Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
File: vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft (raw, json)
Hash identifier: 423msYJQjehZLgtJA4c3HLuP/2YnvrkAsrSuDiGxsJc=
Subject key identifier: AD:09:1A:4C:E2:D5:57:4F:2C:96:F0:3B:ED:FE:76:17:60:AD:BF:B6
Authority key identifier: BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4
Certificate issuer: /CN=bc3033a102b3b7912a366320f4435c53fb9773f4
Certificate serial: 019646A0698753615FF7FD4995276F03E909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
Manifest number: 14F8
Signing time: Fri 18 Apr 2025 02:00:39 +0000
Manifest this update: Fri 18 Apr 2025 02:00:39 +0000
Manifest next update: Sat 19 Apr 2025 02:00:39 +0000
Files and hashes: 1: 1rkUPHoUCa7mNvZ-1McSv4VTlL4.roa (hash: 7aGZcVrrNLU0uixa8/gBU4YvCztU5V0t53AcHm6cX3E=)
2: vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl (hash: HMteNMSasfLOrPvK3U2AcoIWhLIFgQ9L6Gnou+a2r8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:a0:69:87:53:61:5f:f7:fd:49:95:27:6f:03:e9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc3033a102b3b7912a366320f4435c53fb9773f4
Validity
Not Before: Apr 18 02:00:39 2025 GMT
Not After : Apr 19 02:00:39 2025 GMT
Subject: CN=ad091a4ce2d5574f2c96f03bedfe761760adbfb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e6:86:92:5e:aa:02:5b:51:47:32:45:ad:59:
54:71:61:a3:cc:a5:38:68:d4:dc:f5:07:e6:8f:27:
14:61:77:ec:0e:97:e8:bc:35:53:e8:77:37:c6:4a:
12:b9:03:0f:df:ae:66:a7:5c:c3:5d:3c:1e:04:a1:
13:42:b1:8f:8e:72:f4:e5:7c:b3:6e:b5:ea:3f:be:
16:f0:74:64:72:70:8b:0f:62:b1:2f:5c:a0:82:17:
0a:17:12:f3:91:9a:89:45:8d:67:81:50:2b:38:63:
0f:8c:20:96:6c:3f:41:c3:6f:f1:86:89:b0:03:bd:
8a:93:20:dc:28:cc:7b:a7:fb:ea:b5:80:00:81:8f:
3b:b9:74:59:e4:69:b7:06:f0:2b:a3:16:19:94:4b:
ca:b7:72:ae:80:6e:a4:50:61:64:a0:bc:74:3f:71:
38:18:0c:fd:24:be:51:f4:87:ab:b4:1a:59:5e:63:
b8:e0:25:81:11:42:a7:be:a3:55:cf:bf:22:f4:06:
45:64:1a:93:ee:97:70:cf:3d:04:fe:ca:d5:3a:92:
a0:b4:e8:0c:97:a5:8a:23:ec:c6:5c:a5:d4:44:73:
f0:0b:b4:d2:de:36:0f:f6:96:00:43:6c:b6:5c:d7:
d9:25:af:5b:ca:c1:e7:19:94:60:9d:67:d0:4b:1d:
c5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:09:1A:4C:E2:D5:57:4F:2C:96:F0:3B:ED:FE:76:17:60:AD:BF:B6
X509v3 Authority Key Identifier:
keyid:BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:6e:29:d2:f4:b4:c6:c3:42:15:d6:df:45:9e:3d:c7:76:83:
93:f7:67:17:d6:70:de:bb:31:11:12:4c:d8:68:f3:e2:82:dc:
78:be:1e:ed:6a:4a:0d:1d:2f:2b:a7:d6:3b:ca:9b:ab:d9:b9:
88:b8:e2:20:2c:c1:dc:56:d3:c8:2e:42:bf:1a:61:51:d6:c5:
05:5a:ad:2a:f9:67:3a:7e:dc:85:3f:5e:e8:1c:09:03:0a:c6:
23:56:cf:ad:22:52:24:af:a2:58:65:8a:44:45:6e:f7:c8:89:
8b:52:aa:df:f5:c7:84:ff:99:c0:5c:da:78:00:4c:05:df:35:
53:97:58:b7:ec:4e:c7:43:e8:d1:4a:29:f8:a0:37:13:07:1d:
db:55:37:75:5d:65:ee:76:c7:2a:20:cb:f2:ba:07:7d:eb:da:
9c:e8:3c:81:13:00:0b:87:81:ac:6c:b5:29:0e:4f:65:fe:88:
ea:df:24:78:f1:f0:e7:24:cf:a6:cb:d3:0a:e7:bf:16:c7:f8:
7e:b6:03:47:66:a2:18:f4:79:96:7d:cc:06:ee:39:e3:a2:39:
fe:ca:5f:0a:b7:d7:cf:29:1b:90:9a:55:04:4d:db:e6:b9:65:
67:93:a4:37:02:d0:db:16:65:5f:c5:bb:82:fd:cb:72:5c:be:
2d:e1:01:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZGoGmHU2Ff9/1JlSdvA+kJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMzAzM2ExMDJiM2I3OTEyYTM2NjMyMGY0NDM1YzUzZmI5
NzczZjQwHhcNMjUwNDE4MDIwMDM5WhcNMjUwNDE5MDIwMDM5WjAzMTEwLwYDVQQD
EyhhZDA5MWE0Y2UyZDU1NzRmMmM5NmYwM2JlZGZlNzYxNzYwYWRiZmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+aGkl6qAltRRzJFrVlUcWGjzKU4
aNTc9QfmjycUYXfsDpfovDVT6Hc3xkoSuQMP365mp1zDXTweBKETQrGPjnL05Xyz
brXqP74W8HRkcnCLD2KxL1ygghcKFxLzkZqJRY1ngVArOGMPjCCWbD9Bw2/xhomw
A72KkyDcKMx7p/vqtYAAgY87uXRZ5Gm3BvAroxYZlEvKt3KugG6kUGFkoLx0P3E4
GAz9JL5R9IertBpZXmO44CWBEUKnvqNVz78i9AZFZBqT7pdwzz0E/srVOpKgtOgM
l6WKI+zGXKXURHPwC7TS3jYP9pYAQ2y2XNfZJa9bysHnGZRgnWfQSx3FyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0JGkzi1VdPLJbwO+3+dhdgrb+2MB8GA1UdIwQY
MBaAFLwwM6ECs7eRKjZjIPRDXFP7l3P0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkRBem9RS3p0NUVxTm1NZzlFTmNVX3VYY19RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zMGNmMDctM2ZhOC00NGE2LTkzNWIt
ZjlhN2FjZDkxYmNjLzEvdkRBem9RS3p0NUVxTm1NZzlFTmNVX3VYY19RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8zMGNmMDctM2ZhOC00NGE2LTkzNWItZjlhN2FjZDkxYmNj
LzEvdkRBem9RS3p0NUVxTm1NZzlFTmNVX3VYY19RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMW4p0vS0
xsNCFdbfRZ49x3aDk/dnF9Zw3rsxERJM2Gjz4oLceL4e7WpKDR0vK6fWO8qbq9m5
iLjiICzB3FbTyC5CvxphUdbFBVqtKvlnOn7chT9e6BwJAwrGI1bPrSJSJK+iWGWK
REVu98iJi1Kq3/XHhP+ZwFzaeABMBd81U5dYt+xOx0Po0Uop+KA3Ewcd21U3dV1l
7nbHKiDL8roHfevanOg8gRMAC4eBrGy1KQ5PZf6I6t8kePHw5yTPpsvTCue/Fsf4
frYDR2aiGPR5ln3MBu4546I5/spfCrfXzykbkJpVBE3b5rllZ5OkNwLQ2xZlX8W7
gv3Lcly+LeEBqg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 11:19:49 2025 by rpki-client