Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
File: vSX3G6QTFIO7m4I92IZR06_UTns.mft (raw, json)
Hash identifier: tW8Im07KKeN31taLg4trp2UFhEfqrtwRjBeEeu5tykA=
Subject key identifier: 86:41:EB:2D:2F:45:75:60:C6:B7:3D:1D:B5:05:F5:EA:26:30:02:AA
Authority key identifier: BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
Certificate issuer: /CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Certificate serial: 01961C248023C61ED451B29881D242115D00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
Manifest number: 11B2
Signing time: Wed 09 Apr 2025 20:01:16 +0000
Manifest this update: Wed 09 Apr 2025 20:01:16 +0000
Manifest next update: Thu 10 Apr 2025 20:01:16 +0000
Files and hashes: 1: VTzQEre1LOW5un0PlYn-CvmDAKI.roa (hash: fUzpWZIo72ujZLDiYOULGotM+6e+u6e7TR9QhDLmQyE=)
2: uOlfWw_ot1GNz-xDs0HfE8f0GXg.roa (hash: p6HLTz97eUfObx31ZQ7fD3+tg4SDQ5VAA/i07H3/8o4=)
3: vSX3G6QTFIO7m4I92IZR06_UTns.crl (hash: I76xGEOKZXSXIz0ugV/HSx4BZtV7savuFiWsH4u5YFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 20:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1c:24:80:23:c6:1e:d4:51:b2:98:81:d2:42:11:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Validity
Not Before: Apr 9 20:01:16 2025 GMT
Not After : Apr 10 20:01:16 2025 GMT
Subject: CN=8641eb2d2f457560c6b73d1db505f5ea263002aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9e:24:42:22:7e:f8:a1:9f:b8:42:32:2b:4e:
e8:db:b5:4a:aa:aa:b8:0b:ec:3a:65:c7:40:2c:96:
92:49:85:b9:61:36:6f:40:4d:d0:0e:0f:87:06:fe:
31:0c:1c:6a:c7:d8:e6:7d:6c:94:c2:62:3d:05:14:
5c:a1:5c:94:3b:c6:79:97:d2:39:a2:2e:90:3e:bc:
12:cd:89:18:04:e1:a6:e7:a2:e8:95:63:cb:c3:9d:
60:68:02:3d:b0:01:cc:97:c1:8e:5a:86:2c:c5:65:
b2:5e:8f:5a:72:e5:c2:05:5b:1a:93:65:d8:fd:42:
86:c8:cd:7d:28:a3:23:66:2a:1d:ff:e5:3d:0c:5d:
dc:82:e6:66:b8:0f:60:9c:60:cb:71:bf:68:51:7d:
2c:ba:88:3c:2a:10:62:34:51:ca:05:a2:7e:e5:bc:
fc:c4:d2:57:88:11:7d:fd:20:4d:dd:b9:a5:a0:f1:
28:01:cb:e3:84:84:3a:45:4c:32:eb:e4:da:33:5b:
8a:91:b8:a2:8d:95:72:0a:c5:ff:27:53:93:42:87:
ee:0a:18:5e:63:dd:24:45:83:7d:00:14:30:94:cd:
36:95:fc:09:f3:4a:a3:7e:1c:41:eb:91:d1:63:c7:
fc:52:25:b3:d6:00:7d:21:ef:9e:37:1f:12:f6:34:
4f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:41:EB:2D:2F:45:75:60:C6:B7:3D:1D:B5:05:F5:EA:26:30:02:AA
X509v3 Authority Key Identifier:
keyid:BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8d:e0:eb:3a:03:98:9c:73:9a:27:9d:f2:9e:dd:66:5e:be:
fc:3b:f3:73:c5:5d:91:e3:1c:61:62:f5:60:f9:9b:cc:ad:16:
6c:71:e8:4e:44:93:bc:63:7b:4d:48:fd:3f:19:8e:d0:f9:51:
39:86:e8:fb:fa:dc:ce:99:cf:ed:9d:ed:1f:4b:c6:4a:ed:60:
b7:1d:e1:cf:58:fa:08:ce:7f:44:e7:bb:81:6c:c8:fb:ef:3c:
d6:07:7d:c8:f5:5a:37:d8:c5:2f:15:3b:05:fa:b9:51:e8:65:
82:23:8c:b6:2b:9a:c5:04:69:73:4e:d5:3f:a3:31:16:7a:27:
d2:a8:97:a4:42:67:7f:ee:b0:a7:12:8d:7b:9e:ee:7e:13:1f:
6a:d5:16:e7:c1:60:23:3a:90:f7:47:05:c8:eb:f4:84:96:b3:
8a:55:9b:ac:03:0d:d5:c3:9d:db:0c:88:0b:c8:91:10:07:ee:
bd:8f:9b:4f:0e:57:c6:c5:d6:0d:4e:1d:e8:c7:a2:9d:b9:c1:
60:51:17:be:d3:57:b5:93:5e:8e:c4:d6:d6:1b:c4:ae:0c:b7:
4c:30:ec:83:b2:bb:ad:23:85:cc:32:5b:2f:7b:91:0a:ac:21:
a6:e7:36:0f:3a:75:9a:8b:98:9d:4a:c6:d9:0e:e3:17:2f:4b:
b3:44:41:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYcJIAjxh7UUbKYgdJCEV0AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMjVmNzFiYTQxMzE0ODNiYjliODIzZGQ4ODY1MWQzYWZk
NDRlN2IwHhcNMjUwNDA5MjAwMTE2WhcNMjUwNDEwMjAwMTE2WjAzMTEwLwYDVQQD
Eyg4NjQxZWIyZDJmNDU3NTYwYzZiNzNkMWRiNTA1ZjVlYTI2MzAwMmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs54kQiJ++KGfuEIyK07o27VKqqq4
C+w6ZcdALJaSSYW5YTZvQE3QDg+HBv4xDBxqx9jmfWyUwmI9BRRcoVyUO8Z5l9I5
oi6QPrwSzYkYBOGm56LolWPLw51gaAI9sAHMl8GOWoYsxWWyXo9acuXCBVsak2XY
/UKGyM19KKMjZiod/+U9DF3cguZmuA9gnGDLcb9oUX0suog8KhBiNFHKBaJ+5bz8
xNJXiBF9/SBN3bmloPEoAcvjhIQ6RUwy6+TaM1uKkbiijZVyCsX/J1OTQofuChhe
Y90kRYN9ABQwlM02lfwJ80qjfhxB65HRY8f8UiWz1gB9Ie+eNx8S9jRPOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZB6y0vRXVgxrc9HbUF9eomMAKqMB8GA1UdIwQY
MBaAFL0l9xukExSDu5uCPdiGUdOv1E57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlNYM0c2UVRGSU83bTRJOTJJWlIwNl9VVG5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yMDAzNjYtZDg4MS00MDMwLTgyODAt
YjVlMGU0YzMzMTVjLzEvdlNYM0c2UVRGSU83bTRJOTJJWlIwNl9VVG5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8yMDAzNjYtZDg4MS00MDMwLTgyODAtYjVlMGU0YzMzMTVj
LzEvdlNYM0c2UVRGSU83bTRJOTJJWlIwNl9VVG5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWo3g6zoD
mJxzmied8p7dZl6+/Dvzc8VdkeMcYWL1YPmbzK0WbHHoTkSTvGN7TUj9PxmO0PlR
OYbo+/rczpnP7Z3tH0vGSu1gtx3hz1j6CM5/ROe7gWzI++881gd9yPVaN9jFLxU7
Bfq5UehlgiOMtiuaxQRpc07VP6MxFnon0qiXpEJnf+6wpxKNe57ufhMfatUW58Fg
IzqQ90cFyOv0hJazilWbrAMN1cOd2wyIC8iREAfuvY+bTw5XxsXWDU4d6MeinbnB
YFEXvtNXtZNejsTW1hvErgy3TDDsg7K7rSOFzDJbL3uRCqwhpuc2Dzp1mouYnUrG
2Q7jFy9Ls0RBXQ==
-----END CERTIFICATE-----
Generated at Thu Apr 10 03:44:19 2025 by rpki-client