Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
File: VwFSjCouLEaRPAsoyjVw84gPGlY.mft (raw, json)
Hash identifier: nnuPtLJ/iP/X44WjeiBNljmYOGryvH5fgpa+zudy0EE=
Subject key identifier: 99:D3:6A:BB:3B:E8:4C:13:C6:7B:55:54:23:7C:63:5E:79:32:51:C0
Authority key identifier: 57:01:52:8C:2A:2E:2C:46:91:3C:0B:28:CA:35:70:F3:88:0F:1A:56
Certificate issuer: /CN=5701528c2a2e2c46913c0b28ca3570f3880f1a56
Certificate serial: 0196549304F900E772B410D5074FECB49E10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
Manifest number: 090B
Signing time: Sun 20 Apr 2025 19:00:43 +0000
Manifest this update: Sun 20 Apr 2025 19:00:43 +0000
Manifest next update: Mon 21 Apr 2025 19:00:43 +0000
Files and hashes: 1: 466YAs6d9cdjAoG1VqV9G_HtvQg.roa (hash: wVtqE+qIa2JsmDebXlhf45xn2AahdoB1no9v6MIhuuw=)
2: VwFSjCouLEaRPAsoyjVw84gPGlY.crl (hash: kc1v3AjMR/0AWsfuYm9zUYFag9/AYpVKv/DYuXvXv6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:04:f9:00:e7:72:b4:10:d5:07:4f:ec:b4:9e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5701528c2a2e2c46913c0b28ca3570f3880f1a56
Validity
Not Before: Apr 20 19:00:43 2025 GMT
Not After : Apr 21 19:00:43 2025 GMT
Subject: CN=99d36abb3be84c13c67b5554237c635e793251c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:09:58:30:62:a5:7c:79:09:61:69:60:d3:1e:
28:e4:a4:cf:33:28:a0:58:18:45:3e:ac:da:11:1b:
34:47:17:a6:a0:2c:ab:89:42:63:7a:12:84:b2:96:
a3:b0:49:40:f1:5d:e7:f2:bb:81:f8:cb:f4:50:0a:
2a:4c:77:d2:64:51:d6:82:ad:22:fb:60:89:03:0a:
d1:d6:8b:b4:54:5f:25:fc:cf:14:9c:f8:2d:c4:42:
a0:14:48:3a:88:b3:de:e3:2c:50:0e:c7:b1:a9:9e:
a8:48:7b:66:14:12:ca:38:cc:65:47:11:72:93:bf:
61:c7:31:38:02:3e:5e:a1:9d:1f:c6:d5:c6:42:e6:
53:4d:99:bb:19:3b:82:94:32:8b:92:60:f5:a5:75:
a6:23:7b:c4:59:23:bc:84:66:cc:42:05:8e:e9:7f:
2b:ce:94:07:93:7f:e4:49:75:80:fc:e7:ac:1f:21:
e3:e1:6d:2b:cb:6c:04:9a:32:ef:e7:7d:68:fc:2e:
ee:07:54:77:e4:18:d4:94:58:72:56:94:35:19:58:
1e:a0:be:b1:00:da:e5:9b:78:fc:32:b1:77:70:b4:
ee:02:23:ff:7c:26:a9:ed:6f:25:6d:47:0f:0b:4f:
4b:b2:02:40:7c:26:f0:27:d5:6a:53:5a:ab:29:33:
48:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D3:6A:BB:3B:E8:4C:13:C6:7B:55:54:23:7C:63:5E:79:32:51:C0
X509v3 Authority Key Identifier:
keyid:57:01:52:8C:2A:2E:2C:46:91:3C:0B:28:CA:35:70:F3:88:0F:1A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:5f:44:66:9b:b3:c4:b3:27:e7:c5:c6:1d:c6:87:99:ec:f2:
a1:d5:5c:3f:09:f2:89:18:31:3c:09:f8:c8:f8:4f:96:32:47:
63:32:0c:85:11:6f:d4:1a:47:4f:38:dc:9a:fc:cc:d1:6a:d3:
17:9b:a0:c6:0a:84:89:b4:d7:37:54:b3:14:13:c9:57:ff:9b:
83:e5:1e:41:3b:0b:e0:b2:2f:79:86:bf:b8:b7:bc:b4:9d:81:
f4:40:19:68:4b:c1:dc:8b:b5:cc:7a:7a:dc:59:b3:c2:39:f5:
07:aa:fa:8f:47:7b:4a:39:23:96:26:a0:14:84:b6:07:35:b3:
33:82:a6:91:2a:8e:32:6d:10:2a:bf:5e:8c:c9:d7:fb:26:71:
c2:4b:3d:cb:89:4f:17:a6:54:16:5f:c9:9e:fc:59:f0:3e:7e:
12:98:3a:98:74:ef:eb:f0:82:14:0c:2b:79:49:f8:0b:7a:e3:
eb:fb:ac:24:07:3e:11:f3:2c:11:3e:87:b4:b3:4b:47:a4:8e:
8b:be:97:8b:eb:6e:3a:71:27:c8:98:48:3e:3b:2f:91:de:5a:
60:6e:fc:0c:d4:00:d7:ae:9a:ac:92:f9:95:ab:d8:8e:f1:ce:
f9:9f:99:d6:e7:6f:83:d2:20:0b:8e:3f:f0:d9:7d:88:6d:cb:
3a:28:ea:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUkwT5AOdytBDVB0/stJ4QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MDE1MjhjMmEyZTJjNDY5MTNjMGIyOGNhMzU3MGYzODgw
ZjFhNTYwHhcNMjUwNDIwMTkwMDQzWhcNMjUwNDIxMTkwMDQzWjAzMTEwLwYDVQQD
Eyg5OWQzNmFiYjNiZTg0YzEzYzY3YjU1NTQyMzdjNjM1ZTc5MzI1MWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAlYMGKlfHkJYWlg0x4o5KTPMyig
WBhFPqzaERs0RxemoCyriUJjehKEspajsElA8V3n8ruB+Mv0UAoqTHfSZFHWgq0i
+2CJAwrR1ou0VF8l/M8UnPgtxEKgFEg6iLPe4yxQDsexqZ6oSHtmFBLKOMxlRxFy
k79hxzE4Aj5eoZ0fxtXGQuZTTZm7GTuClDKLkmD1pXWmI3vEWSO8hGbMQgWO6X8r
zpQHk3/kSXWA/OesHyHj4W0ry2wEmjLv531o/C7uB1R35BjUlFhyVpQ1GVgeoL6x
ANrlm3j8MrF3cLTuAiP/fCap7W8lbUcPC09LsgJAfCbwJ9VqU1qrKTNIAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnTars76EwTxntVVCN8Y155MlHAMB8GA1UdIwQY
MBaAFFcBUowqLixGkTwLKMo1cPOIDxpWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVndGU2pDb3VMRWFSUEFzb3lqVnc4NGdQR2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9hNDFjNmQtZjE0Mi00YzI1LTg5OTct
NjNmYWUzODlhNGRiLzEvVndGU2pDb3VMRWFSUEFzb3lqVnc4NGdQR2xZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9hNDFjNmQtZjE0Mi00YzI1LTg5OTctNjNmYWUzODlhNGRi
LzEvVndGU2pDb3VMRWFSUEFzb3lqVnc4NGdQR2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM19EZpuz
xLMn58XGHcaHmezyodVcPwnyiRgxPAn4yPhPljJHYzIMhRFv1BpHTzjcmvzM0WrT
F5ugxgqEibTXN1SzFBPJV/+bg+UeQTsL4LIveYa/uLe8tJ2B9EAZaEvB3Iu1zHp6
3Fmzwjn1B6r6j0d7SjkjliagFIS2BzWzM4KmkSqOMm0QKr9ejMnX+yZxwks9y4lP
F6ZUFl/JnvxZ8D5+Epg6mHTv6/CCFAwreUn4C3rj6/usJAc+EfMsET6HtLNLR6SO
i76Xi+tuOnEnyJhIPjsvkd5aYG78DNQA166arJL5lavYjvHO+Z+Z1udvg9IgC44/
8Nl9iG3LOijqfg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 03:31:03 2025 by rpki-client