Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
File: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft (raw, json)
Hash identifier: gKJLbL08p33tS7kgGGAjR85IeLLAQ47BZCH6305WbH4=
Subject key identifier: BA:62:A9:BC:B9:BA:FB:6D:42:88:6D:DB:45:CB:EF:E0:9C:E2:99:57
Authority key identifier: BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D
Certificate issuer: /CN=bc9a381f8a60cc51b52990ed386948f684c3159d
Certificate serial: 019657263B8B4719E4B3F55FC079297927D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
Manifest number: FA
Signing time: Mon 21 Apr 2025 07:00:45 +0000
Manifest this update: Mon 21 Apr 2025 07:00:45 +0000
Manifest next update: Tue 22 Apr 2025 07:00:45 +0000
Files and hashes: 1: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl (hash: WQUXfgXmiyQMoDoQWguC67cF/SyagyqLLGXpJ5yiUKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:3b:8b:47:19:e4:b3:f5:5f:c0:79:29:79:27:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9a381f8a60cc51b52990ed386948f684c3159d
Validity
Not Before: Apr 21 07:00:45 2025 GMT
Not After : Apr 22 07:00:45 2025 GMT
Subject: CN=ba62a9bcb9bafb6d42886ddb45cbefe09ce29957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8c:ba:bd:db:ea:4a:13:7d:53:9e:62:30:f4:
b3:0b:8a:9d:29:40:9a:94:c1:aa:39:5b:7d:db:70:
b8:bd:68:ab:d8:89:cf:26:77:1d:74:56:1c:60:09:
aa:64:d0:80:67:bc:cd:cc:71:e8:40:32:ca:97:18:
44:96:b1:4a:1e:f5:ad:b2:36:16:4e:bb:d5:59:92:
0e:ec:ff:a2:77:e7:18:6b:bc:2b:c7:3c:1c:1a:14:
8d:ad:65:2c:fa:7f:fd:ea:1b:6b:a6:9f:35:b7:74:
0b:28:1f:2b:3c:bc:04:7d:12:c4:4c:38:27:ec:4e:
3d:9b:38:ab:6e:3f:cd:40:f2:92:7e:c5:d1:8f:d5:
96:2a:44:76:fd:53:e9:e1:44:0f:42:21:0f:e4:af:
d0:2e:b2:47:57:71:67:bc:2e:6d:ca:0b:26:ba:2c:
ee:16:c3:33:e1:2c:ea:46:0e:05:94:3c:86:2a:61:
e5:0b:10:e8:5c:22:86:05:9b:fd:07:d2:b8:57:34:
e1:c1:ca:29:47:53:99:95:73:61:d9:bc:65:a9:ae:
de:b0:80:aa:e8:f7:dd:de:dd:b0:6e:c4:c8:49:20:
3d:d9:94:a7:cf:24:58:8f:4e:90:45:8e:5c:c7:cd:
17:c9:81:31:ec:45:47:98:67:9f:a8:cc:8e:fd:39:
17:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:62:A9:BC:B9:BA:FB:6D:42:88:6D:DB:45:CB:EF:E0:9C:E2:99:57
X509v3 Authority Key Identifier:
keyid:BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a8:69:23:3b:40:04:fb:8b:69:c1:e5:38:d2:65:c3:be:8b:
51:1c:46:8a:96:41:5d:8f:e2:99:1e:48:43:b0:de:e9:a0:75:
fa:04:fc:51:8e:b0:df:92:19:31:4c:8d:15:f7:cf:64:82:c8:
f1:fd:39:72:42:fe:6a:b4:7a:cc:14:ba:99:40:39:19:a0:8c:
e4:f6:0b:41:77:d3:4f:d6:c3:5b:3d:88:d2:99:b5:ab:24:af:
f9:8d:0f:9f:41:05:94:3c:52:8e:a6:ef:ad:83:d0:15:99:77:
02:e0:f4:7d:83:a4:7f:33:54:6b:2c:bb:e8:88:0c:1b:6f:f3:
b4:eb:8c:6e:09:47:f3:aa:a9:16:f5:bc:15:7a:4a:6a:ab:17:
e6:66:9e:3b:2a:06:0f:9d:44:4d:0e:92:6c:cb:4e:a8:dd:23:
f2:a6:74:29:5e:61:af:3f:eb:86:0f:fb:29:05:d9:48:57:28:
bf:8e:f2:52:94:84:cf:18:96:56:e4:28:0f:d6:9a:f6:c3:59:
d3:b6:c1:e3:60:8d:16:88:f6:40:b4:85:96:b5:64:93:c6:11:
52:09:6d:c1:82:ee:12:99:3d:1f:e0:4a:ad:f3:1a:57:52:bb:
13:be:22:2a:75:a5:27:93:a2:07:fa:06:83:a0:10:36:ba:2d:
17:6b:6f:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXJjuLRxnks/VfwHkpeSfTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOWEzODFmOGE2MGNjNTFiNTI5OTBlZDM4Njk0OGY2ODRj
MzE1OWQwHhcNMjUwNDIxMDcwMDQ1WhcNMjUwNDIyMDcwMDQ1WjAzMTEwLwYDVQQD
EyhiYTYyYTliY2I5YmFmYjZkNDI4ODZkZGI0NWNiZWZlMDljZTI5OTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4y6vdvqShN9U55iMPSzC4qdKUCa
lMGqOVt923C4vWir2InPJncddFYcYAmqZNCAZ7zNzHHoQDLKlxhElrFKHvWtsjYW
TrvVWZIO7P+id+cYa7wrxzwcGhSNrWUs+n/96htrpp81t3QLKB8rPLwEfRLETDgn
7E49mzirbj/NQPKSfsXRj9WWKkR2/VPp4UQPQiEP5K/QLrJHV3FnvC5tygsmuizu
FsMz4SzqRg4FlDyGKmHlCxDoXCKGBZv9B9K4VzThwcopR1OZlXNh2bxlqa7esICq
6Pfd3t2wbsTISSA92ZSnzyRYj06QRY5cx80XyYEx7EVHmGefqMyO/TkXvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpiqby5uvttQoht20XL7+Cc4plXMB8GA1UdIwQY
MBaAFLyaOB+KYMxRtSmQ7ThpSPaEwxWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkpvNEg0cGd6RkcxS1pEdE9HbEk5b1RERlowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jYTBlN2UtNGVjZC00MmVlLWE4NTkt
ZWEwNzE4MzU5ZTUyLzEvdkpvNEg0cGd6RkcxS1pEdE9HbEk5b1RERlowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9jYTBlN2UtNGVjZC00MmVlLWE4NTktZWEwNzE4MzU5ZTUy
LzEvdkpvNEg0cGd6RkcxS1pEdE9HbEk5b1RERlowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfahpIztA
BPuLacHlONJlw76LURxGipZBXY/imR5IQ7De6aB1+gT8UY6w35IZMUyNFffPZILI
8f05ckL+arR6zBS6mUA5GaCM5PYLQXfTT9bDWz2I0pm1qySv+Y0Pn0EFlDxSjqbv
rYPQFZl3AuD0fYOkfzNUayy76IgMG2/ztOuMbglH86qpFvW8FXpKaqsX5maeOyoG
D51ETQ6SbMtOqN0j8qZ0KV5hrz/rhg/7KQXZSFcov47yUpSEzxiWVuQoD9aa9sNZ
07bB42CNFoj2QLSFlrVkk8YRUgltwYLuEpk9H+BKrfMaV1K7E74iKnWlJ5OiB/oG
g6AQNrotF2tvrQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:00 2025 by rpki-client