Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
File: vvUlLMrD9twUJrVT8sHHIzrMiUs.mft (raw, json)
Hash identifier: TfSqgmKV37jtlwnsz/J/64S8TGTShvSnxYVFYkcqOdE=
Subject key identifier: E0:7C:8A:07:47:9F:4B:21:6C:B2:CD:D6:B1:82:2A:70:88:E5:A0:30
Authority key identifier: BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B
Certificate issuer: /CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b
Certificate serial: 019625277DA0973C965A15CFADB6123982F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
Manifest number: 14E7
Signing time: Fri 11 Apr 2025 14:01:07 +0000
Manifest this update: Fri 11 Apr 2025 14:01:07 +0000
Manifest next update: Sat 12 Apr 2025 14:01:07 +0000
Files and hashes: 1: cztKiFowQoK_UYPJ2AEdLhmfdJY.roa (hash: zSStQQUNC6z+zgYsdleYs1GIe5kvbt6u6C94AWl4nn0=)
2: vvUlLMrD9twUJrVT8sHHIzrMiUs.crl (hash: QHNHhMFk+4RWBtZZ5bQOnTkgcfshhn/drowI2NQy/OM=)
3: xlHcoYULH7mPEmpcqtscwUSRg-k.roa (hash: A4kztX9ZPQEUnGsY/7aFwo4jdiC6qf6Ig/R2vXwJcNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:25:27:7d:a0:97:3c:96:5a:15:cf:ad:b6:12:39:82:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b
Validity
Not Before: Apr 11 14:01:07 2025 GMT
Not After : Apr 12 14:01:07 2025 GMT
Subject: CN=e07c8a07479f4b216cb2cdd6b1822a7088e5a030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9b:29:b6:08:42:e1:17:85:d5:f6:7d:fe:34:
a9:f9:cc:35:9c:31:0a:f6:29:90:7f:a1:45:d4:ba:
38:38:4e:11:d0:29:28:b6:98:30:77:c8:cd:25:46:
24:7c:54:fd:74:7a:e7:94:ee:22:14:29:bd:f8:de:
41:bd:0e:7f:06:35:12:b6:46:b1:88:ba:a4:2e:07:
9d:74:9c:c1:f1:3a:86:bf:ed:2a:d3:07:95:8f:8d:
1a:72:81:25:af:4b:dd:4b:2b:c5:93:af:71:06:84:
49:80:44:e8:49:88:9b:01:95:ac:ca:ca:c2:1e:66:
ec:41:68:11:4d:0f:b1:85:cf:71:66:ce:0c:e1:fe:
8e:13:56:92:7b:23:91:6e:ba:63:9f:c8:b0:3d:b9:
2b:8d:63:7f:0d:a9:12:0b:4d:21:35:aa:67:25:b3:
b3:94:28:37:03:23:6a:b6:2c:b9:e8:da:23:13:d1:
6e:ea:2e:1f:47:09:4c:6a:f4:b1:fd:4a:96:b6:46:
ab:27:b3:2b:fc:a8:d4:60:9b:60:89:ef:66:11:5f:
ff:d6:5b:c9:29:3d:7d:72:bb:16:2a:2a:40:67:3c:
60:5e:b9:5f:6f:ab:f7:8b:ea:c5:48:24:b0:15:f3:
56:76:b7:43:81:59:bd:8e:89:de:e1:c0:3b:6d:49:
b0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7C:8A:07:47:9F:4B:21:6C:B2:CD:D6:B1:82:2A:70:88:E5:A0:30
X509v3 Authority Key Identifier:
keyid:BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:65:64:e7:8f:b4:85:62:1b:0c:79:c5:34:94:74:e3:53:ab:
37:7e:ae:6a:f1:72:c3:ba:04:20:05:f7:b1:e7:e3:7a:56:9c:
39:6a:90:7e:16:c9:46:e3:29:07:78:f6:15:55:95:bf:21:6a:
3a:6f:9c:e7:75:29:f4:e8:8c:34:e4:22:e2:10:8f:70:60:71:
0a:58:b7:f5:f7:67:61:ce:c1:ec:bc:15:6c:31:72:c2:55:48:
68:76:a4:5d:8d:e1:57:5c:a7:ed:6e:8e:f4:00:aa:03:4c:92:
9f:ad:34:fd:4b:93:7e:06:a1:3b:ab:f0:f8:f1:46:3f:df:ce:
72:06:48:52:33:88:18:6c:f3:85:76:d6:1d:32:aa:2d:0b:d4:
e0:c6:00:4e:9d:d0:3d:e8:1d:03:fd:a4:5f:d1:8d:e4:85:49:
62:0c:95:b0:5a:b5:de:cf:72:cd:57:5d:42:cc:fd:71:a2:c3:
1d:52:e6:6d:ad:ac:45:0c:ed:36:0f:b0:50:25:a8:46:68:f3:
e5:81:d9:40:12:4c:02:3a:7d:96:f4:c5:1e:77:a3:67:3c:36:
37:7e:20:79:6f:28:02:b6:8e:c0:6a:6d:66:e4:e3:db:14:42:
7f:02:45:01:92:42:66:bb:cb:e0:38:17:33:0d:63:02:aa:83:
05:78:5b:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYlJ32glzyWWhXPrbYSOYLzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlZjUyNTJjY2FjM2Y2ZGMxNDI2YjU1M2YyYzFjNzIzM2Fj
Yzg5NGIwHhcNMjUwNDExMTQwMTA3WhcNMjUwNDEyMTQwMTA3WjAzMTEwLwYDVQQD
EyhlMDdjOGEwNzQ3OWY0YjIxNmNiMmNkZDZiMTgyMmE3MDg4ZTVhMDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZsptghC4ReF1fZ9/jSp+cw1nDEK
9imQf6FF1Lo4OE4R0Ckotpgwd8jNJUYkfFT9dHrnlO4iFCm9+N5BvQ5/BjUStkax
iLqkLgeddJzB8TqGv+0q0weVj40acoElr0vdSyvFk69xBoRJgEToSYibAZWsysrC
HmbsQWgRTQ+xhc9xZs4M4f6OE1aSeyORbrpjn8iwPbkrjWN/DakSC00hNapnJbOz
lCg3AyNqtiy56NojE9Fu6i4fRwlMavSx/UqWtkarJ7Mr/KjUYJtgie9mEV//1lvJ
KT19crsWKipAZzxgXrlfb6v3i+rFSCSwFfNWdrdDgVm9jone4cA7bUmwMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOB8igdHn0shbLLN1rGCKnCI5aAwMB8GA1UdIwQY
MBaAFL71JSzKw/bcFCa1U/LBxyM6zIlLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnZVbExNckQ5dHdVSnJWVDhzSEhJenJNaVVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lN2ZjOTgtMTI4YS00NTNkLWJkZmIt
MTFlNWY2ZDEyZWYxLzEvdnZVbExNckQ5dHdVSnJWVDhzSEhJenJNaVVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9lN2ZjOTgtMTI4YS00NTNkLWJkZmItMTFlNWY2ZDEyZWYx
LzEvdnZVbExNckQ5dHdVSnJWVDhzSEhJenJNaVVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyGVk54+0
hWIbDHnFNJR041OrN36uavFyw7oEIAX3sefjelacOWqQfhbJRuMpB3j2FVWVvyFq
Om+c53Up9OiMNOQi4hCPcGBxCli39fdnYc7B7LwVbDFywlVIaHakXY3hV1yn7W6O
9ACqA0ySn600/UuTfgahO6vw+PFGP9/OcgZIUjOIGGzzhXbWHTKqLQvU4MYATp3Q
PegdA/2kX9GN5IVJYgyVsFq13s9yzVddQsz9caLDHVLmba2sRQztNg+wUCWoRmjz
5YHZQBJMAjp9lvTFHnejZzw2N34geW8oAraOwGptZuTj2xRCfwJFAZJCZrvL4DgX
Mw1jAqqDBXhbGQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 20:59:59 2025 by rpki-client