Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
File: VC9jP3bo2Krqoytazhaj2zlD2Aw.mft (raw, json)
Hash identifier: sKCu7jwnX5ICR16ixAOIMYb9J2jckud3t4dnRA0lCX4=
Subject key identifier: FA:DC:24:D3:F5:63:7F:DD:5E:46:FF:6B:89:3A:9D:9D:4D:4E:4F:B3
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial: 0196150F75A46B1A459D8F3C99EF6013C54F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
Manifest number: 14F7
Signing time: Tue 08 Apr 2025 11:00:56 +0000
Manifest this update: Tue 08 Apr 2025 11:00:56 +0000
Manifest next update: Wed 09 Apr 2025 11:00:56 +0000
Files and hashes: 1: 1-fqkV7JZgJxycvSPusdfWjnU1xQ.roa (hash: QONebl1+/LHi2kQ7q9RN/wwgttq2CVHi0V6T+dpI+kM=)
2: 1-xYWEWhRA8nM0__wgU5vRp_QcU.roa (hash: bnYzR+tYP6QenME6qvGbnZ7/wPK7R1RpQJzzDie5Khc=)
3: 9_Mv9ZEtP5jzBp-veVmAU5Me26w.roa (hash: 7xIRl7rk4EGTHFHDXuf8JFK1gbSXSJDUaqeJThSJ4B0=)
4: VC9jP3bo2Krqoytazhaj2zlD2Aw.crl (hash: 33ZpZjg+lm6LLuRzA/HzfdeBCZJdyX4hvG1waOI1yo0=)
5: W8VYUTscWXm_5fPXK391Lev4Y8I.roa (hash: jqzmOKHuREPVfrtcJ/0te/zL0kTBbKMBx+WS1zBrGeg=)
6: ZL2VPZ_9luxtBoeAANKmQq7yRd4.roa (hash: jO9zoicMR89BbaUoFzRifxO6s+pERNBb9LZTtsx4HAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:0f:75:a4:6b:1a:45:9d:8f:3c:99:ef:60:13:c5:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Validity
Not Before: Apr 8 11:00:56 2025 GMT
Not After : Apr 9 11:00:56 2025 GMT
Subject: CN=fadc24d3f5637fdd5e46ff6b893a9d9d4d4e4fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2c:5e:09:e7:3e:48:e8:93:ea:d9:ba:10:be:
7c:d5:1d:ea:25:44:02:9e:2d:be:eb:d4:45:d7:af:
92:38:59:61:9e:64:b2:d7:03:8b:78:c0:f0:2e:ca:
59:ff:1b:c1:f0:8a:39:6d:bb:41:6a:ba:23:b4:29:
e8:98:45:7d:3b:67:36:fe:17:b6:dd:00:23:cf:dc:
2b:85:da:24:83:31:e2:9a:50:1e:d5:ae:48:54:0a:
45:0d:50:8e:c3:52:0c:9f:49:ed:80:ce:16:88:e2:
9a:9c:ea:63:12:e5:2d:f7:93:fd:6c:04:59:74:c5:
6f:a4:98:71:42:39:7a:50:06:17:a3:c6:09:6e:3d:
e4:ad:9d:e0:d7:3e:77:b0:55:e0:87:11:04:77:3a:
f0:83:22:9b:c8:e9:6d:8b:d2:b0:17:b6:df:8b:26:
4a:fb:65:46:ac:39:a1:ae:ce:10:70:c8:e8:89:72:
d1:2d:36:18:74:61:ff:55:4c:a0:86:cb:42:89:27:
ee:a8:10:3e:ae:8b:21:0a:00:eb:5c:7d:1b:f7:4c:
29:ef:f2:a6:f6:d2:63:f8:dd:86:cd:ae:6d:7a:3f:
93:da:c2:de:1a:1c:d6:ae:81:a1:0d:75:a9:9e:83:
f0:5c:88:e7:85:76:64:2e:be:64:22:56:90:5b:5b:
68:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DC:24:D3:F5:63:7F:DD:5E:46:FF:6B:89:3A:9D:9D:4D:4E:4F:B3
X509v3 Authority Key Identifier:
keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:11:61:9a:61:75:d3:2a:34:39:53:5e:18:90:fd:f1:7a:35:
c3:00:e3:6f:ae:7d:05:75:19:4c:ad:f8:b9:57:e2:6b:39:c4:
0d:22:45:48:2f:92:4d:a9:f1:fd:cf:45:6e:74:5c:b3:51:95:
06:92:0e:d3:49:7e:90:14:22:1d:10:2a:09:4b:1e:6c:49:a6:
46:64:ba:2b:62:c6:69:60:06:ba:fa:f3:b4:0a:e3:4f:86:f6:
5a:8c:ef:7f:9e:b4:28:fa:7a:06:f0:e0:a0:89:92:3f:d7:74:
f6:7b:0a:11:b4:a7:fb:aa:b8:8c:08:6a:ce:03:fb:04:91:7e:
df:e7:08:65:53:27:d7:eb:f8:9e:60:88:aa:a7:72:47:dd:5a:
2b:f2:49:b1:2f:d9:b5:d2:b3:5f:4a:71:42:70:46:aa:af:58:
92:4b:41:6a:3d:62:5a:42:24:17:e4:a3:02:94:c1:b0:c4:67:
84:a4:72:0f:86:52:45:cf:c8:59:26:eb:66:fd:98:c9:47:b3:
4e:bc:e0:fa:b5:44:ec:d0:e0:d8:be:ac:4f:40:b0:2c:fd:0a:
40:9c:18:57:06:dc:08:3e:d2:3f:15:13:ba:13:ae:66:1c:e6:
69:e1:54:68:0d:6f:35:f1:a5:3d:1a:49:12:cc:8e:22:be:30:
55:7a:d4:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYVD3WkaxpFnY88me9gE8VPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MmY2MzNmNzZlOGQ4YWFlYWEzMmI1YWNlMTZhM2RiMzk0
M2Q4MGMwHhcNMjUwNDA4MTEwMDU2WhcNMjUwNDA5MTEwMDU2WjAzMTEwLwYDVQQD
EyhmYWRjMjRkM2Y1NjM3ZmRkNWU0NmZmNmI4OTNhOWQ5ZDRkNGU0ZmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsixeCec+SOiT6tm6EL581R3qJUQC
ni2+69RF16+SOFlhnmSy1wOLeMDwLspZ/xvB8Io5bbtBarojtCnomEV9O2c2/he2
3QAjz9wrhdokgzHimlAe1a5IVApFDVCOw1IMn0ntgM4WiOKanOpjEuUt95P9bARZ
dMVvpJhxQjl6UAYXo8YJbj3krZ3g1z53sFXghxEEdzrwgyKbyOlti9KwF7bfiyZK
+2VGrDmhrs4QcMjoiXLRLTYYdGH/VUyghstCiSfuqBA+roshCgDrXH0b90wp7/Km
9tJj+N2Gza5tej+T2sLeGhzWroGhDXWpnoPwXIjnhXZkLr5kIlaQW1toywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPrcJNP1Y3/dXkb/a4k6nZ1NTk+zMB8GA1UdIwQY
MBaAFFQvYz926Niq6qMrWs4Wo9s5Q9gMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kNmI4NzQtYWVhOC00YjdlLWIwZDIt
NjliOTUzYzlkNWFhLzEvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9kNmI4NzQtYWVhOC00YjdlLWIwZDItNjliOTUzYzlkNWFh
LzEvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZBFhmmF1
0yo0OVNeGJD98Xo1wwDjb659BXUZTK34uVfiaznEDSJFSC+STanx/c9FbnRcs1GV
BpIO00l+kBQiHRAqCUsebEmmRmS6K2LGaWAGuvrztArjT4b2Wozvf560KPp6BvDg
oImSP9d09nsKEbSn+6q4jAhqzgP7BJF+3+cIZVMn1+v4nmCIqqdyR91aK/JJsS/Z
tdKzX0pxQnBGqq9YkktBaj1iWkIkF+SjApTBsMRnhKRyD4ZSRc/IWSbrZv2YyUez
Trzg+rVE7NDg2L6sT0CwLP0KQJwYVwbcCD7SPxUTuhOuZhzmaeFUaA1vNfGlPRpJ
EsyOIr4wVXrU5w==
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:31:48 2025 by rpki-client