Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
File: vEZLqdJjhfVN9iVKwkiSbTcERbA.mft (raw, json)
Hash identifier: 7TbqQm97+IagZIY0xVsjQz2up6hC6bVRg7OQa0sY74Y=
Subject key identifier: D4:FB:4F:06:80:72:B7:D2:3C:E5:58:67:48:FD:27:60:56:7F:EF:D3
Authority key identifier: BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0
Certificate issuer: /CN=bc464ba9d26385f54df6254ac248926d370445b0
Certificate serial: 01963B40D7BF2ACA595BFB2B6D49183E5CCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
Manifest number: 14F9
Signing time: Tue 15 Apr 2025 21:00:27 +0000
Manifest this update: Tue 15 Apr 2025 21:00:27 +0000
Manifest next update: Wed 16 Apr 2025 21:00:27 +0000
Files and hashes: 1: gAF5yk6vmaOq2Uung0D_8Gub1gc.roa (hash: eVAKmeO8heHGdx9Kcy2Kx3p7IXGpACADu9i5ILdct+c=)
2: vEZLqdJjhfVN9iVKwkiSbTcERbA.crl (hash: QTQXXFTG6BDmW5QtQgefYsHQsI14gns+pwZNSCe/pyI=)
3: zyyxpnYwsTYjNu4Wy5twrx2x4fk.roa (hash: NQRYx+K4EclccAZE0WPjuwlvX5dADgQnuUhPYSSnRgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:40:d7:bf:2a:ca:59:5b:fb:2b:6d:49:18:3e:5c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc464ba9d26385f54df6254ac248926d370445b0
Validity
Not Before: Apr 15 21:00:27 2025 GMT
Not After : Apr 16 21:00:27 2025 GMT
Subject: CN=d4fb4f068072b7d23ce5586748fd2760567fefd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:73:d7:a4:f6:52:10:88:5a:90:65:94:ab:76:
5d:e2:21:50:49:04:1d:65:3c:d1:c0:15:38:c0:ef:
71:b5:0e:40:13:3c:bf:04:21:11:d4:55:22:5e:bd:
e4:66:de:b7:2f:32:12:20:08:6f:7d:e4:c7:be:de:
3f:00:3c:22:a7:4c:65:6e:b1:9f:e1:da:9f:f4:86:
4d:33:aa:6d:fa:89:0c:19:46:07:c4:c6:ba:ef:dd:
7a:fc:93:4f:39:c0:8a:b4:d3:8c:5e:79:ab:43:5d:
5f:9d:e4:29:a6:36:8a:2d:08:02:cd:57:ce:87:1d:
52:8d:98:c9:7b:f1:e7:db:87:c3:ca:15:f7:c0:dc:
e5:a5:d8:8d:86:59:df:18:73:71:3a:1b:67:aa:59:
36:47:a7:68:9d:42:f1:59:97:85:6b:36:71:aa:98:
9c:0e:36:5f:f3:9e:81:de:dc:63:85:34:67:a2:1e:
bb:54:0a:07:9f:38:1a:55:3c:7b:3a:cd:65:fc:8e:
40:ed:74:5e:0b:04:a9:9f:e0:2e:72:56:ab:92:5b:
46:a0:fc:76:91:31:cb:39:ad:d2:e4:ac:8a:29:c1:
29:80:1f:83:07:2f:c6:bc:db:b1:59:47:22:c2:27:
79:ba:db:33:4c:09:48:12:85:51:39:1e:c9:9d:08:
d4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FB:4F:06:80:72:B7:D2:3C:E5:58:67:48:FD:27:60:56:7F:EF:D3
X509v3 Authority Key Identifier:
keyid:BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:16:70:90:ae:48:cb:59:3f:cd:e7:4e:5b:50:ed:64:e8:ad:
02:a7:d8:ce:1e:56:ff:84:06:37:24:db:8d:84:77:d0:bc:5c:
4f:10:be:f8:2c:ac:66:ea:94:15:71:ce:54:cf:d3:17:8e:90:
d8:0c:f2:9f:e1:d7:5c:ad:e2:ac:ec:92:36:f1:2a:85:19:49:
7d:17:ab:58:bb:ef:27:96:aa:d6:71:85:a0:82:c7:f2:2c:c8:
47:1b:db:0a:22:2c:47:a2:73:e5:46:1a:3f:22:4d:02:08:7c:
d0:8d:a1:8d:32:de:b4:c7:ff:6c:4f:b5:55:f2:29:08:66:a8:
fd:40:cb:f5:f1:3c:0d:88:86:73:95:ec:55:09:6b:62:cb:05:
47:92:06:1a:0f:e9:4b:6f:c2:fa:1b:e6:fb:0b:12:7d:a3:7e:
d5:6a:ac:85:ae:b0:c7:65:42:17:0a:5c:dd:9e:c2:16:be:dc:
95:e5:72:2b:5f:9c:91:bf:48:b0:34:aa:ca:c1:97:2d:58:b3:
62:7a:7c:86:4a:23:40:c0:6b:65:f9:6c:9b:25:b2:73:37:fe:
37:12:3d:2a:f0:be:cc:92:94:cc:9a:04:89:a2:85:39:ce:a6:
ef:16:69:8d:f7:c8:1b:4f:34:aa:ef:39:e1:bc:62:bd:67:3d:
45:d8:2e:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY7QNe/KspZW/srbUkYPlzPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNDY0YmE5ZDI2Mzg1ZjU0ZGY2MjU0YWMyNDg5MjZkMzcw
NDQ1YjAwHhcNMjUwNDE1MjEwMDI3WhcNMjUwNDE2MjEwMDI3WjAzMTEwLwYDVQQD
EyhkNGZiNGYwNjgwNzJiN2QyM2NlNTU4Njc0OGZkMjc2MDU2N2ZlZmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3PXpPZSEIhakGWUq3Zd4iFQSQQd
ZTzRwBU4wO9xtQ5AEzy/BCER1FUiXr3kZt63LzISIAhvfeTHvt4/ADwip0xlbrGf
4dqf9IZNM6pt+okMGUYHxMa67916/JNPOcCKtNOMXnmrQ11fneQppjaKLQgCzVfO
hx1SjZjJe/Hn24fDyhX3wNzlpdiNhlnfGHNxOhtnqlk2R6donULxWZeFazZxqpic
DjZf856B3txjhTRnoh67VAoHnzgaVTx7Os1l/I5A7XReCwSpn+AuclarkltGoPx2
kTHLOa3S5KyKKcEpgB+DBy/GvNuxWUciwid5utszTAlIEoVROR7JnQjUhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNT7TwaAcrfSPOVYZ0j9J2BWf+/TMB8GA1UdIwQY
MBaAFLxGS6nSY4X1TfYlSsJIkm03BEWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkVaTHFkSmpoZlZOOWlWS3draVNiVGNFUmJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81MDFmMmItZmQxZi00NWVhLWI0OTQt
ZDczZGM0YjQxY2UxLzEvdkVaTHFkSmpoZlZOOWlWS3draVNiVGNFUmJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS81MDFmMmItZmQxZi00NWVhLWI0OTQtZDczZGM0YjQxY2Ux
LzEvdkVaTHFkSmpoZlZOOWlWS3draVNiVGNFUmJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXhZwkK5I
y1k/zedOW1DtZOitAqfYzh5W/4QGNyTbjYR30LxcTxC++CysZuqUFXHOVM/TF46Q
2Azyn+HXXK3irOySNvEqhRlJfRerWLvvJ5aq1nGFoILH8izIRxvbCiIsR6Jz5UYa
PyJNAgh80I2hjTLetMf/bE+1VfIpCGao/UDL9fE8DYiGc5XsVQlrYssFR5IGGg/p
S2/C+hvm+wsSfaN+1Wqsha6wx2VCFwpc3Z7CFr7cleVyK1+ckb9IsDSqysGXLViz
Ynp8hkojQMBrZflsmyWyczf+NxI9KvC+zJKUzJoEiaKFOc6m7xZpjffIG080qu85
4bxivWc9RdguZg==
-----END CERTIFICATE-----
Generated at Wed Apr 16 04:58:56 2025 by rpki-client