Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
File: rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft (raw, json)
Hash identifier: aJpfb9GgtvXLH8YTyLPwaj9tWCL3Xkg/vcPgbWaXc3M=
Subject key identifier: 48:4C:76:F4:54:10:1D:B0:B7:B7:88:D1:4B:B5:0B:99:93:4D:0D:6B
Authority key identifier: AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
Certificate issuer: /CN=ad80679b96ca322bfa85500cab206c6d47412edf
Certificate serial: 0196BF6E8C9371AF9D36E22BB3D9E8DC5122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
Manifest number: 153D
Signing time: Sun 11 May 2025 13:00:15 +0000
Manifest this update: Sun 11 May 2025 13:00:15 +0000
Manifest next update: Mon 12 May 2025 13:00:15 +0000
Files and hashes: 1: 47RTgndCr3WK9uvLA47Mf3Veeq0.roa (hash: nqkQXS//GUp6pq9hI3HV70pQJ3Mrf63Mr+wizeUmh6Y=)
2: AjQ1qmq1QAXjvAuMHhBzyxf3AQQ.roa (hash: PhWZ+RwWSScRWkGQiHT3k31EkR3n/BR9waZYYFuBjy8=)
3: BqxQqMXfVsv8J4WaLs72INfcI-w.roa (hash: E4uf1aplKzZlY/g2WLAMnV1cBOEsVJ+7b0auNGq9law=)
4: EbiER1YyYwAg31JRo_4MT9hutgE.roa (hash: 58aF5sG9ezc8MIrgsG64fLq6UpWN9k1MeWSXyTcyYrs=)
5: rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl (hash: IM1GuuVgSYjtVWg2kmK6ZyJwUSpxNcGdZ2ON8p0U8PI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6e:8c:93:71:af:9d:36:e2:2b:b3:d9:e8:dc:51:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad80679b96ca322bfa85500cab206c6d47412edf
Validity
Not Before: May 11 13:00:15 2025 GMT
Not After : May 12 13:00:15 2025 GMT
Subject: CN=484c76f454101db0b7b788d14bb50b99934d0d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:eb:b4:be:63:ca:05:9d:f7:84:b5:ff:4f:12:
81:81:18:62:58:9f:b7:f0:2d:96:ac:25:b4:78:29:
75:6c:0d:cb:9a:88:10:a9:a9:1b:99:7c:bc:ee:db:
be:1a:98:f6:b9:83:a3:85:bd:a3:0f:ee:19:40:0c:
48:07:3c:c6:f4:ae:a6:11:d2:07:30:cc:3b:5c:15:
db:86:98:ca:98:a7:3f:6f:58:31:0b:79:30:c4:58:
d2:f5:35:6c:77:1b:dc:a0:3d:7b:55:7c:8c:20:97:
4e:6d:7e:53:43:cd:22:f2:93:a2:69:18:d6:f2:fc:
e4:9d:d4:31:2d:8e:d6:a2:42:3e:86:bd:77:d8:19:
3a:b7:5c:b0:ba:38:d1:ad:59:0c:ac:03:1b:a5:40:
0d:6e:bf:5f:9a:0e:62:a3:0d:57:2d:2b:63:02:50:
cd:25:ef:41:f6:fe:09:8c:d8:79:79:60:a2:02:7e:
b8:03:65:fc:75:23:e8:61:40:c3:98:05:0a:95:d1:
3d:56:39:de:1e:0a:5e:6d:57:ee:f3:03:5a:1e:e5:
85:72:5d:79:81:88:34:1f:15:3f:db:14:3f:5a:88:
77:52:d1:80:d5:1e:fa:5e:17:79:f8:c8:ca:2d:65:
67:d8:ef:a9:10:0d:b5:d4:33:41:e6:f5:3a:c7:10:
f9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4C:76:F4:54:10:1D:B0:B7:B7:88:D1:4B:B5:0B:99:93:4D:0D:6B
X509v3 Authority Key Identifier:
keyid:AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:06:ca:80:fb:7f:72:9f:9e:ca:cd:58:c4:da:1f:50:ff:b2:
a3:8c:e5:fb:f8:bd:d3:b3:82:0e:70:79:c8:01:6a:1f:3e:46:
ef:e8:f0:b8:0d:c9:da:a7:da:1d:d6:ae:3d:0c:dc:48:bd:db:
69:6f:d3:5f:e0:5c:ab:80:c8:0c:62:da:76:78:51:8e:97:7e:
d4:dc:96:1b:b6:33:7c:81:48:29:1b:b0:37:0d:32:2d:51:0f:
46:35:6b:a8:15:77:f1:f1:bc:d0:a6:77:27:a5:93:08:b8:bc:
ef:46:d6:a1:f3:b7:3e:bd:35:6a:2a:3a:f0:6d:d5:cb:ff:9e:
b4:f4:0f:cb:47:99:c5:24:85:70:eb:e0:d5:02:4a:63:0f:b0:
4a:2b:e2:5a:96:40:6f:99:55:60:45:e5:f6:07:d2:72:d4:ab:
43:eb:94:1d:59:fc:5b:f6:52:d0:3a:04:06:90:90:d9:93:58:
65:24:0d:6d:58:a9:89:72:f7:cf:73:35:e5:40:2d:65:4e:55:
cf:74:73:66:35:ff:1c:f6:e1:e1:eb:9c:8d:5f:9c:d8:3f:cf:
1e:1d:a0:43:45:93:e8:f5:8e:25:15:83:05:b0:d4:2f:87:77:
2e:1b:bb:d6:45:68:73:3c:9b:fa:a9:a5:4a:49:1f:36:d0:0f:
81:60:67:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:43:57 2025 by rpki-client