Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
File: Vi6OBQ04RQLreX9elEkxpm_dVVo.mft (raw, json)
Hash identifier: 7OohbQGvukF2lldS+dBsdi3xVjjyOC7X9mTToQoRcmI=
Subject key identifier: 96:0C:8C:B5:9A:CA:6A:FC:EF:38:C1:CE:33:49:40:76:10:43:4E:C5
Authority key identifier: 56:2E:8E:05:0D:38:45:02:EB:79:7F:5E:94:49:31:A6:6F:DD:55:5A
Certificate issuer: /CN=562e8e050d384502eb797f5e944931a66fdd555a
Certificate serial: 019610FC24AD4032D92ABA7DD19E51129C8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
Manifest number: 022A
Signing time: Mon 07 Apr 2025 16:01:21 +0000
Manifest this update: Mon 07 Apr 2025 16:01:21 +0000
Manifest next update: Tue 08 Apr 2025 16:01:21 +0000
Files and hashes: 1: 7uuYIODPb_AxpEbSkXG4ikwEz-8.roa (hash: H14+KgaSvxKeyLjcS++jAl+BQPd40Sm8S2VRvJlA/xs=)
2: GWxeu1y_CzxjapRD6Erht2PYQd8.roa (hash: YAm4XFVWKwDXQd0Bp/cmWH42UfuLzbVp2eD58NsLJok=)
3: Vi6OBQ04RQLreX9elEkxpm_dVVo.crl (hash: gi1wPscvGKkrofizJp9vpeujSA+5WhW85YTfpaT5iU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:fc:24:ad:40:32:d9:2a:ba:7d:d1:9e:51:12:9c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=562e8e050d384502eb797f5e944931a66fdd555a
Validity
Not Before: Apr 7 16:01:21 2025 GMT
Not After : Apr 8 16:01:21 2025 GMT
Subject: CN=960c8cb59aca6afcef38c1ce3349407610434ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:60:37:ba:1d:43:2f:f0:1f:bc:0b:cb:c1:e4:
49:6a:5a:d2:7f:46:7a:e9:36:ef:f6:fd:ca:ed:91:
58:f6:a5:49:2d:78:7b:d0:77:74:b2:60:2a:06:5c:
39:8b:02:8f:90:90:03:83:33:84:4a:59:74:67:58:
37:c7:f0:e0:9c:5b:1a:b1:96:3f:c7:92:b8:e4:64:
4c:45:17:74:c8:46:03:b7:98:b4:12:ea:e9:40:00:
ce:09:29:e4:84:6e:f4:ca:12:bb:35:28:d1:7f:27:
d2:af:60:30:bf:92:94:9b:6a:03:45:13:16:39:67:
0b:fd:a3:29:0c:01:87:72:28:2f:09:4d:0e:95:33:
62:91:ed:eb:dd:fe:62:d0:81:82:c9:6b:b9:56:28:
cc:18:7c:2f:69:39:20:7c:ca:5b:54:b1:65:e9:7c:
7f:f3:94:ec:9c:47:6e:d4:0a:d8:74:48:67:cb:22:
bc:07:db:1f:97:3a:50:43:d6:27:8f:5b:04:eb:43:
ae:f0:17:83:e1:70:76:46:33:6c:fe:eb:b5:7e:7f:
39:e7:70:3d:f9:da:b4:d6:0e:24:bf:ab:c0:92:9b:
d8:5c:c4:81:30:c8:db:1b:b7:fa:b8:7f:31:79:ca:
4d:06:32:df:98:82:5c:80:66:44:8e:e2:1d:2d:11:
75:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0C:8C:B5:9A:CA:6A:FC:EF:38:C1:CE:33:49:40:76:10:43:4E:C5
X509v3 Authority Key Identifier:
keyid:56:2E:8E:05:0D:38:45:02:EB:79:7F:5E:94:49:31:A6:6F:DD:55:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f2:a8:4b:51:98:10:2f:6f:24:35:87:ec:d1:50:f2:fc:99:
e8:9a:c6:bc:a5:06:bd:44:fa:a3:9a:9c:92:5f:24:84:f5:ce:
e2:8d:97:5d:74:e6:8c:ad:dd:5a:2c:65:1a:31:26:86:58:48:
6c:70:83:60:0c:d3:23:f7:af:25:6b:4d:61:a0:b4:56:ac:39:
23:15:1d:7d:64:2d:84:84:e3:48:93:07:d0:e2:e4:13:bd:f4:
59:25:d3:44:3f:d0:ba:50:ae:f0:bb:46:96:7c:b9:89:b8:e1:
af:dd:09:0e:6e:e5:d3:d5:e2:4c:84:28:76:01:db:11:db:a2:
68:93:00:11:7b:82:bb:37:67:ce:1d:6c:c8:af:b2:22:17:50:
cc:7b:09:47:8b:6d:3b:b3:54:64:c5:20:92:27:41:61:41:ad:
fe:31:70:ec:ec:63:06:a3:45:1f:6c:db:f6:c1:84:39:ba:c8:
29:a7:4b:33:e7:1c:e8:be:cb:02:11:e9:e6:78:9b:ce:51:ab:
27:98:46:91:a4:f5:28:c8:79:0a:3d:35:ab:b5:6e:ea:ab:8a:
9a:69:c8:56:56:81:59:39:b3:bc:8f:be:2f:c4:bb:f8:f3:8c:
ee:c4:81:0b:74:d1:b6:be:60:14:36:2c:9a:ca:f3:96:d8:d6:
9b:dd:1b:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYQ/CStQDLZKrp90Z5REpyKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2MmU4ZTA1MGQzODQ1MDJlYjc5N2Y1ZTk0NDkzMWE2NmZk
ZDU1NWEwHhcNMjUwNDA3MTYwMTIxWhcNMjUwNDA4MTYwMTIxWjAzMTEwLwYDVQQD
Eyg5NjBjOGNiNTlhY2E2YWZjZWYzOGMxY2UzMzQ5NDA3NjEwNDM0ZWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGA3uh1DL/AfvAvLweRJalrSf0Z6
6Tbv9v3K7ZFY9qVJLXh70Hd0smAqBlw5iwKPkJADgzOESll0Z1g3x/DgnFsasZY/
x5K45GRMRRd0yEYDt5i0EurpQADOCSnkhG70yhK7NSjRfyfSr2Awv5KUm2oDRRMW
OWcL/aMpDAGHcigvCU0OlTNike3r3f5i0IGCyWu5VijMGHwvaTkgfMpbVLFl6Xx/
85TsnEdu1ArYdEhnyyK8B9sflzpQQ9Ynj1sE60Ou8BeD4XB2RjNs/uu1fn8553A9
+dq01g4kv6vAkpvYXMSBMMjbG7f6uH8xecpNBjLfmIJcgGZEjuIdLRF1qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYMjLWaymr87zjBzjNJQHYQQ07FMB8GA1UdIwQY
MBaAFFYujgUNOEUC63l/XpRJMaZv3VVaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmk2T0JRMDRSUUxyZVg5ZWxFa3hwbV9kVlZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jMmYxODItYmI2Ny00M2Q4LThlYTUt
OTVjNTAwMWJmYzcwLzEvVmk2T0JRMDRSUUxyZVg5ZWxFa3hwbV9kVlZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9jMmYxODItYmI2Ny00M2Q4LThlYTUtOTVjNTAwMWJmYzcw
LzEvVmk2T0JRMDRSUUxyZVg5ZWxFa3hwbV9kVlZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjfKoS1GY
EC9vJDWH7NFQ8vyZ6JrGvKUGvUT6o5qckl8khPXO4o2XXXTmjK3dWixlGjEmhlhI
bHCDYAzTI/evJWtNYaC0Vqw5IxUdfWQthITjSJMH0OLkE730WSXTRD/QulCu8LtG
lny5ibjhr90JDm7l09XiTIQodgHbEduiaJMAEXuCuzdnzh1syK+yIhdQzHsJR4tt
O7NUZMUgkidBYUGt/jFw7OxjBqNFH2zb9sGEObrIKadLM+cc6L7LAhHp5nibzlGr
J5hGkaT1KMh5Cj01q7Vu6quKmmnIVlaBWTmzvI++L8S7+POM7sSBC3TRtr5gFDYs
msrzltjWm90bow==
-----END CERTIFICATE-----
Generated at Mon Apr 7 21:03:52 2025 by rpki-client