Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft
File: vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft (raw, json)
Hash identifier: z+7cHzGU0yF7UMHEf/mDx9JD1a9MGSn7CvbWav4xfv8=
Subject key identifier: C4:E7:0C:6C:45:9E:CE:20:61:B4:49:A1:56:BD:DB:06:60:5F:7C:87
Authority key identifier: BD:82:E6:0D:07:2E:51:85:43:5A:90:0E:32:3F:46:38:06:D4:33:C9
Certificate issuer: /CN=bd82e60d072e5185435a900e323f463806d433c9
Certificate serial: 01967C44FD7A46322ADF6A6A6091ABA73323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYLmDQcuUYVDWpAOMj9GOAbUM8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 12:00:18 +0000
Manifest this update: Mon 28 Apr 2025 12:00:18 +0000
Manifest next update: Tue 29 Apr 2025 12:00:18 +0000
Files and hashes: 1: vYLmDQcuUYVDWpAOMj9GOAbUM8k.crl (hash: QhDMbLMhlOoUmp4U34CUMyVVxywh7eIeSqpllo28WNg=)
2: zHFsSZojvy_X7uL-vPL2okM6zhI.roa (hash: n8rylT6z4CcEms6K9HKeeDe6KPQo1phvGPnzqc1vlUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vYLmDQcuUYVDWpAOMj9GOAbUM8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 12:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:44:fd:7a:46:32:2a:df:6a:6a:60:91:ab:a7:33:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd82e60d072e5185435a900e323f463806d433c9
Validity
Not Before: Apr 28 12:00:18 2025 GMT
Not After : Apr 29 12:00:18 2025 GMT
Subject: CN=c4e70c6c459ece2061b449a156bddb06605f7c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8b:7e:2c:90:ab:f3:bb:88:c8:ff:d0:96:f7:
a0:38:4d:f6:55:64:aa:1b:70:88:9c:c2:08:16:ef:
27:07:73:93:d5:1e:c0:bb:af:67:a2:74:15:c4:0b:
d4:16:e2:77:8a:19:04:94:a2:c4:57:89:cf:a5:8d:
7a:5a:e4:3b:8f:64:c5:17:5c:63:c9:22:d1:aa:09:
62:c6:59:20:ed:88:42:2d:68:8a:e5:00:e1:86:b0:
a5:36:b1:bb:34:8a:40:55:27:9e:34:ef:2d:8f:4e:
74:b6:0a:a4:ce:4e:b8:b2:92:10:50:99:52:53:80:
0e:5a:00:ae:e4:ff:5d:27:81:74:21:9d:05:91:b0:
cd:9c:1f:8b:ff:97:9c:7f:9f:8d:44:4d:d1:24:4d:
3d:00:73:58:f8:2a:f4:97:c5:11:7f:da:6b:5f:f9:
f1:30:da:54:66:b4:77:dd:75:c2:4d:4b:de:43:11:
3f:37:6a:02:a8:28:f7:e1:f1:68:f2:78:e6:b4:10:
e7:d3:c2:c9:0c:9a:d4:15:f9:34:0c:cf:96:94:a1:
7e:b9:3e:f5:9a:64:a6:3e:5b:b8:c7:52:be:54:a3:
1a:f3:ec:bb:2f:2f:f0:65:f7:cb:dc:3f:05:fa:4a:
5e:f2:9e:dc:3c:47:f6:93:3b:16:1e:92:6e:2c:14:
aa:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E7:0C:6C:45:9E:CE:20:61:B4:49:A1:56:BD:DB:06:60:5F:7C:87
X509v3 Authority Key Identifier:
keyid:BD:82:E6:0D:07:2E:51:85:43:5A:90:0E:32:3F:46:38:06:D4:33:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYLmDQcuUYVDWpAOMj9GOAbUM8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:24:42:db:f6:01:a8:ff:9f:54:8a:d3:78:76:9c:59:c4:12:
5a:8c:df:fb:e5:76:2c:df:3f:06:70:86:83:f7:e4:77:53:04:
e0:fe:d7:de:74:dc:9a:52:f8:73:e0:6b:46:56:b8:aa:6d:91:
a2:de:00:77:32:70:85:f6:98:ae:50:b3:cb:7c:7c:b7:a6:e5:
f4:84:84:66:c2:20:4a:70:91:76:96:8e:a7:05:c9:cc:fe:c3:
64:d1:76:29:9d:b3:d6:79:dc:08:2a:a3:2f:33:fc:e2:7c:4e:
4b:9f:a7:53:0b:73:fe:c8:72:7b:57:f2:d7:eb:1c:d7:a2:37:
82:22:9c:b4:fe:22:b6:07:68:e7:3a:c6:23:35:aa:9e:eb:e4:
98:37:0f:1e:7a:61:32:fc:1d:b9:37:42:d9:c4:77:e2:8f:1e:
b1:ef:c7:7c:d9:7c:48:2f:5d:c7:21:26:41:d7:18:b1:16:55:
c0:97:5f:f4:f1:17:08:16:7e:7f:b7:15:38:dc:0c:26:a4:3f:
59:5c:e3:d8:74:ce:08:7b:3d:ce:be:9b:fd:09:20:88:dc:9c:
2d:d9:b0:8b:4a:7a:fb:45:d4:55:e5:3f:4b:b6:26:c4:f6:42:
ca:f3:73:f3:88:b9:50:1d:2e:7d:86:a4:ad:a5:70:38:fa:e5:
55:cd:4c:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ8RP16RjIq32pqYJGrpzMjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkODJlNjBkMDcyZTUxODU0MzVhOTAwZTMyM2Y0NjM4MDZk
NDMzYzkwHhcNMjUwNDI4MTIwMDE4WhcNMjUwNDI5MTIwMDE4WjAzMTEwLwYDVQQD
EyhjNGU3MGM2YzQ1OWVjZTIwNjFiNDQ5YTE1NmJkZGIwNjYwNWY3Yzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlot+LJCr87uIyP/QlvegOE32VWSq
G3CInMIIFu8nB3OT1R7Au69nonQVxAvUFuJ3ihkElKLEV4nPpY16WuQ7j2TFF1xj
ySLRqglixlkg7YhCLWiK5QDhhrClNrG7NIpAVSeeNO8tj050tgqkzk64spIQUJlS
U4AOWgCu5P9dJ4F0IZ0FkbDNnB+L/5ecf5+NRE3RJE09AHNY+Cr0l8URf9prX/nx
MNpUZrR33XXCTUveQxE/N2oCqCj34fFo8njmtBDn08LJDJrUFfk0DM+WlKF+uT71
mmSmPlu4x1K+VKMa8+y7Ly/wZffL3D8F+kpe8p7cPEf2kzsWHpJuLBSqEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMTnDGxFns4gYbRJoVa92wZgX3yHMB8GA1UdIwQY
MBaAFL2C5g0HLlGFQ1qQDjI/RjgG1DPJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdllMbURRY3VVWVZEV3BBT01qOUdPQWJVTThrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lM2JiYzktNzhjMy00M2EyLWI5YjAt
NDhhY2VmNjcyZTRhLzEvdllMbURRY3VVWVZEV3BBT01qOUdPQWJVTThrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lM2JiYzktNzhjMy00M2EyLWI5YjAtNDhhY2VmNjcyZTRh
LzEvdllMbURRY3VVWVZEV3BBT01qOUdPQWJVTThrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlCRC2/YB
qP+fVIrTeHacWcQSWozf++V2LN8/BnCGg/fkd1ME4P7X3nTcmlL4c+BrRla4qm2R
ot4AdzJwhfaYrlCzy3x8t6bl9ISEZsIgSnCRdpaOpwXJzP7DZNF2KZ2z1nncCCqj
LzP84nxOS5+nUwtz/shye1fy1+sc16I3giKctP4itgdo5zrGIzWqnuvkmDcPHnph
MvwduTdC2cR34o8ese/HfNl8SC9dxyEmQdcYsRZVwJdf9PEXCBZ+f7cVONwMJqQ/
WVzj2HTOCHs9zr6b/QkgiNycLdmwi0p6+0XUVeU/S7YmxPZCyvNz84i5UB0ufYak
raVwOPrlVc1M5g==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:03:37 2025 by rpki-client