Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft
File: VGWtK05zj1QvoOaBOPNiZkQeKaA.mft (raw, json)
Hash identifier: oV1jq9ZNoeDpFc2WXYWiN7qP5piaT+/AaB1RC3M6X3U=
Subject key identifier: 51:9D:90:32:3F:44:53:35:8D:BD:9F:15:C4:6C:C8:77:E8:09:0D:8E
Authority key identifier: 54:65:AD:2B:4E:73:8F:54:2F:A0:E6:81:38:F3:62:66:44:1E:29:A0
Certificate issuer: /CN=5465ad2b4e738f542fa0e68138f36266441e29a0
Certificate serial: 01964F6CB95FDE7812814581F0550CEFD0D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGWtK05zj1QvoOaBOPNiZkQeKaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft
Manifest number: 0BA8
Signing time: Sat 19 Apr 2025 19:00:47 +0000
Manifest this update: Sat 19 Apr 2025 19:00:47 +0000
Manifest next update: Sun 20 Apr 2025 19:00:47 +0000
Files and hashes: 1: 7lJVxJeG2kQzily5Ys3pzO4Cx3c.roa (hash: 2p7G908u5hNgOkOPybVcD1KwXNRQ1cpOLTMbKHUwi8k=)
2: VGWtK05zj1QvoOaBOPNiZkQeKaA.crl (hash: /enoiHbSyusMYgULVcKZRuMkWfRY68DH0a/rKkizqSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGWtK05zj1QvoOaBOPNiZkQeKaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:b9:5f:de:78:12:81:45:81:f0:55:0c:ef:d0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5465ad2b4e738f542fa0e68138f36266441e29a0
Validity
Not Before: Apr 19 19:00:47 2025 GMT
Not After : Apr 20 19:00:47 2025 GMT
Subject: CN=519d90323f4453358dbd9f15c46cc877e8090d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9a:41:23:6e:60:3f:d9:ac:66:d9:43:35:3e:
ba:4a:05:b6:a9:e7:a9:4e:81:5a:82:44:7a:ed:15:
66:af:88:df:a5:51:9b:a1:37:cb:9e:ce:89:3c:78:
0c:5f:64:cc:05:0b:7a:99:b3:d1:67:2a:40:f8:44:
91:35:a2:9e:17:b0:e3:12:15:49:1f:22:f8:ac:53:
d4:2c:eb:eb:dd:d3:9b:17:bf:76:28:4c:e0:1e:6b:
8f:05:0d:ca:58:eb:4b:ad:39:c6:7f:61:ef:ad:ab:
33:88:a3:e0:6b:44:c1:f0:cd:b5:70:38:da:72:98:
a7:10:19:d8:8f:49:2a:aa:30:ab:a4:6e:ed:a5:19:
b5:65:0f:2e:37:4d:82:0e:1d:db:bd:4a:7d:b2:20:
cd:db:b4:33:3a:dd:06:5e:26:7a:62:f6:9e:89:d5:
02:de:8e:b0:93:28:01:d2:af:7d:9d:b2:d9:77:4b:
b6:51:ff:64:74:7b:cc:3f:cc:4f:d6:e9:72:c8:1d:
8a:32:8d:33:fd:a6:1f:60:fa:5a:1a:cf:f3:db:b2:
f7:fb:c7:be:54:6f:91:02:a1:90:12:66:35:8a:ce:
b9:a0:22:2f:da:b5:a3:66:11:c3:9c:d5:86:88:14:
89:51:32:1b:f8:05:9c:72:84:02:e9:f4:a3:2f:c7:
b7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9D:90:32:3F:44:53:35:8D:BD:9F:15:C4:6C:C8:77:E8:09:0D:8E
X509v3 Authority Key Identifier:
keyid:54:65:AD:2B:4E:73:8F:54:2F:A0:E6:81:38:F3:62:66:44:1E:29:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGWtK05zj1QvoOaBOPNiZkQeKaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:69:64:31:bd:f5:94:26:33:91:79:42:34:00:20:7f:71:c0:
1e:96:c1:87:1c:77:0b:a0:da:17:e0:39:84:ea:85:85:8d:bf:
d5:c9:cf:9f:99:99:d9:73:e1:40:50:f1:9e:f3:35:9a:5d:8b:
f3:9e:c3:9a:e7:d8:e8:c8:a7:7a:69:be:5f:54:22:46:53:a5:
12:11:f5:3c:ce:d7:61:27:ea:59:77:62:a6:af:2b:4b:1b:3e:
82:72:c1:49:88:f3:ef:15:91:2c:4c:f4:51:6f:94:24:0d:1e:
09:47:13:c9:ad:4a:85:4a:0c:08:7d:67:df:7e:12:c7:41:3f:
1f:59:a2:43:9d:06:43:d9:73:2b:74:2e:51:9c:1f:75:06:77:
b5:7e:a3:4e:cf:54:96:a1:42:fd:ce:f3:87:8a:cb:cc:c5:59:
68:44:31:dc:f1:08:c0:82:7f:2d:67:3f:cc:b9:97:51:01:bd:
88:5e:2f:26:09:62:18:9f:29:27:25:f0:6d:bb:7a:f2:ab:6f:
f7:1c:e2:ff:99:ad:46:5e:bf:e6:b5:ed:93:8b:ee:c4:e1:e6:
f3:c6:2d:d9:d5:7c:7a:28:9c:c1:90:5f:06:55:2a:69:82:34:
35:03:44:0f:57:48:a8:18:ae:5c:aa:b5:a7:44:7f:d6:ab:1a:
9b:0b:cf:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPbLlf3ngSgUWB8FUM79DSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjVhZDJiNGU3MzhmNTQyZmEwZTY4MTM4ZjM2MjY2NDQx
ZTI5YTAwHhcNMjUwNDE5MTkwMDQ3WhcNMjUwNDIwMTkwMDQ3WjAzMTEwLwYDVQQD
Eyg1MTlkOTAzMjNmNDQ1MzM1OGRiZDlmMTVjNDZjYzg3N2U4MDkwZDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJpBI25gP9msZtlDNT66SgW2qeep
ToFagkR67RVmr4jfpVGboTfLns6JPHgMX2TMBQt6mbPRZypA+ESRNaKeF7DjEhVJ
HyL4rFPULOvr3dObF792KEzgHmuPBQ3KWOtLrTnGf2HvrasziKPga0TB8M21cDja
cpinEBnYj0kqqjCrpG7tpRm1ZQ8uN02CDh3bvUp9siDN27QzOt0GXiZ6YvaeidUC
3o6wkygB0q99nbLZd0u2Uf9kdHvMP8xP1ulyyB2KMo0z/aYfYPpaGs/z27L3+8e+
VG+RAqGQEmY1is65oCIv2rWjZhHDnNWGiBSJUTIb+AWccoQC6fSjL8e3NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGdkDI/RFM1jb2fFcRsyHfoCQ2OMB8GA1UdIwQY
MBaAFFRlrStOc49UL6DmgTjzYmZEHimgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdXdEswNXpqMVF2b09hQk9QTmlaa1FlS2FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zNjIzZTUtMzQyZS00YzlmLTkxODMt
MGQzYWQzNmViMTYxLzEvVkdXdEswNXpqMVF2b09hQk9QTmlaa1FlS2FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8zNjIzZTUtMzQyZS00YzlmLTkxODMtMGQzYWQzNmViMTYx
LzEvVkdXdEswNXpqMVF2b09hQk9QTmlaa1FlS2FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK2lkMb31
lCYzkXlCNAAgf3HAHpbBhxx3C6DaF+A5hOqFhY2/1cnPn5mZ2XPhQFDxnvM1ml2L
857DmufY6Minemm+X1QiRlOlEhH1PM7XYSfqWXdipq8rSxs+gnLBSYjz7xWRLEz0
UW+UJA0eCUcTya1KhUoMCH1n334Sx0E/H1miQ50GQ9lzK3QuUZwfdQZ3tX6jTs9U
lqFC/c7zh4rLzMVZaEQx3PEIwIJ/LWc/zLmXUQG9iF4vJgliGJ8pJyXwbbt68qtv
9xzi/5mtRl6/5rXtk4vuxOHm88Yt2dV8eiicwZBfBlUqaYI0NQNED1dIqBiuXKq1
p0R/1qsamwvPiw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:18:05 2025 by rpki-client