Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
File: vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft (raw, json)
Hash identifier: 2Co0uTBN1MddjwB9mo/zJRoT8gGKXOTX5MFsUZUikoU=
Subject key identifier: 0F:8C:6A:B6:2C:4B:0A:CA:DA:A5:33:84:DB:D8:C3:90:9E:B7:B3:12
Authority key identifier: BD:02:61:65:54:63:23:56:45:0B:C4:BB:4B:6D:AC:FC:79:DF:30:25
Certificate issuer: /CN=bd02616554632356450bc4bb4b6dacfc79df3025
Certificate serial: 019656EF4697FF4DCC2C0CCA2EFE69A8336D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
Manifest number: 0AC6
Signing time: Mon 21 Apr 2025 06:00:43 +0000
Manifest this update: Mon 21 Apr 2025 06:00:43 +0000
Manifest next update: Tue 22 Apr 2025 06:00:43 +0000
Files and hashes: 1: vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl (hash: +9j2BMR2kTXI8KMO4iWxi2G2ndmgjqcIC6fLv7vi1TU=)
2: zW8H9236KdsFPYHIiVwdIlsjLeA.roa (hash: A3BKCbMqcBICoyGdtSjfGVXeNlYAC0vfSMBZfdSiSAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:ef:46:97:ff:4d:cc:2c:0c:ca:2e:fe:69:a8:33:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd02616554632356450bc4bb4b6dacfc79df3025
Validity
Not Before: Apr 21 06:00:43 2025 GMT
Not After : Apr 22 06:00:43 2025 GMT
Subject: CN=0f8c6ab62c4b0acadaa53384dbd8c3909eb7b312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:86:a0:95:ff:a6:bf:9f:c0:b6:4a:8f:4c:be:
6d:94:5d:68:e4:00:43:d1:f2:dd:a0:9d:93:cf:80:
e9:c6:ff:c3:f6:9f:53:68:58:0b:e9:a8:30:08:cd:
2c:eb:20:e3:31:25:49:27:5e:dd:25:2f:1b:1c:d7:
77:9d:a2:47:99:8f:f6:7c:a5:99:21:28:3d:16:85:
f4:88:aa:f1:1b:42:fe:f4:6e:09:7b:c4:cc:d3:16:
84:7e:56:1a:b8:60:55:aa:b9:9d:50:de:c8:12:9c:
4c:d6:e0:45:64:b4:17:8d:c4:3f:2d:9f:21:a6:18:
a4:c6:6e:da:4b:b4:e3:29:00:0d:9e:ab:32:82:6b:
3d:e6:8d:a8:a5:bb:d0:d9:2a:26:b9:dd:8b:eb:39:
a6:90:c7:20:d5:86:a2:82:61:37:3c:a9:74:67:4a:
a1:ad:6e:45:ad:91:77:41:05:cc:55:53:9d:65:dc:
39:c9:4b:8a:47:e9:f0:71:03:29:8b:47:f1:9c:e6:
8d:9b:27:b6:a3:11:f1:36:b6:3c:b8:e6:30:62:1e:
db:33:ab:a9:aa:07:fb:1b:ff:1d:12:9b:a5:a9:7a:
20:16:27:1a:76:38:1b:e2:d4:2f:13:b8:43:60:8e:
16:d5:b6:fe:ae:5c:3e:9c:00:f9:62:fa:33:8e:41:
cc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8C:6A:B6:2C:4B:0A:CA:DA:A5:33:84:DB:D8:C3:90:9E:B7:B3:12
X509v3 Authority Key Identifier:
keyid:BD:02:61:65:54:63:23:56:45:0B:C4:BB:4B:6D:AC:FC:79:DF:30:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:20:2b:89:fe:b2:6e:d2:a4:5d:cd:21:c2:1b:2e:fd:13:8a:
0d:07:32:de:95:58:60:77:10:8d:54:9c:c7:5e:ad:72:80:f6:
c4:11:c1:d6:1e:08:eb:27:5f:f2:c1:58:47:9e:b1:95:2a:72:
c6:89:23:5a:e6:fc:98:c4:77:6f:7e:66:6c:1e:e1:78:9c:8d:
61:f0:cf:5a:b5:60:e4:a8:37:2c:ef:6e:41:37:71:54:09:66:
15:7c:83:76:69:f4:68:fb:2a:5b:2c:eb:77:ba:9b:06:79:75:
6e:ad:a5:4a:68:11:3b:8c:3a:18:2a:fd:75:7e:04:e3:8d:29:
2a:6d:43:59:47:e7:ec:b6:59:5b:26:cb:a6:06:76:0a:71:e2:
c5:8d:b6:34:04:32:ea:c5:4f:5b:9a:2d:d9:a7:99:aa:03:cd:
14:93:53:28:be:a3:d4:46:8a:47:3a:73:16:8e:9a:31:e9:df:
91:35:05:c3:48:05:d2:0a:aa:f9:95:97:34:5f:cf:8c:0b:d2:
1b:0f:0d:7a:b0:20:f6:47:ad:6d:b3:4f:8b:80:f5:49:d7:f5:
16:ae:90:3e:f8:62:32:5b:1f:c0:f6:99:65:44:31:3a:a7:33:
48:81:0f:63:57:7d:f7:36:c2:24:35:b0:52:36:96:bf:0f:d9:
8f:69:da:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZW70aX/03MLAzKLv5pqDNtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMDI2MTY1NTQ2MzIzNTY0NTBiYzRiYjRiNmRhY2ZjNzlk
ZjMwMjUwHhcNMjUwNDIxMDYwMDQzWhcNMjUwNDIyMDYwMDQzWjAzMTEwLwYDVQQD
EygwZjhjNmFiNjJjNGIwYWNhZGFhNTMzODRkYmQ4YzM5MDllYjdiMzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYaglf+mv5/AtkqPTL5tlF1o5ABD
0fLdoJ2Tz4Dpxv/D9p9TaFgL6agwCM0s6yDjMSVJJ17dJS8bHNd3naJHmY/2fKWZ
ISg9FoX0iKrxG0L+9G4Je8TM0xaEflYauGBVqrmdUN7IEpxM1uBFZLQXjcQ/LZ8h
phikxm7aS7TjKQANnqsygms95o2opbvQ2Somud2L6zmmkMcg1YaigmE3PKl0Z0qh
rW5FrZF3QQXMVVOdZdw5yUuKR+nwcQMpi0fxnOaNmye2oxHxNrY8uOYwYh7bM6up
qgf7G/8dEpulqXogFicadjgb4tQvE7hDYI4W1bb+rlw+nAD5YvozjkHMLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+MarYsSwrK2qUzhNvYw5Cet7MSMB8GA1UdIwQY
MBaAFL0CYWVUYyNWRQvEu0ttrPx53zAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlFKaFpWUmpJMVpGQzhTN1MyMnNfSG5mTUNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My80YjYzZWEtZTRmMC00NGIwLWJkMmUt
OWUxOWQwOGNiNzFmLzEvdlFKaFpWUmpJMVpGQzhTN1MyMnNfSG5mTUNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My80YjYzZWEtZTRmMC00NGIwLWJkMmUtOWUxOWQwOGNiNzFm
LzEvdlFKaFpWUmpJMVpGQzhTN1MyMnNfSG5mTUNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATyArif6y
btKkXc0hwhsu/ROKDQcy3pVYYHcQjVScx16tcoD2xBHB1h4I6ydf8sFYR56xlSpy
xokjWub8mMR3b35mbB7heJyNYfDPWrVg5Kg3LO9uQTdxVAlmFXyDdmn0aPsqWyzr
d7qbBnl1bq2lSmgRO4w6GCr9dX4E440pKm1DWUfn7LZZWybLpgZ2CnHixY22NAQy
6sVPW5ot2aeZqgPNFJNTKL6j1EaKRzpzFo6aMenfkTUFw0gF0gqq+ZWXNF/PjAvS
Gw8NerAg9ketbbNPi4D1Sdf1Fq6QPvhiMlsfwPaZZUQxOqczSIEPY1d99zbCJDWw
UjaWvw/Zj2naZg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:41:18 2025 by rpki-client