Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
File: 1-VkY92suBLF1FE4jy-SKY8yaqo8.mft (raw, json)
Hash identifier: LjeNJAxMcarfkql04rk97QC8SJAM59Pz8VgVvLBFJeQ=
Subject key identifier: A2:2E:E9:32:10:BF:B4:D8:B3:3E:86:A9:4A:E9:54:45:9C:67:88:C7
Authority key identifier: F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F
Certificate issuer: /CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
Certificate serial: 01968F5DEA20E79033B2B4DC215B5D30B220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
Manifest number: 08D3
Signing time: Fri 02 May 2025 05:00:18 +0000
Manifest this update: Fri 02 May 2025 05:00:18 +0000
Manifest next update: Sat 03 May 2025 05:00:18 +0000
Files and hashes: 1: 1-VkY92suBLF1FE4jy-SKY8yaqo8.crl (hash: u7BZs1Cv9gHQ6AB517N8QWwoymbPVwDDqd2GksTzYRM=)
2: 7-j4zYeoEZb3GyJAS87cCTQvMeg.roa (hash: EAdEDlZP/7sT6Qp3HfzjAY/RfoPmZ+aNXdW6ptqfGUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:5d:ea:20:e7:90:33:b2:b4:dc:21:5b:5d:30:b2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
Validity
Not Before: May 2 05:00:18 2025 GMT
Not After : May 3 05:00:18 2025 GMT
Subject: CN=a22ee93210bfb4d8b33e86a94ae954459c6788c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9a:a7:08:10:da:03:fb:88:13:f5:67:3e:77:
a3:49:2b:32:a8:64:5c:f5:9d:9c:c1:c6:e6:dd:82:
bb:53:f4:df:cf:28:38:a1:f5:4d:c4:85:b8:fa:b3:
72:3d:0c:37:e2:85:99:c9:6e:6a:18:b7:c7:84:d2:
42:60:8d:8a:6d:a6:7c:fa:9f:40:f1:52:7d:37:67:
a0:fc:d4:f7:c4:60:30:b5:82:26:35:2f:40:49:60:
11:f0:f9:43:cc:2b:fd:22:f4:82:69:3d:c3:3d:9b:
67:59:0b:1d:48:6b:73:1e:eb:1c:a0:ce:42:da:8d:
b3:eb:8b:d3:79:1f:ee:3f:71:43:b1:84:24:f2:53:
c9:98:0d:0f:2d:fa:f0:6f:aa:3a:12:6e:ba:b5:df:
72:e4:11:ab:fe:e8:3e:c1:dd:10:9b:45:e3:c8:b6:
bc:fd:fd:d3:99:14:09:9c:ce:2d:6a:87:3d:51:df:
e8:43:bf:02:92:d4:06:28:ea:d4:dd:a2:df:71:7e:
57:2c:b2:7e:cc:aa:99:44:95:d8:ca:1a:66:8a:ea:
12:2c:46:13:ee:fc:18:24:76:93:25:7f:7d:a6:0d:
06:50:37:29:10:29:bd:22:d6:0b:08:96:cd:c8:9f:
56:8c:6f:d8:71:74:00:b9:85:45:77:b1:ac:8b:b7:
53:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2E:E9:32:10:BF:B4:D8:B3:3E:86:A9:4A:E9:54:45:9C:67:88:C7
X509v3 Authority Key Identifier:
keyid:F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:27:3a:e2:ff:2b:a5:29:76:e0:a3:ff:2a:c8:17:ae:84:c3:
05:74:16:4d:1b:62:86:02:2a:8d:85:8b:8f:ec:55:e2:6a:2b:
9e:f5:45:04:a6:bb:e0:de:ba:a9:6c:da:fb:a7:6f:69:33:46:
17:da:15:64:0b:93:b9:e2:ff:c3:e4:a2:7a:c9:20:32:95:88:
6c:92:78:7f:e7:f5:91:dd:19:a7:ef:25:2d:ac:64:ce:03:f8:
91:46:ce:db:ea:a5:2c:6a:43:72:df:66:80:57:17:9d:be:f3:
b1:40:75:2d:08:ed:cc:8a:68:b1:67:40:51:d9:5a:7c:9c:89:
d3:09:28:0d:ec:2e:ff:1c:1a:32:04:75:7b:db:92:be:57:4f:
32:f9:86:3e:7f:2f:de:20:ba:9a:a7:2a:52:85:22:ac:1a:d5:
32:35:87:1d:a5:32:3b:c5:e1:e6:0c:4a:2e:b9:bb:f6:70:13:
80:6e:71:6d:44:2f:a3:10:21:2a:db:0a:95:b2:3e:7e:c5:74:
1d:06:1d:df:48:30:03:fa:08:c2:7d:fd:28:d7:d6:b4:a5:ba:
03:1b:fc:f1:52:e6:f4:d5:f5:1a:23:c6:df:ab:9b:1c:b6:4f:
f6:f7:2d:7b:9b:26:32:32:2c:51:a0:06:d8:0c:bf:5b:09:e0:
31:fe:00:4f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZaPXeog55AzsrTcIVtdMLIgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NTkxOGY3NmIyZTA0YjE3NTE0NGUyM2NiZTQ4YTYzY2M5
YWFhOGYwHhcNMjUwNTAyMDUwMDE4WhcNMjUwNTAzMDUwMDE4WjAzMTEwLwYDVQQD
EyhhMjJlZTkzMjEwYmZiNGQ4YjMzZTg2YTk0YWU5NTQ0NTljNjc4OGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZqnCBDaA/uIE/VnPnejSSsyqGRc
9Z2cwcbm3YK7U/Tfzyg4ofVNxIW4+rNyPQw34oWZyW5qGLfHhNJCYI2KbaZ8+p9A
8VJ9N2eg/NT3xGAwtYImNS9ASWAR8PlDzCv9IvSCaT3DPZtnWQsdSGtzHuscoM5C
2o2z64vTeR/uP3FDsYQk8lPJmA0PLfrwb6o6Em66td9y5BGr/ug+wd0Qm0XjyLa8
/f3TmRQJnM4taoc9Ud/oQ78CktQGKOrU3aLfcX5XLLJ+zKqZRJXYyhpmiuoSLEYT
7vwYJHaTJX99pg0GUDcpECm9ItYLCJbNyJ9WjG/YcXQAuYVFd7Gsi7dTewIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKIu6TIQv7TYsz6GqUrpVEWcZ4jHMB8GA1UdIwQY
MBaAFPlZGPdrLgSxdRROI8vkimPMmqqPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Wa1k5MnN1QkxGMUZFNGp5LVNLWTh5YXFvOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEvMjVkMDkyLTgxYTQtNDdmMy1iZGM2
LTE5Nzc4Yzg3ZmVkNS8xLzEtVmtZOTJzdUJMRjFGRTRqeS1TS1k4eWFxbzgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2ZhLzI1ZDA5Mi04MWE0LTQ3ZjMtYmRjNi0xOTc3OGM4N2Zl
ZDUvMS8xLVZrWTkyc3VCTEYxRkU0anktU0tZOHlhcW84LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtSc6
4v8rpSl24KP/KsgXroTDBXQWTRtihgIqjYWLj+xV4mornvVFBKa74N66qWza+6dv
aTNGF9oVZAuTueL/w+SieskgMpWIbJJ4f+f1kd0Zp+8lLaxkzgP4kUbO2+qlLGpD
ct9mgFcXnb7zsUB1LQjtzIposWdAUdlafJyJ0wkoDewu/xwaMgR1e9uSvldPMvmG
Pn8v3iC6mqcqUoUirBrVMjWHHaUyO8Xh5gxKLrm79nATgG5xbUQvoxAhKtsKlbI+
fsV0HQYd30gwA/oIwn39KNfWtKW6Axv88VLm9NX1GiPG36ubHLZP9vcte5smMjIs
UaAG2Ay/WwngMf4ATw==
-----END CERTIFICATE-----
Generated at Fri May 2 13:16:23 2025 by rpki-client