Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
File: vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft (raw, json)
Hash identifier: JjCvG/WlzuSK+Pn5bDNSDQ1r5pRnb+358zhL9FerYHc=
Subject key identifier: 38:08:E8:C7:23:65:E2:29:DE:A6:DB:53:28:83:1C:0E:13:8C:49:80
Authority key identifier: BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64
Certificate issuer: /CN=bea1890c305b0f2da420b01697e3bf23d485ab64
Certificate serial: 0196512420F9520E9CB19C5AEE66555B5601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
Manifest number: 0D3C
Signing time: Sun 20 Apr 2025 03:00:44 +0000
Manifest this update: Sun 20 Apr 2025 03:00:44 +0000
Manifest next update: Mon 21 Apr 2025 03:00:44 +0000
Files and hashes: 1: kwNFG0wAspm4fsxR2YrPKVGk1Ig.roa (hash: Mk2aoCm4frK824+nr9MmscS3ypVOVo2+1jHAmjQT/qI=)
2: vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl (hash: 5f89uYbrBzB+A0XL5mNmGy71qEoU/SGrW9mEX+ooEr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:24:20:f9:52:0e:9c:b1:9c:5a:ee:66:55:5b:56:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea1890c305b0f2da420b01697e3bf23d485ab64
Validity
Not Before: Apr 20 03:00:44 2025 GMT
Not After : Apr 21 03:00:44 2025 GMT
Subject: CN=3808e8c72365e229dea6db5328831c0e138c4980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e5:86:70:9b:a8:5a:2c:ac:15:ac:f3:9e:1f:
4e:f1:0d:90:9e:a7:4f:af:b4:32:6c:4c:43:95:cb:
90:93:96:a8:5e:0c:d7:58:68:63:59:8d:68:22:a7:
8e:07:fc:5e:2c:1a:a7:61:fc:13:ff:ff:1b:7f:c2:
fb:00:dd:db:42:cf:a4:b9:06:83:d9:ce:fd:2b:9e:
0d:9f:2b:b3:0e:dd:fa:25:5e:1f:68:9f:9c:d6:5e:
e7:31:51:2b:02:d0:4c:90:74:ba:ee:7a:cd:06:fa:
85:a1:d9:ea:9a:eb:dc:5d:94:fa:ca:69:6d:3e:bf:
62:e0:79:3b:b7:5d:93:60:86:a6:99:53:85:a2:bc:
f8:3b:c4:cd:47:d2:0d:88:72:64:d3:d8:09:a8:9c:
08:c5:46:33:ac:4f:f2:e1:15:e9:47:82:ea:f6:3d:
8d:a3:e9:7f:45:95:8c:6c:37:79:a8:9b:0c:69:1a:
fb:e2:b9:fc:5e:7b:27:d7:cb:63:9d:78:d2:40:71:
1f:05:27:e1:dd:7f:d8:78:79:1d:65:03:02:41:40:
7e:c6:ac:8e:0c:43:a7:60:a4:05:ff:63:2f:58:dc:
42:21:43:60:75:66:95:fe:d0:30:16:e9:a5:9a:bd:
3c:3f:c5:a3:b0:a0:fa:99:8b:14:18:e7:1f:5f:7a:
53:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:08:E8:C7:23:65:E2:29:DE:A6:DB:53:28:83:1C:0E:13:8C:49:80
X509v3 Authority Key Identifier:
keyid:BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d3:19:73:05:d5:37:cd:1f:bb:bc:cd:c9:8f:40:f3:90:71:
14:bb:16:fd:69:ae:d8:32:b9:07:bf:c2:7b:5d:be:1a:9b:1b:
60:ed:10:e0:cf:28:b3:39:e5:68:39:2b:ef:f4:c5:62:5e:2c:
a3:dd:01:d3:a6:a0:db:1f:4b:62:b9:59:f6:59:88:ee:6e:2a:
1e:54:6a:22:10:97:ac:c0:3f:fb:44:15:19:e0:8c:40:26:06:
8a:d1:0d:03:11:8b:86:65:c1:77:0b:a8:22:c9:d8:c9:8f:da:
6a:ec:db:3d:6d:f1:43:72:5a:bc:e9:e1:a0:eb:74:fb:06:ba:
e4:bb:d9:62:08:9b:97:b7:f5:87:a3:e0:b6:4f:4f:ae:e2:0b:
7f:be:1f:76:c6:1b:23:39:6c:ba:50:17:47:bc:a3:c7:97:34:
2c:da:3b:b1:1e:2e:da:6e:0f:42:4f:d0:42:d3:48:f9:88:ff:
06:d1:03:02:68:0a:8d:7d:62:0b:e0:75:1a:ae:c1:38:8a:bc:
c6:96:d1:f4:75:bb:9d:00:84:ed:f5:b3:af:30:79:c2:2b:b9:
5c:64:11:64:1a:c8:6f:f1:41:72:6c:a0:69:e9:af:97:09:6d:
4d:c5:c6:27:dc:67:81:75:cf:dc:3a:98:a5:f8:91:9d:6d:3b:
6f:3e:9b:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRJCD5Ug6csZxa7mZVW1YBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYTE4OTBjMzA1YjBmMmRhNDIwYjAxNjk3ZTNiZjIzZDQ4
NWFiNjQwHhcNMjUwNDIwMDMwMDQ0WhcNMjUwNDIxMDMwMDQ0WjAzMTEwLwYDVQQD
EygzODA4ZThjNzIzNjVlMjI5ZGVhNmRiNTMyODgzMWMwZTEzOGM0OTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOWGcJuoWiysFazznh9O8Q2QnqdP
r7QybExDlcuQk5aoXgzXWGhjWY1oIqeOB/xeLBqnYfwT//8bf8L7AN3bQs+kuQaD
2c79K54NnyuzDt36JV4faJ+c1l7nMVErAtBMkHS67nrNBvqFodnqmuvcXZT6ymlt
Pr9i4Hk7t12TYIammVOForz4O8TNR9INiHJk09gJqJwIxUYzrE/y4RXpR4Lq9j2N
o+l/RZWMbDd5qJsMaRr74rn8Xnsn18tjnXjSQHEfBSfh3X/YeHkdZQMCQUB+xqyO
DEOnYKQF/2MvWNxCIUNgdWaV/tAwFumlmr08P8WjsKD6mYsUGOcfX3pTtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDgI6McjZeIp3qbbUyiDHA4TjEmAMB8GA1UdIwQY
MBaAFL6hiQwwWw8tpCCwFpfjvyPUhatkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnFHSkREQmJEeTJrSUxBV2wtT19JOVNGcTJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hYWE3N2ItOWEwOS00ZjBhLWE4ODUt
MzE3NmYwOTk5ZGRhLzEvdnFHSkREQmJEeTJrSUxBV2wtT19JOVNGcTJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hYWE3N2ItOWEwOS00ZjBhLWE4ODUtMzE3NmYwOTk5ZGRh
LzEvdnFHSkREQmJEeTJrSUxBV2wtT19JOVNGcTJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiNMZcwXV
N80fu7zNyY9A85BxFLsW/Wmu2DK5B7/Ce12+GpsbYO0Q4M8osznlaDkr7/TFYl4s
o90B06ag2x9LYrlZ9lmI7m4qHlRqIhCXrMA/+0QVGeCMQCYGitENAxGLhmXBdwuo
IsnYyY/aauzbPW3xQ3JavOnhoOt0+wa65LvZYgibl7f1h6Pgtk9PruILf74fdsYb
IzlsulAXR7yjx5c0LNo7sR4u2m4PQk/QQtNI+Yj/BtEDAmgKjX1iC+B1Gq7BOIq8
xpbR9HW7nQCE7fWzrzB5wiu5XGQRZBrIb/FBcmygaemvlwltTcXGJ9xngXXP3DqY
pfiRnW07bz6bGA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:18:07 2025 by rpki-client