
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.mft
File: VgGQvfsKPyO0QR59dI7du9CfhUY.mft (raw, json)
Hash identifier: 4PZ8ACysQT0srML78TEBoABtZAaVnlVsF5AlwhXiXRE=
Subject key identifier: F7:91:58:E2:DF:B3:B0:16:88:E1:55:F0:0D:A6:44:61:6E:F3:04:E9
Authority key identifier: 56:01:90:BD:FB:0A:3F:23:B4:41:1E:7D:74:8E:DD:BB:D0:9F:85:46
Certificate issuer: /CN=560190bdfb0a3f23b4411e7d748eddbbd09f8546
Certificate serial: 0194BAF2679CF747D8C3394D8BBD3354D360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.mft
Manifest number: 03D5
Signing time: Fri 31 Jan 2025 06:00:35 +0000
Manifest this update: Fri 31 Jan 2025 06:00:35 +0000
Manifest next update: Sat 01 Feb 2025 06:00:35 +0000
Files and hashes: 1: 64Ej7I8HEnkpiLGMX82veircUhg.roa (hash: xVAVOGzTMXPwla0VBx1B21ilx+QLilzpIJ9ncjalLHQ=)
2: MeVZOtqNt3JW5yw4ZXWY1mEC3c4.roa (hash: aT7Qdf0+N9/MSDlSTyJ9aA4YP0o287rEoQwXL6tiMCM=)
3: VgGQvfsKPyO0QR59dI7du9CfhUY.crl (hash: EvFIPdRTF/8ty2IE4G4UP3JrKgH2eSfvvuvhZlT/Nsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:67:9c:f7:47:d8:c3:39:4d:8b:bd:33:54:d3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560190bdfb0a3f23b4411e7d748eddbbd09f8546
Validity
Not Before: Jan 31 06:00:35 2025 GMT
Not After : Feb 1 06:00:35 2025 GMT
Subject: CN=f79158e2dfb3b01688e155f00da644616ef304e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:37:f6:e9:ef:88:aa:64:a4:13:77:d2:34:c5:
ee:6a:b7:db:c0:a4:6c:ea:df:24:4f:98:2b:86:b6:
93:79:71:88:86:a3:74:27:3c:62:8a:73:3b:29:57:
4f:67:ae:e9:d8:47:d4:3f:fe:14:6c:e8:77:da:81:
92:0e:59:2f:d0:74:b8:1a:99:8c:06:a1:cc:a4:fe:
60:c0:3d:a6:92:ef:96:f9:f0:31:9c:5f:cf:9b:00:
18:da:0d:8a:a1:64:47:d9:50:32:99:f3:1b:df:a4:
3e:6c:de:2f:30:e1:4c:ad:0d:f7:7f:94:ab:27:6f:
3a:bc:36:14:13:a1:68:f0:e0:87:db:95:6e:42:40:
4e:b8:86:c9:d0:99:a4:dd:2c:41:68:78:b6:81:09:
06:82:5f:a7:b5:c7:7a:49:e6:19:95:bd:51:ef:26:
3b:82:3e:fe:40:35:c9:7e:cb:01:1f:c6:69:65:9f:
c8:60:1d:ea:09:d2:fa:f8:13:21:b4:2a:a6:d1:20:
06:49:53:1b:64:e5:a3:da:e8:9e:69:13:72:72:b0:
4a:7f:8f:2c:e9:5d:5f:7c:da:48:e4:e8:b6:f9:ee:
0f:7a:46:45:fe:b3:56:28:61:b0:ae:0b:de:b0:78:
24:fe:dd:26:76:74:27:69:7d:cf:8c:99:b1:54:18:
1e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:91:58:E2:DF:B3:B0:16:88:E1:55:F0:0D:A6:44:61:6E:F3:04:E9
X509v3 Authority Key Identifier:
keyid:56:01:90:BD:FB:0A:3F:23:B4:41:1E:7D:74:8E:DD:BB:D0:9F:85:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:64:d3:2a:89:f7:d8:92:f1:9b:97:67:76:67:c6:03:94:9c:
62:93:3e:ed:37:b8:55:39:dc:87:3a:be:a7:97:29:e0:20:48:
14:ea:f4:84:cb:13:46:df:53:75:9c:b1:c6:91:7e:74:e0:2c:
2a:22:66:a4:b7:30:3d:5e:f8:c8:4a:99:ca:15:9b:de:b3:64:
f1:14:ab:a8:eb:2d:29:8e:ef:1e:53:bb:3f:34:ef:e5:b9:67:
70:45:97:3e:06:14:d2:44:89:67:1a:1b:9d:52:17:0d:27:34:
6a:4d:64:8b:7d:67:ca:91:03:ff:8e:94:26:e0:3f:90:6a:6a:
f6:db:d0:b7:af:f5:db:79:68:cf:69:d9:9d:c9:94:3c:52:f2:
8c:11:12:27:5c:71:d6:db:86:e6:64:25:9a:5a:72:2e:a8:c7:
25:48:18:34:31:d2:db:55:2b:c0:b5:52:54:43:34:af:73:66:
42:95:bd:83:b9:a6:c1:97:40:14:c6:4d:23:1b:b8:85:86:8e:
77:c5:45:90:7f:5c:c1:db:05:46:26:23:0e:4c:d6:a9:08:6d:
e3:5a:86:1b:d8:cf:e5:b0:f0:2e:5d:17:69:d7:4e:8d:f5:80:
96:4c:49:46:f5:a0:d7:4c:25:19:57:47:3c:f7:30:9f:cb:aa:
97:ef:0d:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68mec90fYwzlNi70zVNNgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2MDE5MGJkZmIwYTNmMjNiNDQxMWU3ZDc0OGVkZGJiZDA5
Zjg1NDYwHhcNMjUwMTMxMDYwMDM1WhcNMjUwMjAxMDYwMDM1WjAzMTEwLwYDVQQD
EyhmNzkxNThlMmRmYjNiMDE2ODhlMTU1ZjAwZGE2NDQ2MTZlZjMwNGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzf26e+IqmSkE3fSNMXuarfbwKRs
6t8kT5grhraTeXGIhqN0JzxiinM7KVdPZ67p2EfUP/4UbOh32oGSDlkv0HS4GpmM
BqHMpP5gwD2mku+W+fAxnF/PmwAY2g2KoWRH2VAymfMb36Q+bN4vMOFMrQ33f5Sr
J286vDYUE6Fo8OCH25VuQkBOuIbJ0Jmk3SxBaHi2gQkGgl+ntcd6SeYZlb1R7yY7
gj7+QDXJfssBH8ZpZZ/IYB3qCdL6+BMhtCqm0SAGSVMbZOWj2uieaRNycrBKf48s
6V1ffNpI5Oi2+e4PekZF/rNWKGGwrgvesHgk/t0mdnQnaX3PjJmxVBge/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPeRWOLfs7AWiOFV8A2mRGFu8wTpMB8GA1UdIwQY
MBaAFFYBkL37Cj8jtEEefXSO3bvQn4VGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmdHUXZmc0tQeU8wUVI1OWRJN2R1OUNmaFVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9iNjZjODMtMGQ2MS00MjFmLWIwODMt
MmI5ZmM0MWUwYTgwLzEvVmdHUXZmc0tQeU8wUVI1OWRJN2R1OUNmaFVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9iNjZjODMtMGQ2MS00MjFmLWIwODMtMmI5ZmM0MWUwYTgw
LzEvVmdHUXZmc0tQeU8wUVI1OWRJN2R1OUNmaFVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2TTKon3
2JLxm5dndmfGA5ScYpM+7Te4VTnchzq+p5cp4CBIFOr0hMsTRt9TdZyxxpF+dOAs
KiJmpLcwPV74yEqZyhWb3rNk8RSrqOstKY7vHlO7PzTv5blncEWXPgYU0kSJZxob
nVIXDSc0ak1ki31nypED/46UJuA/kGpq9tvQt6/123loz2nZncmUPFLyjBESJ1xx
1tuG5mQlmlpyLqjHJUgYNDHS21UrwLVSVEM0r3NmQpW9g7mmwZdAFMZNIxu4hYaO
d8VFkH9cwdsFRiYjDkzWqQht41qGG9jP5bDwLl0XaddOjfWAlkxJRvWg10wlGVdH
PPcwn8uql+8NRg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:57 2025 by rpki-client on console-fra.rpki-client.org