Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
File: VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft (raw, json)
Hash identifier: bly6BPHbggdrd6pFhwYVZvJE7gfIXSqRVY0xXOLN0eI=
Subject key identifier: 2A:9C:81:B0:99:E2:D0:D1:49:B3:F0:B0:71:48:5E:7B:6A:45:B6:04
Authority key identifier: 54:79:1D:DE:2C:9B:DE:A3:66:CE:7E:C6:C5:A8:00:C5:DA:63:34:54
Certificate issuer: /CN=54791dde2c9bdea366ce7ec6c5a800c5da633454
Certificate serial: 0196771EDA078E6C5247621B8A68C1775205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
Manifest number: 12CB
Signing time: Sun 27 Apr 2025 12:00:32 +0000
Manifest this update: Sun 27 Apr 2025 12:00:32 +0000
Manifest next update: Mon 28 Apr 2025 12:00:32 +0000
Files and hashes: 1: 45perw_w1j6f13fS2dhRsqX1J5M.roa (hash: DYBg8sY6Y3Ov/VU9uOEBk40lHTsP43PpQZFd0Uj3ouA=)
2: VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl (hash: OyCgZkBdE3EbFhWFVJiJ/nFUnt6Y3nDLCHBctgEPK8c=)
3: lVcXLet5xDC9hx49fSzHNMkhKuQ.roa (hash: yDDXEEZlcdjv6pPGItKtHPkxBZnpxpZ1NCia9fyNgYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:da:07:8e:6c:52:47:62:1b:8a:68:c1:77:52:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54791dde2c9bdea366ce7ec6c5a800c5da633454
Validity
Not Before: Apr 27 12:00:32 2025 GMT
Not After : Apr 28 12:00:32 2025 GMT
Subject: CN=2a9c81b099e2d0d149b3f0b071485e7b6a45b604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9e:b8:56:e9:4b:d9:12:ad:65:4b:2f:86:59:
5d:d8:9e:d0:ba:39:1c:88:ac:dc:dd:66:f6:8e:ab:
1f:6f:3b:f6:6f:6a:43:14:7d:09:33:38:d3:b8:6b:
4c:d9:47:c3:60:28:7d:42:63:19:57:38:f5:b7:0a:
93:ad:44:29:4e:f2:59:8b:ce:f2:14:94:a3:ee:6d:
b8:f8:bc:26:72:1c:2e:2f:7e:25:8b:27:c7:fb:b8:
41:f0:f4:d2:63:47:41:d7:f2:f2:bb:4c:cd:a2:a5:
b6:6c:d1:97:7e:64:6a:c8:0c:43:55:a8:7f:f4:b8:
ea:72:4b:45:4d:29:49:f0:ae:78:8d:29:8b:ab:8e:
86:dd:17:14:d7:30:c5:97:00:4e:42:8b:ae:99:4b:
e5:61:ac:41:f7:97:97:04:4e:74:0a:fe:94:70:f6:
7b:3d:1a:69:42:27:d4:64:68:ca:2d:c0:31:d5:8d:
1c:1c:9b:a1:53:0b:d5:58:dd:dd:c3:ef:cb:e7:0b:
cf:cd:44:cc:31:71:92:51:bd:58:78:06:fa:3d:b1:
2d:46:83:cf:8e:fd:aa:5a:27:f3:d5:a9:dd:08:a1:
e8:d0:9f:6f:85:ce:40:66:fc:09:d0:f3:48:43:42:
ab:cb:0a:0e:41:5f:c7:06:cb:52:a3:6c:fb:b0:17:
76:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9C:81:B0:99:E2:D0:D1:49:B3:F0:B0:71:48:5E:7B:6A:45:B6:04
X509v3 Authority Key Identifier:
keyid:54:79:1D:DE:2C:9B:DE:A3:66:CE:7E:C6:C5:A8:00:C5:DA:63:34:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d8:ff:1d:45:10:c4:46:de:f5:06:17:9a:a1:85:da:19:76:
a8:6c:a6:7e:70:68:29:07:30:4b:a0:41:7f:4b:6c:50:29:e8:
10:0d:e5:79:18:59:52:87:6e:63:cb:5a:dd:74:2f:b7:08:e4:
7b:54:ef:ed:e0:ae:11:6d:40:33:b9:7a:0f:d4:ad:ac:a1:09:
d5:a2:ec:26:e9:5e:d5:c7:3d:2b:c0:bf:2f:aa:11:86:92:b4:
34:66:43:5d:ca:df:26:9a:99:e3:b3:7f:af:9e:92:7e:f2:04:
35:ff:4b:98:30:db:25:dd:83:21:d9:b8:68:5d:3c:82:47:56:
42:ab:23:5c:f3:3a:1f:28:31:33:65:58:75:bb:b2:3f:fb:6a:
15:6b:46:1f:8b:43:d9:f6:ed:01:af:97:08:42:1b:82:55:a9:
fa:44:44:39:9b:54:f9:83:72:18:c3:8f:9e:4e:c6:5e:33:ad:
c9:39:24:08:2a:98:9d:32:c0:5f:0f:a8:03:f8:a9:c9:64:ad:
bc:c5:db:dd:18:95:b1:b9:38:b4:4c:6c:d6:43:2b:36:68:2a:
6e:57:1c:d5:6e:be:89:ca:23:27:73:fe:24:14:71:c0:30:03:
6a:c9:0e:b5:31:bf:86:ac:9e:ba:dd:e2:32:e7:eb:f7:62:32:
ff:f0:c6:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3HtoHjmxSR2IbimjBd1IFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NzkxZGRlMmM5YmRlYTM2NmNlN2VjNmM1YTgwMGM1ZGE2
MzM0NTQwHhcNMjUwNDI3MTIwMDMyWhcNMjUwNDI4MTIwMDMyWjAzMTEwLwYDVQQD
EygyYTljODFiMDk5ZTJkMGQxNDliM2YwYjA3MTQ4NWU3YjZhNDViNjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJ64VulL2RKtZUsvhlld2J7Qujkc
iKzc3Wb2jqsfbzv2b2pDFH0JMzjTuGtM2UfDYCh9QmMZVzj1twqTrUQpTvJZi87y
FJSj7m24+LwmchwuL34liyfH+7hB8PTSY0dB1/Lyu0zNoqW2bNGXfmRqyAxDVah/
9LjqcktFTSlJ8K54jSmLq46G3RcU1zDFlwBOQouumUvlYaxB95eXBE50Cv6UcPZ7
PRppQifUZGjKLcAx1Y0cHJuhUwvVWN3dw+/L5wvPzUTMMXGSUb1YeAb6PbEtRoPP
jv2qWifz1andCKHo0J9vhc5AZvwJ0PNIQ0KrywoOQV/HBstSo2z7sBd2uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqcgbCZ4tDRSbPwsHFIXntqRbYEMB8GA1UdIwQY
MBaAFFR5Hd4sm96jZs5+xsWoAMXaYzRUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkhrZDNpeWIzcU5tem43R3hhZ0F4ZHBqTkZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8xN2U1NjctOWU0NC00NDRhLWFjNjQt
MThiMzRiZWE5YjA2LzEvVkhrZDNpeWIzcU5tem43R3hhZ0F4ZHBqTkZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8xN2U1NjctOWU0NC00NDRhLWFjNjQtMThiMzRiZWE5YjA2
LzEvVkhrZDNpeWIzcU5tem43R3hhZ0F4ZHBqTkZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAtj/HUUQ
xEbe9QYXmqGF2hl2qGymfnBoKQcwS6BBf0tsUCnoEA3leRhZUoduY8ta3XQvtwjk
e1Tv7eCuEW1AM7l6D9StrKEJ1aLsJule1cc9K8C/L6oRhpK0NGZDXcrfJpqZ47N/
r56SfvIENf9LmDDbJd2DIdm4aF08gkdWQqsjXPM6HygxM2VYdbuyP/tqFWtGH4tD
2fbtAa+XCEIbglWp+kREOZtU+YNyGMOPnk7GXjOtyTkkCCqYnTLAXw+oA/ipyWSt
vMXb3RiVsbk4tExs1kMrNmgqblcc1W6+icojJ3P+JBRxwDADaskOtTG/hqyeut3i
Mufr92Iy//DG5g==
-----END CERTIFICATE-----
Generated at Sun Apr 27 15:54:15 2025 by rpki-client