Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft
File: VutqX6PSF6LufUpi2EYaZ5PtXLM.mft (raw, json)
Hash identifier: 4RSKyejiFnPe4yzTEXrP22UC8ITg4uOg1IYPCm8Bna4=
Subject key identifier: 2D:45:9E:CE:CB:15:34:7F:28:77:6F:ED:FD:68:16:DF:2E:34:BD:34
Authority key identifier: 56:EB:6A:5F:A3:D2:17:A2:EE:7D:4A:62:D8:46:1A:67:93:ED:5C:B3
Certificate issuer: /CN=56eb6a5fa3d217a2ee7d4a62d8461a6793ed5cb3
Certificate serial: 019652A51E5407E3654A846D6B65B1071E4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VutqX6PSF6LufUpi2EYaZ5PtXLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft
Manifest number: 08C1
Signing time: Sun 20 Apr 2025 10:01:14 +0000
Manifest this update: Sun 20 Apr 2025 10:01:14 +0000
Manifest next update: Mon 21 Apr 2025 10:01:14 +0000
Files and hashes: 1: C1sfui3_F27EORD1FFTIF_PXuck.roa (hash: L6fwO735NsCUbgUMMTGbvgV3NoYMTpTeYzX/vL5LjfM=)
2: VutqX6PSF6LufUpi2EYaZ5PtXLM.crl (hash: yZhP6wSaKTv+ZK3GU68e+lp428OivOJQ0ZPfv/d2C1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VutqX6PSF6LufUpi2EYaZ5PtXLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a5:1e:54:07:e3:65:4a:84:6d:6b:65:b1:07:1e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56eb6a5fa3d217a2ee7d4a62d8461a6793ed5cb3
Validity
Not Before: Apr 20 10:01:14 2025 GMT
Not After : Apr 21 10:01:14 2025 GMT
Subject: CN=2d459ececb15347f28776fedfd6816df2e34bd34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:47:07:34:91:59:c3:fe:21:08:1c:84:4e:40:
af:95:f9:2a:d0:b1:26:27:63:ec:e1:d7:9d:a6:db:
4b:b1:b5:2e:89:2d:ff:9f:b2:8d:85:c8:3f:1b:41:
9d:77:87:3d:80:5d:93:31:2c:f6:46:54:af:e1:8e:
c3:a6:f7:0a:98:16:4c:bb:fd:ea:8e:4a:28:73:77:
90:70:e2:39:49:2b:65:f6:e6:ef:fd:13:18:d7:45:
cf:b3:51:ce:d5:cf:f3:e1:1c:92:3e:55:85:88:6f:
1a:94:51:6a:59:71:c1:2a:c3:50:b1:fe:1d:c6:03:
f1:72:d0:e5:5d:22:c3:a1:13:4e:52:4e:e3:bd:f0:
f3:2b:3f:6e:3e:4a:ab:38:40:00:a1:c9:ae:f0:bb:
08:2d:71:0f:94:98:52:02:45:a4:b4:c0:f2:78:ae:
cc:c4:82:14:65:ec:ea:56:5f:8d:11:e6:db:d1:9c:
52:7e:78:eb:29:b0:b1:46:ee:1f:ee:22:64:54:08:
fd:e1:6d:e8:57:05:8f:68:f5:43:9a:52:a9:04:40:
67:63:63:e7:53:83:2b:0e:b0:c6:bc:55:53:14:50:
14:13:9a:3e:10:a1:d2:81:86:59:33:af:03:70:af:
7f:bf:e7:b7:a9:e6:b0:ab:27:e0:89:3c:91:88:86:
f4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:45:9E:CE:CB:15:34:7F:28:77:6F:ED:FD:68:16:DF:2E:34:BD:34
X509v3 Authority Key Identifier:
keyid:56:EB:6A:5F:A3:D2:17:A2:EE:7D:4A:62:D8:46:1A:67:93:ED:5C:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VutqX6PSF6LufUpi2EYaZ5PtXLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:bf:37:3e:3b:68:e3:ab:b0:af:05:d1:c3:51:dd:ca:03:e1:
1b:28:f9:f3:62:d3:2b:38:0e:dd:bc:80:f2:cc:ff:08:f2:87:
d7:2b:79:ea:61:2f:b5:10:43:b1:75:e0:58:99:87:0a:84:66:
c9:35:a7:8e:8b:4d:cc:45:89:3d:f0:ad:85:fb:8b:46:f9:8d:
40:6b:7c:1c:d4:50:c6:7f:a7:6b:00:4e:4b:2d:1d:2e:c3:04:
cc:b1:1c:c5:ab:75:6d:a8:bf:27:45:5d:b4:e4:e2:33:9e:56:
e4:33:51:ea:23:45:1e:c4:26:31:b1:81:12:17:58:e5:af:8b:
91:15:b6:8b:b8:a6:f9:76:d4:8d:e8:2d:c5:cf:44:f3:c3:d3:
14:2e:71:4d:1f:14:2b:36:24:a3:a1:ec:a5:4b:60:5c:ce:c0:
bd:e3:35:f5:c4:d4:1a:d5:52:6f:2a:1d:84:82:cb:c9:de:ef:
cf:fc:7e:17:a2:ee:dd:a8:da:11:a4:ad:79:84:d3:0a:c5:71:
21:de:e1:1b:6c:9a:7d:da:46:02:30:fe:a7:4b:66:07:8e:9a:
5c:76:fe:7c:7b:af:ed:8b:61:3a:3c:6d:74:ff:ed:7d:d7:74:
71:9a:4c:0a:b7:eb:37:53:09:38:30:4e:c9:93:5c:bc:e3:8d:
56:a1:18:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSpR5UB+NlSoRta2WxBx5KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZWI2YTVmYTNkMjE3YTJlZTdkNGE2MmQ4NDYxYTY3OTNl
ZDVjYjMwHhcNMjUwNDIwMTAwMTE0WhcNMjUwNDIxMTAwMTE0WjAzMTEwLwYDVQQD
EygyZDQ1OWVjZWNiMTUzNDdmMjg3NzZmZWRmZDY4MTZkZjJlMzRiZDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkcHNJFZw/4hCByETkCvlfkq0LEm
J2Ps4dedpttLsbUuiS3/n7KNhcg/G0Gdd4c9gF2TMSz2RlSv4Y7DpvcKmBZMu/3q
jkooc3eQcOI5SStl9ubv/RMY10XPs1HO1c/z4RySPlWFiG8alFFqWXHBKsNQsf4d
xgPxctDlXSLDoRNOUk7jvfDzKz9uPkqrOEAAocmu8LsILXEPlJhSAkWktMDyeK7M
xIIUZezqVl+NEebb0ZxSfnjrKbCxRu4f7iJkVAj94W3oVwWPaPVDmlKpBEBnY2Pn
U4MrDrDGvFVTFFAUE5o+EKHSgYZZM68DcK9/v+e3qeawqyfgiTyRiIb0mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1Fns7LFTR/KHdv7f1oFt8uNL00MB8GA1UdIwQY
MBaAFFbral+j0hei7n1KYthGGmeT7VyzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnV0cVg2UFNGNkx1ZlVwaTJFWWFaNVB0WExNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jMjU0MzUtZDIzYS00MWEzLWJjNWUt
NTNlY2M2NjU1ZjZiLzEvVnV0cVg2UFNGNkx1ZlVwaTJFWWFaNVB0WExNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9jMjU0MzUtZDIzYS00MWEzLWJjNWUtNTNlY2M2NjU1ZjZi
LzEvVnV0cVg2UFNGNkx1ZlVwaTJFWWFaNVB0WExNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATr83Pjto
46uwrwXRw1HdygPhGyj582LTKzgO3byA8sz/CPKH1yt56mEvtRBDsXXgWJmHCoRm
yTWnjotNzEWJPfCthfuLRvmNQGt8HNRQxn+nawBOSy0dLsMEzLEcxat1bai/J0Vd
tOTiM55W5DNR6iNFHsQmMbGBEhdY5a+LkRW2i7im+XbUjegtxc9E88PTFC5xTR8U
KzYko6HspUtgXM7AveM19cTUGtVSbyodhILLyd7vz/x+F6Lu3ajaEaSteYTTCsVx
Id7hG2yafdpGAjD+p0tmB46aXHb+fHuv7YthOjxtdP/tfdd0cZpMCrfrN1MJODBO
yZNcvOONVqEY/w==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:19:06 2025 by rpki-client