Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
File: ex9VfuJjyzWaGeos1_oOjJE563Y.mft (raw, json)
Hash identifier: Nw0l3z09YHQpHM4xSWT0bYhUKC5naT57BUZiM2KUaLI=
Subject key identifier: 04:A4:4E:EB:52:FC:6B:5B:20:B6:17:54:E2:F5:36:4C:E1:57:D7:C2
Authority key identifier: 7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76
Certificate issuer: /CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76
Certificate serial: 0196AB7A224EACA674497D68EAB0780839A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
Manifest number: 152F
Signing time: Wed 07 May 2025 16:00:30 +0000
Manifest this update: Wed 07 May 2025 16:00:30 +0000
Manifest next update: Thu 08 May 2025 16:00:30 +0000
Files and hashes: 1: 6Sxszx8NiFM_JbWUMjBDeEvUps8.roa (hash: 8MVKcBrtv6jJ845AEcn3hP00h2PQrFrI39BtX0LnXv4=)
2: Ha78yg7qqGZ0v8W1DWmHUAWoLSA.roa (hash: mO1w4kIt1AKbmRPhw4OwRAWPyk0O9BdOZhhOqd4nLR0=)
3: ex9VfuJjyzWaGeos1_oOjJE563Y.crl (hash: mI74Ws0TyA2CdsY+V++0fOT1iQiYr4HaVmhslDQodEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:7a:22:4e:ac:a6:74:49:7d:68:ea:b0:78:08:39:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76
Validity
Not Before: May 7 16:00:30 2025 GMT
Not After : May 8 16:00:30 2025 GMT
Subject: CN=04a44eeb52fc6b5b20b61754e2f5364ce157d7c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b7:fe:a2:2a:ce:2c:f0:07:6a:f8:c1:e5:68:
8b:5d:f4:97:b1:da:54:36:49:d0:76:b0:62:6f:2b:
ec:c8:eb:08:3c:43:85:19:ca:1b:4a:9f:5d:68:60:
10:03:8e:b6:de:b1:fa:50:1b:0d:81:3f:37:5a:59:
01:60:65:4f:87:44:bf:48:ff:2d:61:f6:4b:ff:81:
2c:b2:58:31:db:19:68:a4:de:28:59:aa:cb:37:f5:
15:22:e1:53:17:a2:97:88:35:23:79:98:86:f9:22:
34:86:7a:c9:21:b7:d9:a2:3b:88:16:ee:d9:3e:ce:
fe:0b:80:c4:08:10:8e:ac:15:b9:e6:0b:46:89:53:
0a:28:3e:e8:c9:04:5c:80:1d:17:61:79:1f:1c:f0:
49:90:7b:ec:e1:ee:57:bf:2c:1a:7d:7e:1f:66:b9:
71:7d:c8:f1:95:d3:57:2e:d5:3c:2e:a8:f5:9a:50:
fe:19:23:69:42:49:be:2c:d4:36:55:93:b2:04:22:
a9:2d:06:d8:d9:41:10:63:9a:02:bd:57:51:ed:25:
ce:b7:84:17:7e:01:0c:46:23:ed:f6:65:9b:d6:f4:
8f:4d:8f:98:e6:fa:06:bf:36:3a:fe:8c:d0:06:01:
31:bb:30:01:9f:8c:0e:d1:b9:0a:c7:4c:5b:48:b8:
5f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A4:4E:EB:52:FC:6B:5B:20:B6:17:54:E2:F5:36:4C:E1:57:D7:C2
X509v3 Authority Key Identifier:
keyid:7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:63:75:b8:37:32:ba:2b:55:1a:a2:da:fc:ef:eb:da:a7:52:
6e:1c:2d:62:56:67:53:a4:48:d3:30:c8:8a:b6:2b:71:8d:c5:
c6:55:61:a0:8a:c5:46:4a:79:9f:6b:19:4b:e9:6b:1c:f2:24:
8b:c5:58:1b:b0:51:7e:fe:b9:0b:aa:9b:cd:cc:c0:22:a7:da:
1b:ae:e1:a3:a8:90:47:1d:15:a9:91:40:12:57:c6:8e:77:3a:
68:de:6b:19:6a:65:eb:77:62:8c:a7:82:cc:94:a6:19:17:bd:
0f:d2:8f:d0:44:c2:29:0b:06:be:46:c9:3a:98:6b:5f:e4:5f:
cf:98:16:41:15:cd:9c:d7:75:c4:67:d2:53:9e:c0:3c:b7:74:
7c:a9:a4:bb:65:6e:ec:ce:00:14:44:b2:73:e7:b1:4f:b1:69:
1d:52:32:96:a8:74:5d:ab:05:c4:36:bd:85:46:a6:a4:ce:c6:
16:b8:5d:ad:29:79:78:80:80:69:ed:6b:bc:38:77:e7:f4:cf:
ec:3d:35:23:cd:6d:a4:7e:eb:15:85:3b:77:f6:27:c6:f5:7d:
ae:af:9f:04:c9:ec:7a:6d:d6:62:8d:2f:23:22:02:51:7f:e9:
f3:84:af:3a:69:79:38:3f:66:0d:49:3c:99:3c:85:dc:2a:05:
e9:33:08:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZareiJOrKZ0SX1o6rB4CDmpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMWY1NTdlZTI2M2NiMzU5YTE5ZWEyY2Q3ZmEwZThjOTEz
OWViNzYwHhcNMjUwNTA3MTYwMDMwWhcNMjUwNTA4MTYwMDMwWjAzMTEwLwYDVQQD
EygwNGE0NGVlYjUyZmM2YjViMjBiNjE3NTRlMmY1MzY0Y2UxNTdkN2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbf+oirOLPAHavjB5WiLXfSXsdpU
NknQdrBibyvsyOsIPEOFGcobSp9daGAQA4623rH6UBsNgT83WlkBYGVPh0S/SP8t
YfZL/4Esslgx2xlopN4oWarLN/UVIuFTF6KXiDUjeZiG+SI0hnrJIbfZojuIFu7Z
Ps7+C4DECBCOrBW55gtGiVMKKD7oyQRcgB0XYXkfHPBJkHvs4e5XvywafX4fZrlx
fcjxldNXLtU8Lqj1mlD+GSNpQkm+LNQ2VZOyBCKpLQbY2UEQY5oCvVdR7SXOt4QX
fgEMRiPt9mWb1vSPTY+Y5voGvzY6/ozQBgExuzABn4wO0bkKx0xbSLhfIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASkTutS/GtbILYXVOL1NkzhV9fCMB8GA1UdIwQY
MBaAFHsfVX7iY8s1mhnqLNf6DoyROet2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXg5VmZ1Smp5eldhR2VvczFfb09qSkU1NjNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85MzZkOTgtNzAxOS00MDFmLTllMmEt
M2UzNjYwZGExM2E0LzEvZXg5VmZ1Smp5eldhR2VvczFfb09qSkU1NjNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy85MzZkOTgtNzAxOS00MDFmLTllMmEtM2UzNjYwZGExM2E0
LzEvZXg5VmZ1Smp5eldhR2VvczFfb09qSkU1NjNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzGN1uDcy
uitVGqLa/O/r2qdSbhwtYlZnU6RI0zDIirYrcY3FxlVhoIrFRkp5n2sZS+lrHPIk
i8VYG7BRfv65C6qbzczAIqfaG67ho6iQRx0VqZFAElfGjnc6aN5rGWpl63dijKeC
zJSmGRe9D9KP0ETCKQsGvkbJOphrX+Rfz5gWQRXNnNd1xGfSU57APLd0fKmku2Vu
7M4AFESyc+exT7FpHVIylqh0XasFxDa9hUampM7GFrhdrSl5eICAae1rvDh35/TP
7D01I81tpH7rFYU7d/YnxvV9rq+fBMnsem3WYo0vIyICUX/p84SvOml5OD9mDUk8
mTyF3CoF6TMINQ==
-----END CERTIFICATE-----
Generated at Wed May 7 23:50:31 2025 by rpki-client