Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
File: VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft (raw, json)
Hash identifier: 4hM6bdDav64N7nk7cCRlWdwwjrcETAuwOi215qNW59M=
Subject key identifier: D2:A4:65:E1:9B:A7:C6:53:13:32:D0:F9:B4:01:30:93:5E:A4:C6:57
Authority key identifier: 54:0B:63:D1:9D:86:EA:34:5C:9B:5F:16:93:00:C3:A2:9D:4C:31:C4
Certificate issuer: /CN=540b63d19d86ea345c9b5f169300c3a29d4c31c4
Certificate serial: 01967530AC8976F34F55D8094CC585DB09CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 03:00:46 +0000
Manifest this update: Sun 27 Apr 2025 03:00:46 +0000
Manifest next update: Mon 28 Apr 2025 03:00:46 +0000
Files and hashes: 1: QgsJlqJcTUYG8ULdRGgE3NFD82g.roa (hash: js71yBiScUO+PfDSCeaEzOg8Fh9K6ktXB24Y7dBG/Eo=)
2: VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl (hash: +8P5zVktK/1Gi2f7FNn9kJXEj5JuXf+nxt6aXFoqT/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:ac:89:76:f3:4f:55:d8:09:4c:c5:85:db:09:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540b63d19d86ea345c9b5f169300c3a29d4c31c4
Validity
Not Before: Apr 27 03:00:46 2025 GMT
Not After : Apr 28 03:00:46 2025 GMT
Subject: CN=d2a465e19ba7c6531332d0f9b40130935ea4c657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e5:92:9f:b4:c9:82:b0:d4:12:d0:e8:9a:db:
59:98:d2:e6:50:4a:28:00:1e:72:59:e8:f1:4f:d3:
db:2c:77:2e:63:b4:ab:26:99:be:93:2e:6c:55:7d:
d9:f7:03:f6:2b:7b:a5:06:10:79:cb:c4:be:a2:05:
85:7f:56:4f:a8:3f:ab:37:bd:f5:e1:0d:3f:c5:51:
da:62:31:fb:86:1b:c0:f9:e5:f0:43:b4:46:80:f6:
22:06:04:49:bb:82:67:4d:c6:79:d1:4a:7c:4c:bb:
40:fc:f2:c4:7d:a6:e0:d8:15:71:6e:a3:ed:08:23:
66:52:92:a9:04:df:31:3b:cd:43:dd:30:f2:c0:39:
5b:cb:9b:b9:5d:0a:45:8a:b5:40:50:b1:dd:40:3a:
ba:16:c4:33:5a:83:08:6e:87:f6:fc:26:a1:11:45:
9c:5e:f2:2a:7a:fa:46:8a:8d:49:47:12:b1:db:74:
9b:bb:99:a9:cd:a0:79:c4:e6:d8:81:58:79:56:33:
07:7c:1e:53:9b:18:f4:e7:31:be:39:cd:64:d4:22:
e8:fa:be:d1:84:ae:d8:8c:fd:e9:02:da:67:12:bf:
4f:36:8c:3f:88:dd:5b:48:4b:f0:46:32:9d:d8:bf:
06:ad:fe:c3:74:71:39:45:dd:21:c8:5b:99:26:c8:
ce:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A4:65:E1:9B:A7:C6:53:13:32:D0:F9:B4:01:30:93:5E:A4:C6:57
X509v3 Authority Key Identifier:
keyid:54:0B:63:D1:9D:86:EA:34:5C:9B:5F:16:93:00:C3:A2:9D:4C:31:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e9:45:f2:6b:d0:43:b1:19:3a:4c:55:ee:6e:df:78:26:14:
a1:a0:44:ad:14:b9:bf:55:39:26:57:0e:78:c5:08:f3:64:f3:
e4:a7:dd:11:51:ca:72:6a:cb:71:78:bb:c5:b5:40:4e:36:97:
a9:4f:bd:7a:17:b0:0e:da:c7:c7:7c:97:0e:ca:7f:67:e5:d9:
2a:39:4a:42:00:a4:b2:f0:f6:6a:f6:e0:86:bb:a4:fe:70:cf:
46:dc:58:18:1e:70:e1:ea:ae:4d:43:00:26:1f:26:b4:ba:5e:
8e:ac:f3:2c:28:f2:47:b0:05:37:8f:61:69:08:7d:e6:e8:25:
ca:c5:99:73:59:ab:6c:8a:21:1a:72:3c:87:1c:8b:c6:60:1d:
f7:9e:2e:c0:5b:c8:07:97:23:3d:27:ee:ec:11:73:1b:e3:97:
c3:1f:95:f9:6f:e9:23:01:6c:0a:a8:98:e0:a6:14:46:90:84:
35:a9:28:a7:5d:2d:8c:18:12:20:3e:0a:10:56:6b:7f:17:1e:
45:98:97:0e:a4:f9:20:fa:57:d7:a2:1b:83:50:17:7a:6d:28:
95:1e:22:4b:ad:57:a5:c9:eb:6f:bd:9a:8e:ea:43:2f:95:49:
99:6d:03:33:68:a6:a5:b5:02:6a:07:1b:33:97:54:6b:76:70:
96:3a:7b:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1MKyJdvNPVdgJTMWF2wnLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MGI2M2QxOWQ4NmVhMzQ1YzliNWYxNjkzMDBjM2EyOWQ0
YzMxYzQwHhcNMjUwNDI3MDMwMDQ2WhcNMjUwNDI4MDMwMDQ2WjAzMTEwLwYDVQQD
EyhkMmE0NjVlMTliYTdjNjUzMTMzMmQwZjliNDAxMzA5MzVlYTRjNjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOWSn7TJgrDUEtDomttZmNLmUEoo
AB5yWejxT9PbLHcuY7SrJpm+ky5sVX3Z9wP2K3ulBhB5y8S+ogWFf1ZPqD+rN731
4Q0/xVHaYjH7hhvA+eXwQ7RGgPYiBgRJu4JnTcZ50Up8TLtA/PLEfabg2BVxbqPt
CCNmUpKpBN8xO81D3TDywDlby5u5XQpFirVAULHdQDq6FsQzWoMIbof2/CahEUWc
XvIqevpGio1JRxKx23Sbu5mpzaB5xObYgVh5VjMHfB5Tmxj05zG+Oc1k1CLo+r7R
hK7YjP3pAtpnEr9PNow/iN1bSEvwRjKd2L8Grf7DdHE5Rd0hyFuZJsjOuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKkZeGbp8ZTEzLQ+bQBMJNepMZXMB8GA1UdIwQY
MBaAFFQLY9Gdhuo0XJtfFpMAw6KdTDHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkF0ajBaMkc2alJjbTE4V2t3RERvcDFNTWNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9kOTg0NzItZjBiNy00ZGYzLTkyNWIt
MDAwNGIyNzQ2MzBiLzEvVkF0ajBaMkc2alJjbTE4V2t3RERvcDFNTWNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9kOTg0NzItZjBiNy00ZGYzLTkyNWItMDAwNGIyNzQ2MzBi
LzEvVkF0ajBaMkc2alJjbTE4V2t3RERvcDFNTWNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANelF8mvQ
Q7EZOkxV7m7feCYUoaBErRS5v1U5JlcOeMUI82Tz5KfdEVHKcmrLcXi7xbVATjaX
qU+9ehewDtrHx3yXDsp/Z+XZKjlKQgCksvD2avbghruk/nDPRtxYGB5w4equTUMA
Jh8mtLpejqzzLCjyR7AFN49haQh95uglysWZc1mrbIohGnI8hxyLxmAd954uwFvI
B5cjPSfu7BFzG+OXwx+V+W/pIwFsCqiY4KYURpCENakop10tjBgSID4KEFZrfxce
RZiXDqT5IPpX16Ibg1AXem0olR4iS61Xpcnrb72ajupDL5VJmW0DM2impbUCagcb
M5dUa3Zwljp7Fg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:07:37 2025 by rpki-client