Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft
File: VpXFSglZPdyD-s4S21K_aiK5du0.mft (raw, json)
Hash identifier: 2V2Vb2cpkmN4Ww/qfZEUW4cgjO3t5LnLJlivn+8Ck48=
Subject key identifier: FD:1D:C9:41:80:CA:CE:D5:9A:CA:96:B9:AB:0C:D1:96:DE:01:38:0E
Authority key identifier: 56:95:C5:4A:09:59:3D:DC:83:FA:CE:12:DB:52:BF:6A:22:B9:76:ED
Certificate issuer: /CN=5695c54a09593ddc83face12db52bf6a22b976ed
Certificate serial: 0196741EA5D627163268A57025F529C85CA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VpXFSglZPdyD-s4S21K_aiK5du0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft
Manifest number: 061F
Signing time: Sat 26 Apr 2025 22:01:27 +0000
Manifest this update: Sat 26 Apr 2025 22:01:27 +0000
Manifest next update: Sun 27 Apr 2025 22:01:27 +0000
Files and hashes: 1: VpXFSglZPdyD-s4S21K_aiK5du0.crl (hash: kepBGI12lVAZkxElzND2OGEfxgEHpSP4Y7loM+SKruQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VpXFSglZPdyD-s4S21K_aiK5du0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 22:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:a5:d6:27:16:32:68:a5:70:25:f5:29:c8:5c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5695c54a09593ddc83face12db52bf6a22b976ed
Validity
Not Before: Apr 26 22:01:27 2025 GMT
Not After : Apr 27 22:01:27 2025 GMT
Subject: CN=fd1dc94180caced59aca96b9ab0cd196de01380e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:89:83:40:e9:09:3f:51:15:57:36:79:84:df:
93:4f:a9:cf:f3:23:ff:35:05:ed:11:90:c1:8e:84:
18:23:18:9e:cd:8a:0a:0e:f5:e9:50:da:46:c4:18:
45:23:47:27:c2:31:de:15:33:e8:32:26:d9:3b:0e:
de:e7:09:b1:f3:b6:e4:a2:3c:dd:8b:09:94:a0:3c:
00:bf:3e:9a:a6:4d:cd:4c:26:5f:07:6e:f2:9e:b3:
ab:64:15:c9:71:8f:01:43:13:c0:2d:e3:f5:5a:e4:
e5:14:4c:ae:08:f9:b6:b1:82:63:00:23:8a:e4:f8:
d6:ea:73:9e:67:98:c1:24:08:12:26:27:c8:02:8a:
02:60:b4:5f:5c:ac:09:fc:20:0e:0f:81:5d:9e:49:
61:b7:23:da:7d:da:8c:87:29:e9:e8:83:87:4c:ae:
25:48:74:44:61:79:34:2d:9b:a4:26:cf:dd:82:56:
8e:ee:1a:05:be:89:47:25:a7:b0:a6:41:4d:bb:34:
6b:86:95:23:ab:3e:59:79:ce:53:46:28:84:be:37:
d0:a3:be:3c:b3:ba:29:87:8d:e7:70:ed:22:76:0c:
9b:f2:e6:98:8c:6a:d7:12:a6:3c:83:db:76:ae:b9:
4e:f8:3c:80:3b:8d:fd:bd:8d:9a:b1:79:b9:56:dd:
1d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1D:C9:41:80:CA:CE:D5:9A:CA:96:B9:AB:0C:D1:96:DE:01:38:0E
X509v3 Authority Key Identifier:
keyid:56:95:C5:4A:09:59:3D:DC:83:FA:CE:12:DB:52:BF:6A:22:B9:76:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VpXFSglZPdyD-s4S21K_aiK5du0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:28:a0:5a:f4:70:32:bb:7d:6f:ac:e7:a3:3d:ed:32:0c:0d:
2b:1e:9e:6f:c7:cf:fb:f9:e2:43:17:58:ee:6c:be:c1:f4:aa:
bc:55:76:18:43:05:38:8c:45:f9:df:ed:d3:03:57:01:5b:fc:
e9:23:48:a0:08:86:da:e7:e5:c6:3c:75:3e:10:34:24:b7:9b:
a4:c2:64:b4:a9:f0:38:bc:89:67:4a:1c:02:b4:72:97:e4:b8:
f0:9b:3d:e3:08:d2:06:9e:d8:4c:c6:db:42:94:b8:61:c4:35:
d7:00:92:3b:4b:4b:e5:06:3a:97:bd:35:2b:b9:39:81:32:36:
ff:90:a7:cc:4d:f4:c5:51:82:f5:da:c3:30:65:0f:76:53:a7:
cd:72:ce:be:4e:7e:89:fc:5c:07:ec:79:94:20:4f:f9:66:62:
76:b6:ea:c1:01:15:a9:c5:05:e8:e3:1c:22:41:bc:13:69:e4:
b8:79:42:d1:7d:26:b1:02:c8:f9:ea:ce:10:6c:a0:4d:a9:50:
c5:93:7d:79:c2:a1:02:27:e2:2e:64:b7:dd:65:12:16:e9:6d:
7d:18:dc:7e:99:ea:52:4a:17:0c:bb:cf:cc:cd:b4:bd:54:ec:
f9:c2:4a:83:01:47:c1:8d:90:f3:28:23:27:44:ce:db:b9:4d:
79:b5:b5:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0HqXWJxYyaKVwJfUpyFyhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2OTVjNTRhMDk1OTNkZGM4M2ZhY2UxMmRiNTJiZjZhMjJi
OTc2ZWQwHhcNMjUwNDI2MjIwMTI3WhcNMjUwNDI3MjIwMTI3WjAzMTEwLwYDVQQD
EyhmZDFkYzk0MTgwY2FjZWQ1OWFjYTk2YjlhYjBjZDE5NmRlMDEzODBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnomDQOkJP1EVVzZ5hN+TT6nP8yP/
NQXtEZDBjoQYIxiezYoKDvXpUNpGxBhFI0cnwjHeFTPoMibZOw7e5wmx87bkojzd
iwmUoDwAvz6apk3NTCZfB27ynrOrZBXJcY8BQxPALeP1WuTlFEyuCPm2sYJjACOK
5PjW6nOeZ5jBJAgSJifIAooCYLRfXKwJ/CAOD4FdnklhtyPafdqMhynp6IOHTK4l
SHREYXk0LZukJs/dglaO7hoFvolHJaewpkFNuzRrhpUjqz5Zec5TRiiEvjfQo748
s7oph43ncO0idgyb8uaYjGrXEqY8g9t2rrlO+DyAO439vY2asXm5Vt0dwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0dyUGAys7VmsqWuasM0ZbeATgOMB8GA1UdIwQY
MBaAFFaVxUoJWT3cg/rOEttSv2oiuXbtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnBYRlNnbFpQZHlELXM0UzIxS19haUs1ZHUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9lZWI1MTctYjM4Yi00MDczLWEyYWUt
ZTNmYTllNjNiOWJjLzEvVnBYRlNnbFpQZHlELXM0UzIxS19haUs1ZHUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9lZWI1MTctYjM4Yi00MDczLWEyYWUtZTNmYTllNjNiOWJj
LzEvVnBYRlNnbFpQZHlELXM0UzIxS19haUs1ZHUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPiigWvRw
Mrt9b6znoz3tMgwNKx6eb8fP+/niQxdY7my+wfSqvFV2GEMFOIxF+d/t0wNXAVv8
6SNIoAiG2uflxjx1PhA0JLebpMJktKnwOLyJZ0ocArRyl+S48Js94wjSBp7YTMbb
QpS4YcQ11wCSO0tL5QY6l701K7k5gTI2/5CnzE30xVGC9drDMGUPdlOnzXLOvk5+
ifxcB+x5lCBP+WZidrbqwQEVqcUF6OMcIkG8E2nkuHlC0X0msQLI+erOEGygTalQ
xZN9ecKhAifiLmS33WUSFultfRjcfpnqUkoXDLvPzM20vVTs+cJKgwFHwY2Q8ygj
J0TO27lNebW1Gg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:43:56 2025 by rpki-client