Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
File: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft (raw, json)
Hash identifier: VNnxTM3SyIelnDSWyywOErUfNZlk8GjZ4AV2lwc8xv8=
Subject key identifier: D7:49:A8:8D:5D:AF:8F:2B:7D:59:AE:31:84:92:1D:5F:B2:00:85:0C
Authority key identifier: BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
Certificate issuer: /CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Certificate serial: 01968435E51805D09765DBDF8A3E52CD29B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
Manifest number: 090C
Signing time: Wed 30 Apr 2025 01:00:46 +0000
Manifest this update: Wed 30 Apr 2025 01:00:46 +0000
Manifest next update: Thu 01 May 2025 01:00:46 +0000
Files and hashes: 1: 4zZX5zJWUsfZ5zmG6bPbMr0lvbs.roa (hash: Qk/9tkVuHYR7bI8BB1K5v6WoVgCSt0kT7wqGusdLxvQ=)
2: REnNHc3EdwxgjNw-VpXGx_g82qg.roa (hash: 124s1GBcl/AFEUck0q3Uo/i9OIRaWtaDN26Tjn+07fQ=)
3: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl (hash: hW4o3oO9Rp+GgkDuoCiFQixapFDdMEJYQX0Xfl4IO90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:35:e5:18:05:d0:97:65:db:df:8a:3e:52:cd:29:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Validity
Not Before: Apr 30 01:00:46 2025 GMT
Not After : May 1 01:00:46 2025 GMT
Subject: CN=d749a88d5daf8f2b7d59ae3184921d5fb200850c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e6:79:e8:77:73:88:47:8e:a7:78:13:8c:3a:
01:a1:da:c1:fd:57:14:ab:be:77:9d:65:e2:ea:6f:
2c:24:48:36:4c:12:b6:cc:e9:71:66:97:12:9f:2d:
68:3e:de:ff:eb:c6:92:31:49:b4:c5:d8:2b:74:ce:
20:69:04:fb:1c:af:40:73:66:e8:0b:51:c4:59:d6:
95:8b:88:f1:bc:d5:26:2d:63:58:3b:87:5c:c3:8f:
6c:6a:8b:fd:4a:bb:26:ad:22:96:c0:e9:b1:9e:d4:
71:63:9f:02:43:af:8f:12:04:e0:55:1c:84:7d:c7:
d1:89:fa:df:52:7a:1c:f2:91:2f:dc:4e:f7:7b:f6:
30:fe:c0:f2:ef:e5:d5:c7:b3:3b:d3:7d:db:24:18:
08:97:81:5f:30:fd:af:71:93:84:c6:28:63:f0:41:
4e:80:c1:df:95:0e:3a:36:bc:1d:a0:34:72:61:77:
44:ea:03:ae:78:20:dd:4d:93:13:29:df:51:e5:46:
2d:a0:cf:cc:e8:83:7d:86:32:2e:c7:15:1b:3d:c3:
f5:b2:bb:c7:20:fc:d5:68:56:ba:db:68:f8:49:1a:
a2:78:33:df:29:0a:1e:02:c0:0e:0e:9c:bb:4a:45:
0c:17:8a:ea:0c:bd:cf:84:5b:6e:db:ee:aa:22:27:
26:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:49:A8:8D:5D:AF:8F:2B:7D:59:AE:31:84:92:1D:5F:B2:00:85:0C
X509v3 Authority Key Identifier:
keyid:BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d3:fe:81:87:ac:de:66:a1:2b:33:d4:b9:3c:cb:fc:dd:ec:
f7:37:47:a3:90:64:49:a0:ef:69:15:3d:7d:c5:95:9d:a9:c2:
0f:f9:df:63:65:0e:cd:0e:07:db:23:3f:e7:f9:54:9d:98:50:
1f:c1:ef:17:31:05:63:81:ac:91:7f:9b:41:45:24:3b:47:94:
9a:24:07:3e:4b:b3:14:5e:cf:40:4d:04:2c:86:bf:be:6e:51:
0d:ff:d2:2f:7b:46:e1:fd:f5:64:d2:73:d1:e8:5e:a5:33:80:
06:da:75:89:96:0f:db:b9:07:60:5c:27:34:25:54:a6:40:50:
b9:8d:26:c6:20:b4:46:5b:0b:2e:5d:2a:0a:eb:11:b5:9f:fc:
a0:cd:e7:a3:0d:51:47:dd:eb:83:cb:29:64:f2:f1:e7:2d:1b:
c2:0f:55:63:52:b5:80:35:c7:46:43:df:a8:aa:ea:72:c7:73:
e7:6a:78:ea:c4:38:b7:6a:4b:8d:90:8e:cf:50:b5:81:00:1a:
40:3a:5c:76:96:64:ae:f2:16:d1:c5:a6:99:5d:89:7f:06:51:
7a:e1:ef:6e:48:9e:6a:90:17:84:dc:0b:f5:3e:12:c9:ca:67:
36:a9:32:8e:e7:19:dd:6b:92:1f:33:a5:58:c3:db:c3:ba:fe:
18:aa:36:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaENeUYBdCXZdvfij5SzSm1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNDQzZjdhYWU0N2UwYWIzOGJjZjhkNTM2Y2NhNjAzNTBk
MTcyNzAwHhcNMjUwNDMwMDEwMDQ2WhcNMjUwNTAxMDEwMDQ2WjAzMTEwLwYDVQQD
EyhkNzQ5YTg4ZDVkYWY4ZjJiN2Q1OWFlMzE4NDkyMWQ1ZmIyMDA4NTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeZ56HdziEeOp3gTjDoBodrB/VcU
q753nWXi6m8sJEg2TBK2zOlxZpcSny1oPt7/68aSMUm0xdgrdM4gaQT7HK9Ac2bo
C1HEWdaVi4jxvNUmLWNYO4dcw49saov9SrsmrSKWwOmxntRxY58CQ6+PEgTgVRyE
fcfRifrfUnoc8pEv3E73e/Yw/sDy7+XVx7M7033bJBgIl4FfMP2vcZOExihj8EFO
gMHflQ46NrwdoDRyYXdE6gOueCDdTZMTKd9R5UYtoM/M6IN9hjIuxxUbPcP1srvH
IPzVaFa622j4SRqieDPfKQoeAsAODpy7SkUMF4rqDL3PhFtu2+6qIicmswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdJqI1dr48rfVmuMYSSHV+yAIUMMB8GA1UdIwQY
MBaAFLxEP3quR+CrOLz41TbMpgNQ0XJwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkVRX2VxNUg0S3M0dlBqVk5zeW1BMURSY25BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83NWI2OGItZmE1Ni00NGI3LWJmYmEt
NTAzNGYxOTk1M2EzLzEvdkVRX2VxNUg0S3M0dlBqVk5zeW1BMURSY25BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC83NWI2OGItZmE1Ni00NGI3LWJmYmEtNTAzNGYxOTk1M2Ez
LzEvdkVRX2VxNUg0S3M0dlBqVk5zeW1BMURSY25BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPdP+gYes
3mahKzPUuTzL/N3s9zdHo5BkSaDvaRU9fcWVnanCD/nfY2UOzQ4H2yM/5/lUnZhQ
H8HvFzEFY4GskX+bQUUkO0eUmiQHPkuzFF7PQE0ELIa/vm5RDf/SL3tG4f31ZNJz
0ehepTOABtp1iZYP27kHYFwnNCVUpkBQuY0mxiC0RlsLLl0qCusRtZ/8oM3now1R
R93rg8spZPLx5y0bwg9VY1K1gDXHRkPfqKrqcsdz52p46sQ4t2pLjZCOz1C1gQAa
QDpcdpZkrvIW0cWmmV2JfwZReuHvbkieapAXhNwL9T4SycpnNqkyjucZ3WuSHzOl
WMPbw7r+GKo2Pg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 03:48:43 2025 by rpki-client