Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
File: _vkYxakzDbvm7uF8uaHWL7yFW94.mft (raw, json)
Hash identifier: ZXYO7VohPvAGky4t/bOj8S9Htlu4SO2kviUr2LJeBYA=
Subject key identifier: 32:B9:ED:DE:C9:85:D2:E9:83:8B:B9:44:16:56:79:5B:95:D7:8D:C2
Authority key identifier: FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
Certificate issuer: /CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Certificate serial: 01968BEF7DFB1B399B3DF2A8BD01307890D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
Manifest number: 083F
Signing time: Thu 01 May 2025 13:00:50 +0000
Manifest this update: Thu 01 May 2025 13:00:50 +0000
Manifest next update: Fri 02 May 2025 13:00:50 +0000
Files and hashes: 1: _vkYxakzDbvm7uF8uaHWL7yFW94.crl (hash: HXt4HnnbyZg2OpH+J0f5tqa3BheD54GHZYZHZf91OiU=)
2: nhbcHBf3KyDRfxTTz6M2nv3FDrc.roa (hash: Zxdw2e4bDTlf7LQ65Hz/8o5/IiJ9rQjv2vVBLW/NpXU=)
3: nlnL1KrlFfXQEwGDosct7b61rpQ.roa (hash: qhnchUWmXUGxeLQaDoPZCE17/L9LF/P0wpk8nhaLzWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:ef:7d:fb:1b:39:9b:3d:f2:a8:bd:01:30:78:90:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Validity
Not Before: May 1 13:00:50 2025 GMT
Not After : May 2 13:00:50 2025 GMT
Subject: CN=32b9eddec985d2e9838bb9441656795b95d78dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:39:26:bb:cb:1c:77:28:4e:08:94:eb:10:6a:
f2:2b:a6:71:04:5b:65:86:67:30:51:1d:32:b7:c8:
dd:2e:41:75:e7:fe:52:38:87:5f:6f:60:7d:fa:78:
63:3f:b3:64:15:06:90:61:c6:5b:39:28:ae:31:d6:
fd:a5:f6:27:7a:44:ac:3b:83:a8:3b:44:f4:2a:cb:
07:a1:dd:50:02:58:4a:bb:9d:32:69:11:27:1d:46:
8d:eb:8e:7c:93:55:96:22:64:d0:b3:53:1b:c5:45:
f8:43:1f:b5:0c:d0:a5:fe:26:68:a6:d0:69:0f:db:
ff:f1:5b:7b:66:3e:dd:47:06:e2:e8:1f:36:b7:ed:
33:e7:cc:a7:62:74:3c:46:02:3e:ec:0c:16:0c:9d:
58:2e:e0:3e:fd:2f:eb:2d:e9:54:eb:52:82:f3:c3:
bc:3e:2f:06:03:57:70:ec:f9:af:8e:f5:52:9d:d0:
0d:b1:48:86:d1:b0:d2:43:1f:2a:b6:5c:8f:d8:12:
d4:c1:c1:9d:0f:6d:bf:fa:7f:f2:58:00:4c:76:41:
2e:f0:82:a7:e8:21:51:48:07:0b:2c:02:74:98:7c:
6f:e2:61:83:41:7b:19:be:ca:d7:70:ad:1b:e0:5f:
77:60:c3:b9:6b:53:d6:4f:6e:67:bb:ac:21:4b:72:
a1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B9:ED:DE:C9:85:D2:E9:83:8B:B9:44:16:56:79:5B:95:D7:8D:C2
X509v3 Authority Key Identifier:
keyid:FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:47:cd:59:20:6d:f1:fc:b0:4e:36:36:a2:39:6f:bb:d6:9a:
d0:b5:01:f7:5e:b9:d7:32:84:7b:17:f9:12:44:80:a8:2e:f7:
8e:64:ed:77:03:40:e0:d9:fc:4f:85:35:43:ef:98:82:be:1c:
d9:3e:1c:3b:a6:40:f0:d8:72:02:8a:52:63:99:60:d9:64:dc:
49:ae:b0:fc:7d:55:90:04:4c:a1:46:0f:a7:a2:c9:81:3f:fd:
c8:b3:33:6e:d7:5a:1d:63:a8:3f:24:37:1b:ae:a9:a7:f0:e2:
99:b5:9b:57:48:40:6f:7d:a3:ec:0f:a2:20:66:fc:ba:e9:99:
20:ec:24:12:86:59:25:5f:00:66:21:63:57:32:ba:ca:95:a5:
c4:0d:dd:8b:9a:c7:df:87:4b:37:34:9b:a3:cd:78:3c:34:35:
c4:32:99:76:9b:77:da:1f:0b:3c:56:ab:a7:38:e3:3f:0e:6c:
65:8f:f8:77:1f:a0:2c:e1:e8:73:c3:1f:22:32:dd:39:e5:ff:
98:7f:52:cf:74:d1:6a:64:4c:4e:e9:0b:fe:18:15:aa:d0:fe:
a8:86:bd:a4:1d:f7:23:d6:95:de:6f:19:02:9b:30:13:c3:2c:
3f:25:e6:cd:37:21:69:01:a0:4e:07:6c:9d:06:12:87:86:9b:
69:26:94:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaL7337GzmbPfKovQEweJDVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZjkxOGM1YTkzMzBkYmJlNmVlZTE3Y2I5YTFkNjJmYmM4
NTViZGUwHhcNMjUwNTAxMTMwMDUwWhcNMjUwNTAyMTMwMDUwWjAzMTEwLwYDVQQD
EygzMmI5ZWRkZWM5ODVkMmU5ODM4YmI5NDQxNjU2Nzk1Yjk1ZDc4ZGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjkmu8scdyhOCJTrEGryK6ZxBFtl
hmcwUR0yt8jdLkF15/5SOIdfb2B9+nhjP7NkFQaQYcZbOSiuMdb9pfYnekSsO4Oo
O0T0KssHod1QAlhKu50yaREnHUaN6458k1WWImTQs1MbxUX4Qx+1DNCl/iZoptBp
D9v/8Vt7Zj7dRwbi6B82t+0z58ynYnQ8RgI+7AwWDJ1YLuA+/S/rLelU61KC88O8
Pi8GA1dw7PmvjvVSndANsUiG0bDSQx8qtlyP2BLUwcGdD22/+n/yWABMdkEu8IKn
6CFRSAcLLAJ0mHxv4mGDQXsZvsrXcK0b4F93YMO5a1PWT25nu6whS3KhWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDK57d7JhdLpg4u5RBZWeVuV143CMB8GA1UdIwQY
MBaAFP75GMWpMw275u7hfLmh1i+8hVveMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3ZrWXhha3pEYnZtN3VGOHVhSFdMN3lGVzk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lZDY1NWQtNTEwMi00OTMyLWIxZGIt
YmEyODg5YWZhYWRkLzEvX3ZrWXhha3pEYnZtN3VGOHVhSFdMN3lGVzk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9lZDY1NWQtNTEwMi00OTMyLWIxZGItYmEyODg5YWZhYWRk
LzEvX3ZrWXhha3pEYnZtN3VGOHVhSFdMN3lGVzk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArkfNWSBt
8fywTjY2ojlvu9aa0LUB91651zKEexf5EkSAqC73jmTtdwNA4Nn8T4U1Q++Ygr4c
2T4cO6ZA8NhyAopSY5lg2WTcSa6w/H1VkARMoUYPp6LJgT/9yLMzbtdaHWOoPyQ3
G66pp/DimbWbV0hAb32j7A+iIGb8uumZIOwkEoZZJV8AZiFjVzK6ypWlxA3di5rH
34dLNzSbo814PDQ1xDKZdpt32h8LPFarpzjjPw5sZY/4dx+gLOHoc8MfIjLdOeX/
mH9Sz3TRamRMTukL/hgVqtD+qIa9pB33I9aV3m8ZApswE8MsPyXmzTchaQGgTgds
nQYSh4abaSaUFA==
-----END CERTIFICATE-----
Generated at Thu May 1 19:10:22 2025 by rpki-client