Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
File: 1-VA8B1ppBVa9RiEiskaZ4baxkng.mft (raw, json)
Hash identifier: vs6aRd4Z4GcSQ5feF485El8NPv6A8VsDoODVLiqrTQk=
Subject key identifier: 9B:78:15:CD:4A:BF:F3:8E:2D:04:54:1A:43:59:6F:24:90:13:11:17
Authority key identifier: F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
Certificate issuer: /CN=f9503c075a690556bd462122b24699e1b6b19278
Certificate serial: 01963C53FDB39F3F611831DF4C65DD732FA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
Manifest number: 14F9
Signing time: Wed 16 Apr 2025 02:00:59 +0000
Manifest this update: Wed 16 Apr 2025 02:00:59 +0000
Manifest next update: Thu 17 Apr 2025 02:00:59 +0000
Files and hashes: 1: 1-VA8B1ppBVa9RiEiskaZ4baxkng.crl (hash: OJkQZ3nRmYMS/ofpC+Cqgu1MFPCoj+Vpomt4VORr6wg=)
2: p2SVo4qsSiAegswh4Tt4B2CgnX0.roa (hash: ZR7WcDeaKIDHi9EqUsqBzkr/KcnAMrpHKscQ/Pybjlk=)
3: q2ZLX08w7-Dcrgr57h1hgcnfkXY.roa (hash: uFC0sIXPmgIMFYS0E5zDcKQoPca0pnQPm/3b/35uS2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:53:fd:b3:9f:3f:61:18:31:df:4c:65:dd:73:2f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9503c075a690556bd462122b24699e1b6b19278
Validity
Not Before: Apr 16 02:00:59 2025 GMT
Not After : Apr 17 02:00:59 2025 GMT
Subject: CN=9b7815cd4abff38e2d04541a43596f2490131117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bc:21:f3:92:ab:6b:a8:8d:77:58:a6:58:cf:
1a:29:94:af:c9:c0:6a:21:c5:e2:e2:a3:71:47:fe:
4b:29:6c:22:13:70:c3:e8:63:dd:27:63:c1:cb:21:
4c:be:1a:6e:04:ff:b6:d4:ac:3c:d4:c0:a2:3f:7a:
a7:dc:cc:da:51:db:f6:27:b6:1d:80:af:d9:10:59:
0c:2c:f2:2e:3f:da:af:0d:6e:7e:89:1d:df:32:9a:
e5:bb:9d:a4:3d:63:84:b9:36:57:c5:18:e4:ca:7b:
6e:2f:f9:47:bd:2e:8d:f6:8c:fd:58:86:91:9d:23:
27:1f:55:ea:80:bf:7f:12:50:50:e1:5c:e2:05:19:
46:ac:75:1e:47:56:56:24:f4:fe:e5:3e:64:ed:84:
95:58:89:2b:21:2d:5f:73:cd:63:a2:d4:c2:51:e4:
8f:bb:b2:56:ea:51:ca:bf:cd:c2:a6:13:c0:be:ac:
e7:a7:ff:c2:22:95:42:f3:8f:15:b1:a0:d2:b1:50:
ad:8e:7a:93:dc:83:ca:6b:43:63:04:72:ee:0d:5e:
01:2e:44:84:9d:32:c7:1c:48:91:ea:0a:11:05:26:
fd:a1:cb:07:b1:65:41:03:c2:a1:b3:8b:69:1c:8f:
4f:d2:67:84:7f:8f:8a:53:fb:dd:75:1c:46:d3:4f:
ad:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:78:15:CD:4A:BF:F3:8E:2D:04:54:1A:43:59:6F:24:90:13:11:17
X509v3 Authority Key Identifier:
keyid:F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c1:10:75:79:d6:c5:18:6f:96:78:70:9f:68:7b:b6:d4:66:
84:2e:32:10:96:1f:cb:24:7a:be:50:cc:ec:f2:79:3e:d0:c8:
f8:3d:f3:fd:50:3a:56:a1:86:db:ac:8a:38:be:3a:b9:37:fb:
aa:8b:c4:81:7f:95:40:43:45:c0:ac:31:7e:36:60:8c:7d:cf:
00:8e:d0:07:b3:fe:65:02:3a:a3:13:8a:ff:93:9e:81:0d:ff:
ad:a6:d1:f6:ad:a6:c5:00:5a:35:ef:c3:0b:09:20:1e:af:35:
64:43:e5:8e:62:ad:e8:36:df:30:f6:c4:ef:fb:50:aa:9a:32:
f4:0a:71:86:1e:7a:7b:37:1f:02:f9:6f:fb:e7:d5:60:55:02:
9f:6e:e0:41:f7:37:e1:97:59:eb:e6:0c:83:cc:74:91:95:53:
6e:6a:a7:dc:d1:df:19:a3:13:79:dd:4e:ce:f4:60:85:26:81:
91:4d:35:c0:db:78:33:02:b3:2d:f4:8e:62:2f:2d:da:21:b4:
df:bd:ae:a3:15:d9:33:34:34:52:17:12:b4:74:96:14:33:69:
13:68:b1:af:12:05:99:d7:96:36:da:81:dd:99:e2:63:73:9e:
f3:04:8a:6c:60:ec:f6:12:e0:bc:41:49:bb:08:90:79:d8:b4:
19:80:c9:e0
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZY8U/2znz9hGDHfTGXdcy+hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NTAzYzA3NWE2OTA1NTZiZDQ2MjEyMmIyNDY5OWUxYjZi
MTkyNzgwHhcNMjUwNDE2MDIwMDU5WhcNMjUwNDE3MDIwMDU5WjAzMTEwLwYDVQQD
Eyg5Yjc4MTVjZDRhYmZmMzhlMmQwNDU0MWE0MzU5NmYyNDkwMTMxMTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7wh85Kra6iNd1imWM8aKZSvycBq
IcXi4qNxR/5LKWwiE3DD6GPdJ2PByyFMvhpuBP+21Kw81MCiP3qn3MzaUdv2J7Yd
gK/ZEFkMLPIuP9qvDW5+iR3fMprlu52kPWOEuTZXxRjkyntuL/lHvS6N9oz9WIaR
nSMnH1XqgL9/ElBQ4VziBRlGrHUeR1ZWJPT+5T5k7YSVWIkrIS1fc81jotTCUeSP
u7JW6lHKv83CphPAvqznp//CIpVC848VsaDSsVCtjnqT3IPKa0NjBHLuDV4BLkSE
nTLHHEiR6goRBSb9ocsHsWVBA8Khs4tpHI9P0meEf4+KU/vddRxG00+tNQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJt4Fc1Kv/OOLQRUGkNZbySQExEXMB8GA1UdIwQY
MBaAFPlQPAdaaQVWvUYhIrJGmeG2sZJ4MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1WQThCMXBwQlZhOVJpRWlza2FaNGJheGtuZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUvNGZhNGI0LTdjOTYtNGViNy05OTQw
LTNmMjMxNmI1NTNmNS8xLzEtVkE4QjFwcEJWYTlSaUVpc2thWjRiYXhrbmcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzc1LzRmYTRiNC03Yzk2LTRlYjctOTk0MC0zZjIzMTZiNTUz
ZjUvMS8xLVZBOEIxcHBCVmE5UmlFaXNrYVo0YmF4a25nLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXsEQ
dXnWxRhvlnhwn2h7ttRmhC4yEJYfyyR6vlDM7PJ5PtDI+D3z/VA6VqGG26yKOL46
uTf7qovEgX+VQENFwKwxfjZgjH3PAI7QB7P+ZQI6oxOK/5OegQ3/rabR9q2mxQBa
Ne/DCwkgHq81ZEPljmKt6DbfMPbE7/tQqpoy9Apxhh56ezcfAvlv++fVYFUCn27g
Qfc34ZdZ6+YMg8x0kZVTbmqn3NHfGaMTed1OzvRghSaBkU01wNt4MwKzLfSOYi8t
2iG0372uoxXZMzQ0UhcStHSWFDNpE2ixrxIFmdeWNtqB3ZniY3Oe8wSKbGDs9hLg
vEFJuwiQedi0GYDJ4A==
-----END CERTIFICATE-----
Generated at Wed Apr 16 04:27:38 2025 by rpki-client