Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft
File: vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft (raw, json)
Hash identifier: 28giEikESNw0Hkvqz9WPo4SjIF1daaTDj17KQ4sGh5E=
Subject key identifier: 74:D4:CB:67:5B:B1:41:07:59:AA:63:40:78:10:71:91:AD:8E:EE:59
Authority key identifier: BD:82:E6:0D:07:2E:51:85:43:5A:90:0E:32:3F:46:38:06:D4:33:C9
Certificate issuer: /CN=bd82e60d072e5185435a900e323f463806d433c9
Certificate serial: 019653B7172BD7B34F2F58BEBAB052E214E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYLmDQcuUYVDWpAOMj9GOAbUM8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 15:00:29 +0000
Manifest this update: Sun 20 Apr 2025 15:00:29 +0000
Manifest next update: Mon 21 Apr 2025 15:00:29 +0000
Files and hashes: 1: vYLmDQcuUYVDWpAOMj9GOAbUM8k.crl (hash: CqS350qfjRNAF4T4L/VE7bgmHGjvnpLCpW/Xe/dDhtw=)
2: zHFsSZojvy_X7uL-vPL2okM6zhI.roa (hash: n8rylT6z4CcEms6K9HKeeDe6KPQo1phvGPnzqc1vlUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vYLmDQcuUYVDWpAOMj9GOAbUM8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:17:2b:d7:b3:4f:2f:58:be:ba:b0:52:e2:14:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd82e60d072e5185435a900e323f463806d433c9
Validity
Not Before: Apr 20 15:00:29 2025 GMT
Not After : Apr 21 15:00:29 2025 GMT
Subject: CN=74d4cb675bb1410759aa634078107191ad8eee59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cf:58:92:63:dd:51:91:73:07:0a:11:29:25:
bf:e4:44:23:9d:fc:b8:e4:20:aa:de:08:99:01:56:
28:0a:cf:a1:85:72:b7:22:9d:a3:5e:2c:e2:e7:f3:
5d:13:b9:9f:b7:bd:0a:16:7f:f4:44:eb:99:7f:92:
01:07:c7:26:36:a9:55:35:f4:3f:0e:08:e5:58:1d:
e2:e2:cd:a9:49:95:3f:a2:20:91:7d:27:68:78:a6:
7a:0d:b3:f7:5a:51:a8:31:1b:ff:fa:24:e7:13:3d:
6c:26:27:10:5d:94:93:15:3f:21:09:7b:b8:16:b2:
ed:f7:ab:1b:f6:68:27:36:24:ca:4b:25:e1:64:f4:
24:bb:d3:20:a7:a0:05:79:b7:fe:fb:db:0f:6c:59:
a3:82:4b:98:ae:89:d7:34:76:f3:81:51:19:25:21:
90:c6:57:9c:3d:e2:ea:eb:0d:bd:b5:18:d1:cc:94:
11:5b:a9:48:ca:74:8b:4f:39:84:99:78:bb:68:8d:
a3:96:95:76:c3:f7:49:fd:d1:d5:b9:af:0c:ae:f4:
79:c6:b6:0a:63:a5:35:92:d1:5f:b7:f0:ce:d2:03:
37:d0:91:b3:69:05:da:93:82:d0:06:5c:b5:f4:13:
82:f7:55:99:12:1f:aa:e0:89:4a:8f:9d:73:68:34:
bc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D4:CB:67:5B:B1:41:07:59:AA:63:40:78:10:71:91:AD:8E:EE:59
X509v3 Authority Key Identifier:
keyid:BD:82:E6:0D:07:2E:51:85:43:5A:90:0E:32:3F:46:38:06:D4:33:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYLmDQcuUYVDWpAOMj9GOAbUM8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c9:0f:89:78:a9:f8:27:c6:20:c4:15:a6:45:cc:10:06:ba:
19:0b:e2:57:44:34:e6:f3:20:0e:dc:6d:1d:8d:4c:bf:f1:29:
90:6d:d2:d3:f0:c7:0e:9f:1a:4e:4d:1d:47:27:3b:9f:b6:b5:
e8:07:55:38:17:94:a5:7d:09:9a:9a:82:eb:97:70:b9:8b:dd:
31:ba:a2:12:0a:98:d5:6d:8f:f3:36:e0:0e:39:fc:e4:bf:10:
85:af:d8:cb:e0:2b:13:c0:f2:81:39:8f:4d:f0:55:aa:12:1c:
da:71:c2:af:69:aa:25:df:df:1a:b8:fa:05:7f:7a:01:92:dc:
ca:51:5d:70:3a:38:37:fe:c8:df:11:2b:2f:35:ae:f8:ec:b7:
3d:ef:a4:08:bd:0b:d2:22:46:8d:75:8e:45:b0:4d:8d:ab:2b:
0d:f6:27:c4:34:fc:18:0e:1a:69:9d:8d:06:6a:79:65:84:6d:
4b:d4:87:0b:fc:73:f6:c5:44:72:d1:d3:ee:fc:23:d0:85:fb:
27:f3:0f:75:71:74:14:2a:a3:45:1d:04:b1:39:7d:11:e0:da:
e7:a8:79:37:97:1c:b0:46:6f:86:97:5e:df:45:80:c3:b5:8b:
93:ba:75:3a:bd:0d:05:53:94:e4:1b:85:88:8e:a6:6b:3e:3c:
ee:ff:a1:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTtxcr17NPL1i+urBS4hTkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkODJlNjBkMDcyZTUxODU0MzVhOTAwZTMyM2Y0NjM4MDZk
NDMzYzkwHhcNMjUwNDIwMTUwMDI5WhcNMjUwNDIxMTUwMDI5WjAzMTEwLwYDVQQD
Eyg3NGQ0Y2I2NzViYjE0MTA3NTlhYTYzNDA3ODEwNzE5MWFkOGVlZTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns9YkmPdUZFzBwoRKSW/5EQjnfy4
5CCq3giZAVYoCs+hhXK3Ip2jXizi5/NdE7mft70KFn/0ROuZf5IBB8cmNqlVNfQ/
DgjlWB3i4s2pSZU/oiCRfSdoeKZ6DbP3WlGoMRv/+iTnEz1sJicQXZSTFT8hCXu4
FrLt96sb9mgnNiTKSyXhZPQku9Mgp6AFebf++9sPbFmjgkuYronXNHbzgVEZJSGQ
xlecPeLq6w29tRjRzJQRW6lIynSLTzmEmXi7aI2jlpV2w/dJ/dHVua8MrvR5xrYK
Y6U1ktFft/DO0gM30JGzaQXak4LQBly19BOC91WZEh+q4IlKj51zaDS8mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTUy2dbsUEHWapjQHgQcZGtju5ZMB8GA1UdIwQY
MBaAFL2C5g0HLlGFQ1qQDjI/RjgG1DPJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdllMbURRY3VVWVZEV3BBT01qOUdPQWJVTThrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lM2JiYzktNzhjMy00M2EyLWI5YjAt
NDhhY2VmNjcyZTRhLzEvdllMbURRY3VVWVZEV3BBT01qOUdPQWJVTThrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lM2JiYzktNzhjMy00M2EyLWI5YjAtNDhhY2VmNjcyZTRh
LzEvdllMbURRY3VVWVZEV3BBT01qOUdPQWJVTThrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASskPiXip
+CfGIMQVpkXMEAa6GQviV0Q05vMgDtxtHY1Mv/EpkG3S0/DHDp8aTk0dRyc7n7a1
6AdVOBeUpX0JmpqC65dwuYvdMbqiEgqY1W2P8zbgDjn85L8Qha/Yy+ArE8DygTmP
TfBVqhIc2nHCr2mqJd/fGrj6BX96AZLcylFdcDo4N/7I3xErLzWu+Oy3Pe+kCL0L
0iJGjXWORbBNjasrDfYnxDT8GA4aaZ2NBmp5ZYRtS9SHC/xz9sVEctHT7vwj0IX7
J/MPdXF0FCqjRR0EsTl9EeDa56h5N5ccsEZvhpde30WAw7WLk7p1Or0NBVOU5BuF
iI6maz487v+hbQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 17:46:19 2025 by rpki-client