Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft
File: VVDgbuAsWjLlTciYU7SqN4-GBPc.mft (raw, json)
Hash identifier: II6sChaJcfHRvLUdCDMRna/1Y9Hjl+pIzG/U9hNrWLI=
Subject key identifier: B6:8F:F3:FE:C2:34:AD:F2:26:DD:36:0D:47:30:AF:A2:A6:51:E3:3B
Authority key identifier: 55:50:E0:6E:E0:2C:5A:32:E5:4D:C8:98:53:B4:AA:37:8F:86:04:F7
Certificate issuer: /CN=5550e06ee02c5a32e54dc89853b4aa378f8604f7
Certificate serial: 01967C0E1291B71882248A1DD38EF37F91F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft
Manifest number: 0A58
Signing time: Mon 28 Apr 2025 11:00:19 +0000
Manifest this update: Mon 28 Apr 2025 11:00:19 +0000
Manifest next update: Tue 29 Apr 2025 11:00:19 +0000
Files and hashes: 1: 5SQUdjWeY9PdQ3b1GR4L3yx_VJ4.roa (hash: VQXaoCtg+0JbslSnqFe7W7gX+zMPO93yVdM1v7U3tJ8=)
2: MPnVMUDELwRT1_LHbrcJgd4NmwE.roa (hash: +uiYqzvO4MwwXvvIKhlCHsQt5+OwmIQB9Ijy/fYg7A8=)
3: VVDgbuAsWjLlTciYU7SqN4-GBPc.crl (hash: uIKCy9ta6yzql+n9Gc2/kEIJkko0gBa2gnDe0jTkNe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 11:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:0e:12:91:b7:18:82:24:8a:1d:d3:8e:f3:7f:91:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5550e06ee02c5a32e54dc89853b4aa378f8604f7
Validity
Not Before: Apr 28 11:00:19 2025 GMT
Not After : Apr 29 11:00:19 2025 GMT
Subject: CN=b68ff3fec234adf226dd360d4730afa2a651e33b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a7:c9:ed:c1:51:a2:88:69:c5:24:2a:78:a4:
63:e3:ff:f1:04:50:d2:ef:21:64:65:cc:d4:bc:cf:
92:2f:38:84:97:98:64:fe:e5:aa:42:af:ed:67:96:
93:02:cf:d5:fd:64:3c:a4:6f:33:8e:20:93:2a:38:
3e:08:82:5c:4d:3b:36:e5:ec:50:f5:2f:f8:bf:35:
32:2d:ef:21:8b:9f:2e:95:d0:be:ab:f7:b0:23:f1:
73:c1:fd:f0:9a:ac:27:f5:20:ca:36:23:f9:e0:3d:
a5:0c:b2:0f:10:48:8c:d3:9e:0d:1c:4e:ff:5c:42:
bf:de:cb:bb:5c:5a:ce:1a:3a:4b:ba:78:ac:0d:e1:
09:02:45:a8:d5:2f:8f:17:04:89:17:26:e9:22:6d:
53:dc:76:7a:02:62:79:94:aa:24:ce:62:02:ac:ba:
08:1f:e3:e1:1f:79:64:e7:87:ec:5d:27:23:4c:65:
60:7d:85:43:ba:2d:7d:4d:23:ac:28:ae:a5:a4:6c:
db:b8:06:06:f5:69:4c:cf:67:b1:19:90:e7:91:f4:
26:7a:da:11:bf:42:19:4a:86:5d:06:3c:4c:3f:4b:
9c:22:8a:ca:e7:80:53:89:fb:d9:12:fe:6c:c1:c9:
d6:70:9f:8c:e9:08:5e:65:11:0b:de:68:fc:f9:c9:
9f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8F:F3:FE:C2:34:AD:F2:26:DD:36:0D:47:30:AF:A2:A6:51:E3:3B
X509v3 Authority Key Identifier:
keyid:55:50:E0:6E:E0:2C:5A:32:E5:4D:C8:98:53:B4:AA:37:8F:86:04:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:11:f5:2d:95:85:f9:8b:ab:6e:ce:fd:8a:12:66:fe:ad:64:
34:89:9e:cd:7d:f6:c0:c9:45:8f:aa:b5:67:5c:d1:76:a3:db:
41:24:fb:a3:5d:a6:0a:62:87:84:c3:60:2c:c7:e6:4f:03:74:
61:0f:5c:35:c9:19:c5:1c:bd:f2:97:a2:8b:43:1c:fa:57:80:
26:33:98:85:33:a4:5a:57:c5:b9:ce:5e:08:b9:a2:5b:38:d9:
3d:ff:fa:ef:c9:76:48:d2:f1:c1:09:ca:13:ee:4e:5f:c1:99:
b1:4a:d0:2c:b4:5e:f3:b4:f8:fe:bc:77:9f:ea:a9:2b:b7:f8:
6e:29:9d:af:55:db:01:8f:a3:2b:96:69:49:cb:d0:8a:81:38:
d0:b7:33:ba:2c:0d:59:10:80:05:2a:c7:0a:30:07:0e:c7:a3:
97:98:ca:97:72:a9:c1:ee:33:5b:0d:ee:e4:e2:88:57:e9:7d:
aa:e3:fe:0f:3a:ce:00:71:5e:13:03:46:40:e9:3d:f8:f9:30:
dc:b4:c1:6f:2f:f2:8c:38:fc:9c:00:8d:aa:35:fe:a6:c9:57:
5e:78:8d:22:ed:1b:16:0d:f9:fc:46:5d:86:11:b4:80:b7:e8:
22:a0:a4:47:7a:79:3c:72:ec:17:82:ec:bc:00:d0:91:4a:61:
db:d4:62:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ8DhKRtxiCJIod047zf5HwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NTBlMDZlZTAyYzVhMzJlNTRkYzg5ODUzYjRhYTM3OGY4
NjA0ZjcwHhcNMjUwNDI4MTEwMDE5WhcNMjUwNDI5MTEwMDE5WjAzMTEwLwYDVQQD
EyhiNjhmZjNmZWMyMzRhZGYyMjZkZDM2MGQ0NzMwYWZhMmE2NTFlMzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6fJ7cFRoohpxSQqeKRj4//xBFDS
7yFkZczUvM+SLziEl5hk/uWqQq/tZ5aTAs/V/WQ8pG8zjiCTKjg+CIJcTTs25exQ
9S/4vzUyLe8hi58uldC+q/ewI/Fzwf3wmqwn9SDKNiP54D2lDLIPEEiM054NHE7/
XEK/3su7XFrOGjpLunisDeEJAkWo1S+PFwSJFybpIm1T3HZ6AmJ5lKokzmICrLoI
H+PhH3lk54fsXScjTGVgfYVDui19TSOsKK6lpGzbuAYG9WlMz2exGZDnkfQmetoR
v0IZSoZdBjxMP0ucIorK54BTifvZEv5swcnWcJ+M6QheZREL3mj8+cmflwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaP8/7CNK3yJt02DUcwr6KmUeM7MB8GA1UdIwQY
MBaAFFVQ4G7gLFoy5U3ImFO0qjePhgT3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlZEZ2J1QXNXakxsVGNpWVU3U3FONC1HQlBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kZWViNGMtOTlkNi00YTllLTgyMDAt
N2NhYTk3OTI3MTQyLzEvVlZEZ2J1QXNXakxsVGNpWVU3U3FONC1HQlBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9kZWViNGMtOTlkNi00YTllLTgyMDAtN2NhYTk3OTI3MTQy
LzEvVlZEZ2J1QXNXakxsVGNpWVU3U3FONC1HQlBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANhH1LZWF
+Yurbs79ihJm/q1kNImezX32wMlFj6q1Z1zRdqPbQST7o12mCmKHhMNgLMfmTwN0
YQ9cNckZxRy98peii0Mc+leAJjOYhTOkWlfFuc5eCLmiWzjZPf/678l2SNLxwQnK
E+5OX8GZsUrQLLRe87T4/rx3n+qpK7f4bimdr1XbAY+jK5ZpScvQioE40LczuiwN
WRCABSrHCjAHDsejl5jKl3Kpwe4zWw3u5OKIV+l9quP+DzrOAHFeEwNGQOk9+Pkw
3LTBby/yjDj8nACNqjX+pslXXniNIu0bFg35/EZdhhG0gLfoIqCkR3p5PHLsF4Ls
vADQkUph29Rixw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:07:58 2025 by rpki-client