Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
File: VRGWi3l6ylfWEYAak6hcuGTkPnI.mft (raw, json)
Hash identifier: gTY+cNMrZuo3vaq8QcXkV4qSi/9d8VrnO4ubfgla83c=
Subject key identifier: 1C:55:29:35:76:49:85:C2:F1:5B:74:E9:00:04:BF:5C:15:10:B3:3C
Authority key identifier: 55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
Certificate issuer: /CN=5511968b797aca57d611801a93a85cb864e43e72
Certificate serial: 01958B4D5B9821E56CE2B28687C5E05C7971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
Manifest number: 0D6C
Signing time: Wed 12 Mar 2025 17:00:57 +0000
Manifest this update: Wed 12 Mar 2025 17:00:57 +0000
Manifest next update: Thu 13 Mar 2025 17:00:57 +0000
Files and hashes: 1: FkEK24gMOi9MxsRr642Srdl8lHQ.roa (hash: DtYbP2drcIzf0g2tEEsCLYpdXSaGIQ0MZgdI48xnP+Q=)
2: VRGWi3l6ylfWEYAak6hcuGTkPnI.crl (hash: /bzulQbgIWb1C9mDMqQI8+Bf+jfgPl7zJzHx+T3I3+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:5b:98:21:e5:6c:e2:b2:86:87:c5:e0:5c:79:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5511968b797aca57d611801a93a85cb864e43e72
Validity
Not Before: Mar 12 17:00:57 2025 GMT
Not After : Mar 13 17:00:57 2025 GMT
Subject: CN=1c552935764985c2f15b74e90004bf5c1510b33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f9:7a:2c:cf:23:4d:6d:a7:41:27:52:8b:6b:
e1:75:c2:98:64:c9:d8:1c:f8:03:ec:95:95:3c:66:
49:f6:8d:f3:25:10:93:c4:1e:cf:c9:ae:dc:8e:86:
fa:07:f3:6d:a2:88:43:f0:65:1c:02:a5:e2:6d:d3:
7c:df:08:54:c6:d3:52:b0:49:e4:ea:a3:e5:62:0c:
30:70:e9:8e:3d:24:65:80:fc:1a:d4:ca:cc:45:50:
ee:c1:ac:e3:1e:f6:74:e2:cf:1b:18:7a:1f:d5:ea:
7b:fa:aa:cf:5b:57:1f:8f:4c:6a:04:a5:a7:08:f2:
55:f8:e1:93:be:88:66:48:89:46:4b:79:0c:60:28:
16:4b:74:80:68:7d:f0:30:d3:1a:0d:74:94:2b:9d:
1d:9d:3d:d5:c7:14:59:c6:4d:91:13:2d:4c:dc:86:
24:9f:b7:3c:05:d9:0a:44:74:77:8e:18:28:08:aa:
9b:f7:bf:a5:98:bc:1c:43:b2:77:e3:6c:d8:55:b3:
d3:05:fe:9d:4a:6f:c0:a6:cc:2e:2d:8d:f8:59:de:
e3:cb:7b:75:4f:c4:46:42:f2:02:a4:7f:e8:b4:34:
3c:6e:6a:88:1d:82:7d:e9:d9:a8:6c:a2:55:b0:cc:
76:f9:9b:8e:aa:63:f7:27:1c:f3:e8:6e:9e:71:a5:
81:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:55:29:35:76:49:85:C2:F1:5B:74:E9:00:04:BF:5C:15:10:B3:3C
X509v3 Authority Key Identifier:
keyid:55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ba:06:25:fe:00:28:3e:08:a1:c9:df:7f:f6:3c:e0:f4:a7:
f1:c7:a6:64:c0:26:9d:01:1e:e9:5d:8e:c6:2e:97:26:73:12:
9a:c4:ab:f2:2c:8c:9c:b4:fa:7e:73:4a:52:ae:12:ab:21:df:
18:b8:d2:9e:3a:af:c4:09:3d:30:6f:f6:26:f3:c3:6d:05:a7:
27:a2:18:11:32:10:64:09:6a:47:54:47:36:8e:2f:51:1e:3a:
e6:28:3f:28:1d:9c:40:f9:2f:08:0c:0d:e5:51:3a:94:4d:bf:
39:1d:79:a8:77:a6:3a:e1:ce:66:eb:04:27:dc:05:ec:9f:f5:
51:bc:71:d6:2a:17:77:5f:c0:9c:36:b4:71:2c:f0:f6:91:c6:
9e:68:41:41:1e:0d:af:65:64:71:f8:30:b7:f0:45:d7:eb:bc:
ae:54:63:63:e5:25:2f:0a:45:88:f0:62:be:1a:f9:52:a3:48:
50:71:f1:c4:58:d6:aa:ed:b6:f6:85:34:7f:00:65:e8:f8:d1:
81:70:d5:fb:11:f2:c9:50:33:7e:12:24:66:20:7a:90:b0:6c:
8f:28:43:2b:3b:da:a3:f3:ca:37:28:56:e5:ea:a8:de:01:8a:
c8:ef:1c:9a:0b:f9:01:e4:36:25:28:06:fd:bb:49:67:11:1c:
c7:29:bf:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLTVuYIeVs4rKGh8XgXHlxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MTE5NjhiNzk3YWNhNTdkNjExODAxYTkzYTg1Y2I4NjRl
NDNlNzIwHhcNMjUwMzEyMTcwMDU3WhcNMjUwMzEzMTcwMDU3WjAzMTEwLwYDVQQD
EygxYzU1MjkzNTc2NDk4NWMyZjE1Yjc0ZTkwMDA0YmY1YzE1MTBiMzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPl6LM8jTW2nQSdSi2vhdcKYZMnY
HPgD7JWVPGZJ9o3zJRCTxB7Pya7cjob6B/NtoohD8GUcAqXibdN83whUxtNSsEnk
6qPlYgwwcOmOPSRlgPwa1MrMRVDuwazjHvZ04s8bGHof1ep7+qrPW1cfj0xqBKWn
CPJV+OGTvohmSIlGS3kMYCgWS3SAaH3wMNMaDXSUK50dnT3VxxRZxk2REy1M3IYk
n7c8BdkKRHR3jhgoCKqb97+lmLwcQ7J342zYVbPTBf6dSm/ApswuLY34Wd7jy3t1
T8RGQvICpH/otDQ8bmqIHYJ96dmobKJVsMx2+ZuOqmP3Jxzz6G6ecaWB+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxVKTV2SYXC8Vt06QAEv1wVELM8MB8GA1UdIwQY
MBaAFFURlot5espX1hGAGpOoXLhk5D5yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlJHV2kzbDZ5bGZXRVlBYWs2aGN1R1RrUG5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8xMTkxMzAtZGJmZC00MDI3LWExNmUt
YzM1ZDVkNTQwMWRhLzEvVlJHV2kzbDZ5bGZXRVlBYWs2aGN1R1RrUG5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8xMTkxMzAtZGJmZC00MDI3LWExNmUtYzM1ZDVkNTQwMWRh
LzEvVlJHV2kzbDZ5bGZXRVlBYWs2aGN1R1RrUG5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWLoGJf4A
KD4Iocnff/Y84PSn8cemZMAmnQEe6V2Oxi6XJnMSmsSr8iyMnLT6fnNKUq4SqyHf
GLjSnjqvxAk9MG/2JvPDbQWnJ6IYETIQZAlqR1RHNo4vUR465ig/KB2cQPkvCAwN
5VE6lE2/OR15qHemOuHOZusEJ9wF7J/1Ubxx1ioXd1/AnDa0cSzw9pHGnmhBQR4N
r2Vkcfgwt/BF1+u8rlRjY+UlLwpFiPBivhr5UqNIUHHxxFjWqu229oU0fwBl6PjR
gXDV+xHyyVAzfhIkZiB6kLBsjyhDKzvao/PKNyhW5eqo3gGKyO8cmgv5AeQ2JSgG
/btJZxEcxym/eQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:30 2025 by rpki-client