
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
File: vQM98D7VHOeSSkgBg7z_208EJTc.mft (raw, json)
Hash identifier: ueVYFhwc+zvN7JP4WeRJyI0mw+lT4tfxLfiYqBRJ+vc=
Subject key identifier: 20:9F:C7:31:46:64:BF:09:1A:04:27:E4:87:DE:EA:EA:CB:DA:15:2E
Authority key identifier: BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37
Certificate issuer: /CN=bd033df03ed51ce7924a480183bcffdb4f042537
Certificate serial: 0196556EC99C088E82CFAFDE446A82178383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
Manifest number: F2
Signing time: Sun 20 Apr 2025 23:00:45 +0000
Manifest this update: Sun 20 Apr 2025 23:00:45 +0000
Manifest next update: Mon 21 Apr 2025 23:00:45 +0000
Files and hashes: 1: vQM98D7VHOeSSkgBg7z_208EJTc.crl (hash: mhdNEjGqjAD/L0FAXauy0+Dcd1RoDV+sf5EPbgTVfww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:c9:9c:08:8e:82:cf:af:de:44:6a:82:17:83:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd033df03ed51ce7924a480183bcffdb4f042537
Validity
Not Before: Apr 20 23:00:45 2025 GMT
Not After : Apr 21 23:00:45 2025 GMT
Subject: CN=209fc7314664bf091a0427e487deeaeacbda152e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e1:08:b8:57:24:76:d5:07:ea:f6:49:ae:ed:
9b:29:76:ab:7b:e2:21:26:7e:bc:0c:f9:84:5e:22:
7d:e3:ee:75:b7:2f:b9:17:62:59:a9:92:85:44:68:
f6:f7:bd:64:b9:ba:d3:c3:77:63:b9:86:73:f1:bb:
8a:2f:79:99:4d:ee:a5:c5:f2:ea:3e:d1:fb:0c:c4:
2e:07:62:fe:50:6c:93:c8:34:fd:c5:a1:d5:18:01:
18:fc:bb:0e:7b:6a:67:15:ac:e4:ce:8f:dd:58:d1:
ca:36:31:c5:11:0a:f5:f6:57:16:bd:6a:0f:7b:b2:
65:6a:fe:56:11:e9:51:2c:e2:64:3c:9a:23:3c:fa:
e6:2e:e5:5f:87:bc:1e:0b:bd:76:bc:ab:64:56:b1:
af:23:5d:b0:08:24:4e:1a:74:c2:e0:5e:59:90:c5:
b8:10:a5:df:2c:29:ca:0b:b8:57:c3:0a:10:43:7b:
14:87:45:1c:02:38:36:42:6b:3b:ec:9e:f9:10:5f:
f1:ee:a5:8e:99:70:42:4e:35:72:54:f4:20:08:6a:
2e:29:93:cf:db:a3:4e:7b:b8:02:6d:67:38:ff:0b:
58:33:94:11:bf:14:a7:08:fc:bc:25:c6:99:a7:0c:
38:00:41:78:65:91:21:ff:42:19:99:1e:a4:c4:b4:
be:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9F:C7:31:46:64:BF:09:1A:04:27:E4:87:DE:EA:EA:CB:DA:15:2E
X509v3 Authority Key Identifier:
keyid:BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:36:ce:29:5b:80:40:fd:83:91:a0:29:46:19:6c:2b:8a:a9:
93:2f:00:45:fe:59:b5:15:f1:22:0c:68:37:2f:71:e4:80:c3:
c1:c2:58:7a:ce:d9:af:ca:da:2d:fd:a6:33:f3:fd:a3:6e:0f:
43:0c:cf:f4:2d:a4:87:08:3b:eb:0b:50:7f:12:07:14:8b:7a:
e0:61:08:d0:2e:b4:14:86:c9:3b:b9:a3:29:04:96:84:cb:46:
b6:1f:65:d4:16:39:05:8f:4f:f8:fd:f5:cd:6c:bc:50:36:a1:
13:d8:6f:1c:b9:23:04:10:68:96:f6:86:09:8b:cf:eb:3b:89:
ca:33:b9:67:8d:bf:74:17:cd:bc:60:58:f8:83:74:8d:e8:b2:
c6:dc:ac:31:a4:fc:6e:71:9e:56:8a:34:3f:4e:27:cb:e9:a8:
dd:91:92:15:c8:95:36:74:a4:46:65:a1:3e:42:88:d5:99:0c:
e8:c6:52:06:54:b2:e5:1e:83:25:fa:4e:ae:d2:3a:9f:82:33:
0f:d4:a4:ba:07:2a:23:36:b9:1e:df:22:8d:ec:0e:ef:7f:c3:
e6:c7:32:aa:43:6a:8a:d1:67:e4:59:06:8d:0c:a5:0f:c4:25:
3f:a8:56:3d:00:e0:80:96:4c:c1:9c:42:1a:b0:cc:a8:df:a9:
3d:f1:38:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVbsmcCI6Cz6/eRGqCF4ODMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMDMzZGYwM2VkNTFjZTc5MjRhNDgwMTgzYmNmZmRiNGYw
NDI1MzcwHhcNMjUwNDIwMjMwMDQ1WhcNMjUwNDIxMjMwMDQ1WjAzMTEwLwYDVQQD
EygyMDlmYzczMTQ2NjRiZjA5MWEwNDI3ZTQ4N2RlZWFlYWNiZGExNTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OEIuFckdtUH6vZJru2bKXare+Ih
Jn68DPmEXiJ94+51ty+5F2JZqZKFRGj2971kubrTw3djuYZz8buKL3mZTe6lxfLq
PtH7DMQuB2L+UGyTyDT9xaHVGAEY/LsOe2pnFazkzo/dWNHKNjHFEQr19lcWvWoP
e7Jlav5WEelRLOJkPJojPPrmLuVfh7weC712vKtkVrGvI12wCCROGnTC4F5ZkMW4
EKXfLCnKC7hXwwoQQ3sUh0UcAjg2Qms77J75EF/x7qWOmXBCTjVyVPQgCGouKZPP
26NOe7gCbWc4/wtYM5QRvxSnCPy8JcaZpww4AEF4ZZEh/0IZmR6kxLS+KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCfxzFGZL8JGgQn5Ife6urL2hUuMB8GA1UdIwQY
MBaAFL0DPfA+1RznkkpIAYO8/9tPBCU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlFNOThEN1ZIT2VTU2tnQmc3el8yMDhFSlRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jYzY2ZDQtN2Q5OC00M2I1LWIyMDkt
Yjg0ODdmZTk2MTQ5LzEvdlFNOThEN1ZIT2VTU2tnQmc3el8yMDhFSlRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9jYzY2ZDQtN2Q5OC00M2I1LWIyMDktYjg0ODdmZTk2MTQ5
LzEvdlFNOThEN1ZIT2VTU2tnQmc3el8yMDhFSlRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAojbOKVuA
QP2DkaApRhlsK4qpky8ARf5ZtRXxIgxoNy9x5IDDwcJYes7Zr8raLf2mM/P9o24P
QwzP9C2khwg76wtQfxIHFIt64GEI0C60FIbJO7mjKQSWhMtGth9l1BY5BY9P+P31
zWy8UDahE9hvHLkjBBBolvaGCYvP6zuJyjO5Z42/dBfNvGBY+IN0jeiyxtysMaT8
bnGeVoo0P04ny+mo3ZGSFciVNnSkRmWhPkKI1ZkM6MZSBlSy5R6DJfpOrtI6n4Iz
D9SkugcqIza5Ht8ijewO73/D5scyqkNqitFn5FkGjQylD8QlP6hWPQDggJZMwZxC
GrDMqN+pPfE4gA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:30 2025 by rpki-client