:1d:f5:af:9f:
66:c3:75:5c:78:ce:28:d4:73:dd:40:38:ef:e2:94:
cb:4f:4e:8f:f8:20:b3:7d:aa:c7:31:15:b6:05:3a:
2e:b3:a5:64:50:75:09:50:2b:d9:12:bd:eb:9c:42:
25:6a:ec:65:32:17:59:1f:a7:cc:47:9f:2e:69:1c:
aa:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:91:B6:B7:33:F3:4D:B4:4B:3F:DE:0D:FD:79:E0:97:23:7B:89:E7
X509v3 Authority Key Identifier:
keyid:BD:F5:B7:12:F2:E4:93:2C:1C:03:03:12:D1:94:A5:97:88:3F:3D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:1b:d4:63:28:9a:48:df:1c:8c:64:7d:63:02:40:23:03:c5:
9d:dd:70:ed:e1:eb:74:be:77:63:d6:fa:44:00:62:5b:de:43:
b2:fd:4f:4e:93:c4:c9:a6:5b:b6:4e:86:27:19:17:9d:a5:5e:
41:d0:e6:66:37:f6:39:4f:35:96:0d:5d:90:ae:92:61:c6:b8:
e4:31:64:be:37:5b:63:3f:1d:0e:4f:3a:e1:1e:61:0e:df:06:
47:be:74:a9:6b:0d:73:db:c8:d1:15:09:7c:ce:21:6b:60:4e:
d5:13:d4:c1:4a:20:77:14:38:f6:1a:38:22:1a:8e:e5:59:7b:
42:05:f6:c0:eb:48:6f:b9:3e:2d:19:28:e7:4a:43:8c:b7:07:
9a:91:b5:df:f3:0d:1f:12:6f:20:28:52:64:4e:0f:ac:f1:dd:
76:e6:90:f4:ef:63:75:ec:06:1e:45:e4:0b:08:ba:df:93:c7:
e1:b7:61:26:32:fc:42:e2:51:48:8b:cf:2d:db:b9:49:81:3d:
13:3a:56:4a:1a:06:91:7f:41:04:07:93:5e:b8:d8:53:fd:38:
29:ef:21:5e:f8:a8:7a:7a:60:89:ad:c9:be:09:9b:78:4d:af:
63:93:52:62:19:d1:1c:54:b6:75:6d:73:c5:5f:1b:87:40:8d:
a8:38:83:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ5sjBAOUeTKumdoisMJLByMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZjViNzEyZjJlNDkzMmMxYzAzMDMxMmQxOTRhNTk3ODgz
ZjNkNWUwHhcNMjUwNDI4MDAwMDQyWhcNMjUwNDI5MDAwMDQyWjAzMTEwLwYDVQQD
Eyg0MDkxYjZiNzMzZjM0ZGI0NGIzZmRlMGRmZDc5ZTA5NzIzN2I4OWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdrKYgsvrJ62Er5evgo6r5OocJ66
zSDyBTxpkz5zd7YR2QNhlOFhxq9n70R7FruYC+MGMJ6kBa+ev8JZGeoYqzTser1b
Otm/SSeccjFlVrQoBBufSUyzEdw+j42fvtK4J9ZNOLIUCEaPIOgxnyFqCz+PIY0d
F/S4QkHKieZB3arB6v129mxxVpEdbtkYDFl3lgjdtjq7l/hfW5w9C4tbdoMgPOoe
Rt9R7V9tDkglQuwZInhaRsximghuALFViB31r59mw3VceM4o1HPdQDjv4pTLT06P
+CCzfarHMRW2BTous6VkUHUJUCvZEr3rnEIlauxlMhdZH6fMR58uaRyqkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECRtrcz8020Sz/eDf154Jcje4nnMB8GA1UdIwQY
MBaAFL31txLy5JMsHAMDEtGUpZeIPz1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmZXM0V2TGtreXdjQXdNUzBaU2xsNGdfUFY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9jZTAwNzctYzcwMS00Y2VkLTlkNTMt
NmM1YzM0NTg2ZjZlLzEvdmZXM0V2TGtreXdjQXdNUzBaU2xsNGdfUFY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9jZTAwNzctYzcwMS00Y2VkLTlkNTMtNmM1YzM0NTg2ZjZl
LzEvdmZXM0V2TGtreXdjQXdNUzBaU2xsNGdfUFY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtxvUYyia
SN8cjGR9YwJAIwPFnd1w7eHrdL53Y9b6RABiW95Dsv1PTpPEyaZbtk6GJxkXnaVe
QdDmZjf2OU81lg1dkK6SYca45DFkvjdbYz8dDk864R5hDt8GR750qWsNc9vI0RUJ
fM4ha2BO1RPUwUogdxQ49ho4IhqO5Vl7QgX2wOtIb7k+LRko50pDjLcHmpG13/MN
HxJvIChSZE4PrPHdduaQ9O9jdewGHkXkCwi635PH4bdhJjL8QuJRSIvPLdu5SYE9
EzpWShoGkX9BBAeTXrjYU/04Ke8hXvioenpgia3JvgmbeE2vY5NSYhnRHFS2dW1z
xV8bh0CNqDiDQA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:09:40 2025 by rpki-client