Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft
File: VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft (raw, json)
Hash identifier: v9nXT/v9AVV9O4VZ8wIsyuN2bD5Spb6UFYmyxlmAhGM=
Subject key identifier: 9B:C9:11:1F:00:D7:8D:B1:EA:5A:42:82:C1:92:C5:7B:FE:1C:0B:F7
Authority key identifier: 57:06:01:06:B4:16:79:2B:2A:2E:9A:7E:B4:02:A2:38:57:01:68:BD
Certificate issuer: /CN=57060106b416792b2a2e9a7eb402a238570168bd
Certificate serial: 019691BA4C503383159A616595FA61AFD36A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwYBBrQWeSsqLpp-tAKiOFcBaL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft
Manifest number: 1282
Signing time: Fri 02 May 2025 16:00:27 +0000
Manifest this update: Fri 02 May 2025 16:00:27 +0000
Manifest next update: Sat 03 May 2025 16:00:27 +0000
Files and hashes: 1: VwYBBrQWeSsqLpp-tAKiOFcBaL0.crl (hash: 7LtaYj+aJusj2eZBuoDAD45vGxSLMobM4MktOeCAibA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwYBBrQWeSsqLpp-tAKiOFcBaL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:ba:4c:50:33:83:15:9a:61:65:95:fa:61:af:d3:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57060106b416792b2a2e9a7eb402a238570168bd
Validity
Not Before: May 2 16:00:27 2025 GMT
Not After : May 3 16:00:27 2025 GMT
Subject: CN=9bc9111f00d78db1ea5a4282c192c57bfe1c0bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fd:3a:25:10:52:78:a4:8f:0d:0e:95:a3:00:
df:47:db:38:3f:1d:49:50:aa:fd:da:10:2c:cb:7a:
d6:bc:88:37:fb:b4:c1:d0:1a:f9:b5:83:75:84:4a:
7a:98:42:51:ec:a9:c4:cb:1a:5a:a0:2e:ef:7b:9c:
53:fd:57:b8:c6:d2:a4:a8:0a:84:67:e3:4c:8a:42:
ea:8d:d1:d8:c5:57:e9:a3:91:c6:ab:d7:cc:50:83:
d1:95:b9:93:36:ab:b0:65:9c:72:76:f4:e9:b2:f2:
c0:e3:98:5d:61:4a:5c:0b:c4:c5:69:fb:35:e2:19:
f8:29:1f:1a:61:2e:27:61:86:82:d0:15:8f:ad:55:
11:c2:59:2f:77:41:77:00:06:84:a1:d7:7b:ca:71:
55:e1:8f:6f:ea:e3:06:a3:42:3e:82:97:1c:0b:d0:
81:b2:cb:fd:07:fa:94:8b:03:38:99:95:1c:f2:46:
87:f4:6e:15:fc:0f:1a:96:db:2e:d1:90:8b:7e:e4:
a6:d6:80:50:7e:b4:a8:96:e6:69:14:2b:cd:73:10:
cd:43:cb:6e:71:89:55:64:2c:6b:cd:49:dd:85:c6:
66:db:2a:15:74:84:92:80:d7:06:ac:96:56:83:cd:
e2:2c:13:b7:e6:f2:cb:37:5c:60:82:ab:7f:94:f6:
db:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C9:11:1F:00:D7:8D:B1:EA:5A:42:82:C1:92:C5:7B:FE:1C:0B:F7
X509v3 Authority Key Identifier:
keyid:57:06:01:06:B4:16:79:2B:2A:2E:9A:7E:B4:02:A2:38:57:01:68:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwYBBrQWeSsqLpp-tAKiOFcBaL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:d7:de:9d:22:ba:2b:b2:42:13:31:ec:94:a5:84:1c:2f:c7:
5e:48:2a:6c:8b:4f:e6:5f:65:e5:db:af:32:64:cf:38:a1:59:
a1:85:93:2c:17:96:3e:74:47:e1:7a:85:d2:49:e0:b5:f2:bc:
2f:ae:a6:e4:07:af:3a:96:0c:ce:ae:f1:9b:99:32:8d:c3:d3:
9a:5b:4f:25:d6:46:8d:f8:17:3b:73:ba:df:3a:8a:f7:0b:3d:
b8:18:c1:21:b2:70:d4:45:38:95:ce:9c:9e:bf:47:82:8a:de:
59:2c:57:36:25:a2:90:94:20:cf:b8:e1:64:c3:13:fc:de:14:
cf:f2:13:33:5c:14:cd:ef:7a:aa:6e:27:09:f0:45:78:c5:d5:
cc:74:ee:83:20:ce:6d:59:0a:55:22:22:30:c3:52:27:87:db:
56:e3:59:13:c6:db:ff:6a:94:64:66:83:e2:75:93:03:a6:10:
9d:5a:bc:6a:dd:3c:ba:bc:ef:78:d1:4f:76:f5:1a:e9:52:cd:
f2:e3:d6:4e:82:6a:e5:9a:40:b8:b6:56:7b:21:92:08:52:34:
6f:56:c5:d8:27:49:c9:4d:43:e6:6d:fc:bb:20:8e:08:4b:71:
e0:8c:0e:65:57:57:82:1f:61:18:f5:ce:0b:2d:da:f8:d7:1a:
43:04:00:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaRukxQM4MVmmFllfphr9NqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MDYwMTA2YjQxNjc5MmIyYTJlOWE3ZWI0MDJhMjM4NTcw
MTY4YmQwHhcNMjUwNTAyMTYwMDI3WhcNMjUwNTAzMTYwMDI3WjAzMTEwLwYDVQQD
Eyg5YmM5MTExZjAwZDc4ZGIxZWE1YTQyODJjMTkyYzU3YmZlMWMwYmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2v06JRBSeKSPDQ6VowDfR9s4Px1J
UKr92hAsy3rWvIg3+7TB0Br5tYN1hEp6mEJR7KnEyxpaoC7ve5xT/Ve4xtKkqAqE
Z+NMikLqjdHYxVfpo5HGq9fMUIPRlbmTNquwZZxydvTpsvLA45hdYUpcC8TFafs1
4hn4KR8aYS4nYYaC0BWPrVURwlkvd0F3AAaEodd7ynFV4Y9v6uMGo0I+gpccC9CB
ssv9B/qUiwM4mZUc8kaH9G4V/A8altsu0ZCLfuSm1oBQfrSoluZpFCvNcxDNQ8tu
cYlVZCxrzUndhcZm2yoVdISSgNcGrJZWg83iLBO35vLLN1xggqt/lPbbEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvJER8A142x6lpCgsGSxXv+HAv3MB8GA1UdIwQY
MBaAFFcGAQa0FnkrKi6afrQCojhXAWi9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVndZQkJyUVdlU3NxTHBwLXRBS2lPRmNCYUwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS83OTkyNzgtNmYzNS00YzNhLTk3ZDAt
OWJmY2ZkZDc5NjliLzEvVndZQkJyUVdlU3NxTHBwLXRBS2lPRmNCYUwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS83OTkyNzgtNmYzNS00YzNhLTk3ZDAtOWJmY2ZkZDc5Njli
LzEvVndZQkJyUVdlU3NxTHBwLXRBS2lPRmNCYUwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9fenSK6
K7JCEzHslKWEHC/HXkgqbItP5l9l5duvMmTPOKFZoYWTLBeWPnRH4XqF0kngtfK8
L66m5AevOpYMzq7xm5kyjcPTmltPJdZGjfgXO3O63zqK9ws9uBjBIbJw1EU4lc6c
nr9HgoreWSxXNiWikJQgz7jhZMMT/N4Uz/ITM1wUze96qm4nCfBFeMXVzHTugyDO
bVkKVSIiMMNSJ4fbVuNZE8bb/2qUZGaD4nWTA6YQnVq8at08urzveNFPdvUa6VLN
8uPWToJq5ZpAuLZWeyGSCFI0b1bF2CdJyU1D5m38uyCOCEtx4IwOZVdXgh9hGPXO
Cy3a+NcaQwQAbQ==
-----END CERTIFICATE-----
Generated at Fri May 2 19:22:53 2025 by rpki-client