Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.mft
File: vfSGpExRBdeBNXKUVhzMPROk1nE.mft (raw, json)
Hash identifier: dXTz5g/CzjgHJNrNceQl3JfzD4hM2zlTKYQW1ymNhrA=
Subject key identifier: F4:D5:34:FD:43:75:89:BA:D9:31:48:05:5C:2A:31:AD:AB:A2:C7:7C
Authority key identifier: BD:F4:86:A4:4C:51:05:D7:81:35:72:94:56:1C:CC:3D:13:A4:D6:71
Certificate issuer: /CN=bdf486a44c5105d781357294561ccc3d13a4d671
Certificate serial: 019687DBFEE96BCC5D8279E527767A90A68C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfSGpExRBdeBNXKUVhzMPROk1nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.mft
Manifest number: 0788
Signing time: Wed 30 Apr 2025 18:01:03 +0000
Manifest this update: Wed 30 Apr 2025 18:01:03 +0000
Manifest next update: Thu 01 May 2025 18:01:03 +0000
Files and hashes: 1: vfSGpExRBdeBNXKUVhzMPROk1nE.crl (hash: 9zvPJvjGZ0JqAr28s5e9UQsyxUB/5K7ZM/SFQw7FRuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfSGpExRBdeBNXKUVhzMPROk1nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:db:fe:e9:6b:cc:5d:82:79:e5:27:76:7a:90:a6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf486a44c5105d781357294561ccc3d13a4d671
Validity
Not Before: Apr 30 18:01:03 2025 GMT
Not After : May 1 18:01:03 2025 GMT
Subject: CN=f4d534fd437589bad93148055c2a31adaba2c77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9c:27:77:d1:02:14:a6:8a:eb:d4:9c:b9:6a:
c8:96:6f:43:8d:04:7b:0a:5d:14:01:17:61:2b:85:
ed:bd:df:0a:cc:f6:6f:c7:16:89:fb:b6:b6:99:ad:
ea:c6:f5:b7:c8:cc:3b:55:5b:be:08:b1:5c:dd:06:
38:c3:c2:fb:63:22:e0:81:3e:ac:b0:73:61:3b:6f:
c0:14:9c:15:52:87:bc:4a:1c:e2:9e:81:8b:de:b2:
ac:d2:18:4b:f1:c9:b8:cd:29:9e:ed:08:f8:01:ea:
9d:5f:0d:ce:b3:27:82:43:3a:e0:18:77:03:b7:1c:
0b:e9:3f:9b:77:77:6c:8c:e7:23:3b:5f:c5:77:d1:
5e:ea:71:8a:62:c9:eb:9c:fe:72:58:fe:a7:d3:44:
99:d9:c2:7e:08:2b:8b:49:52:dd:f1:02:ed:04:90:
08:2a:0e:be:26:99:59:7f:54:74:f7:20:59:f3:a5:
48:cf:17:c8:a5:b2:9d:1f:03:b2:9f:56:e0:e4:cb:
ab:09:50:92:0a:ee:cd:23:e8:03:c9:a3:8e:c9:42:
4e:47:55:3a:ad:28:7c:28:63:a5:0b:59:c2:1d:5b:
68:fc:62:8a:c1:e8:9a:83:a8:b1:2c:6c:35:81:33:
70:57:f8:37:e5:30:f7:7d:83:32:15:38:80:e7:e9:
36:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D5:34:FD:43:75:89:BA:D9:31:48:05:5C:2A:31:AD:AB:A2:C7:7C
X509v3 Authority Key Identifier:
keyid:BD:F4:86:A4:4C:51:05:D7:81:35:72:94:56:1C:CC:3D:13:A4:D6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfSGpExRBdeBNXKUVhzMPROk1nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:64:2b:58:4b:b0:9a:a7:63:93:2d:ca:11:aa:55:77:81:b6:
c9:87:43:b1:04:31:d3:b4:93:62:3d:1a:2a:10:6b:40:59:df:
de:ad:f5:ea:4d:c4:c8:1c:55:9f:35:f9:d6:41:e9:f2:36:d1:
9a:ed:59:fa:86:7f:24:ae:b2:a6:1d:f8:98:d3:16:71:38:2b:
ea:e7:e0:13:cb:16:36:66:12:cc:90:fb:5d:2a:21:ed:99:53:
30:d2:30:21:12:25:1d:16:f9:36:d7:5a:cf:9b:6e:e5:14:22:
d9:08:aa:f7:e3:e4:87:1c:a6:4c:29:7a:f1:20:a8:e3:4f:f3:
0c:61:40:05:0e:46:3f:fe:a7:cf:ed:e6:e6:b1:44:e4:8a:f1:
01:a3:ec:6d:12:ae:ab:39:05:99:73:95:d0:1c:46:f5:04:6b:
42:0f:6f:fb:c7:26:c2:10:7a:17:41:16:a9:f9:b5:6c:46:e7:
98:4b:c9:bb:e3:2f:a5:f5:cd:77:92:b0:b2:23:89:e3:b2:bc:
1e:b6:8a:cf:19:dc:1c:0c:ff:5b:1b:27:12:7a:20:25:33:d6:
31:44:49:a2:8e:40:1a:ee:22:2d:ca:a4:83:ec:54:88:24:32:
23:1f:f5:5a:2e:22:95:eb:15:be:73:f6:1e:61:29:ee:50:0f:
04:b2:82:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaH2/7pa8xdgnnlJ3Z6kKaMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZjQ4NmE0NGM1MTA1ZDc4MTM1NzI5NDU2MWNjYzNkMTNh
NGQ2NzEwHhcNMjUwNDMwMTgwMTAzWhcNMjUwNTAxMTgwMTAzWjAzMTEwLwYDVQQD
EyhmNGQ1MzRmZDQzNzU4OWJhZDkzMTQ4MDU1YzJhMzFhZGFiYTJjNzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpwnd9ECFKaK69ScuWrIlm9DjQR7
Cl0UARdhK4Xtvd8KzPZvxxaJ+7a2ma3qxvW3yMw7VVu+CLFc3QY4w8L7YyLggT6s
sHNhO2/AFJwVUoe8ShzinoGL3rKs0hhL8cm4zSme7Qj4AeqdXw3OsyeCQzrgGHcD
txwL6T+bd3dsjOcjO1/Fd9Fe6nGKYsnrnP5yWP6n00SZ2cJ+CCuLSVLd8QLtBJAI
Kg6+JplZf1R09yBZ86VIzxfIpbKdHwOyn1bg5MurCVCSCu7NI+gDyaOOyUJOR1U6
rSh8KGOlC1nCHVto/GKKweiag6ixLGw1gTNwV/g35TD3fYMyFTiA5+k2BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTVNP1DdYm62TFIBVwqMa2rosd8MB8GA1UdIwQY
MBaAFL30hqRMUQXXgTVylFYczD0TpNZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmZTR3BFeFJCZGVCTlhLVVZoek1QUk9rMW5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iOGIyNzgtZjliZC00MGUxLTgwM2Et
ZjY5MWY2NDc1OGFjLzEvdmZTR3BFeFJCZGVCTlhLVVZoek1QUk9rMW5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9iOGIyNzgtZjliZC00MGUxLTgwM2EtZjY5MWY2NDc1OGFj
LzEvdmZTR3BFeFJCZGVCTlhLVVZoek1QUk9rMW5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHmQrWEuw
mqdjky3KEapVd4G2yYdDsQQx07STYj0aKhBrQFnf3q316k3EyBxVnzX51kHp8jbR
mu1Z+oZ/JK6yph34mNMWcTgr6ufgE8sWNmYSzJD7XSoh7ZlTMNIwIRIlHRb5Ntda
z5tu5RQi2Qiq9+PkhxymTCl68SCo40/zDGFABQ5GP/6nz+3m5rFE5IrxAaPsbRKu
qzkFmXOV0BxG9QRrQg9v+8cmwhB6F0EWqfm1bEbnmEvJu+MvpfXNd5KwsiOJ47K8
HraKzxncHAz/WxsnEnogJTPWMURJoo5AGu4iLcqkg+xUiCQyIx/1Wi4ilesVvnP2
HmEp7lAPBLKC7A==
-----END CERTIFICATE-----
Generated at Thu May 1 00:49:37 2025 by rpki-client