Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
File: vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft (raw, json)
Hash identifier: yPcdfdha7IAWFazsGRhWMsK+cSFOAkk7Y8ya0PWcp34=
Subject key identifier: 0E:21:D9:05:91:92:B4:98:CD:B2:F3:F6:61:FD:85:1F:02:3D:FF:AF
Authority key identifier: BC:85:D3:79:1F:58:36:C4:15:FF:D3:91:F2:D5:85:C7:3D:BE:CA:39
Certificate issuer: /CN=bc85d3791f5836c415ffd391f2d585c73dbeca39
Certificate serial: 0196534A69E7680D288B814C9AB6C4245AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
Manifest number: 0618
Signing time: Sun 20 Apr 2025 13:01:47 +0000
Manifest this update: Sun 20 Apr 2025 13:01:47 +0000
Manifest next update: Mon 21 Apr 2025 13:01:47 +0000
Files and hashes: 1: L6lTyFXKtOF9j4M00RgctdL3DPI.roa (hash: 82l0fSJIXKbiY5RynH8uwdUeGbScGZ+VMQbyrw1pJ3U=)
2: vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl (hash: L81XOeYx7SitKpe8jiBOZy7aQ4y+2TR6dzJmuhg5HO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:4a:69:e7:68:0d:28:8b:81:4c:9a:b6:c4:24:5a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc85d3791f5836c415ffd391f2d585c73dbeca39
Validity
Not Before: Apr 20 13:01:47 2025 GMT
Not After : Apr 21 13:01:47 2025 GMT
Subject: CN=0e21d9059192b498cdb2f3f661fd851f023dffaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:05:af:37:d3:5c:cc:09:fc:66:44:61:29:86:
ca:60:39:85:38:06:67:b7:40:5a:bd:5e:7d:ff:21:
2b:b3:e6:07:cc:4f:03:b3:e5:bc:a0:07:ba:a5:40:
3b:33:ad:ce:a1:74:7b:75:fe:47:55:81:2d:47:bd:
15:c2:f1:83:09:57:bb:a2:c3:a2:96:3e:08:ee:03:
b9:f1:22:83:62:f8:90:7e:99:52:3d:ed:2a:d7:eb:
6f:9b:fd:26:44:2e:41:60:f7:43:d3:1e:66:28:01:
4c:e1:d4:d5:3c:90:34:78:50:31:7e:18:97:09:71:
19:85:cd:5b:23:32:4e:c9:43:d7:16:31:53:5f:4a:
3d:e7:35:33:69:bf:9d:46:de:46:dc:bf:c6:6a:f6:
56:93:69:d2:b5:cf:f3:25:84:14:fd:22:b3:95:ba:
83:4d:92:55:ee:16:b4:52:e7:bd:c7:51:cf:55:86:
c6:de:a1:1e:7e:4e:bf:9e:70:17:aa:a8:45:97:ac:
30:83:b6:94:d3:66:3f:8c:5b:0c:27:0c:90:e6:80:
39:d8:2f:88:2c:1d:6c:f3:cc:1d:9c:ad:44:30:62:
23:72:cc:82:46:52:9f:76:ed:bb:03:1f:91:4f:6a:
31:d0:25:3d:3f:d8:a4:48:ad:03:3a:fd:f8:a5:bd:
63:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:21:D9:05:91:92:B4:98:CD:B2:F3:F6:61:FD:85:1F:02:3D:FF:AF
X509v3 Authority Key Identifier:
keyid:BC:85:D3:79:1F:58:36:C4:15:FF:D3:91:F2:D5:85:C7:3D:BE:CA:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d3:00:75:67:67:66:f2:dc:fa:e4:90:06:63:d1:d2:8f:a3:
8c:aa:71:64:05:ff:af:bb:9f:81:fe:b7:a8:4a:99:a1:43:7a:
cc:5c:81:23:25:27:6d:22:e6:4e:57:01:af:e7:f2:36:d3:da:
f4:72:a1:16:0c:66:29:68:02:35:c6:2f:61:65:91:d7:74:72:
03:3a:f9:15:43:60:ad:5b:27:f0:8f:86:44:84:22:46:8c:9a:
26:52:6f:2f:6a:4a:83:93:3a:fa:f6:ac:8a:fd:ff:ef:73:79:
d8:72:99:77:84:63:d4:c6:9a:45:fe:7d:e3:47:1e:31:a2:42:
5b:d7:f2:40:20:8e:75:ae:cf:b3:9d:88:8d:d1:c2:0f:95:b0:
40:35:d1:4b:4c:ae:d3:17:d5:40:5a:18:4a:97:a5:2d:a7:ab:
82:6c:d7:5f:91:1d:68:1e:0a:d5:db:9c:71:d1:12:57:9a:da:
91:aa:07:21:13:a6:aa:c2:78:1c:13:8b:95:c0:09:0d:3d:f1:
58:8b:6b:20:4e:d4:66:b0:43:e2:db:63:7d:26:8b:80:d0:c6:
d7:df:f8:3b:f9:99:9b:6d:81:ae:ee:7a:23:bf:f0:27:d8:30:
22:5f:fb:ee:5f:04:ba:ed:3c:44:45:19:12:16:f3:d0:b3:50:
22:5b:f4:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTSmnnaA0oi4FMmrbEJFroMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjODVkMzc5MWY1ODM2YzQxNWZmZDM5MWYyZDU4NWM3M2Ri
ZWNhMzkwHhcNMjUwNDIwMTMwMTQ3WhcNMjUwNDIxMTMwMTQ3WjAzMTEwLwYDVQQD
EygwZTIxZDkwNTkxOTJiNDk4Y2RiMmYzZjY2MWZkODUxZjAyM2RmZmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAWvN9NczAn8ZkRhKYbKYDmFOAZn
t0BavV59/yErs+YHzE8Ds+W8oAe6pUA7M63OoXR7df5HVYEtR70VwvGDCVe7osOi
lj4I7gO58SKDYviQfplSPe0q1+tvm/0mRC5BYPdD0x5mKAFM4dTVPJA0eFAxfhiX
CXEZhc1bIzJOyUPXFjFTX0o95zUzab+dRt5G3L/GavZWk2nStc/zJYQU/SKzlbqD
TZJV7ha0Uue9x1HPVYbG3qEefk6/nnAXqqhFl6wwg7aU02Y/jFsMJwyQ5oA52C+I
LB1s88wdnK1EMGIjcsyCRlKfdu27Ax+RT2ox0CU9P9ikSK0DOv34pb1joQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4h2QWRkrSYzbLz9mH9hR8CPf+vMB8GA1UdIwQY
MBaAFLyF03kfWDbEFf/TkfLVhcc9vso5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdklYVGVSOVlOc1FWXzlPUjh0V0Z4ejIteWprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9hZjk1MGYtYzE5My00NWRmLTkwZDct
Yjg0MmI5OTA2ODllLzEvdklYVGVSOVlOc1FWXzlPUjh0V0Z4ejIteWprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9hZjk1MGYtYzE5My00NWRmLTkwZDctYjg0MmI5OTA2ODll
LzEvdklYVGVSOVlOc1FWXzlPUjh0V0Z4ejIteWprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAidMAdWdn
ZvLc+uSQBmPR0o+jjKpxZAX/r7ufgf63qEqZoUN6zFyBIyUnbSLmTlcBr+fyNtPa
9HKhFgxmKWgCNcYvYWWR13RyAzr5FUNgrVsn8I+GRIQiRoyaJlJvL2pKg5M6+vas
iv3/73N52HKZd4Rj1MaaRf5940ceMaJCW9fyQCCOda7Ps52IjdHCD5WwQDXRS0yu
0xfVQFoYSpelLaergmzXX5EdaB4K1duccdESV5rakaoHIROmqsJ4HBOLlcAJDT3x
WItrIE7UZrBD4ttjfSaLgNDG19/4O/mZm22Bru56I7/wJ9gwIl/77l8Euu08REUZ
Ehbz0LNQIlv0zA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:17:25 2025 by rpki-client