Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft
File: vyk4WQ4NABlyVmLUtK5Myew6c00.mft (raw, json)
Hash identifier: xMHCWcyveHYSm5xC6aC73+bkSqw69KdMoHobCpevs9M=
Subject key identifier: 67:AE:78:87:D3:84:EA:81:27:86:58:38:FA:08:E7:FB:49:4F:8E:3D
Authority key identifier: BF:29:38:59:0E:0D:00:19:72:56:62:D4:B4:AE:4C:C9:EC:3A:73:4D
Certificate issuer: /CN=bf2938590e0d0019725662d4b4ae4cc9ec3a734d
Certificate serial: 01964FA33430D4ADC53A38CA5DC45A93E6FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyk4WQ4NABlyVmLUtK5Myew6c00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft
Manifest number: 079A
Signing time: Sat 19 Apr 2025 20:00:17 +0000
Manifest this update: Sat 19 Apr 2025 20:00:17 +0000
Manifest next update: Sun 20 Apr 2025 20:00:17 +0000
Files and hashes: 1: vQtF-L-9ooOZxF-UCZufP97_4Tk.roa (hash: uZu5EdE4zrTNj+JjaQISrCgWGaWpGkfUNjvMVUEKljA=)
2: vyk4WQ4NABlyVmLUtK5Myew6c00.crl (hash: baPgSIkPER/96HBEYeO4XV5zPy/Tv/Z6rSFp8cpSyhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyk4WQ4NABlyVmLUtK5Myew6c00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:a3:34:30:d4:ad:c5:3a:38:ca:5d:c4:5a:93:e6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2938590e0d0019725662d4b4ae4cc9ec3a734d
Validity
Not Before: Apr 19 20:00:17 2025 GMT
Not After : Apr 20 20:00:17 2025 GMT
Subject: CN=67ae7887d384ea8127865838fa08e7fb494f8e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:29:88:92:af:d4:75:6d:50:a1:ee:2b:c3:61:
c6:18:43:d0:df:49:aa:8c:db:1a:c8:96:7b:44:2a:
1c:72:99:bc:e0:6a:5e:86:7e:52:77:ce:b2:e0:30:
49:ae:b2:9f:83:ba:ab:02:ca:e9:83:77:aa:d8:3f:
cf:e5:78:c7:c7:e6:68:b2:bd:a0:c4:21:cb:90:94:
2e:e1:da:73:58:be:de:22:27:f1:46:4a:cd:f1:2e:
6b:a3:5d:66:57:ab:b4:66:48:67:59:7a:ac:5c:ac:
ad:19:85:14:e6:e9:e0:1e:7e:cf:d4:9f:39:be:86:
f2:6a:ac:03:33:f7:53:b5:90:ed:a3:27:da:06:15:
38:de:04:f0:4c:57:58:a0:4c:ff:27:50:7b:66:4f:
b3:42:6b:2f:d8:21:73:8d:94:ac:9f:b6:a9:1f:39:
89:95:c7:f9:cf:6e:53:d0:47:bb:b3:da:d1:97:3b:
b1:89:a7:8c:75:b5:e8:ca:22:14:1a:c7:ba:2d:d5:
18:c0:97:c4:47:8b:22:e5:3d:eb:30:32:df:45:da:
29:6d:4f:58:12:bb:64:b0:cb:d7:fd:52:9c:4b:78:
95:76:cb:b2:47:fa:c0:83:98:69:1b:9d:c3:9d:26:
28:4d:70:e1:a6:22:de:cc:af:95:81:e2:ab:3d:41:
0b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AE:78:87:D3:84:EA:81:27:86:58:38:FA:08:E7:FB:49:4F:8E:3D
X509v3 Authority Key Identifier:
keyid:BF:29:38:59:0E:0D:00:19:72:56:62:D4:B4:AE:4C:C9:EC:3A:73:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyk4WQ4NABlyVmLUtK5Myew6c00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:84:08:e4:b9:ec:d0:0d:98:a7:4e:27:7a:1e:0f:91:b2:af:
63:97:58:79:4f:3f:61:91:24:95:34:e6:6a:4a:e6:90:0c:1f:
79:29:28:ea:16:79:7d:75:18:b0:a4:c2:f4:63:c9:5e:4c:f9:
4d:df:e9:04:32:40:b1:e4:64:25:e9:ef:33:db:57:fa:2a:a1:
29:09:1a:8d:cf:08:7d:1f:6d:95:06:5b:0a:d9:d4:1e:06:17:
0b:ce:25:d9:dc:25:0d:b6:4c:9d:06:96:99:f8:ce:ad:d6:d7:
a2:ac:cd:ac:41:3e:9a:53:68:35:58:7b:56:51:18:d8:9c:5c:
13:ad:c2:7f:8c:0c:84:e6:65:a2:d1:46:75:ad:b3:e6:10:c4:
24:ea:0f:02:7b:a1:56:d9:d0:c1:e7:e1:e3:cd:08:eb:41:3a:
81:20:2e:be:65:19:65:86:a0:ff:43:15:53:c1:dc:e3:f7:e2:
bc:51:8f:15:ec:ec:56:b8:55:ac:de:1d:bc:00:ec:79:96:65:
00:86:cf:ac:73:ae:94:fd:1e:bf:2b:1c:91:34:90:d1:f9:ab:
20:00:33:7f:17:79:2a:a5:74:6a:56:bc:44:83:a0:1f:81:66:
49:83:63:2a:63:de:9b:51:96:c2:1c:cd:f7:5c:32:d6:19:3c:
24:e6:c8:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPozQw1K3FOjjKXcRak+b/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMjkzODU5MGUwZDAwMTk3MjU2NjJkNGI0YWU0Y2M5ZWMz
YTczNGQwHhcNMjUwNDE5MjAwMDE3WhcNMjUwNDIwMjAwMDE3WjAzMTEwLwYDVQQD
Eyg2N2FlNzg4N2QzODRlYTgxMjc4NjU4MzhmYTA4ZTdmYjQ5NGY4ZTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCmIkq/UdW1Qoe4rw2HGGEPQ30mq
jNsayJZ7RCoccpm84Gpehn5Sd86y4DBJrrKfg7qrAsrpg3eq2D/P5XjHx+Zosr2g
xCHLkJQu4dpzWL7eIifxRkrN8S5ro11mV6u0ZkhnWXqsXKytGYUU5ungHn7P1J85
vobyaqwDM/dTtZDtoyfaBhU43gTwTFdYoEz/J1B7Zk+zQmsv2CFzjZSsn7apHzmJ
lcf5z25T0Ee7s9rRlzuxiaeMdbXoyiIUGse6LdUYwJfER4si5T3rMDLfRdopbU9Y
ErtksMvX/VKcS3iVdsuyR/rAg5hpG53DnSYoTXDhpiLezK+VgeKrPUEL2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGeueIfThOqBJ4ZYOPoI5/tJT449MB8GA1UdIwQY
MBaAFL8pOFkODQAZclZi1LSuTMnsOnNNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnlrNFdRNE5BQmx5Vm1MVXRLNU15ZXc2YzAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy84MzNhYTItYWYwNC00ZjEwLWExNjct
NmFjZDg2Njg2ZTg1LzEvdnlrNFdRNE5BQmx5Vm1MVXRLNU15ZXc2YzAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy84MzNhYTItYWYwNC00ZjEwLWExNjctNmFjZDg2Njg2ZTg1
LzEvdnlrNFdRNE5BQmx5Vm1MVXRLNU15ZXc2YzAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARoQI5Lns
0A2Yp04neh4PkbKvY5dYeU8/YZEklTTmakrmkAwfeSko6hZ5fXUYsKTC9GPJXkz5
Td/pBDJAseRkJenvM9tX+iqhKQkajc8IfR9tlQZbCtnUHgYXC84l2dwlDbZMnQaW
mfjOrdbXoqzNrEE+mlNoNVh7VlEY2JxcE63Cf4wMhOZlotFGda2z5hDEJOoPAnuh
VtnQwefh480I60E6gSAuvmUZZYag/0MVU8Hc4/fivFGPFezsVrhVrN4dvADseZZl
AIbPrHOulP0evysckTSQ0fmrIAAzfxd5KqV0ala8RIOgH4FmSYNjKmPem1GWwhzN
91wy1hk8JObIZQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 01:59:24 2025 by rpki-client