Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
File: VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft (raw, json)
Hash identifier: QQ0PtBUJrs0P3BAz6wtedqfkyBiOSAepyXM0llMA9C4=
Subject key identifier: A2:78:EC:21:98:15:CD:A8:9D:07:42:58:C5:27:DC:C7:2B:92:1C:0E
Authority key identifier: 54:61:75:F2:E8:29:B4:66:57:59:6D:D8:F3:2E:1F:93:EC:BE:0A:24
Certificate issuer: /CN=546175f2e829b46657596dd8f32e1f93ecbe0a24
Certificate serial: 01958C60B3D334E07D000CC7B6105EAA9D15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
Manifest number: 1492
Signing time: Wed 12 Mar 2025 22:01:42 +0000
Manifest this update: Wed 12 Mar 2025 22:01:42 +0000
Manifest next update: Thu 13 Mar 2025 22:01:42 +0000
Files and hashes: 1: VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl (hash: SpQj0h5/ZwG6qOBbMu8tqN3lCENtDuzDxYIlRv1DKcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:b3:d3:34:e0:7d:00:0c:c7:b6:10:5e:aa:9d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546175f2e829b46657596dd8f32e1f93ecbe0a24
Validity
Not Before: Mar 12 22:01:42 2025 GMT
Not After : Mar 13 22:01:42 2025 GMT
Subject: CN=a278ec219815cda89d074258c527dcc72b921c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a4:db:97:1e:f9:94:bf:cf:09:00:16:82:0f:
e3:69:59:3f:56:0c:a8:77:34:a1:b9:2a:76:6c:fa:
de:24:71:64:fa:52:19:c6:bb:f0:e6:40:ec:96:61:
fe:6a:a3:f2:b0:0e:c4:bb:a3:6d:2f:9a:9a:99:77:
24:6f:e0:c1:e9:81:88:6c:00:80:e9:ea:71:ad:fc:
0e:a4:76:8c:97:89:db:3e:ef:47:39:22:53:bf:63:
59:d8:c8:95:68:ef:91:02:83:51:4f:c6:dd:d0:64:
e9:9e:e8:0f:5f:2e:2f:15:e9:cd:86:ed:11:a9:79:
ec:98:49:36:c3:96:a1:60:22:7c:22:45:d3:3e:88:
8e:88:c5:bf:69:bf:f6:b9:4f:c8:75:4f:56:44:99:
ac:46:2f:47:f8:95:58:2c:4a:62:52:e2:5c:4a:3a:
f2:cb:2f:21:ee:cc:cd:39:35:4a:51:22:63:48:bc:
8e:e3:e7:30:8a:a0:99:df:ab:b3:99:4c:0f:d6:ac:
0b:fe:ab:0e:65:61:b6:88:bc:dc:e0:a2:0a:7b:44:
46:35:13:0c:41:f2:8f:9e:2e:97:43:06:de:7c:f9:
57:88:42:f6:d4:46:c2:ea:18:42:0c:ac:2c:59:f5:
d9:cd:bd:dc:17:00:a7:33:81:76:58:2d:24:87:87:
6f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:78:EC:21:98:15:CD:A8:9D:07:42:58:C5:27:DC:C7:2B:92:1C:0E
X509v3 Authority Key Identifier:
keyid:54:61:75:F2:E8:29:B4:66:57:59:6D:D8:F3:2E:1F:93:EC:BE:0A:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a1:aa:91:e0:26:d6:40:8b:f8:bf:6e:29:5b:60:79:75:13:
64:a8:97:d9:3a:54:3b:d2:c0:c6:bd:20:51:99:f1:a0:bd:69:
d1:5d:00:30:eb:a2:56:58:9d:4f:f5:8a:8f:3c:74:04:69:78:
8b:15:0b:81:d8:a9:fe:3c:af:cd:88:5c:ac:ef:7f:f0:5d:76:
8d:c5:e4:5f:5b:54:f0:3c:2d:c1:c5:60:9a:6f:3b:2b:cb:0a:
e2:24:06:58:10:56:81:b9:90:39:6d:2c:d9:5a:7e:13:ff:0d:
88:73:20:da:22:de:a5:7a:c0:77:c3:a6:ae:68:58:01:aa:aa:
7d:74:00:e1:d4:51:29:dd:84:df:43:07:85:3a:2e:41:84:bc:
76:fc:c8:e5:1c:bc:0c:7e:13:8a:72:ca:ed:93:4a:1c:97:77:
81:98:84:5c:08:86:64:78:b2:c2:db:f7:b5:d2:01:2d:49:61:
48:f2:c8:8f:7c:09:12:24:fe:95:9a:11:ef:9f:e5:78:36:6f:
b0:2e:06:17:04:55:89:62:58:f9:a4:b7:2a:30:52:8b:9c:3e:
76:22:15:dc:c8:4a:5b:b9:00:71:cb:77:1e:5c:25:28:69:aa:
b3:5b:f2:cc:d5:a2:c4:9b:d2:6b:ca:74:09:f5:06:28:85:91:
27:a4:c2:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMYLPTNOB9AAzHthBeqp0VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjE3NWYyZTgyOWI0NjY1NzU5NmRkOGYzMmUxZjkzZWNi
ZTBhMjQwHhcNMjUwMzEyMjIwMTQyWhcNMjUwMzEzMjIwMTQyWjAzMTEwLwYDVQQD
EyhhMjc4ZWMyMTk4MTVjZGE4OWQwNzQyNThjNTI3ZGNjNzJiOTIxYzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqTblx75lL/PCQAWgg/jaVk/Vgyo
dzShuSp2bPreJHFk+lIZxrvw5kDslmH+aqPysA7Eu6NtL5qamXckb+DB6YGIbACA
6epxrfwOpHaMl4nbPu9HOSJTv2NZ2MiVaO+RAoNRT8bd0GTpnugPXy4vFenNhu0R
qXnsmEk2w5ahYCJ8IkXTPoiOiMW/ab/2uU/IdU9WRJmsRi9H+JVYLEpiUuJcSjry
yy8h7szNOTVKUSJjSLyO4+cwiqCZ36uzmUwP1qwL/qsOZWG2iLzc4KIKe0RGNRMM
QfKPni6XQwbefPlXiEL21EbC6hhCDKwsWfXZzb3cFwCnM4F2WC0kh4dvhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJ47CGYFc2onQdCWMUn3McrkhwOMB8GA1UdIwQY
MBaAFFRhdfLoKbRmV1lt2PMuH5PsvgokMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdGMTh1Z3B0R1pYV1czWTh5NGZrLXktQ2lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8yY2U3NzUtMzdhYS00ODQwLTk4NTIt
YmIxYjBlNDE4YTIxLzEvVkdGMTh1Z3B0R1pYV1czWTh5NGZrLXktQ2lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8yY2U3NzUtMzdhYS00ODQwLTk4NTItYmIxYjBlNDE4YTIx
LzEvVkdGMTh1Z3B0R1pYV1czWTh5NGZrLXktQ2lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfqGqkeAm
1kCL+L9uKVtgeXUTZKiX2TpUO9LAxr0gUZnxoL1p0V0AMOuiVlidT/WKjzx0BGl4
ixULgdip/jyvzYhcrO9/8F12jcXkX1tU8DwtwcVgmm87K8sK4iQGWBBWgbmQOW0s
2Vp+E/8NiHMg2iLepXrAd8OmrmhYAaqqfXQA4dRRKd2E30MHhTouQYS8dvzI5Ry8
DH4TinLK7ZNKHJd3gZiEXAiGZHiywtv3tdIBLUlhSPLIj3wJEiT+lZoR75/leDZv
sC4GFwRViWJY+aS3KjBSi5w+diIV3MhKW7kAcct3HlwlKGmqs1vyzNWixJvSa8p0
CfUGKIWRJ6TClA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:42:10 2025 by rpki-client