Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
File: i542u2_vkyj1GOSxBfwhLBUqjGg.mft (raw, json)
Hash identifier: OyrN7rFTWqXf3hI8xJN1rcbt6veV0KzPBA9rR19z4CM=
Subject key identifier: D0:08:AA:A7:0B:AA:CE:5A:91:18:84:5C:7C:A3:C4:87:82:49:D2:87
Authority key identifier: 8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
Certificate issuer: /CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Certificate serial: 019655384BEE3BEB953CD65BE1AA3E790A10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 22:01:14 +0000
Manifest this update: Sun 20 Apr 2025 22:01:14 +0000
Manifest next update: Mon 21 Apr 2025 22:01:14 +0000
Files and hashes: 1: I1KraudGgIPbGqrokKSi33-L_jY.roa (hash: L9033CVRp8ri3N0mtJw6UMfr2TqSPrf8oAPr6Y4O13o=)
2: i542u2_vkyj1GOSxBfwhLBUqjGg.crl (hash: sxqJNxRfkfvzVDpE8k81I2Q3GUQjUp9R7w97PFs+nEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:4b:ee:3b:eb:95:3c:d6:5b:e1:aa:3e:79:0a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Validity
Not Before: Apr 20 22:01:14 2025 GMT
Not After : Apr 21 22:01:14 2025 GMT
Subject: CN=d008aaa70baace5a9118845c7ca3c4878249d287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:0d:e9:31:d0:04:e6:7b:0f:2b:8e:3c:eb:71:
8f:ac:28:f0:26:45:a2:df:21:06:ef:d2:6b:59:dc:
a6:e1:23:b6:9f:a4:54:0a:1e:0a:a3:10:aa:ca:b9:
01:ac:24:76:ec:b2:52:9a:c7:93:2d:6d:20:07:6b:
cf:0b:0b:1f:3e:ca:a1:4f:e3:99:a1:10:0d:a7:54:
d5:48:50:7e:0b:5c:0c:2b:ae:66:2e:c3:9c:34:2f:
99:a9:bc:bb:82:55:2f:08:a9:96:f6:1f:3c:6d:6e:
b2:c6:29:29:74:4c:eb:03:43:3c:3b:88:27:b5:87:
39:4c:68:45:3a:be:0e:6d:03:0d:f5:d1:40:54:03:
f4:ac:0c:dd:38:dc:38:c0:b0:49:7e:47:95:f7:06:
40:e8:e0:9f:f2:56:dd:a1:a8:53:ec:44:a9:d5:11:
ce:57:3e:b6:4f:46:a3:b5:54:33:ab:06:52:47:a1:
32:7f:20:7f:a5:d6:1f:0a:67:97:86:d4:99:d6:2e:
6b:09:78:95:0e:23:fc:8d:3a:97:6f:7e:44:14:75:
5a:1a:82:e5:98:f1:70:85:f6:84:98:b5:0b:c0:da:
9d:d3:b2:bc:14:26:de:1c:dd:22:43:f6:d1:9d:61:
bc:2c:bd:24:5e:39:da:d6:04:24:9a:ca:53:b8:c6:
38:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:08:AA:A7:0B:AA:CE:5A:91:18:84:5C:7C:A3:C4:87:82:49:D2:87
X509v3 Authority Key Identifier:
keyid:8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b7:7d:c7:d9:8d:09:c5:07:da:bc:73:7b:33:5c:7f:e2:7b:
83:6a:f3:e3:3d:9f:86:64:b0:e7:7d:fc:48:18:bb:84:d6:e3:
f7:c3:65:96:78:1d:36:65:dd:e2:c5:28:a6:d4:86:69:64:fb:
09:bc:c4:2a:71:8b:df:7b:56:96:4b:e2:86:f9:17:72:2c:1e:
cc:f2:a5:da:fb:a3:a1:39:bd:f8:e5:80:aa:53:8a:e1:fe:1f:
e6:8e:aa:69:de:25:e8:5c:68:3c:08:cd:11:a2:06:75:df:4b:
26:c8:f9:23:d2:33:95:ab:3c:34:11:9c:d1:b5:54:16:b4:ad:
f3:c1:4e:94:b2:10:8c:e6:6e:d7:16:b6:ab:16:42:e4:c1:57:
6b:1a:bf:65:c9:af:91:35:60:c7:6b:ec:2e:44:c7:7b:29:f8:
1f:f3:26:31:b7:cc:42:df:54:ea:01:6d:e9:83:c3:ff:ec:f3:
f3:07:76:7a:79:09:15:5e:57:1e:31:77:1d:73:6b:df:a8:c2:
7b:bb:0c:c0:07:45:51:91:21:36:54:61:f3:60:6e:68:5b:e8:
ab:92:ec:2f:8c:0b:11:5e:68:31:0b:6e:de:cf:b5:ca:bb:74:
a5:1e:c7:60:81:ca:d7:63:2d:64:c5:5a:91:ed:16:97:72:2a:
39:f8:12:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVOEvuO+uVPNZb4ao+eQoQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiOWUzNmJiNmZlZjkzMjhmNTE4ZTRiMTA1ZmMyMTJjMTUy
YThjNjgwHhcNMjUwNDIwMjIwMTE0WhcNMjUwNDIxMjIwMTE0WjAzMTEwLwYDVQQD
EyhkMDA4YWFhNzBiYWFjZTVhOTExODg0NWM3Y2EzYzQ4NzgyNDlkMjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9A3pMdAE5nsPK44863GPrCjwJkWi
3yEG79JrWdym4SO2n6RUCh4KoxCqyrkBrCR27LJSmseTLW0gB2vPCwsfPsqhT+OZ
oRANp1TVSFB+C1wMK65mLsOcNC+Zqby7glUvCKmW9h88bW6yxikpdEzrA0M8O4gn
tYc5TGhFOr4ObQMN9dFAVAP0rAzdONw4wLBJfkeV9wZA6OCf8lbdoahT7ESp1RHO
Vz62T0ajtVQzqwZSR6EyfyB/pdYfCmeXhtSZ1i5rCXiVDiP8jTqXb35EFHVaGoLl
mPFwhfaEmLULwNqd07K8FCbeHN0iQ/bRnWG8LL0kXjna1gQkmspTuMY4cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAIqqcLqs5akRiEXHyjxIeCSdKHMB8GA1UdIwQY
MBaAFIueNrtv75Mo9RjksQX8ISwVKoxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTU0MnUyX3ZreWoxR09TeEJmd2hMQlVxakdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS80YTBlOGQtMGJiZS00MjEzLTk4YjEt
MWExMTZhNTM0NDgzLzEvaTU0MnUyX3ZreWoxR09TeEJmd2hMQlVxakdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS80YTBlOGQtMGJiZS00MjEzLTk4YjEtMWExMTZhNTM0NDgz
LzEvaTU0MnUyX3ZreWoxR09TeEJmd2hMQlVxakdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUbd9x9mN
CcUH2rxzezNcf+J7g2rz4z2fhmSw5338SBi7hNbj98NllngdNmXd4sUoptSGaWT7
CbzEKnGL33tWlkvihvkXciwezPKl2vujoTm9+OWAqlOK4f4f5o6qad4l6FxoPAjN
EaIGdd9LJsj5I9Izlas8NBGc0bVUFrSt88FOlLIQjOZu1xa2qxZC5MFXaxq/Zcmv
kTVgx2vsLkTHeyn4H/MmMbfMQt9U6gFt6YPD/+zz8wd2enkJFV5XHjF3HXNr36jC
e7sMwAdFUZEhNlRh82BuaFvoq5LsL4wLEV5oMQtu3s+1yrt0pR7HYIHK12MtZMVa
ke0Wl3IqOfgSwg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:22 2025 by rpki-client