Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
File: VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft (raw, json)
Hash identifier: MNM8GaR6AR/zTJizqzCxBqcTzDqeYF/yI9VGOybc9UA=
Subject key identifier: 17:41:EB:47:CC:6E:32:43:A3:DD:B0:08:C3:4A:19:A4:67:C5:6A:05
Authority key identifier: 55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37
Certificate issuer: /CN=552423ed905000f69ad93eefc666bb9b1addcb37
Certificate serial: 01967C45ACEFDD8753DAFA835C5D0CDFE204
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
Manifest number: 1515
Signing time: Mon 28 Apr 2025 12:01:03 +0000
Manifest this update: Mon 28 Apr 2025 12:01:03 +0000
Manifest next update: Tue 29 Apr 2025 12:01:03 +0000
Files and hashes: 1: 2mQ_q8-dGNGRe3nqpXkavXNspDg.roa (hash: /3YCHcej9bstt2T6B00QHN8/IPSuEaJEhcwHBYjcdtw=)
2: 5SSOCLgHzcxdzYdGNpYRPqovl-A.roa (hash: PUdiBPSqRZwnkbR0oFATrv5zTfcNr+UqMdxjxEau1ew=)
3: VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl (hash: QEmZjkgKAc2pmB9+jWeVBWUqhfzb4tX2Szrru1kmmeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:ac:ef:dd:87:53:da:fa:83:5c:5d:0c:df:e2:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552423ed905000f69ad93eefc666bb9b1addcb37
Validity
Not Before: Apr 28 12:01:03 2025 GMT
Not After : Apr 29 12:01:03 2025 GMT
Subject: CN=1741eb47cc6e3243a3ddb008c34a19a467c56a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a1:01:73:5d:87:c6:f2:ed:de:7f:24:7c:f0:
ac:91:95:d6:dd:a8:9e:f0:38:d8:96:bc:a3:97:37:
48:50:ce:c4:c9:90:b2:1a:d8:43:b5:23:29:cb:59:
50:0c:04:95:2a:c3:13:e6:9f:eb:36:21:ce:e1:17:
38:32:f7:5b:b8:fc:92:a0:4b:ae:34:ab:bd:f6:32:
f8:ad:8d:8d:79:5e:f0:80:28:91:e4:ca:12:45:ac:
74:a1:d3:11:96:7a:8b:86:5d:9f:c7:cb:29:f5:3b:
71:83:33:c4:91:b9:09:71:dd:71:5c:aa:1a:b7:f4:
f8:09:77:de:22:18:05:87:10:d7:e0:74:93:46:55:
40:65:df:a3:57:9d:7c:af:37:c8:20:0c:14:24:0e:
13:4f:0e:c1:50:a7:23:51:1c:39:b1:16:b5:cf:82:
64:1c:24:18:e1:26:9c:d4:33:0d:ae:d3:f9:b1:15:
a8:e1:19:21:a2:6b:77:b1:80:72:2f:35:16:6a:c8:
3a:93:ed:99:ed:07:f2:a7:0f:22:38:8e:17:ac:a5:
22:23:92:65:00:b4:ec:c2:28:6d:69:bf:de:9f:ae:
30:77:6c:9d:9b:84:8e:51:50:e7:7d:ea:d6:90:4e:
f1:27:4d:f1:c1:17:3d:86:c7:70:61:d7:71:bb:ab:
af:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:41:EB:47:CC:6E:32:43:A3:DD:B0:08:C3:4A:19:A4:67:C5:6A:05
X509v3 Authority Key Identifier:
keyid:55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:cc:ff:d6:1f:a3:52:0c:69:e7:24:b8:e1:4a:db:68:df:a1:
5a:f7:9d:86:0b:29:4d:49:b6:28:5f:73:66:7b:1a:f1:43:e7:
a2:ce:7c:bc:0c:51:7d:11:f0:5c:99:b9:93:cc:99:da:fc:70:
dd:4a:6f:a8:de:9b:8b:cb:4b:d9:46:34:71:3b:91:d7:95:8a:
d7:0d:4d:20:90:56:5a:f0:7b:50:92:63:a6:9b:c5:af:61:ce:
f4:41:d2:53:cf:ee:16:e8:f2:00:a7:a8:15:84:dc:50:a2:31:
32:c3:ca:c9:ee:e3:6d:f2:13:8a:8e:32:55:75:c6:f9:5e:b7:
2c:07:ee:5a:f5:37:0c:33:13:f3:80:4e:14:dd:38:45:fe:ad:
8d:80:bc:47:6b:9e:9f:65:d8:4c:c9:6b:69:9a:cb:7a:5e:c5:
17:9c:d8:e6:95:9e:a1:87:60:0c:6e:95:c0:f0:7d:b0:ad:b8:
44:dc:21:4d:9b:ea:b6:c1:a6:73:18:db:dd:0f:58:07:2a:20:
8c:c9:28:ca:1f:5e:25:25:85:94:fc:66:da:49:fc:57:67:59:
c6:51:3e:0a:23:be:99:ec:d4:c7:37:d2:38:24:ea:44:57:13:
cc:ab:1d:d2:a0:3b:a8:2d:00:3e:8a:3d:ff:6b:32:57:7f:5d:
8d:43:b5:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ8Razv3YdT2vqDXF0M3+IEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MjQyM2VkOTA1MDAwZjY5YWQ5M2VlZmM2NjZiYjliMWFk
ZGNiMzcwHhcNMjUwNDI4MTIwMTAzWhcNMjUwNDI5MTIwMTAzWjAzMTEwLwYDVQQD
EygxNzQxZWI0N2NjNmUzMjQzYTNkZGIwMDhjMzRhMTlhNDY3YzU2YTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKEBc12HxvLt3n8kfPCskZXW3aie
8DjYlryjlzdIUM7EyZCyGthDtSMpy1lQDASVKsMT5p/rNiHO4Rc4MvdbuPySoEuu
NKu99jL4rY2NeV7wgCiR5MoSRax0odMRlnqLhl2fx8sp9TtxgzPEkbkJcd1xXKoa
t/T4CXfeIhgFhxDX4HSTRlVAZd+jV518rzfIIAwUJA4TTw7BUKcjURw5sRa1z4Jk
HCQY4Sac1DMNrtP5sRWo4Rkhomt3sYByLzUWasg6k+2Z7Qfypw8iOI4XrKUiI5Jl
ALTswihtab/en64wd2ydm4SOUVDnferWkE7xJ03xwRc9hsdwYddxu6uvsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdB60fMbjJDo92wCMNKGaRnxWoFMB8GA1UdIwQY
MBaAFFUkI+2QUAD2mtk+78Zmu5sa3cs3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlNRajdaQlFBUGFhMlQ3dnhtYTdteHJkeXpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83Y2FhZTUtMDNhZi00N2Y4LWIyOWUt
ZTk1MWE3NDM0NmY5LzEvVlNRajdaQlFBUGFhMlQ3dnhtYTdteHJkeXpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS83Y2FhZTUtMDNhZi00N2Y4LWIyOWUtZTk1MWE3NDM0NmY5
LzEvVlNRajdaQlFBUGFhMlQ3dnhtYTdteHJkeXpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO8z/1h+j
Ugxp5yS44UrbaN+hWvedhgspTUm2KF9zZnsa8UPnos58vAxRfRHwXJm5k8yZ2vxw
3UpvqN6bi8tL2UY0cTuR15WK1w1NIJBWWvB7UJJjppvFr2HO9EHSU8/uFujyAKeo
FYTcUKIxMsPKye7jbfITio4yVXXG+V63LAfuWvU3DDMT84BOFN04Rf6tjYC8R2ue
n2XYTMlraZrLel7FF5zY5pWeoYdgDG6VwPB9sK24RNwhTZvqtsGmcxjb3Q9YByog
jMkoyh9eJSWFlPxm2kn8V2dZxlE+CiO+mezUxzfSOCTqRFcTzKsd0qA7qC0APoo9
/2syV39djUO1Uw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:23:25 2025 by rpki-client