Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
File: vIPChDwWSbAFTJEST-4DEUCV4WM.mft (raw, json)
Hash identifier: eRhzdPM8fLv1G453/hwKjusUpxB32fliwdP/FvKEAYU=
Subject key identifier: 92:F9:8B:31:89:3B:B7:94:99:89:76:F4:C6:FE:24:DA:99:A9:69:21
Authority key identifier: BC:83:C2:84:3C:16:49:B0:05:4C:91:12:4F:EE:03:11:40:95:E1:63
Certificate issuer: /CN=bc83c2843c1649b0054c91124fee03114095e163
Certificate serial: 01967DC59DDF9C9C3D68297485B3ED97AFD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 19:00:25 +0000
Manifest this update: Mon 28 Apr 2025 19:00:25 +0000
Manifest next update: Tue 29 Apr 2025 19:00:25 +0000
Files and hashes: 1: SyfvPrUk0EqUlUibCeR9AFkwGwg.roa (hash: zvu0Xkf7wJgRiFUAHEOyER7LyU5jW8xnRDY/dZI92fo=)
2: vIPChDwWSbAFTJEST-4DEUCV4WM.crl (hash: CPtgG9j+YyvnvDwEW6DkqA2U0/1lKOwCpypSSO+sCcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c5:9d:df:9c:9c:3d:68:29:74:85:b3:ed:97:af:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc83c2843c1649b0054c91124fee03114095e163
Validity
Not Before: Apr 28 19:00:25 2025 GMT
Not After : Apr 29 19:00:25 2025 GMT
Subject: CN=92f98b31893bb794998976f4c6fe24da99a96921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b7:55:61:e9:c8:2b:92:20:7b:c1:9f:01:74:
b0:52:a3:2e:2d:2a:93:7b:6a:45:6c:e3:af:85:bc:
e9:1e:56:a6:e0:50:ba:35:96:8f:d9:be:7d:c9:7b:
c0:1d:5e:42:ff:c3:2b:d8:73:fe:6e:55:17:f2:29:
42:0f:49:9e:20:01:2f:61:9c:ba:eb:9b:d3:b0:2b:
9c:b4:5c:57:9f:cc:ef:d0:3d:d1:7e:32:33:23:79:
de:dc:be:d4:dc:23:6e:4d:81:2b:c5:bc:63:6a:69:
05:f5:8f:e5:e6:b5:9d:50:f1:97:e8:ee:75:fe:5b:
41:8f:4e:33:40:5e:c0:91:62:26:b5:c0:e4:62:e9:
53:1e:8d:68:7a:d1:d1:22:42:2c:ea:f9:5c:33:c9:
e0:b3:4c:29:b3:e3:1d:d2:80:f8:85:97:e9:05:9c:
8b:b2:8f:d3:94:2b:8a:60:ac:b3:7c:95:64:d2:6b:
8e:84:55:e1:93:21:4c:90:66:d7:f6:42:3a:fe:54:
80:42:2d:ec:e7:3a:49:02:93:d9:ee:89:7c:f3:9e:
41:91:a0:3f:f1:83:9b:13:80:4b:bf:5e:00:ab:74:
36:67:7f:d6:3e:f9:52:66:a2:c4:b5:49:3d:cd:86:
cf:49:c7:ab:ac:70:56:42:28:91:03:1d:e5:f2:94:
4b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F9:8B:31:89:3B:B7:94:99:89:76:F4:C6:FE:24:DA:99:A9:69:21
X509v3 Authority Key Identifier:
keyid:BC:83:C2:84:3C:16:49:B0:05:4C:91:12:4F:EE:03:11:40:95:E1:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:03:03:2f:70:b0:95:65:6c:0c:2e:24:1e:32:85:8b:04:68:
db:cd:f7:05:e4:99:11:9b:0c:be:76:6f:8c:8f:32:90:56:73:
2e:46:1f:3d:c4:46:4a:87:7e:3a:0e:f8:30:f6:7a:e1:27:6e:
e8:14:1d:00:19:79:e3:60:34:5f:d5:8b:d1:ef:a8:b6:7b:3c:
3e:21:c4:1d:83:41:8a:2b:d3:42:33:f8:94:7e:02:f3:54:04:
b9:a2:fc:19:42:97:a6:41:73:58:4c:39:23:bf:15:03:e6:e3:
18:53:6c:27:bd:05:07:fd:f3:24:7f:f6:d6:84:67:85:a2:fa:
7e:b7:9f:a9:9d:a4:74:b7:cc:2d:61:eb:00:90:9b:8d:46:83:
bc:8d:ee:19:66:24:e6:e5:45:61:28:1c:6e:f6:76:68:87:e8:
93:8f:02:74:d5:2e:3b:e1:f2:da:67:2d:9b:fa:ef:e9:c0:67:
36:f0:a4:e0:06:44:f4:1d:b6:6d:e9:20:08:3c:7a:77:4d:06:
ca:7b:59:52:c3:ed:e2:37:d5:ad:67:dc:8e:77:41:47:1e:c1:
79:55:70:38:5b:12:ec:62:53:dd:d9:06:8c:fc:91:f5:11:51:
d7:64:15:2e:c4:ed:6c:b9:37:46:6a:f3:53:58:7b:d4:30:c0:
2c:22:f1:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9xZ3fnJw9aCl0hbPtl6/QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjODNjMjg0M2MxNjQ5YjAwNTRjOTExMjRmZWUwMzExNDA5
NWUxNjMwHhcNMjUwNDI4MTkwMDI1WhcNMjUwNDI5MTkwMDI1WjAzMTEwLwYDVQQD
Eyg5MmY5OGIzMTg5M2JiNzk0OTk4OTc2ZjRjNmZlMjRkYTk5YTk2OTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7dVYenIK5Ige8GfAXSwUqMuLSqT
e2pFbOOvhbzpHlam4FC6NZaP2b59yXvAHV5C/8Mr2HP+blUX8ilCD0meIAEvYZy6
65vTsCuctFxXn8zv0D3RfjIzI3ne3L7U3CNuTYErxbxjamkF9Y/l5rWdUPGX6O51
/ltBj04zQF7AkWImtcDkYulTHo1oetHRIkIs6vlcM8ngs0wps+Md0oD4hZfpBZyL
so/TlCuKYKyzfJVk0muOhFXhkyFMkGbX9kI6/lSAQi3s5zpJApPZ7ol8855BkaA/
8YObE4BLv14Aq3Q2Z3/WPvlSZqLEtUk9zYbPScerrHBWQiiRAx3l8pRLdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJL5izGJO7eUmYl29Mb+JNqZqWkhMB8GA1UdIwQY
MBaAFLyDwoQ8FkmwBUyREk/uAxFAleFjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdklQQ2hEd1dTYkFGVEpFU1QtNERFVUNWNFdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hNzU5NDYtNTdiNC00MWViLWI2YjUt
NTI5NWY1YjNmMTliLzEvdklQQ2hEd1dTYkFGVEpFU1QtNERFVUNWNFdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9hNzU5NDYtNTdiNC00MWViLWI2YjUtNTI5NWY1YjNmMTli
LzEvdklQQ2hEd1dTYkFGVEpFU1QtNERFVUNWNFdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqgMDL3Cw
lWVsDC4kHjKFiwRo2833BeSZEZsMvnZvjI8ykFZzLkYfPcRGSod+Og74MPZ64Sdu
6BQdABl542A0X9WL0e+otns8PiHEHYNBiivTQjP4lH4C81QEuaL8GUKXpkFzWEw5
I78VA+bjGFNsJ70FB/3zJH/21oRnhaL6frefqZ2kdLfMLWHrAJCbjUaDvI3uGWYk
5uVFYSgcbvZ2aIfok48CdNUuO+Hy2mctm/rv6cBnNvCk4AZE9B22bekgCDx6d00G
yntZUsPt4jfVrWfcjndBRx7BeVVwOFsS7GJT3dkGjPyR9RFR12QVLsTtbLk3Rmrz
U1h71DDALCLxdg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:47 2025 by rpki-client