Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.mft
File: VvgiFPVDedezThoQPWWKEx5wGBs.mft (raw, json)
Hash identifier: gS/pJ2oJknSKuXuaqYF/eV8KX6aJZ1mamtkoIn1zlkI=
Subject key identifier: 39:5C:5F:25:2B:6A:FA:51:06:72:DF:C5:BF:E5:44:AC:9D:08:F1:2C
Authority key identifier: 56:F8:22:14:F5:43:79:D7:B3:4E:1A:10:3D:65:8A:13:1E:70:18:1B
Certificate issuer: /CN=56f82214f54379d7b34e1a103d658a131e70181b
Certificate serial: 01965914448C4A2F13E318FC22B660EC8E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvgiFPVDedezThoQPWWKEx5wGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.mft
Manifest number: 14FD
Signing time: Mon 21 Apr 2025 16:00:22 +0000
Manifest this update: Mon 21 Apr 2025 16:00:22 +0000
Manifest next update: Tue 22 Apr 2025 16:00:22 +0000
Files and hashes: 1: VvgiFPVDedezThoQPWWKEx5wGBs.crl (hash: q5dpS/WWru+UfzwoMfSbqs1561X0XKoiEphZk6Y/5Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/VvgiFPVDedezThoQPWWKEx5wGBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:44:8c:4a:2f:13:e3:18:fc:22:b6:60:ec:8e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56f82214f54379d7b34e1a103d658a131e70181b
Validity
Not Before: Apr 21 16:00:22 2025 GMT
Not After : Apr 22 16:00:22 2025 GMT
Subject: CN=395c5f252b6afa510672dfc5bfe544ac9d08f12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:92:1e:76:c3:83:08:9b:ac:52:9e:78:b7:13:
b5:b6:06:8b:72:0f:5f:06:24:70:e5:06:99:5a:af:
e0:d1:a8:00:88:8f:93:d6:4b:df:cd:d9:00:79:7d:
18:ff:c0:65:2e:ad:fa:39:be:b7:02:2c:a8:cb:92:
d9:5d:b0:33:8a:d6:eb:16:ae:2a:db:ee:f2:18:e4:
80:aa:10:01:67:21:e0:3b:a3:28:29:66:0f:59:63:
53:30:cd:12:b6:e1:c1:e8:36:52:7d:0b:5a:53:4e:
7d:5e:f7:38:cd:b1:1a:d3:6c:dd:21:ab:f4:1b:23:
1a:82:fa:3b:20:37:a9:6c:92:74:75:51:67:98:5c:
2f:51:ce:91:42:3b:09:5c:d0:41:6d:99:c2:cd:2a:
94:b0:33:ba:8f:3c:9b:bc:48:90:3d:1c:2f:e0:b0:
01:16:92:cf:a3:91:e9:8c:3a:c6:92:f3:16:86:37:
cd:a2:16:9b:f9:db:b3:51:f3:f9:cc:83:1b:b2:24:
6e:bd:16:60:73:81:6e:7b:f7:6a:50:24:94:c8:35:
0f:49:59:52:93:c6:ac:2a:62:f9:d7:6a:36:fd:3b:
41:02:d0:19:a3:4b:ee:19:22:47:31:f7:98:c9:20:
44:96:c5:9e:c5:82:6e:18:ea:15:4f:c5:31:cb:9e:
f3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5C:5F:25:2B:6A:FA:51:06:72:DF:C5:BF:E5:44:AC:9D:08:F1:2C
X509v3 Authority Key Identifier:
keyid:56:F8:22:14:F5:43:79:D7:B3:4E:1A:10:3D:65:8A:13:1E:70:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvgiFPVDedezThoQPWWKEx5wGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:56:14:31:49:84:be:59:95:46:66:e8:33:fb:c5:70:3a:8e:
67:6f:33:c4:64:7c:ac:7f:3b:08:ec:86:98:95:e3:60:6a:a8:
86:e3:2a:a4:03:6b:4f:e2:fa:2d:e4:3d:72:32:eb:dd:ff:75:
b5:83:10:5b:c8:fd:79:c9:f3:24:50:6a:a0:d6:44:8a:1c:ec:
99:8d:d5:ad:c1:4b:59:a9:ae:54:52:ce:69:f7:bd:ed:dd:ef:
bb:97:a2:7c:05:e3:af:f8:a1:73:4b:c2:e3:c7:b2:5e:ba:d1:
fb:63:ea:e7:97:3a:89:dc:cc:f1:58:82:03:76:1a:09:ed:5a:
e6:53:77:5f:f2:4f:8f:5b:97:a1:f4:f5:60:f0:e3:50:9d:ef:
6f:d1:94:e3:d0:50:7d:c9:0c:da:55:d4:d6:7e:3e:04:5b:c3:
a3:2c:83:44:14:17:a1:31:02:2e:c9:34:0b:d0:63:05:fc:e4:
88:84:18:60:8c:c0:33:71:97:f3:12:65:0d:f5:4a:ec:cf:cc:
6c:c9:2b:20:c7:93:71:84:3f:9f:23:b9:fc:35:3a:bb:3f:09:
25:96:2b:eb:fe:32:96:55:79:94:b4:40:c8:be:b9:d1:ab:fb:
bd:7c:91:aa:9c:73:f5:e9:29:b8:2c:97:c3:b5:c6:e7:38:a2:
c0:f1:a3:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZFESMSi8T4xj8IrZg7I50MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZjgyMjE0ZjU0Mzc5ZDdiMzRlMWExMDNkNjU4YTEzMWU3
MDE4MWIwHhcNMjUwNDIxMTYwMDIyWhcNMjUwNDIyMTYwMDIyWjAzMTEwLwYDVQQD
EygzOTVjNWYyNTJiNmFmYTUxMDY3MmRmYzViZmU1NDRhYzlkMDhmMTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpIedsODCJusUp54txO1tgaLcg9f
BiRw5QaZWq/g0agAiI+T1kvfzdkAeX0Y/8BlLq36Ob63Aiyoy5LZXbAzitbrFq4q
2+7yGOSAqhABZyHgO6MoKWYPWWNTMM0StuHB6DZSfQtaU059Xvc4zbEa02zdIav0
GyMagvo7IDepbJJ0dVFnmFwvUc6RQjsJXNBBbZnCzSqUsDO6jzybvEiQPRwv4LAB
FpLPo5HpjDrGkvMWhjfNohab+duzUfP5zIMbsiRuvRZgc4Fue/dqUCSUyDUPSVlS
k8asKmL512o2/TtBAtAZo0vuGSJHMfeYySBElsWexYJuGOoVT8Uxy57zHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlcXyUravpRBnLfxb/lRKydCPEsMB8GA1UdIwQY
MBaAFFb4IhT1Q3nXs04aED1lihMecBgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnZnaUZQVkRlZGV6VGhvUVBXV0tFeDV3R0JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9iN2JiNjgtMWE5MS00MDBjLWI1YTkt
ZTU4MDllYmUyZDRiLzEvVnZnaUZQVkRlZGV6VGhvUVBXV0tFeDV3R0JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9iN2JiNjgtMWE5MS00MDBjLWI1YTktZTU4MDllYmUyZDRi
LzEvVnZnaUZQVkRlZGV6VGhvUVBXV0tFeDV3R0JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzFYUMUmE
vlmVRmboM/vFcDqOZ28zxGR8rH87COyGmJXjYGqohuMqpANrT+L6LeQ9cjLr3f91
tYMQW8j9ecnzJFBqoNZEihzsmY3VrcFLWamuVFLOafe97d3vu5eifAXjr/ihc0vC
48eyXrrR+2Pq55c6idzM8ViCA3YaCe1a5lN3X/JPj1uXofT1YPDjUJ3vb9GU49BQ
fckM2lXU1n4+BFvDoyyDRBQXoTECLsk0C9BjBfzkiIQYYIzAM3GX8xJlDfVK7M/M
bMkrIMeTcYQ/nyO5/DU6uz8JJZYr6/4yllV5lLRAyL650av7vXyRqpxz9ekpuCyX
w7XG5ziiwPGj/g==
-----END CERTIFICATE-----
Generated at Tue Apr 22 00:47:17 2025 by rpki-client