Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft
File: vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft (raw, json)
Hash identifier: UewrZ554FLDqxzdCCd/LagbgdlzJ22PbdpzXqJGl574=
Subject key identifier: 6E:EC:05:8D:BA:9F:8F:E4:8E:90:13:33:CB:83:2A:75:05:5D:DA:AB
Authority key identifier: BE:ED:14:BF:4E:46:B1:35:79:58:3F:97:FF:85:91:0D:10:3A:53:F8
Certificate issuer: /CN=beed14bf4e46b13579583f97ff85910d103a53f8
Certificate serial: 0196759EB9452DF32F11A56D8D4FA0AD91E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft
Manifest number: 14A2
Signing time: Sun 27 Apr 2025 05:00:58 +0000
Manifest this update: Sun 27 Apr 2025 05:00:58 +0000
Manifest next update: Mon 28 Apr 2025 05:00:58 +0000
Files and hashes: 1: YWfBB1A6AsyoVHWPYh_PG8Oqc7Y.roa (hash: 5j8p5mvaO4of1g1DTD7WjWWwx2W9IRdFQlgp9hnSnts=)
2: vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl (hash: MumXU9QkUI6sYNunuFUnOBvb5cMOa/AzGZTjVjgYM48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:b9:45:2d:f3:2f:11:a5:6d:8d:4f:a0:ad:91:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beed14bf4e46b13579583f97ff85910d103a53f8
Validity
Not Before: Apr 27 05:00:58 2025 GMT
Not After : Apr 28 05:00:58 2025 GMT
Subject: CN=6eec058dba9f8fe48e901333cb832a75055ddaab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:98:16:0c:c2:45:98:0f:e3:c5:94:66:a9:f7:
3f:c2:83:35:a2:ee:a6:93:60:ca:97:d6:e4:d3:e3:
fb:00:b8:c0:d3:0b:59:4d:77:ab:0a:0b:f1:47:dc:
70:ee:06:9f:5d:89:76:ba:b8:17:aa:df:0f:fb:a4:
01:77:5c:63:b9:40:2c:88:7b:75:80:82:5e:ca:d5:
f7:27:f9:e4:aa:84:ab:97:71:df:c8:93:7b:ef:3c:
a7:4c:6a:e3:80:03:f5:f5:94:c7:7b:f7:0b:d8:fa:
ff:43:95:b6:44:e4:8d:2d:fb:6f:5b:35:9d:bd:d8:
83:bf:e2:a1:5a:98:be:f6:45:fd:7e:18:e1:76:d5:
cf:b6:c4:fa:fe:e3:33:fa:7c:92:c0:42:49:2c:59:
20:1e:18:e3:11:6f:90:43:5b:50:b1:95:4e:e9:b8:
dc:f1:58:ee:c4:d7:96:cf:c9:25:9e:50:6f:a6:ad:
5a:2a:f1:a0:3a:e8:99:60:1b:ce:c9:41:90:4a:db:
0e:77:85:1b:d5:92:f9:b1:be:21:c6:2a:4f:5f:0f:
1f:fd:4b:f8:61:9b:ab:79:4d:de:ce:19:3c:5b:bd:
a4:5f:08:88:8d:05:9b:11:76:30:c8:9c:14:ca:c7:
f1:78:d3:8c:cd:65:4b:a2:25:c0:8a:e0:6c:54:e5:
ff:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:EC:05:8D:BA:9F:8F:E4:8E:90:13:33:CB:83:2A:75:05:5D:DA:AB
X509v3 Authority Key Identifier:
keyid:BE:ED:14:BF:4E:46:B1:35:79:58:3F:97:FF:85:91:0D:10:3A:53:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:56:0f:16:75:88:23:ff:bc:d2:cf:fc:4d:56:9b:99:35:04:
ef:5f:b2:e8:b3:f3:5d:1f:49:4a:bf:ee:1b:3e:de:5c:55:de:
ee:f3:08:9e:83:60:79:13:cf:0c:4f:2b:85:fc:da:7a:bc:92:
3d:88:71:db:36:0b:4a:ad:74:58:76:0f:84:5f:4b:98:87:60:
60:3e:c6:66:1f:1a:d0:1f:48:1a:db:83:10:76:af:62:4e:cf:
10:96:5a:92:2c:33:60:8b:cd:70:ed:fd:37:fa:1f:af:53:2e:
ef:46:8d:ef:1b:d9:9d:5f:cf:a1:88:12:0b:9d:72:cf:88:25:
e3:73:35:0d:1a:8e:c3:21:7a:45:c2:82:18:36:4e:ce:d3:13:
2a:7e:d9:78:1a:95:cf:3f:26:8b:4f:8b:66:79:0c:5a:93:1f:
23:f9:6e:06:b1:fc:cc:74:b9:50:ed:99:68:0a:cc:ab:aa:6e:
67:86:6c:d6:59:c0:c6:c3:97:2c:7d:9f:7c:7b:f9:a1:f5:0b:
e3:d9:e8:d9:13:30:3d:3a:23:fe:57:82:bc:2f:e2:38:70:a9:
e4:21:52:f9:f2:2f:56:13:3a:ce:62:23:87:08:1e:77:a7:9b:
db:11:70:47:26:01:67:54:80:cc:c7:43:cb:a5:c5:72:8a:5e:
65:71:b1:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1nrlFLfMvEaVtjU+grZHiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlZWQxNGJmNGU0NmIxMzU3OTU4M2Y5N2ZmODU5MTBkMTAz
YTUzZjgwHhcNMjUwNDI3MDUwMDU4WhcNMjUwNDI4MDUwMDU4WjAzMTEwLwYDVQQD
Eyg2ZWVjMDU4ZGJhOWY4ZmU0OGU5MDEzMzNjYjgzMmE3NTA1NWRkYWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5gWDMJFmA/jxZRmqfc/woM1ou6m
k2DKl9bk0+P7ALjA0wtZTXerCgvxR9xw7gafXYl2urgXqt8P+6QBd1xjuUAsiHt1
gIJeytX3J/nkqoSrl3HfyJN77zynTGrjgAP19ZTHe/cL2Pr/Q5W2ROSNLftvWzWd
vdiDv+KhWpi+9kX9fhjhdtXPtsT6/uMz+nySwEJJLFkgHhjjEW+QQ1tQsZVO6bjc
8VjuxNeWz8klnlBvpq1aKvGgOuiZYBvOyUGQStsOd4Ub1ZL5sb4hxipPXw8f/Uv4
YZureU3ezhk8W72kXwiIjQWbEXYwyJwUysfxeNOMzWVLoiXAiuBsVOX/zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG7sBY26n4/kjpATM8uDKnUFXdqrMB8GA1UdIwQY
MBaAFL7tFL9ORrE1eVg/l/+FkQ0QOlP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnUwVXYwNUdzVFY1V0QtWF80V1JEUkE2VV9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wMDQ3YjctZjFlNi00MWE4LWE4ZDIt
NDgwMTE5OGU3NWNhLzEvdnUwVXYwNUdzVFY1V0QtWF80V1JEUkE2VV9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8wMDQ3YjctZjFlNi00MWE4LWE4ZDItNDgwMTE5OGU3NWNh
LzEvdnUwVXYwNUdzVFY1V0QtWF80V1JEUkE2VV9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1YPFnWI
I/+80s/8TVabmTUE71+y6LPzXR9JSr/uGz7eXFXe7vMInoNgeRPPDE8rhfzaeryS
PYhx2zYLSq10WHYPhF9LmIdgYD7GZh8a0B9IGtuDEHavYk7PEJZakiwzYIvNcO39
N/ofr1Mu70aN7xvZnV/PoYgSC51yz4gl43M1DRqOwyF6RcKCGDZOztMTKn7ZeBqV
zz8mi0+LZnkMWpMfI/luBrH8zHS5UO2ZaArMq6puZ4Zs1lnAxsOXLH2ffHv5ofUL
49no2RMwPToj/leCvC/iOHCp5CFS+fIvVhM6zmIjhwged6eb2xFwRyYBZ1SAzMdD
y6XFcopeZXGxXQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:05:47 2025 by rpki-client