Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
File: vPVGNoDRS2RYax1bRlZjvLV35pM.mft (raw, json)
Hash identifier: DDt2XwQslWXolp3isIMr0UcieGVi9fGIjzVTq0oUXg0=
Subject key identifier: 46:BB:BE:08:00:61:1A:1E:52:CE:3B:25:20:69:B4:83:E9:B1:E0:E1
Authority key identifier: BC:F5:46:36:80:D1:4B:64:58:6B:1D:5B:46:56:63:BC:B5:77:E6:93
Certificate issuer: /CN=bcf5463680d14b64586b1d5b465663bcb577e693
Certificate serial: 0194BA84AA6A5100972FC0430A310DA5F0DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 04:00:44 +0000
Manifest this update: Fri 31 Jan 2025 04:00:44 +0000
Manifest next update: Sat 01 Feb 2025 04:00:44 +0000
Files and hashes: 1: uVkbwn7y_5MMeq7i0JNXRtOhxHs.roa (hash: ENXYHNx7P9jtVpFvO/C3/8L3MM9tHfB0gwOuIrKil9g=)
2: vPVGNoDRS2RYax1bRlZjvLV35pM.crl (hash: 7DbKcRVxlt4dYW8AMV8LuKjw8ATXl8VPt99x7f9bijI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:aa:6a:51:00:97:2f:c0:43:0a:31:0d:a5:f0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcf5463680d14b64586b1d5b465663bcb577e693
Validity
Not Before: Jan 31 04:00:44 2025 GMT
Not After : Feb 1 04:00:44 2025 GMT
Subject: CN=46bbbe0800611a1e52ce3b252069b483e9b1e0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:73:ee:ea:43:e5:99:21:cd:84:f4:bf:22:b1:
e6:db:93:10:b5:9b:4a:b5:18:72:6d:ef:53:04:3c:
27:23:bc:8e:c9:7e:9e:b1:4a:be:70:5b:60:bd:02:
8f:14:9a:ef:df:6d:8d:c5:42:76:78:9a:77:a0:64:
5b:fd:4c:cb:e5:1c:43:d9:5c:59:dd:fa:30:17:7a:
9d:8d:b0:72:da:30:da:b8:e0:c1:ee:78:9e:97:ad:
e7:0d:4c:39:7c:bc:2f:8d:68:11:f4:91:51:e5:4b:
f8:50:d1:72:d7:26:71:9a:51:8b:d4:a8:dc:5b:e0:
f2:b4:59:0c:c1:97:8d:db:b4:7f:b6:13:56:67:71:
04:a3:f4:76:3e:8e:0c:00:07:32:26:b4:42:1f:dc:
3f:08:10:d0:6b:7a:33:83:63:da:7c:54:de:ae:b8:
82:79:cc:58:1e:f2:91:d1:65:5f:a6:d7:62:04:24:
6c:b6:8a:1c:9b:7b:2d:d5:c8:78:25:4f:27:5f:26:
aa:0b:71:fd:11:90:a7:ba:2e:35:4d:fd:2d:68:d1:
fb:2a:c7:68:dc:00:c1:e0:a6:d2:32:37:73:87:cf:
8e:cc:e0:16:ac:c9:94:cf:d6:6e:1f:1d:d4:25:f6:
7f:57:fd:ad:47:0b:03:b1:0e:ae:d4:35:c8:9f:0a:
28:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BB:BE:08:00:61:1A:1E:52:CE:3B:25:20:69:B4:83:E9:B1:E0:E1
X509v3 Authority Key Identifier:
keyid:BC:F5:46:36:80:D1:4B:64:58:6B:1D:5B:46:56:63:BC:B5:77:E6:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:13:30:b3:c5:fb:99:d0:4c:39:17:ae:13:c4:72:61:76:91:
12:7d:4e:77:70:b0:cf:9b:43:76:19:8d:5b:e5:3e:6d:a3:7a:
eb:fa:62:15:79:83:68:39:a1:fa:83:11:da:f2:c2:ba:89:9f:
f9:43:37:c3:1d:f8:d0:51:89:6e:05:d7:b9:4a:24:2a:72:a5:
91:2c:c2:eb:ce:7a:4f:fc:ac:b0:69:79:32:be:a4:96:b2:11:
08:d0:1a:d9:89:ac:38:96:0b:e0:58:cb:dd:f9:88:16:a6:cb:
fc:95:95:be:e5:c8:98:f5:5d:ff:cd:ef:fc:ca:3c:a3:d6:1d:
96:b5:c2:e6:ba:c4:69:88:b8:53:88:30:b6:af:fd:d8:99:7e:
d3:de:31:9e:a8:78:d6:e7:0c:6e:d2:fa:d7:23:f6:67:58:87:
78:53:f8:9a:bf:66:af:14:0e:dc:43:c2:dd:c4:55:c5:a6:3f:
03:fb:bb:70:bc:41:24:89:30:bd:75:73:96:1b:c8:ad:da:68:
ea:0b:47:82:d6:69:d7:1a:e1:53:1c:53:a5:d1:f2:cf:49:cb:
2f:98:58:b3:e1:45:7b:9b:ac:4d:81:06:e8:f1:cc:68:44:8b:
af:b9:73:86:4f:65:6a:16:b8:c3:4a:a1:2b:0e:2c:5e:1f:e6:
d8:16:3d:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hKpqUQCXL8BDCjENpfDaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZjU0NjM2ODBkMTRiNjQ1ODZiMWQ1YjQ2NTY2M2JjYjU3
N2U2OTMwHhcNMjUwMTMxMDQwMDQ0WhcNMjUwMjAxMDQwMDQ0WjAzMTEwLwYDVQQD
Eyg0NmJiYmUwODAwNjExYTFlNTJjZTNiMjUyMDY5YjQ4M2U5YjFlMGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXPu6kPlmSHNhPS/IrHm25MQtZtK
tRhybe9TBDwnI7yOyX6esUq+cFtgvQKPFJrv322NxUJ2eJp3oGRb/UzL5RxD2VxZ
3fowF3qdjbBy2jDauODB7niel63nDUw5fLwvjWgR9JFR5Uv4UNFy1yZxmlGL1Kjc
W+DytFkMwZeN27R/thNWZ3EEo/R2Po4MAAcyJrRCH9w/CBDQa3ozg2PafFTerriC
ecxYHvKR0WVfptdiBCRstoocm3st1ch4JU8nXyaqC3H9EZCnui41Tf0taNH7Ksdo
3ADB4KbSMjdzh8+OzOAWrMmUz9ZuHx3UJfZ/V/2tRwsDsQ6u1DXInwoooQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEa7vggAYRoeUs47JSBptIPpseDhMB8GA1UdIwQY
MBaAFLz1RjaA0UtkWGsdW0ZWY7y1d+aTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlBWR05vRFJTMlJZYXgxYlJsWmp2TFYzNXBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9mNWZjNzYtNTAxNi00OTY4LTgyOWIt
NDczMDQ1YTkzYTA1LzEvdlBWR05vRFJTMlJZYXgxYlJsWmp2TFYzNXBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9mNWZjNzYtNTAxNi00OTY4LTgyOWItNDczMDQ1YTkzYTA1
LzEvdlBWR05vRFJTMlJZYXgxYlJsWmp2TFYzNXBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALBMws8X7
mdBMOReuE8RyYXaREn1Od3Cwz5tDdhmNW+U+baN66/piFXmDaDmh+oMR2vLCuomf
+UM3wx340FGJbgXXuUokKnKlkSzC6856T/yssGl5Mr6klrIRCNAa2YmsOJYL4FjL
3fmIFqbL/JWVvuXImPVd/83v/Mo8o9YdlrXC5rrEaYi4U4gwtq/92Jl+094xnqh4
1ucMbtL61yP2Z1iHeFP4mr9mrxQO3EPC3cRVxaY/A/u7cLxBJIkwvXVzlhvIrdpo
6gtHgtZp1xrhUxxTpdHyz0nLL5hYs+FFe5usTYEG6PHMaESLr7lzhk9laha4w0qh
Kw4sXh/m2BY9VA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:58 2025 by rpki-client on console-fra.rpki-client.org