Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
File: VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft (raw, json)
Hash identifier: Gt+PWI8iJ8VQF43J6sQFj+2vR9yRfAGfZVpJdL0UkIM=
Subject key identifier: A1:83:7D:51:B4:DB:80:80:0B:FB:0C:6D:29:0C:B6:85:07:90:2D:7B
Authority key identifier: 55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
Certificate issuer: /CN=5503251db69693362a927e2b130467945c54f0fc
Certificate serial: 01965236BD96D1D08CA01BB01E916D8222F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
Manifest number: 023E
Signing time: Sun 20 Apr 2025 08:00:41 +0000
Manifest this update: Sun 20 Apr 2025 08:00:41 +0000
Manifest next update: Mon 21 Apr 2025 08:00:41 +0000
Files and hashes: 1: N1Onrv7nhAaOvq7SUfOQEHI1u0Q.roa (hash: XfPvZiSzA2jPJQaFVfWcm0/MZ4kiyCO7Rw1NAz93uXo=)
2: VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl (hash: TLKJ7ORtQD68rs1Odmg4DKZFEXaC1grhCWYyhifgX+0=)
3: Wlq8JczS5O9x_-wRlhfNjfhOXSo.roa (hash: gCijQxztNK0z51fdMos9bsaBQa/7dff7n+52J3xqq5M=)
4: xK4HULlNXz23y2RfmIl2fRaQseI.roa (hash: wEwmfIEU0PyZxLE1YCmfzfppUZP/HwJLHEZYM0grOOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:bd:96:d1:d0:8c:a0:1b:b0:1e:91:6d:82:22:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5503251db69693362a927e2b130467945c54f0fc
Validity
Not Before: Apr 20 08:00:41 2025 GMT
Not After : Apr 21 08:00:41 2025 GMT
Subject: CN=a1837d51b4db80800bfb0c6d290cb68507902d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:22:ee:61:02:a8:bb:0e:2f:b6:26:b2:fe:cc:
d0:56:d7:40:d9:9e:16:44:43:64:00:9a:b6:0f:6f:
78:be:7f:66:bb:67:e7:d7:ab:45:59:ec:8c:b6:bf:
28:6a:ef:a1:68:1f:a2:34:d0:56:18:1f:8d:11:d3:
fd:1f:4a:2d:05:f9:87:98:bf:42:7f:77:71:64:32:
9b:e9:a7:9e:8b:42:a3:97:17:30:0f:aa:f7:96:27:
a7:4e:66:90:49:c5:f8:f4:e7:71:de:d3:40:92:9a:
10:08:ba:6a:c5:59:fb:31:63:e5:14:eb:88:9a:86:
a7:af:e8:bc:84:45:6c:8a:0a:74:dd:ef:d4:a6:4f:
f9:0e:f7:5f:6a:3f:9a:1c:6d:6a:06:16:e5:48:20:
e1:ed:a4:0b:38:49:12:30:5f:7c:83:7b:50:79:f1:
d4:55:e2:1f:45:15:2c:5d:1b:6a:fa:a8:03:74:24:
93:2b:d1:b9:d8:64:ec:2b:7c:b7:8b:2a:64:33:9d:
71:cb:d2:69:09:33:34:c6:25:41:01:ce:5a:82:4f:
e2:a1:b3:2c:12:2f:68:45:35:c7:32:50:89:cf:e0:
33:ff:ea:04:09:04:e5:6a:90:77:9a:79:2b:1f:dc:
e2:c1:db:71:92:2e:38:b1:01:6a:9f:8e:72:9d:8b:
15:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:83:7D:51:B4:DB:80:80:0B:FB:0C:6D:29:0C:B6:85:07:90:2D:7B
X509v3 Authority Key Identifier:
keyid:55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:28:d0:ed:e6:fd:ee:e2:5b:ba:0b:2d:ee:f9:8b:6c:ff:5f:
a2:a8:9f:c5:f1:5e:ea:ab:5f:70:87:69:45:4a:ee:74:12:76:
cb:d0:b7:c3:1d:08:52:8b:d3:17:7d:a6:49:ff:f8:e4:a0:59:
31:95:cc:fd:cb:49:ec:22:fc:ac:41:53:33:f0:2d:d7:94:75:
d3:1c:9a:cc:0e:7f:23:9e:57:10:e7:d6:6e:e0:61:9b:be:f0:
96:73:7a:5a:36:65:4e:99:b2:0e:15:3a:d9:0c:1f:07:25:2e:
d2:df:ad:b9:d9:82:90:64:b0:bb:36:0e:66:f5:13:92:34:9a:
db:7e:80:b5:03:65:83:8f:28:c7:2d:14:1e:33:82:97:03:bc:
c5:a8:0b:e5:7f:6a:6b:48:14:b7:52:af:31:f4:84:55:cb:8a:
31:c1:a9:7c:6c:5f:f2:67:60:c0:b3:eb:d7:1d:7a:98:9f:90:
7c:d3:cf:65:00:60:09:b3:3a:11:f4:a2:18:53:03:18:6f:be:
26:8a:3b:02:7e:58:f6:38:d0:a5:ac:c4:31:d9:e5:87:83:e5:
64:13:c0:b7:3d:51:8e:30:96:18:67:65:82:14:81:e2:54:52:
da:d6:03:c0:b5:f4:56:eb:87:fb:00:18:81:a0:cd:97:1c:c7:
d3:ed:67:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSNr2W0dCMoBuwHpFtgiL5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MDMyNTFkYjY5NjkzMzYyYTkyN2UyYjEzMDQ2Nzk0NWM1
NGYwZmMwHhcNMjUwNDIwMDgwMDQxWhcNMjUwNDIxMDgwMDQxWjAzMTEwLwYDVQQD
EyhhMTgzN2Q1MWI0ZGI4MDgwMGJmYjBjNmQyOTBjYjY4NTA3OTAyZDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCLuYQKouw4vtiay/szQVtdA2Z4W
RENkAJq2D294vn9mu2fn16tFWeyMtr8oau+haB+iNNBWGB+NEdP9H0otBfmHmL9C
f3dxZDKb6aeei0KjlxcwD6r3lienTmaQScX49Odx3tNAkpoQCLpqxVn7MWPlFOuI
moanr+i8hEVsigp03e/Upk/5Dvdfaj+aHG1qBhblSCDh7aQLOEkSMF98g3tQefHU
VeIfRRUsXRtq+qgDdCSTK9G52GTsK3y3iypkM51xy9JpCTM0xiVBAc5agk/iobMs
Ei9oRTXHMlCJz+Az/+oECQTlapB3mnkrH9ziwdtxki44sQFqn45ynYsVOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGDfVG024CAC/sMbSkMtoUHkC17MB8GA1UdIwQY
MBaAFFUDJR22lpM2KpJ+KxMEZ5RcVPD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlFNbEhiYVdrellxa240ckV3Um5sRnhVOFB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jN2I5ZGMtN2FjNi00YWNhLWE0M2It
M2NiYWQ1YjkwNGI1LzEvVlFNbEhiYVdrellxa240ckV3Um5sRnhVOFB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9jN2I5ZGMtN2FjNi00YWNhLWE0M2ItM2NiYWQ1YjkwNGI1
LzEvVlFNbEhiYVdrellxa240ckV3Um5sRnhVOFB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALCjQ7eb9
7uJbugst7vmLbP9foqifxfFe6qtfcIdpRUrudBJ2y9C3wx0IUovTF32mSf/45KBZ
MZXM/ctJ7CL8rEFTM/At15R10xyazA5/I55XEOfWbuBhm77wlnN6WjZlTpmyDhU6
2QwfByUu0t+tudmCkGSwuzYOZvUTkjSa236AtQNlg48oxy0UHjOClwO8xagL5X9q
a0gUt1KvMfSEVcuKMcGpfGxf8mdgwLPr1x16mJ+QfNPPZQBgCbM6EfSiGFMDGG++
Joo7An5Y9jjQpazEMdnlh4PlZBPAtz1RjjCWGGdlghSB4lRS2tYDwLX0VuuH+wAY
gaDNlxzH0+1nUg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:57:20 2025 by rpki-client