Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft
File: VGLTx682xAGqlwlNPyOJ14ddFOw.mft (raw, json)
Hash identifier: shJeDoJE4F+xrj3jmEyrCf6i0NjkgkHm36F50CJdFbc=
Subject key identifier: E2:9B:0B:E0:3B:0F:0D:E7:DA:74:78:F9:7E:F8:D7:49:8B:46:CB:90
Authority key identifier: 54:62:D3:C7:AF:36:C4:01:AA:97:09:4D:3F:23:89:D7:87:5D:14:EC
Certificate issuer: /CN=5462d3c7af36c401aa97094d3f2389d7875d14ec
Certificate serial: 01964CA2A38E3921072D504EA7ABA3829EF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGLTx682xAGqlwlNPyOJ14ddFOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft
Manifest number: 0200
Signing time: Sat 19 Apr 2025 06:00:49 +0000
Manifest this update: Sat 19 Apr 2025 06:00:49 +0000
Manifest next update: Sun 20 Apr 2025 06:00:49 +0000
Files and hashes: 1: 1fACf-8RstZUTJjfnQCu3bC_4EM.roa (hash: y+Jyhi+AHKXvf5OSPohhDVxGrHaa58eOxr00zi1ZVhg=)
2: VGLTx682xAGqlwlNPyOJ14ddFOw.crl (hash: CzB7QmZspntPUcFnOpUdieGXB1i54hi/+O49rOZdmHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGLTx682xAGqlwlNPyOJ14ddFOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:a3:8e:39:21:07:2d:50:4e:a7:ab:a3:82:9e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5462d3c7af36c401aa97094d3f2389d7875d14ec
Validity
Not Before: Apr 19 06:00:49 2025 GMT
Not After : Apr 20 06:00:49 2025 GMT
Subject: CN=e29b0be03b0f0de7da7478f97ef8d7498b46cb90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b1:a5:6c:41:f9:90:58:74:de:12:84:40:3c:
7a:04:a3:0c:22:84:02:71:b4:9d:f1:e7:87:88:f8:
78:21:eb:c5:bc:68:ae:dd:e5:28:8f:1c:60:12:5d:
61:93:88:0d:76:e9:82:4e:2a:3f:60:43:e1:c4:55:
70:29:41:7a:14:6d:f6:25:11:20:7d:0c:0c:4b:d9:
6d:6c:3c:2f:08:24:34:2b:e6:b6:b6:08:9f:34:cc:
cf:38:a8:96:bb:b2:1e:db:10:ff:7c:b2:54:f3:92:
e1:c0:be:c3:38:c8:6f:e5:f6:db:f6:da:7e:d7:e6:
c7:b0:c0:e0:dd:d8:f5:f7:22:dd:86:1c:0e:fe:83:
c2:4b:5f:bc:9c:09:12:e4:15:73:b5:ef:ce:c3:82:
64:05:eb:b2:1e:47:9f:7e:d4:b0:53:25:27:db:db:
6e:f2:d0:9a:5b:01:5f:14:f1:f7:43:41:aa:10:89:
cd:f4:8f:ef:05:6b:0b:28:2c:dc:1f:f3:be:c3:ea:
d3:35:f8:ed:46:64:0e:3c:a4:ba:7b:1f:5f:b5:ee:
35:89:41:9a:41:73:b2:f8:c4:77:4c:56:58:5a:6f:
17:21:fa:4f:ce:97:34:6e:98:0d:64:5b:ab:5c:f7:
14:5d:d8:03:5d:7d:c1:9e:ca:ee:49:c9:4d:5c:03:
be:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9B:0B:E0:3B:0F:0D:E7:DA:74:78:F9:7E:F8:D7:49:8B:46:CB:90
X509v3 Authority Key Identifier:
keyid:54:62:D3:C7:AF:36:C4:01:AA:97:09:4D:3F:23:89:D7:87:5D:14:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGLTx682xAGqlwlNPyOJ14ddFOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:0b:e4:b8:d6:9c:fc:36:1e:e7:30:a4:45:61:69:24:c0:2f:
80:e1:21:66:39:99:f3:30:ac:e8:36:c8:57:78:0d:ab:c2:03:
8e:27:4b:98:e7:c9:79:33:20:a2:6b:a2:b1:4d:40:07:3e:b5:
fb:2d:94:e5:ca:3f:e9:1f:0f:b2:7a:53:e8:f3:e2:06:11:91:
66:b2:f8:38:2a:d2:f3:7f:b7:ea:02:4b:60:89:c9:16:4d:7d:
7f:cd:11:21:a4:80:a9:05:f7:70:95:76:c6:ba:01:64:61:a0:
a0:38:c6:f4:32:68:3a:c0:c8:f9:bb:2e:0a:3e:97:15:42:00:
b7:e2:6f:7c:67:cf:fb:41:99:12:b2:df:cf:04:2b:b6:ca:59:
0d:e1:93:23:48:58:41:17:3c:19:62:8d:f7:57:af:05:5e:24:
af:92:91:03:f7:3b:01:1f:ec:9c:77:66:bd:3e:98:b4:45:b5:
db:47:45:7d:67:ff:58:48:2c:d3:6e:4d:89:82:ca:7f:35:40:
90:3b:87:07:4e:f4:3d:f8:e4:a9:f1:a6:4e:41:84:e8:ba:ed:
8e:8c:89:ae:60:84:51:56:75:ad:fb:07:24:2b:59:f7:58:80:
a3:e8:bf:83:e7:16:43:f9:21:6f:c5:be:5d:75:2b:f9:ab:f1:
09:ae:f5:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZMoqOOOSEHLVBOp6ujgp71MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjJkM2M3YWYzNmM0MDFhYTk3MDk0ZDNmMjM4OWQ3ODc1
ZDE0ZWMwHhcNMjUwNDE5MDYwMDQ5WhcNMjUwNDIwMDYwMDQ5WjAzMTEwLwYDVQQD
EyhlMjliMGJlMDNiMGYwZGU3ZGE3NDc4Zjk3ZWY4ZDc0OThiNDZjYjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbGlbEH5kFh03hKEQDx6BKMMIoQC
cbSd8eeHiPh4IevFvGiu3eUojxxgEl1hk4gNdumCTio/YEPhxFVwKUF6FG32JREg
fQwMS9ltbDwvCCQ0K+a2tgifNMzPOKiWu7Ie2xD/fLJU85LhwL7DOMhv5fbb9tp+
1+bHsMDg3dj19yLdhhwO/oPCS1+8nAkS5BVzte/Ow4JkBeuyHkefftSwUyUn29tu
8tCaWwFfFPH3Q0GqEInN9I/vBWsLKCzcH/O+w+rTNfjtRmQOPKS6ex9fte41iUGa
QXOy+MR3TFZYWm8XIfpPzpc0bpgNZFurXPcUXdgDXX3BnsruSclNXAO+AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKbC+A7Dw3n2nR4+X7410mLRsuQMB8GA1UdIwQY
MBaAFFRi08evNsQBqpcJTT8jideHXRTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdMVHg2ODJ4QUdxbHdsTlB5T0oxNGRkRk93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xM2MwMmUtY2NhMC00ZGNkLTkxMjUt
OGIzMTUyMjk3NTdkLzEvVkdMVHg2ODJ4QUdxbHdsTlB5T0oxNGRkRk93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8xM2MwMmUtY2NhMC00ZGNkLTkxMjUtOGIzMTUyMjk3NTdk
LzEvVkdMVHg2ODJ4QUdxbHdsTlB5T0oxNGRkRk93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwvkuNac
/DYe5zCkRWFpJMAvgOEhZjmZ8zCs6DbIV3gNq8IDjidLmOfJeTMgomuisU1ABz61
+y2U5co/6R8PsnpT6PPiBhGRZrL4OCrS83+36gJLYInJFk19f80RIaSAqQX3cJV2
xroBZGGgoDjG9DJoOsDI+bsuCj6XFUIAt+JvfGfP+0GZErLfzwQrtspZDeGTI0hY
QRc8GWKN91evBV4kr5KRA/c7AR/snHdmvT6YtEW120dFfWf/WEgs025NiYLKfzVA
kDuHB070PfjkqfGmTkGE6LrtjoyJrmCEUVZ1rfsHJCtZ91iAo+i/g+cWQ/khb8W+
XXUr+avxCa71aQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:28:25 2025 by rpki-client