Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
File: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft (raw, json)
Hash identifier: /TrSeRrFJLQNtwRuOgjysHELfN8s7dQuicSKtIDxb3M=
Subject key identifier: 49:85:7E:E7:C3:05:23:0C:C6:B3:D2:7B:8A:07:1E:4A:F0:75:06:C3
Authority key identifier: BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
Certificate issuer: /CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Certificate serial: 01964C350866332F80A844F5F15A0DA3AB2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
Manifest number: 08EF
Signing time: Sat 19 Apr 2025 04:01:06 +0000
Manifest this update: Sat 19 Apr 2025 04:01:06 +0000
Manifest next update: Sun 20 Apr 2025 04:01:06 +0000
Files and hashes: 1: 4zZX5zJWUsfZ5zmG6bPbMr0lvbs.roa (hash: Qk/9tkVuHYR7bI8BB1K5v6WoVgCSt0kT7wqGusdLxvQ=)
2: REnNHc3EdwxgjNw-VpXGx_g82qg.roa (hash: 124s1GBcl/AFEUck0q3Uo/i9OIRaWtaDN26Tjn+07fQ=)
3: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl (hash: GtlrSfxKgpHZekJ+zh6lQytYtV6QOnXy3pvLeK9XjBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:35:08:66:33:2f:80:a8:44:f5:f1:5a:0d:a3:ab:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Validity
Not Before: Apr 19 04:01:06 2025 GMT
Not After : Apr 20 04:01:06 2025 GMT
Subject: CN=49857ee7c305230cc6b3d27b8a071e4af07506c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:19:d5:82:1e:76:07:31:52:ff:13:93:e1:7c:
a9:b8:d3:f4:0c:22:d7:21:14:b6:6c:dc:b9:44:cb:
61:bf:1f:1e:6f:94:cf:10:65:76:6c:31:87:c3:d3:
f8:10:9b:f5:d3:16:b9:43:d2:a6:bf:36:af:47:7b:
a5:90:0a:06:b3:35:32:ff:ef:e5:63:4f:6e:1e:91:
e1:d8:a1:37:00:17:1c:cb:a5:90:7f:c6:5d:df:96:
87:a2:ae:c8:e1:30:28:10:47:68:5d:f1:43:13:89:
62:43:ee:fb:40:b2:74:71:d2:ee:ae:93:1f:92:7f:
ae:1f:05:9e:3f:6b:74:63:ae:d2:17:d9:88:26:56:
a8:99:c5:28:95:19:fd:80:b7:e7:da:8c:c8:87:cf:
40:56:f7:ce:ec:fd:f1:9a:52:ab:cb:51:57:14:42:
ab:09:63:9c:af:2a:38:8c:e5:a1:25:55:42:78:43:
7b:4e:7d:74:97:f9:40:f8:6e:a1:24:6d:e6:c6:6e:
1a:8c:05:71:5d:16:84:89:8a:41:db:2a:c2:42:e5:
b5:e2:38:8a:6e:5e:0a:07:3f:ff:fd:d0:3c:68:ff:
64:24:67:ed:77:b3:93:40:bb:84:30:f9:b6:5f:f5:
9a:bc:93:11:bc:a9:c7:85:da:c1:77:81:fe:9c:b5:
c9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:85:7E:E7:C3:05:23:0C:C6:B3:D2:7B:8A:07:1E:4A:F0:75:06:C3
X509v3 Authority Key Identifier:
keyid:BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:67:b9:94:86:9e:4e:2c:6b:bc:75:ba:03:e7:a5:6e:99:b8:
e1:f6:cb:39:06:4f:66:b2:3e:93:e7:f0:aa:6e:ea:12:e3:d8:
7b:ab:c1:d9:46:1b:c8:d0:04:82:3c:99:91:56:22:85:dc:fb:
ab:89:1b:c4:ec:e9:c0:22:7c:93:e7:28:11:80:1f:a6:fa:c2:
01:52:32:60:42:5e:94:b3:c7:c6:f0:f6:ab:32:1b:f8:60:c9:
48:94:94:93:68:34:71:b2:2a:69:e9:5b:21:26:41:57:0a:03:
f1:c7:89:0e:f5:fc:a8:f6:de:14:dd:d9:fc:2c:7a:cd:0d:9f:
db:55:bb:82:73:54:6f:e0:54:14:e3:5a:a2:81:03:ff:c2:76:
d9:e0:6e:e7:2b:c2:3a:6b:96:e2:be:55:7e:b1:60:4e:ff:28:
03:84:38:42:d4:95:57:d6:66:ae:0b:61:0d:f6:0f:6f:63:f1:
66:30:cd:ca:d4:8f:ce:65:fb:12:35:f3:9e:41:b6:2d:79:1b:
38:a8:88:eb:74:a6:0d:e5:32:0f:19:9c:a7:2c:27:ac:92:47:
57:51:35:1d:68:79:36:c3:f9:b6:aa:da:9b:ff:c7:3a:db:db:
ff:06:14:fd:98:f6:c0:1f:a5:5e:ca:84:dc:fd:79:b7:8e:27:
f2:c7:e2:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZMNQhmMy+AqET18VoNo6suMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNDQzZjdhYWU0N2UwYWIzOGJjZjhkNTM2Y2NhNjAzNTBk
MTcyNzAwHhcNMjUwNDE5MDQwMTA2WhcNMjUwNDIwMDQwMTA2WjAzMTEwLwYDVQQD
Eyg0OTg1N2VlN2MzMDUyMzBjYzZiM2QyN2I4YTA3MWU0YWYwNzUwNmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBnVgh52BzFS/xOT4XypuNP0DCLX
IRS2bNy5RMthvx8eb5TPEGV2bDGHw9P4EJv10xa5Q9KmvzavR3ulkAoGszUy/+/l
Y09uHpHh2KE3ABccy6WQf8Zd35aHoq7I4TAoEEdoXfFDE4liQ+77QLJ0cdLurpMf
kn+uHwWeP2t0Y67SF9mIJlaomcUolRn9gLfn2ozIh89AVvfO7P3xmlKry1FXFEKr
CWOcryo4jOWhJVVCeEN7Tn10l/lA+G6hJG3mxm4ajAVxXRaEiYpB2yrCQuW14jiK
bl4KBz///dA8aP9kJGftd7OTQLuEMPm2X/WavJMRvKnHhdrBd4H+nLXJvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmFfufDBSMMxrPSe4oHHkrwdQbDMB8GA1UdIwQY
MBaAFLxEP3quR+CrOLz41TbMpgNQ0XJwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkVRX2VxNUg0S3M0dlBqVk5zeW1BMURSY25BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83NWI2OGItZmE1Ni00NGI3LWJmYmEt
NTAzNGYxOTk1M2EzLzEvdkVRX2VxNUg0S3M0dlBqVk5zeW1BMURSY25BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC83NWI2OGItZmE1Ni00NGI3LWJmYmEtNTAzNGYxOTk1M2Ez
LzEvdkVRX2VxNUg0S3M0dlBqVk5zeW1BMURSY25BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqme5lIae
TixrvHW6A+elbpm44fbLOQZPZrI+k+fwqm7qEuPYe6vB2UYbyNAEgjyZkVYihdz7
q4kbxOzpwCJ8k+coEYAfpvrCAVIyYEJelLPHxvD2qzIb+GDJSJSUk2g0cbIqaelb
ISZBVwoD8ceJDvX8qPbeFN3Z/Cx6zQ2f21W7gnNUb+BUFONaooED/8J22eBu5yvC
OmuW4r5VfrFgTv8oA4Q4QtSVV9ZmrgthDfYPb2PxZjDNytSPzmX7EjXznkG2LXkb
OKiI63SmDeUyDxmcpywnrJJHV1E1HWh5NsP5tqram//HOtvb/wYU/Zj2wB+lXsqE
3P15t44n8sfi8Q==
-----END CERTIFICATE-----
Generated at Sat Apr 19 08:43:25 2025 by rpki-client