Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
File: vh89wilTBsx9-HLO7M1olNDg6uY.mft (raw, json)
Hash identifier: JdBYUNGQtlPbMUm8VwTduPMv2gs48YspC4gC4QU44nw=
Subject key identifier: 28:38:EE:C5:78:E3:77:24:4A:BD:81:02:A3:67:9A:95:7D:D1:9A:DE
Authority key identifier: BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
Certificate issuer: /CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Certificate serial: 01964FDAE36DB69CDDC3BC48820AC6400957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
Manifest number: 0619
Signing time: Sat 19 Apr 2025 21:01:07 +0000
Manifest this update: Sat 19 Apr 2025 21:01:07 +0000
Manifest next update: Sun 20 Apr 2025 21:01:07 +0000
Files and hashes: 1: 1DMwz6cy5-zMTggYwJ41QekWZIY.roa (hash: nwmEuQjAVrxnR0Ze+XAFnQ4uH1WM0zEOCcXND1iguH8=)
2: tAG_ogHK36F9dYARrabqMiVm7WI.roa (hash: XyLTR6YvVH7wVie2ZS7kPXzKlWsXCj8THEJuI5lJwIg=)
3: vh89wilTBsx9-HLO7M1olNDg6uY.crl (hash: tepBtQKQRxvklNAPBiE+12OdV5pfy9hQTMi26o2U7Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:e3:6d:b6:9c:dd:c3:bc:48:82:0a:c6:40:09:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Validity
Not Before: Apr 19 21:01:07 2025 GMT
Not After : Apr 20 21:01:07 2025 GMT
Subject: CN=2838eec578e377244abd8102a3679a957dd19ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:41:56:5c:9e:12:27:20:d9:0a:4b:7c:d6:72:
1d:53:fa:85:76:d9:64:08:65:17:46:8b:b2:d2:72:
d9:42:55:57:1e:80:c8:aa:30:3b:82:22:30:31:e4:
bd:00:4e:74:aa:ad:6a:12:50:1e:c2:37:91:06:11:
d0:65:14:e7:95:1b:06:d3:7e:3d:40:73:6c:b9:35:
91:c1:77:2e:2d:b8:2c:8b:94:5b:ba:ae:e8:67:ee:
57:46:a9:e1:80:02:7f:53:ed:76:6c:4a:f4:d5:6f:
40:c8:ee:72:bc:60:ac:0b:90:eb:b3:45:71:4e:34:
2b:36:8c:7d:fb:2d:70:52:f7:c8:d0:88:4d:9f:f7:
ac:f2:b4:d8:73:ec:61:43:bb:4b:81:35:d7:e3:f3:
e7:f4:65:68:04:f7:24:6a:e5:eb:30:f0:bd:14:c2:
21:ad:6e:02:7a:44:d6:3f:0d:41:e0:bf:a6:f3:48:
bc:99:47:bd:ce:db:23:71:5f:a0:c7:8b:4e:03:5a:
73:f2:bd:5a:08:7c:2e:4e:15:db:94:51:10:49:92:
90:d6:15:56:46:8f:bb:6d:0b:aa:2f:0d:f7:6b:d6:
b8:9c:74:e9:f4:91:c3:c4:63:e1:8e:87:11:7a:c1:
31:3f:67:f8:eb:9d:df:14:bb:cb:b7:09:d4:d8:7b:
30:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:38:EE:C5:78:E3:77:24:4A:BD:81:02:A3:67:9A:95:7D:D1:9A:DE
X509v3 Authority Key Identifier:
keyid:BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c4:40:4b:ab:0d:3e:9e:49:8d:64:11:8f:45:df:6c:79:80:
af:e4:6b:f4:3b:16:65:64:96:e7:fd:91:25:97:ce:a7:ab:d6:
ba:8e:ee:a8:c5:2b:1c:1a:8e:f4:fa:76:dd:d4:9e:47:0d:46:
d4:ea:15:64:9b:e5:4a:4c:50:8a:71:fa:a3:07:0a:7e:c6:11:
3a:44:1e:41:15:cb:6f:62:f9:77:0b:cf:8f:2d:98:6a:34:6c:
39:c8:aa:32:fb:fb:b3:20:07:fb:4c:9e:f7:34:7e:e0:1a:a8:
d3:6f:97:66:d6:7b:bf:50:ce:8e:14:9f:9b:1a:f0:16:f1:b2:
a7:14:aa:54:a0:43:56:30:84:b3:67:a0:4c:60:9d:6f:de:16:
21:0c:07:b5:56:75:0e:56:f1:75:73:ee:49:32:9e:0e:a4:f1:
b1:a6:78:98:39:08:fc:93:bb:aa:f2:3a:b8:5f:71:d0:4d:4d:
b4:3b:01:b5:c7:49:11:3a:68:b1:c8:d1:a2:9f:44:80:6e:51:
57:a3:12:9f:5c:92:36:07:4d:2f:44:a5:f1:0c:1b:76:75:fd:
75:30:69:7f:87:30:53:e5:2d:54:d5:70:bd:6a:03:ad:09:be:
50:52:49:28:c2:0b:09:e8:2b:f7:ae:81:c1:1e:70:09:3b:e6:
08:5d:cd:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZP2uNttpzdw7xIggrGQAlXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMWYzZGMyMjk1MzA2Y2M3ZGY4NzJjZWVjY2Q2ODk0ZDBl
MGVhZTYwHhcNMjUwNDE5MjEwMTA3WhcNMjUwNDIwMjEwMTA3WjAzMTEwLwYDVQQD
EygyODM4ZWVjNTc4ZTM3NzI0NGFiZDgxMDJhMzY3OWE5NTdkZDE5YWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40FWXJ4SJyDZCkt81nIdU/qFdtlk
CGUXRouy0nLZQlVXHoDIqjA7giIwMeS9AE50qq1qElAewjeRBhHQZRTnlRsG0349
QHNsuTWRwXcuLbgsi5Rbuq7oZ+5XRqnhgAJ/U+12bEr01W9AyO5yvGCsC5Drs0Vx
TjQrNox9+y1wUvfI0IhNn/es8rTYc+xhQ7tLgTXX4/Pn9GVoBPckauXrMPC9FMIh
rW4CekTWPw1B4L+m80i8mUe9ztsjcV+gx4tOA1pz8r1aCHwuThXblFEQSZKQ1hVW
Ro+7bQuqLw33a9a4nHTp9JHDxGPhjocResExP2f4653fFLvLtwnU2HswjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCg47sV443ckSr2BAqNnmpV90ZreMB8GA1UdIwQY
MBaAFL4fPcIpUwbMffhyzuzNaJTQ4OrmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmg4OXdpbFRCc3g5LUhMTzdNMW9sTkRnNnVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xYmRiZjgtMzk1Zi00YTg1LWE0NGEt
YjUxYWRmZmM2ZWVjLzEvdmg4OXdpbFRCc3g5LUhMTzdNMW9sTkRnNnVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xYmRiZjgtMzk1Zi00YTg1LWE0NGEtYjUxYWRmZmM2ZWVj
LzEvdmg4OXdpbFRCc3g5LUhMTzdNMW9sTkRnNnVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADsRAS6sN
Pp5JjWQRj0XfbHmAr+Rr9DsWZWSW5/2RJZfOp6vWuo7uqMUrHBqO9Pp23dSeRw1G
1OoVZJvlSkxQinH6owcKfsYROkQeQRXLb2L5dwvPjy2YajRsOciqMvv7syAH+0ye
9zR+4Bqo02+XZtZ7v1DOjhSfmxrwFvGypxSqVKBDVjCEs2egTGCdb94WIQwHtVZ1
DlbxdXPuSTKeDqTxsaZ4mDkI/JO7qvI6uF9x0E1NtDsBtcdJETposcjRop9EgG5R
V6MSn1ySNgdNL0Sl8QwbdnX9dTBpf4cwU+UtVNVwvWoDrQm+UFJJKMILCegr966B
wR5wCTvmCF3NOA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:06:57 2025 by rpki-client