Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
File: VbnN-LflPvzZeZsR50D1Vf1T9MY.mft (raw, json)
Hash identifier: VJ8iKyE8h9JdGz2R7fIqGNhFKjK8MLjXqckDEaMDphg=
Subject key identifier: E2:4D:7A:00:4F:48:00:41:C3:AB:C8:7B:08:39:F2:6C:25:42:B9:0E
Authority key identifier: 55:B9:CD:F8:B7:E5:3E:FC:D9:79:9B:11:E7:40:F5:55:FD:53:F4:C6
Certificate issuer: /CN=55b9cdf8b7e53efcd9799b11e740f555fd53f4c6
Certificate serial: 0196771EFDEC5F2C2879170685282E3BAB7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
Manifest number: 12AB
Signing time: Sun 27 Apr 2025 12:00:41 +0000
Manifest this update: Sun 27 Apr 2025 12:00:41 +0000
Manifest next update: Mon 28 Apr 2025 12:00:41 +0000
Files and hashes: 1: OEIiPrXdFUp5YXOck7o4s4rBGO0.roa (hash: zsHFam+CXLhObsumxLE2+jbhXix4p0SFjtst5VLxGeE=)
2: VbnN-LflPvzZeZsR50D1Vf1T9MY.crl (hash: 22LyHVji2FRT4A+OVWXGDth3r7LHfRyfK8/ZBiSZrWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:fd:ec:5f:2c:28:79:17:06:85:28:2e:3b:ab:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55b9cdf8b7e53efcd9799b11e740f555fd53f4c6
Validity
Not Before: Apr 27 12:00:41 2025 GMT
Not After : Apr 28 12:00:41 2025 GMT
Subject: CN=e24d7a004f480041c3abc87b0839f26c2542b90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c3:84:f4:aa:20:32:ee:35:58:55:e1:b6:0f:
7f:ab:ae:c0:7a:36:48:13:ea:74:ae:ab:68:13:ca:
ee:2f:ae:71:1d:af:31:41:b3:4c:71:ac:c0:77:71:
e7:b7:e8:1c:c8:36:1a:06:2a:97:37:b8:39:13:53:
e0:ec:37:19:c2:92:6a:1b:aa:3c:32:ec:19:2b:94:
3e:e2:1f:44:04:76:c1:88:83:7a:98:5a:16:ff:8c:
fa:0a:53:a6:3b:e0:10:45:8b:f5:46:59:3e:73:aa:
94:78:64:cb:5c:ec:b0:8e:11:ba:77:65:24:fe:a2:
fc:fe:63:84:1a:8e:83:c1:17:99:0a:9e:17:0d:78:
dd:5a:1a:a9:8b:fb:ee:5f:98:c0:99:a4:0b:e1:78:
ba:57:7f:51:a9:1b:7c:6d:54:c3:3a:cf:62:e2:11:
ef:de:22:bf:d8:ca:26:ed:58:cc:95:91:65:24:33:
10:86:7d:1c:c3:82:a6:8d:38:f0:db:34:26:9a:95:
61:e6:5b:35:a3:f3:94:97:96:d1:b9:07:ae:9c:df:
0b:5c:12:84:14:2c:6a:d5:24:ff:cc:91:93:69:06:
ba:55:9f:5a:b6:b9:e4:6b:25:69:17:33:5c:eb:2a:
42:ff:54:fc:ea:62:21:36:02:9c:4a:5a:3e:77:30:
12:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4D:7A:00:4F:48:00:41:C3:AB:C8:7B:08:39:F2:6C:25:42:B9:0E
X509v3 Authority Key Identifier:
keyid:55:B9:CD:F8:B7:E5:3E:FC:D9:79:9B:11:E7:40:F5:55:FD:53:F4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:74:c0:4c:bd:75:c2:37:3d:9a:7d:7e:59:57:b5:57:f7:9c:
6a:74:89:88:85:88:f3:98:c6:90:d7:3f:0b:0e:95:ac:81:26:
74:f1:c9:fb:69:b2:6d:ca:84:42:8c:e1:e7:0a:05:4b:a0:15:
08:cf:a8:29:c9:4e:00:a6:a6:5a:82:66:99:69:6b:77:c9:07:
47:af:59:59:0c:55:93:34:22:17:6b:87:a9:ff:dd:51:e5:69:
18:74:b0:6e:7b:2e:9e:5d:f6:59:0c:45:9a:9e:71:18:72:0c:
d4:08:3d:1a:dc:44:3c:72:b0:20:20:21:db:35:61:8e:04:b5:
97:74:b5:f4:e1:2b:cc:89:95:98:31:6b:fd:85:e0:62:02:69:
e5:86:70:4b:39:97:4a:3f:73:a2:26:7a:83:fc:f4:fa:34:05:
82:f5:61:b8:0e:4d:69:17:cc:a1:31:9a:6a:23:3a:de:30:22:
4d:39:29:b3:e3:0c:b7:b9:2d:4a:0f:23:a9:16:a0:d8:2f:e2:
d0:08:f6:cf:fb:15:02:09:9a:6d:31:47:d3:8f:d4:c1:17:ed:
2c:6c:0d:7f:4f:43:9a:e3:45:54:4f:38:b8:8c:df:20:ba:b9:
a1:6a:44:a8:b1:64:2f:f8:0b:1f:a1:37:6d:80:a3:9b:5c:91:
ac:34:b7:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3Hv3sXywoeRcGhSguO6t9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YjljZGY4YjdlNTNlZmNkOTc5OWIxMWU3NDBmNTU1ZmQ1
M2Y0YzYwHhcNMjUwNDI3MTIwMDQxWhcNMjUwNDI4MTIwMDQxWjAzMTEwLwYDVQQD
EyhlMjRkN2EwMDRmNDgwMDQxYzNhYmM4N2IwODM5ZjI2YzI1NDJiOTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMOE9KogMu41WFXhtg9/q67AejZI
E+p0rqtoE8ruL65xHa8xQbNMcazAd3Hnt+gcyDYaBiqXN7g5E1Pg7DcZwpJqG6o8
MuwZK5Q+4h9EBHbBiIN6mFoW/4z6ClOmO+AQRYv1Rlk+c6qUeGTLXOywjhG6d2Uk
/qL8/mOEGo6DwReZCp4XDXjdWhqpi/vuX5jAmaQL4Xi6V39RqRt8bVTDOs9i4hHv
3iK/2Mom7VjMlZFlJDMQhn0cw4KmjTjw2zQmmpVh5ls1o/OUl5bRuQeunN8LXBKE
FCxq1ST/zJGTaQa6VZ9atrnkayVpFzNc6ypC/1T86mIhNgKcSlo+dzASewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJNegBPSABBw6vIewg58mwlQrkOMB8GA1UdIwQY
MBaAFFW5zfi35T782XmbEedA9VX9U/TGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmJuTi1MZmxQdnpaZVpzUjUwRDFWZjFUOU1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS83N2U5MmEtZWFlMS00OGMwLThkOWMt
NmZjNGNkY2IzZjE3LzEvVmJuTi1MZmxQdnpaZVpzUjUwRDFWZjFUOU1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS83N2U5MmEtZWFlMS00OGMwLThkOWMtNmZjNGNkY2IzZjE3
LzEvVmJuTi1MZmxQdnpaZVpzUjUwRDFWZjFUOU1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjHTATL11
wjc9mn1+WVe1V/ecanSJiIWI85jGkNc/Cw6VrIEmdPHJ+2mybcqEQozh5woFS6AV
CM+oKclOAKamWoJmmWlrd8kHR69ZWQxVkzQiF2uHqf/dUeVpGHSwbnsunl32WQxF
mp5xGHIM1Ag9GtxEPHKwICAh2zVhjgS1l3S19OErzImVmDFr/YXgYgJp5YZwSzmX
Sj9zoiZ6g/z0+jQFgvVhuA5NaRfMoTGaaiM63jAiTTkps+MMt7ktSg8jqRag2C/i
0Aj2z/sVAgmabTFH04/UwRftLGwNf09DmuNFVE84uIzfILq5oWpEqLFkL/gLH6E3
bYCjm1yRrDS3XA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:56:29 2025 by rpki-client