Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
File: 2Vvf164gaHHjgmf0V3hiERhk2C8.mft (raw, json)
Hash identifier: 7BRmZ8lZfW7dAQ5Q+GsVOak3BF0M31KQoCcDI8c6Tu8=
Subject key identifier: 83:CD:00:D5:20:7D:2E:9E:CC:C2:64:D8:F3:0A:87:2B:D9:92:AC:2F
Authority key identifier: D9:5B:DF:D7:AE:20:68:71:E3:82:67:F4:57:78:62:11:18:64:D8:2F
Certificate issuer: /CN=d95bdfd7ae206871e38267f4577862111864d82f
Certificate serial: 01968880329DC83175B89E4019DBEC6584E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
Manifest number: FC
Signing time: Wed 30 Apr 2025 21:00:24 +0000
Manifest this update: Wed 30 Apr 2025 21:00:24 +0000
Manifest next update: Thu 01 May 2025 21:00:24 +0000
Files and hashes: 1: 2Vvf164gaHHjgmf0V3hiERhk2C8.crl (hash: 7L4VJIVI+gjnGA0c5cQW7TNIEaa8p5miUoOVATDH6+s=)
2: yYyiNsgvxodzcWtsJth3gtqP74s.roa (hash: h9GU418V8HLDeWxchLf1ERx3rIBgo7WWOa5d5upmucg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:80:32:9d:c8:31:75:b8:9e:40:19:db:ec:65:84:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d95bdfd7ae206871e38267f4577862111864d82f
Validity
Not Before: Apr 30 21:00:24 2025 GMT
Not After : May 1 21:00:24 2025 GMT
Subject: CN=83cd00d5207d2e9eccc264d8f30a872bd992ac2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8f:ae:35:d3:53:be:d6:2e:4d:b0:a0:db:fd:
8a:15:7d:93:23:ab:0e:1c:96:a9:c5:ea:ae:aa:b1:
94:0c:7d:e1:52:a4:c7:fb:c6:8c:bb:89:31:dd:d0:
9f:c1:45:74:2f:be:0d:5a:7c:b4:ae:25:c5:c6:fe:
90:cb:a9:4f:44:df:ee:73:22:a6:b4:a0:9c:e7:2a:
5b:58:f4:d7:3f:49:0c:6b:3b:7f:9b:1d:9f:c1:f2:
de:34:8d:06:f4:08:14:0f:5c:89:c6:02:f9:1f:b9:
e0:dd:33:69:a4:08:74:c1:63:3d:ad:1d:ed:d8:74:
5c:c1:2c:e2:03:31:32:11:2b:b1:c9:b4:3b:db:db:
8a:3d:a5:93:95:e4:81:34:60:c9:ff:d1:35:99:8c:
da:3d:47:75:d1:c8:c2:8d:99:73:0d:29:76:cb:a8:
0c:30:ba:3b:97:27:64:b3:bd:49:f1:53:26:e0:0a:
78:b3:9b:db:c7:e0:dd:b3:a5:ee:0b:db:54:0f:09:
a2:4d:f0:3b:2b:56:a4:a7:d2:f5:0a:32:20:65:3a:
5a:ff:7e:d4:44:72:3e:a7:ba:ef:d2:21:89:50:a4:
30:89:eb:bc:a2:16:16:0e:bd:e0:8b:0c:78:9d:3d:
05:5f:60:90:f2:b1:cc:68:ce:dd:c2:56:55:4d:af:
8b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CD:00:D5:20:7D:2E:9E:CC:C2:64:D8:F3:0A:87:2B:D9:92:AC:2F
X509v3 Authority Key Identifier:
keyid:D9:5B:DF:D7:AE:20:68:71:E3:82:67:F4:57:78:62:11:18:64:D8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:6b:aa:b8:67:48:68:21:33:05:cf:87:b4:6d:cd:cc:18:91:
01:9c:d4:e7:01:21:2f:98:3c:55:71:b6:6b:48:27:d6:b7:f5:
45:35:5d:e6:22:07:cf:3e:df:16:5e:16:31:b5:f8:2b:17:9e:
b6:27:7e:5e:62:51:42:25:84:cd:1e:a4:94:03:b8:50:fb:1c:
44:13:5e:2f:00:f4:5f:a3:e9:e2:2e:ce:8c:6a:0b:cc:89:dc:
59:55:8b:30:47:40:53:a1:38:95:f7:c2:28:16:55:90:2d:d6:
06:e4:be:0e:fa:36:9d:da:be:61:04:1e:c3:ef:53:64:d2:c0:
7e:b1:2b:57:e4:4a:13:0c:91:a9:37:ba:b3:20:13:72:23:f9:
86:62:33:16:be:d9:09:fb:be:b8:5c:67:64:72:f6:08:31:7f:
17:c8:b3:ae:02:c9:f4:6a:c4:83:73:70:8a:8b:45:5c:57:37:
d0:9f:b3:5a:2e:98:81:e7:66:43:f5:25:bf:ef:80:cc:d5:46:
fa:44:e3:5b:0e:07:63:7c:68:34:3f:66:53:ca:0b:5e:1a:9f:
49:fc:4e:58:75:b3:fa:a8:ec:8c:87:82:cd:f5:a3:72:5d:69:
25:73:cf:9f:36:10:49:73:63:b6:54:fc:cc:16:bf:10:25:86:
89:29:b5:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaIgDKdyDF1uJ5AGdvsZYTpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NWJkZmQ3YWUyMDY4NzFlMzgyNjdmNDU3Nzg2MjExMTg2
NGQ4MmYwHhcNMjUwNDMwMjEwMDI0WhcNMjUwNTAxMjEwMDI0WjAzMTEwLwYDVQQD
Eyg4M2NkMDBkNTIwN2QyZTllY2NjMjY0ZDhmMzBhODcyYmQ5OTJhYzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI+uNdNTvtYuTbCg2/2KFX2TI6sO
HJapxequqrGUDH3hUqTH+8aMu4kx3dCfwUV0L74NWny0riXFxv6Qy6lPRN/ucyKm
tKCc5ypbWPTXP0kMazt/mx2fwfLeNI0G9AgUD1yJxgL5H7ng3TNppAh0wWM9rR3t
2HRcwSziAzEyESuxybQ729uKPaWTleSBNGDJ/9E1mYzaPUd10cjCjZlzDSl2y6gM
MLo7lydks71J8VMm4Ap4s5vbx+Dds6XuC9tUDwmiTfA7K1akp9L1CjIgZTpa/37U
RHI+p7rv0iGJUKQwieu8ohYWDr3giwx4nT0FX2CQ8rHMaM7dwlZVTa+LoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPNANUgfS6ezMJk2PMKhyvZkqwvMB8GA1UdIwQY
MBaAFNlb39euIGhx44Jn9Fd4YhEYZNgvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlZ2ZjE2NGdhSEhqZ21mMFYzaGlFUmhrMkM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hN2VlOTktNjE2MS00OWRhLTg3ZWIt
YThiZjgzNTcwNzlmLzEvMlZ2ZjE2NGdhSEhqZ21mMFYzaGlFUmhrMkM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hN2VlOTktNjE2MS00OWRhLTg3ZWItYThiZjgzNTcwNzlm
LzEvMlZ2ZjE2NGdhSEhqZ21mMFYzaGlFUmhrMkM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVWuquGdI
aCEzBc+HtG3NzBiRAZzU5wEhL5g8VXG2a0gn1rf1RTVd5iIHzz7fFl4WMbX4Kxee
tid+XmJRQiWEzR6klAO4UPscRBNeLwD0X6Pp4i7OjGoLzIncWVWLMEdAU6E4lffC
KBZVkC3WBuS+Dvo2ndq+YQQew+9TZNLAfrErV+RKEwyRqTe6syATciP5hmIzFr7Z
Cfu+uFxnZHL2CDF/F8izrgLJ9GrEg3NwiotFXFc30J+zWi6YgedmQ/Ulv++AzNVG
+kTjWw4HY3xoND9mU8oLXhqfSfxOWHWz+qjsjIeCzfWjcl1pJXPPnzYQSXNjtlT8
zBa/ECWGiSm1/Q==
-----END CERTIFICATE-----
Generated at Thu May 1 00:43:08 2025 by rpki-client