Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
File: vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft (raw, json)
Hash identifier: iBxSH9r4uVI8LJruxG+zPitb72UrX5yV1Q4mGPrbee0=
Subject key identifier: 7A:3A:D3:90:C2:36:7C:51:85:1C:89:84:FA:8D:9A:94:57:2E:89:75
Authority key identifier: BD:D4:26:2F:64:2B:1B:B0:B5:3B:2A:6D:77:98:C0:89:9D:1E:4D:43
Certificate issuer: /CN=bdd4262f642b1bb0b53b2a6d7798c0899d1e4d43
Certificate serial: 019640302C3D3708873898BAE3CFD49103BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
Manifest number: 0A56
Signing time: Wed 16 Apr 2025 20:00:20 +0000
Manifest this update: Wed 16 Apr 2025 20:00:20 +0000
Manifest next update: Thu 17 Apr 2025 20:00:20 +0000
Files and hashes: 1: 3Vc8GAv3OdpXw-IEwIeY1NxUP6c.roa (hash: qDWay94UtnkH+WvsjYkj9wPwpR3+5E60OgC2LXVgLK8=)
2: o3kVjVR-Bk2kY6NJIMAGFLe8Jgw.roa (hash: RhEyDbo5nJOAevwisCtwUttff0SfpdFcDo7LzXQNDoo=)
3: vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl (hash: J5FUshMSZT4M059ajOFzFBAP2nj38pv6qPI87pMHzqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 20:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:30:2c:3d:37:08:87:38:98:ba:e3:cf:d4:91:03:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd4262f642b1bb0b53b2a6d7798c0899d1e4d43
Validity
Not Before: Apr 16 20:00:20 2025 GMT
Not After : Apr 17 20:00:20 2025 GMT
Subject: CN=7a3ad390c2367c51851c8984fa8d9a94572e8975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:42:43:96:74:06:dc:ac:5f:e1:7f:6d:83:3e:
8d:42:d2:b7:87:4c:87:f0:62:0d:67:b7:49:ba:c3:
46:99:03:20:5a:d0:dd:77:8e:c0:a4:5a:f0:7a:d6:
2b:54:5e:7c:b9:9b:63:39:c5:b7:af:44:28:08:e9:
27:b6:b7:5e:17:d8:ac:47:fa:6d:ba:64:36:3c:da:
36:3c:e4:86:ca:ad:84:9a:15:23:80:62:d3:80:41:
09:2b:3d:c8:29:71:cb:35:b3:8d:a3:38:ae:22:b0:
2a:31:7d:05:51:48:6e:14:1d:28:96:b9:d7:13:b5:
76:1a:6e:85:bb:d0:8c:9e:a8:eb:05:cb:d3:aa:f1:
b0:89:aa:a1:55:6c:6d:00:fb:78:af:5f:4c:0c:c6:
d3:4b:d2:85:7e:7a:77:cd:5b:63:d2:89:37:83:90:
5d:b1:d8:1f:b5:9a:28:06:3b:6f:b6:31:29:63:0c:
0f:57:e7:bf:9a:19:c0:40:04:f8:b7:d4:1b:c9:57:
d0:7b:62:e0:5f:c8:c3:00:b6:b2:89:33:c7:c7:76:
b8:ea:a5:de:69:b5:0e:14:3f:df:e7:fc:1d:f5:92:
ed:a1:eb:aa:08:33:ba:f1:86:e4:d0:a1:e8:8f:31:
51:1d:7a:8d:71:8c:f2:42:8e:4e:6d:08:21:f2:4b:
3b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3A:D3:90:C2:36:7C:51:85:1C:89:84:FA:8D:9A:94:57:2E:89:75
X509v3 Authority Key Identifier:
keyid:BD:D4:26:2F:64:2B:1B:B0:B5:3B:2A:6D:77:98:C0:89:9D:1E:4D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ed:a7:a8:15:8d:e7:20:2d:a3:59:33:68:89:47:9a:cf:1a:
5b:9b:ad:2c:52:da:f9:7a:52:13:5c:32:ab:c8:6e:a8:59:a4:
49:e5:71:98:da:24:37:07:3a:a4:2b:19:82:f9:90:7d:b7:8d:
20:83:9f:59:11:80:1b:fc:41:72:11:bc:5f:d0:4f:b8:64:a3:
16:a0:76:57:1e:6b:35:32:07:23:e7:56:16:45:27:a8:42:ba:
20:f9:a4:45:c7:11:df:63:ec:49:88:db:31:f1:41:a5:93:bd:
46:2c:7f:a4:69:81:c0:da:55:bd:a6:67:65:44:10:09:8b:ae:
95:44:f3:82:76:7a:56:e0:83:c1:43:a4:cd:7d:b8:95:98:27:
dd:4e:ef:44:3a:32:9d:f8:8a:43:a8:16:da:7f:7b:ea:ee:43:
8e:64:50:64:9f:b3:2d:e9:ee:81:fe:04:27:1a:2f:35:de:d1:
82:40:6e:78:ef:2b:80:9f:33:e9:a1:c1:50:a9:4f:8e:09:c3:
8b:b6:91:f3:bb:4a:0d:d8:7c:b8:ef:e0:69:1d:bb:0a:50:97:
15:aa:8f:5c:61:d4:4a:59:02:0c:29:98:5d:57:c2:f0:d6:5b:
47:30:1d:30:3c:45:47:ab:a2:5a:bc:9f:74:74:c2:20:a2:bc:
1d:09:5a:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZAMCw9NwiHOJi648/UkQO6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZDQyNjJmNjQyYjFiYjBiNTNiMmE2ZDc3OThjMDg5OWQx
ZTRkNDMwHhcNMjUwNDE2MjAwMDIwWhcNMjUwNDE3MjAwMDIwWjAzMTEwLwYDVQQD
Eyg3YTNhZDM5MGMyMzY3YzUxODUxYzg5ODRmYThkOWE5NDU3MmU4OTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEJDlnQG3Kxf4X9tgz6NQtK3h0yH
8GINZ7dJusNGmQMgWtDdd47ApFrwetYrVF58uZtjOcW3r0QoCOkntrdeF9isR/pt
umQ2PNo2POSGyq2EmhUjgGLTgEEJKz3IKXHLNbONoziuIrAqMX0FUUhuFB0olrnX
E7V2Gm6Fu9CMnqjrBcvTqvGwiaqhVWxtAPt4r19MDMbTS9KFfnp3zVtj0ok3g5Bd
sdgftZooBjtvtjEpYwwPV+e/mhnAQAT4t9QbyVfQe2LgX8jDALayiTPHx3a46qXe
abUOFD/f5/wd9ZLtoeuqCDO68Ybk0KHojzFRHXqNcYzyQo5ObQgh8ks7nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHo605DCNnxRhRyJhPqNmpRXLol1MB8GA1UdIwQY
MBaAFL3UJi9kKxuwtTsqbXeYwImdHk1DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmRRbUwyUXJHN0MxT3lwdGQ1akFpWjBlVFVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85MGM1YmUtMmY2ZS00NDQxLTk0NjEt
M2JkNzlmZmM2Mzk4LzEvdmRRbUwyUXJHN0MxT3lwdGQ1akFpWjBlVFVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy85MGM1YmUtMmY2ZS00NDQxLTk0NjEtM2JkNzlmZmM2Mzk4
LzEvdmRRbUwyUXJHN0MxT3lwdGQ1akFpWjBlVFVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqe2nqBWN
5yAto1kzaIlHms8aW5utLFLa+XpSE1wyq8huqFmkSeVxmNokNwc6pCsZgvmQfbeN
IIOfWRGAG/xBchG8X9BPuGSjFqB2Vx5rNTIHI+dWFkUnqEK6IPmkRccR32PsSYjb
MfFBpZO9Rix/pGmBwNpVvaZnZUQQCYuulUTzgnZ6VuCDwUOkzX24lZgn3U7vRDoy
nfiKQ6gW2n976u5DjmRQZJ+zLenugf4EJxovNd7RgkBueO8rgJ8z6aHBUKlPjgnD
i7aR87tKDdh8uO/gaR27ClCXFaqPXGHUSlkCDCmYXVfC8NZbRzAdMDxFR6uiWryf
dHTCIKK8HQlaTg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:39:04 2025 by rpki-client