Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
File: VHGK9qNvZqkZOTZKr8hkRauKbg4.mft (raw, json)
Hash identifier: TFCM2emDXQV9QUovVcbNQw0vlkXqtbAqcnajPy83gxQ=
Subject key identifier: D3:62:01:14:E9:C4:94:7E:CE:2E:75:B2:A9:48:6E:16:BD:A9:BA:3C
Authority key identifier: 54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E
Certificate issuer: /CN=54718af6a36f66a91939364aafc86445ab8a6e0e
Certificate serial: 019653B7B329BC1E268CD82F7D5A6551A10A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 15:01:09 +0000
Manifest this update: Sun 20 Apr 2025 15:01:09 +0000
Manifest next update: Mon 21 Apr 2025 15:01:09 +0000
Files and hashes: 1: E6amiYi53XMdG38KpjAggGoL-xU.roa (hash: Z2VRJf48TJk3kvh/qYBt+PTaI/amPskBYdQSciVu6xk=)
2: VHGK9qNvZqkZOTZKr8hkRauKbg4.crl (hash: /5BmkdsFLqVpX14YWRkmBgZwo4otZuu9MypkiUdJqoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:b3:29:bc:1e:26:8c:d8:2f:7d:5a:65:51:a1:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54718af6a36f66a91939364aafc86445ab8a6e0e
Validity
Not Before: Apr 20 15:01:09 2025 GMT
Not After : Apr 21 15:01:09 2025 GMT
Subject: CN=d3620114e9c4947ece2e75b2a9486e16bda9ba3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:98:a5:93:bd:3d:33:36:1e:32:df:ab:c2:d1:
3e:c5:59:72:7b:7f:ee:53:ff:db:f4:20:61:c3:a9:
63:fa:27:53:43:2c:4c:59:dd:69:8c:9c:79:95:ef:
17:1b:16:7c:c4:47:f8:67:56:81:28:c1:be:48:92:
d3:73:39:d1:86:c3:41:4a:c2:fe:6f:05:65:d6:03:
05:3f:c3:cb:84:86:37:b7:65:21:0f:46:b8:ba:f6:
07:a3:84:8f:1f:0e:9c:06:f2:c8:10:ae:e9:fa:34:
9f:92:f8:1e:2d:b6:7d:c3:00:15:82:23:ec:b8:53:
cb:72:0b:e5:bb:63:ab:35:d8:9f:86:af:22:57:b3:
b3:21:cc:fc:b5:4d:27:92:35:d0:52:97:61:da:ac:
75:81:43:e5:1a:b7:22:c3:48:d5:b1:6b:da:e5:12:
73:4a:84:70:1b:04:a8:e2:80:c8:60:91:8f:98:4e:
05:61:c2:e6:32:ba:b5:97:61:56:58:54:2a:af:e1:
d3:fe:ea:c2:4f:d0:2b:81:6d:e2:26:39:32:6d:57:
f8:d5:b4:ad:65:e8:d8:e4:59:b6:cc:f4:74:ed:e1:
8e:c5:cd:f6:32:18:20:c7:7b:48:d6:4f:c3:76:37:
2d:85:82:ce:5d:49:bc:58:12:14:3b:7e:5c:f1:6b:
9c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:62:01:14:E9:C4:94:7E:CE:2E:75:B2:A9:48:6E:16:BD:A9:BA:3C
X509v3 Authority Key Identifier:
keyid:54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:85:77:2b:d4:c5:7c:7c:5d:ce:c9:c4:2a:2d:3c:de:fd:ae:
82:bb:49:d4:6f:2e:a7:9b:54:c0:c2:a9:c5:29:3a:ef:91:e3:
74:b3:60:2c:ff:6d:34:d4:f6:ff:9b:43:12:4c:94:71:3f:e7:
2b:3c:6e:39:d1:7c:fe:7f:7f:57:78:75:27:a9:fe:96:8b:00:
b2:8c:c8:c3:2b:e1:fa:3b:91:04:36:53:78:d8:d7:72:a6:83:
fc:bf:8b:be:4a:76:6c:79:2d:a9:bb:55:93:ef:e6:e0:88:e5:
82:fe:e4:e2:67:f1:a9:07:df:7b:49:35:c1:56:2b:64:fe:1d:
c0:07:e7:d8:0f:a6:43:f9:f0:bc:19:dc:89:90:87:a3:14:18:
39:ad:ee:f2:8a:06:e0:c3:23:d7:3c:bb:ce:89:55:5b:25:88:
f5:fe:d5:ad:c6:f2:31:3c:ca:97:4d:e1:66:31:95:94:45:73:
f2:ab:d8:ac:c2:d9:c3:77:03:b9:41:ea:68:0e:8e:c3:76:a9:
52:a6:e4:b8:9a:bb:d7:f6:7c:a5:ed:42:a2:d9:6b:14:24:54:
39:0f:07:02:c2:19:00:62:77:57:06:23:cb:b5:4f:cf:6a:05:
43:38:39:7a:b0:ad:06:db:a3:f5:70:bf:1d:7c:df:cf:d0:96:
03:55:bc:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTt7MpvB4mjNgvfVplUaEKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NzE4YWY2YTM2ZjY2YTkxOTM5MzY0YWFmYzg2NDQ1YWI4
YTZlMGUwHhcNMjUwNDIwMTUwMTA5WhcNMjUwNDIxMTUwMTA5WjAzMTEwLwYDVQQD
EyhkMzYyMDExNGU5YzQ5NDdlY2UyZTc1YjJhOTQ4NmUxNmJkYTliYTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZilk709MzYeMt+rwtE+xVlye3/u
U//b9CBhw6lj+idTQyxMWd1pjJx5le8XGxZ8xEf4Z1aBKMG+SJLTcznRhsNBSsL+
bwVl1gMFP8PLhIY3t2UhD0a4uvYHo4SPHw6cBvLIEK7p+jSfkvgeLbZ9wwAVgiPs
uFPLcgvlu2OrNdifhq8iV7OzIcz8tU0nkjXQUpdh2qx1gUPlGrciw0jVsWva5RJz
SoRwGwSo4oDIYJGPmE4FYcLmMrq1l2FWWFQqr+HT/urCT9ArgW3iJjkybVf41bSt
ZejY5Fm2zPR07eGOxc32Mhggx3tI1k/DdjcthYLOXUm8WBIUO35c8WucmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNiARTpxJR+zi51sqlIbha9qbo8MB8GA1UdIwQY
MBaAFFRxivajb2apGTk2Sq/IZEWrim4OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkhHSzlxTnZacWtaT1RaS3I4aGtSYXVLYmc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jZDJmNDEtNTllMC00YjhiLTgyMDYt
YmVkNTVjNDdhNTc4LzEvVkhHSzlxTnZacWtaT1RaS3I4aGtSYXVLYmc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jZDJmNDEtNTllMC00YjhiLTgyMDYtYmVkNTVjNDdhNTc4
LzEvVkhHSzlxTnZacWtaT1RaS3I4aGtSYXVLYmc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMYV3K9TF
fHxdzsnEKi083v2ugrtJ1G8up5tUwMKpxSk675HjdLNgLP9tNNT2/5tDEkyUcT/n
KzxuOdF8/n9/V3h1J6n+losAsozIwyvh+juRBDZTeNjXcqaD/L+Lvkp2bHktqbtV
k+/m4Ijlgv7k4mfxqQffe0k1wVYrZP4dwAfn2A+mQ/nwvBnciZCHoxQYOa3u8ooG
4MMj1zy7zolVWyWI9f7VrcbyMTzKl03hZjGVlEVz8qvYrMLZw3cDuUHqaA6Ow3ap
UqbkuJq71/Z8pe1CotlrFCRUOQ8HAsIZAGJ3VwYjy7VPz2oFQzg5erCtBtuj9XC/
HXzfz9CWA1W8xQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 19:21:41 2025 by rpki-client