Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
File: VFmECNI871JWD36q1OHbDIYgYsM.mft (raw, json)
Hash identifier: YZr1P9lK5b7btQr1EaYybySiY6oAKrC4ofoh7Y/MiUo=
Subject key identifier: 77:57:04:43:4E:75:A1:F9:BB:A2:C3:1C:23:3F:B4:35:85:63:AC:79
Authority key identifier: 54:59:84:08:D2:3C:EF:52:56:0F:7E:AA:D4:E1:DB:0C:86:20:62:C3
Certificate issuer: /CN=54598408d23cef52560f7eaad4e1db0c862062c3
Certificate serial: 01967D20FDBDE3541835356272BFA8CD751F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 16:00:36 +0000
Manifest this update: Mon 28 Apr 2025 16:00:36 +0000
Manifest next update: Tue 29 Apr 2025 16:00:36 +0000
Files and hashes: 1: 9dTJ-nYACxpnRY5rhOVsQaAIp6o.roa (hash: IImECG5Z8yt26nxcW9N1eIdxFCugxBSzO203A94ADp0=)
2: VFmECNI871JWD36q1OHbDIYgYsM.crl (hash: Z9KFx0LWpdjrm4FP4+XqH00/UpVPIjgxW2I9zilNcW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:20:fd:bd:e3:54:18:35:35:62:72:bf:a8:cd:75:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54598408d23cef52560f7eaad4e1db0c862062c3
Validity
Not Before: Apr 28 16:00:36 2025 GMT
Not After : Apr 29 16:00:36 2025 GMT
Subject: CN=775704434e75a1f9bba2c31c233fb4358563ac79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:42:b0:fd:ae:7b:cb:a6:52:4c:40:bc:b0:94:
b4:54:38:39:b6:d3:1a:06:38:d0:65:55:86:4f:53:
40:66:0b:85:de:55:90:90:de:de:ea:e3:f7:e9:96:
3c:d2:67:e7:b5:03:b2:cd:57:29:67:6f:09:24:a8:
d2:63:07:b0:ff:c1:4c:dd:19:7f:2d:a7:f8:3e:69:
7c:86:5a:2d:57:33:bb:dd:3d:60:85:57:da:98:c0:
49:4b:69:bc:92:e8:b0:34:92:90:11:ed:83:d7:4d:
93:75:51:05:37:4b:23:f6:d3:56:6f:82:d0:bb:ad:
7d:67:37:20:41:83:0e:ad:01:4b:16:92:39:a7:d4:
da:64:6d:b7:bb:94:fa:5c:c0:8d:24:dd:5a:4d:c5:
91:71:fc:86:19:4d:50:a0:71:5a:58:ff:95:f1:77:
0e:2f:c3:a6:cd:43:32:e6:d8:a4:c4:50:57:e6:00:
47:55:07:5b:9c:80:ac:04:b6:d9:7f:e8:73:7e:f3:
d2:1a:09:06:46:28:2e:87:f7:6e:96:26:a4:20:c4:
c7:f9:a2:39:95:79:b9:36:52:12:29:8e:41:a3:23:
dd:a2:d2:3b:33:eb:42:09:03:2e:08:9c:83:53:ed:
1e:ed:d5:52:f7:56:00:14:d2:3a:02:ad:78:7c:6c:
2f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:57:04:43:4E:75:A1:F9:BB:A2:C3:1C:23:3F:B4:35:85:63:AC:79
X509v3 Authority Key Identifier:
keyid:54:59:84:08:D2:3C:EF:52:56:0F:7E:AA:D4:E1:DB:0C:86:20:62:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:11:85:ed:53:3c:96:34:5e:7f:ad:6a:e5:7e:1e:b5:ff:34:
75:2c:e9:dc:a9:e2:93:c0:a0:e9:b7:8a:4e:be:b1:d3:42:19:
65:60:ed:cd:7e:74:bc:24:56:f3:16:93:9a:0a:ac:87:3a:61:
17:b0:14:19:98:97:43:f1:ca:20:d6:eb:66:ac:9e:87:16:eb:
97:6f:9a:42:69:13:79:e1:8c:cb:b7:d2:94:fd:87:55:c5:f9:
f9:a0:fc:09:26:d2:6d:4a:6d:d5:2b:f6:c7:ed:d9:ef:23:84:
6d:ff:de:c7:b0:46:2c:2d:66:14:19:cf:5b:d8:f8:5a:17:2f:
db:7d:72:20:09:31:aa:9d:7c:cd:97:2c:8d:50:35:88:fb:ac:
fd:36:cb:0e:91:30:12:c0:00:7b:e6:6a:ed:79:03:2f:ec:8a:
37:61:a9:4d:9d:de:7c:7b:a8:e4:97:fc:96:44:bd:55:de:ee:
cd:83:2d:af:50:d5:08:31:cf:6e:2a:97:86:34:70:1a:13:e5:
aa:0b:e9:6f:40:b7:a7:93:8f:fa:e8:9a:ba:2f:3c:e8:f8:4c:
a2:38:80:51:f5:22:a2:5a:97:33:02:91:d5:54:dd:80:ea:ac:
76:27:68:5e:3f:54:d8:62:3f:cd:ef:93:41:26:75:2c:0b:a2:
d5:bb:49:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9IP2941QYNTVicr+ozXUfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NTk4NDA4ZDIzY2VmNTI1NjBmN2VhYWQ0ZTFkYjBjODYy
MDYyYzMwHhcNMjUwNDI4MTYwMDM2WhcNMjUwNDI5MTYwMDM2WjAzMTEwLwYDVQQD
Eyg3NzU3MDQ0MzRlNzVhMWY5YmJhMmMzMWMyMzNmYjQzNTg1NjNhYzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0Kw/a57y6ZSTEC8sJS0VDg5ttMa
BjjQZVWGT1NAZguF3lWQkN7e6uP36ZY80mfntQOyzVcpZ28JJKjSYwew/8FM3Rl/
Laf4Pml8hlotVzO73T1ghVfamMBJS2m8kuiwNJKQEe2D102TdVEFN0sj9tNWb4LQ
u619ZzcgQYMOrQFLFpI5p9TaZG23u5T6XMCNJN1aTcWRcfyGGU1QoHFaWP+V8XcO
L8OmzUMy5tikxFBX5gBHVQdbnICsBLbZf+hzfvPSGgkGRiguh/duliakIMTH+aI5
lXm5NlISKY5BoyPdotI7M+tCCQMuCJyDU+0e7dVS91YAFNI6Aq14fGwvIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdXBENOdaH5u6LDHCM/tDWFY6x5MB8GA1UdIwQY
MBaAFFRZhAjSPO9SVg9+qtTh2wyGIGLDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkZtRUNOSTg3MUpXRDM2cTFPSGJESVlnWXNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9mOWQxNTItY2EwMC00NmM0LTkzNmEt
ZTkwOTNmZWUzZmQzLzEvVkZtRUNOSTg3MUpXRDM2cTFPSGJESVlnWXNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9mOWQxNTItY2EwMC00NmM0LTkzNmEtZTkwOTNmZWUzZmQz
LzEvVkZtRUNOSTg3MUpXRDM2cTFPSGJESVlnWXNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmxGF7VM8
ljRef61q5X4etf80dSzp3Knik8Cg6beKTr6x00IZZWDtzX50vCRW8xaTmgqshzph
F7AUGZiXQ/HKINbrZqyehxbrl2+aQmkTeeGMy7fSlP2HVcX5+aD8CSbSbUpt1Sv2
x+3Z7yOEbf/ex7BGLC1mFBnPW9j4Whcv231yIAkxqp18zZcsjVA1iPus/TbLDpEw
EsAAe+Zq7XkDL+yKN2GpTZ3efHuo5Jf8lkS9Vd7uzYMtr1DVCDHPbiqXhjRwGhPl
qgvpb0C3p5OP+uiaui886PhMojiAUfUiolqXMwKR1VTdgOqsdidoXj9U2GI/ze+T
QSZ1LAui1btJ5w==
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:02:52 2025 by rpki-client