Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
File: VxRWZJaS5gVm3gCOEmu90dLr7UU.mft (raw, json)
Hash identifier: 4ECGQHXmXLTLZcfZD9Ewu8JiQlIht64Ei1g1Zr/Weuw=
Subject key identifier: 78:43:4B:83:F2:E5:13:6F:CD:44:99:AF:0D:92:6B:D5:F3:AF:8F:D2
Authority key identifier: 57:14:56:64:96:92:E6:05:66:DE:00:8E:12:6B:BD:D1:D2:EB:ED:45
Certificate issuer: /CN=571456649692e60566de008e126bbdd1d2ebed45
Certificate serial: 0196741E964B19C29B149BBFEB4A4962154E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
Manifest number: 0D89
Signing time: Sat 26 Apr 2025 22:01:23 +0000
Manifest this update: Sat 26 Apr 2025 22:01:23 +0000
Manifest next update: Sun 27 Apr 2025 22:01:23 +0000
Files and hashes: 1: VxRWZJaS5gVm3gCOEmu90dLr7UU.crl (hash: /Fv5ckBTrQtAlslxOdx/yrgkYnzWeKdA9/3anJDc8sU=)
2: t0KxoFR4-v-aF7ApZp5a51UCPdE.roa (hash: wDmBNX7FNw1Byb+j/pduuukElypr1eZvZiRjB9AwIB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:96:4b:19:c2:9b:14:9b:bf:eb:4a:49:62:15:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571456649692e60566de008e126bbdd1d2ebed45
Validity
Not Before: Apr 26 22:01:23 2025 GMT
Not After : Apr 27 22:01:23 2025 GMT
Subject: CN=78434b83f2e5136fcd4499af0d926bd5f3af8fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:dc:b8:ca:5b:6d:c3:ed:ea:d9:11:c9:f0:c1:
40:9e:41:c0:8e:60:90:93:31:09:5b:29:d7:c7:6a:
38:23:3d:81:a7:2a:f2:1e:9b:23:f3:0e:04:97:2d:
f3:6f:4f:e2:bf:87:73:8e:41:48:d2:27:a6:29:5c:
f0:79:88:4a:36:58:84:d2:8e:b2:af:97:b1:75:4e:
58:f9:19:58:0d:b7:f4:ba:2a:54:6d:2a:0d:d5:c0:
b0:72:64:61:9a:b8:58:58:da:91:23:6b:d2:0b:e0:
82:48:c7:2c:3c:20:b4:c4:fe:ce:20:0a:f9:fd:35:
d4:f3:47:d0:aa:b6:38:53:ab:2b:69:f0:71:fd:58:
25:83:c1:23:58:04:cf:8e:69:76:5f:ef:9d:03:b9:
1f:65:d7:d2:b4:6b:8d:27:c5:48:86:f1:90:90:04:
ca:fd:89:ed:54:d3:46:38:66:29:f5:67:56:41:8e:
c7:9d:a2:24:9a:67:9d:09:be:d4:4a:3a:a5:33:6d:
e6:1b:22:b0:c4:6d:0c:21:62:54:d4:f0:50:c1:82:
2c:8f:f5:4e:6f:1d:ea:ca:00:9c:ee:f3:9b:80:d1:
dd:52:ce:06:cc:85:2b:69:6e:3d:da:e9:bd:dc:3f:
1f:6a:da:37:93:34:0b:bb:40:6d:5c:7a:c8:99:a2:
65:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:43:4B:83:F2:E5:13:6F:CD:44:99:AF:0D:92:6B:D5:F3:AF:8F:D2
X509v3 Authority Key Identifier:
keyid:57:14:56:64:96:92:E6:05:66:DE:00:8E:12:6B:BD:D1:D2:EB:ED:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:5c:98:e8:30:0a:d7:d3:94:29:4d:5a:13:6c:b8:bc:a4:4e:
c8:fc:5a:24:03:40:19:f2:e2:87:37:4c:86:b4:a3:b8:d8:ea:
dd:34:50:e6:9f:0a:7f:0a:de:01:88:5c:c4:8a:62:a2:74:53:
b6:1a:5d:9a:4d:93:cf:b8:a8:0d:14:8b:eb:7d:23:32:c1:ef:
a4:42:67:5a:8a:14:14:7f:36:9f:b7:5b:92:3c:3f:3c:ce:19:
e2:d8:75:5b:99:00:28:d5:e3:03:5e:8f:d5:db:87:38:d4:9d:
09:58:fe:85:a9:38:6e:81:ab:e0:04:c2:02:29:66:59:af:fc:
70:14:69:00:5b:ed:35:18:22:b5:e0:88:06:e6:1a:14:75:72:
1d:a3:3a:0c:62:20:b4:b1:f6:b6:06:36:7d:c9:50:ee:05:b2:
11:c8:ce:18:28:1a:e2:87:ff:d7:cd:c3:3e:41:14:da:a6:33:
bd:9e:b8:29:6d:4e:d0:eb:71:93:9a:bf:2d:a3:73:fa:1b:63:
15:5c:58:f3:44:d2:f9:ba:5d:11:b1:5a:9a:33:a7:33:de:b9:
c6:9b:6d:45:3d:fd:a4:01:a7:79:7c:a4:5d:e6:b3:0f:8c:15:
c2:4c:cf:0f:1c:b7:fa:fc:0c:da:dd:0e:0a:3f:4f:e9:09:0f:
db:fb:b8:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0HpZLGcKbFJu/60pJYhVOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MTQ1NjY0OTY5MmU2MDU2NmRlMDA4ZTEyNmJiZGQxZDJl
YmVkNDUwHhcNMjUwNDI2MjIwMTIzWhcNMjUwNDI3MjIwMTIzWjAzMTEwLwYDVQQD
Eyg3ODQzNGI4M2YyZTUxMzZmY2Q0NDk5YWYwZDkyNmJkNWYzYWY4ZmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dy4ylttw+3q2RHJ8MFAnkHAjmCQ
kzEJWynXx2o4Iz2BpyryHpsj8w4Ely3zb0/iv4dzjkFI0iemKVzweYhKNliE0o6y
r5exdU5Y+RlYDbf0uipUbSoN1cCwcmRhmrhYWNqRI2vSC+CCSMcsPCC0xP7OIAr5
/TXU80fQqrY4U6srafBx/Vglg8EjWATPjml2X++dA7kfZdfStGuNJ8VIhvGQkATK
/YntVNNGOGYp9WdWQY7HnaIkmmedCb7USjqlM23mGyKwxG0MIWJU1PBQwYIsj/VO
bx3qygCc7vObgNHdUs4GzIUraW492um93D8fato3kzQLu0BtXHrImaJluQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhDS4Py5RNvzUSZrw2Sa9Xzr4/SMB8GA1UdIwQY
MBaAFFcUVmSWkuYFZt4AjhJrvdHS6+1FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnhSV1pKYVM1Z1ZtM2dDT0VtdTkwZExyN1VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wOGE3ZmYtMmNlZi00MjQ4LTlmZTgt
MDRjOGYzZWVjZWViLzEvVnhSV1pKYVM1Z1ZtM2dDT0VtdTkwZExyN1VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8wOGE3ZmYtMmNlZi00MjQ4LTlmZTgtMDRjOGYzZWVjZWVi
LzEvVnhSV1pKYVM1Z1ZtM2dDT0VtdTkwZExyN1VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArFyY6DAK
19OUKU1aE2y4vKROyPxaJANAGfLihzdMhrSjuNjq3TRQ5p8KfwreAYhcxIpionRT
thpdmk2Tz7ioDRSL630jMsHvpEJnWooUFH82n7dbkjw/PM4Z4th1W5kAKNXjA16P
1duHONSdCVj+hak4boGr4ATCAilmWa/8cBRpAFvtNRgiteCIBuYaFHVyHaM6DGIg
tLH2tgY2fclQ7gWyEcjOGCga4of/183DPkEU2qYzvZ64KW1O0Otxk5q/LaNz+htj
FVxY80TS+bpdEbFamjOnM965xpttRT39pAGneXykXeazD4wVwkzPDxy3+vwM2t0O
Cj9P6QkP2/u4zg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:36:44 2025 by rpki-client