Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
File: vCYT4PJtOQfwljQL4FDCAdNY1tU.mft (raw, json)
Hash identifier: FWXXcbzcf8CcNhigmd8b592xJTzL51C+Ww1b+K30cZE=
Subject key identifier: F9:96:32:DA:E4:35:88:7E:8E:7D:63:A8:75:E5:0A:82:09:20:64:BF
Authority key identifier: BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
Certificate issuer: /CN=bc2613e0f26d3907f096340be050c201d358d6d5
Certificate serial: 019644B2379B7CDE2716BD6BB3F394601B27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
Manifest number: 01AD
Signing time: Thu 17 Apr 2025 17:00:52 +0000
Manifest this update: Thu 17 Apr 2025 17:00:52 +0000
Manifest next update: Fri 18 Apr 2025 17:00:52 +0000
Files and hashes: 1: urJ49fIkD8qF9GsD_zFu82_16aQ.roa (hash: CgkfZ2tObyCZ5wcx0o7Zqg/j5Bh2RYB4YUbPkk96BQA=)
2: vCYT4PJtOQfwljQL4FDCAdNY1tU.crl (hash: bGvCLgzeG1RCS1AVFf/tLVdO8+Ys3CxdLqZVgpRSJgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b2:37:9b:7c:de:27:16:bd:6b:b3:f3:94:60:1b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc2613e0f26d3907f096340be050c201d358d6d5
Validity
Not Before: Apr 17 17:00:52 2025 GMT
Not After : Apr 18 17:00:52 2025 GMT
Subject: CN=f99632dae435887e8e7d63a875e50a82092064bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:37:91:50:98:61:b0:fc:ae:cd:70:d5:34:d6:
32:9c:87:46:a4:94:cf:4a:07:92:08:9c:68:a3:ac:
29:78:c2:84:bd:bd:b5:ab:75:37:b9:51:8b:1c:cb:
d9:51:be:17:ea:6d:f9:c9:b0:72:a3:6f:c6:c9:3a:
a2:8a:49:ee:55:62:36:98:ff:f0:78:ed:53:bf:55:
1b:df:93:a3:8f:9e:46:72:2e:ec:c3:72:f9:c1:66:
6b:72:94:92:eb:2b:d3:66:f8:2d:10:4c:b9:7f:fd:
77:fc:35:ec:8d:7a:47:dd:67:f8:81:ff:97:f8:48:
d8:67:6d:ae:57:40:c8:fc:a6:db:f6:62:e5:dd:a6:
d2:42:04:84:e0:3f:d2:f3:a1:06:c5:85:50:a1:ed:
42:eb:9a:0a:3a:9e:3c:e4:29:cb:a8:08:c9:4a:59:
54:9e:14:22:c7:4b:bc:63:f6:45:39:72:70:8c:9d:
a9:1c:22:1d:ac:ae:01:54:02:bf:f3:3e:91:2b:4c:
ee:62:40:cd:6c:21:09:03:7c:9a:f6:aa:7c:65:fc:
97:fa:69:50:a0:b1:81:52:25:b3:c6:c6:5f:55:d1:
6d:1a:39:7e:a8:e5:5f:cb:2b:7a:27:0e:02:d0:38:
72:3c:fc:68:42:3c:91:ec:d8:99:de:f8:26:6f:2e:
cc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:96:32:DA:E4:35:88:7E:8E:7D:63:A8:75:E5:0A:82:09:20:64:BF
X509v3 Authority Key Identifier:
keyid:BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:42:f5:96:77:3c:32:16:10:0b:b3:2d:f4:64:c5:e8:c0:10:
6e:59:a8:4b:f2:ce:57:57:6e:53:75:60:9f:04:ce:88:43:86:
64:c4:98:e5:ac:b0:87:38:5c:77:0a:51:db:53:7f:2f:ca:2d:
d4:fd:16:5d:be:bf:8a:ae:40:41:db:0e:79:9e:60:ab:16:b0:
9d:41:1c:ed:74:e2:34:75:03:a6:2c:f4:fc:10:9f:19:7f:97:
63:06:6b:74:1f:a9:8c:2d:24:77:3a:9f:f7:d8:b3:b6:7e:b4:
73:2e:69:da:a3:13:ee:96:91:7d:61:56:06:86:ea:ec:39:79:
5f:77:ad:68:8e:c2:cf:6b:e0:d3:ff:19:71:14:de:48:cb:3f:
d5:1a:c9:ee:29:99:02:66:03:91:f3:01:3a:37:11:95:8c:42:
41:c5:1b:cc:27:6b:a2:6d:31:cc:13:cb:d6:44:3b:15:0d:fb:
fd:40:76:41:41:e4:e2:36:2b:76:17:f0:76:29:72:39:3e:87:
d7:54:18:7b:e9:0b:40:d8:ce:7a:29:dd:b8:50:b8:48:e5:f1:
f5:74:b4:0c:99:2c:cd:2b:a6:0c:7f:ea:3b:ec:3b:ea:e9:8b:
b0:fa:a4:50:09:04:1a:e7:a5:4d:c3:c1:a8:e3:77:50:11:c2:
95:f1:7a:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZEsjebfN4nFr1rs/OUYBsnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMjYxM2UwZjI2ZDM5MDdmMDk2MzQwYmUwNTBjMjAxZDM1
OGQ2ZDUwHhcNMjUwNDE3MTcwMDUyWhcNMjUwNDE4MTcwMDUyWjAzMTEwLwYDVQQD
EyhmOTk2MzJkYWU0MzU4ODdlOGU3ZDYzYTg3NWU1MGE4MjA5MjA2NGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjeRUJhhsPyuzXDVNNYynIdGpJTP
SgeSCJxoo6wpeMKEvb21q3U3uVGLHMvZUb4X6m35ybByo2/GyTqiiknuVWI2mP/w
eO1Tv1Ub35Ojj55Gci7sw3L5wWZrcpSS6yvTZvgtEEy5f/13/DXsjXpH3Wf4gf+X
+EjYZ22uV0DI/Kbb9mLl3abSQgSE4D/S86EGxYVQoe1C65oKOp485CnLqAjJSllU
nhQix0u8Y/ZFOXJwjJ2pHCIdrK4BVAK/8z6RK0zuYkDNbCEJA3ya9qp8ZfyX+mlQ
oLGBUiWzxsZfVdFtGjl+qOVfyyt6Jw4C0DhyPPxoQjyR7NiZ3vgmby7M+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmWMtrkNYh+jn1jqHXlCoIJIGS/MB8GA1UdIwQY
MBaAFLwmE+DybTkH8JY0C+BQwgHTWNbVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkNZVDRQSnRPUWZ3bGpRTDRGRENBZE5ZMXRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zNmNkNDAtOTA4MS00MGU2LTk3Yzct
MTYyMGNmZGM3MTE3LzEvdkNZVDRQSnRPUWZ3bGpRTDRGRENBZE5ZMXRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8zNmNkNDAtOTA4MS00MGU2LTk3YzctMTYyMGNmZGM3MTE3
LzEvdkNZVDRQSnRPUWZ3bGpRTDRGRENBZE5ZMXRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARkL1lnc8
MhYQC7Mt9GTF6MAQblmoS/LOV1duU3VgnwTOiEOGZMSY5aywhzhcdwpR21N/L8ot
1P0WXb6/iq5AQdsOeZ5gqxawnUEc7XTiNHUDpiz0/BCfGX+XYwZrdB+pjC0kdzqf
99iztn60cy5p2qMT7paRfWFWBobq7Dl5X3etaI7Cz2vg0/8ZcRTeSMs/1RrJ7imZ
AmYDkfMBOjcRlYxCQcUbzCdrom0xzBPL1kQ7FQ37/UB2QUHk4jYrdhfwdilyOT6H
11QYe+kLQNjOeinduFC4SOXx9XS0DJkszSumDH/qO+w76umLsPqkUAkEGuelTcPB
qON3UBHClfF6eA==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:51:46 2025 by rpki-client