Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
File: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft (raw, json)
Hash identifier: CoknWDRYmrguT/cfUpah/ZBIwWDYVJQH0aU2KQK9esg=
Subject key identifier: 26:0E:CF:AB:ED:F1:C6:BD:11:2D:18:EB:88:18:08:C6:B7:19:DF:59
Authority key identifier: B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
Certificate issuer: /CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Certificate serial: 0196AE4464C126F64654D011D8F88F7315A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
Manifest number: 152A
Signing time: Thu 08 May 2025 05:00:39 +0000
Manifest this update: Thu 08 May 2025 05:00:39 +0000
Manifest next update: Fri 09 May 2025 05:00:39 +0000
Files and hashes: 1: 3y9VMN9BUcZB2fmchyviGBmGtxw.roa (hash: WvArAvEQlUAHpEjB63U5q0z8PqLe+6GgRYCWBvbd2yM=)
2: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl (hash: DsbF6UHh8tgZBRFni8/Roum6/nKvwTQmqmov1lBj75M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:44:64:c1:26:f6:46:54:d0:11:d8:f8:8f:73:15:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Validity
Not Before: May 8 05:00:39 2025 GMT
Not After : May 9 05:00:39 2025 GMT
Subject: CN=260ecfabedf1c6bd112d18eb881808c6b719df59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:85:ca:7b:1e:bb:4c:54:79:7e:49:0c:72:a1:
aa:a2:67:da:b7:de:09:3f:d8:d6:cf:20:70:fd:9a:
50:a8:6a:51:d7:5f:e8:7c:82:38:48:e9:5a:f1:7c:
7e:d0:99:a2:8b:ac:29:22:82:ba:ab:d2:ff:3a:3e:
b7:26:74:a6:96:2c:62:74:4c:ad:5b:b1:71:f6:5d:
72:79:a5:4d:1d:65:39:ad:40:17:54:cc:30:28:a6:
ca:dc:39:01:4f:78:ec:9e:44:1f:1c:b0:86:db:d2:
ae:0c:c1:72:62:b0:66:b6:fd:4a:7e:24:f7:97:11:
b1:4a:44:6c:74:fc:56:5d:28:91:0b:c1:84:0d:69:
cd:2d:78:a8:21:40:ed:90:6f:5c:53:57:8d:85:9b:
0a:39:7d:bf:47:32:88:f6:1e:75:64:42:42:73:ef:
70:db:85:43:59:ea:c3:db:ce:33:b7:fd:5d:1c:46:
d1:01:61:b8:9a:b1:8d:29:59:df:8b:08:5a:ed:4f:
09:cb:9c:6f:f9:cc:86:b8:b9:62:2f:a6:36:34:a2:
fa:69:d9:3b:de:41:d6:3d:61:84:c1:70:5e:a4:04:
42:7e:d5:6e:b2:48:55:32:0d:f2:82:97:44:a6:bc:
76:87:ff:aa:54:96:82:9b:c8:1d:1f:3d:de:bf:ce:
da:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0E:CF:AB:ED:F1:C6:BD:11:2D:18:EB:88:18:08:C6:B7:19:DF:59
X509v3 Authority Key Identifier:
keyid:B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:25:2c:e8:2e:91:e8:ba:32:0c:e9:c3:bd:c9:27:51:bb:48:
15:9f:0c:7f:67:35:77:dc:aa:11:9a:ec:69:78:b4:1a:e0:d5:
b3:13:45:ba:12:e9:b7:e7:fc:20:09:6f:16:55:f0:5b:9d:63:
85:1f:82:7f:30:ca:7e:c9:31:ae:8c:db:56:0f:ab:d8:7f:74:
99:91:1d:4c:fc:57:76:24:0a:09:a6:af:31:49:39:df:21:bf:
74:47:d1:48:d8:cb:f1:c5:83:2c:db:4e:07:90:09:e7:af:04:
eb:65:63:4d:59:44:34:f3:d4:93:7a:7e:b9:05:0b:8f:de:cf:
8a:67:86:64:83:bb:54:f1:cc:60:38:8a:03:dd:d9:d2:cf:de:
06:b0:d7:1e:95:17:b9:fe:cb:02:c0:48:d2:4d:60:45:0d:34:
7c:12:1d:a0:ad:2b:92:1f:6f:93:04:ec:ac:b3:25:2c:73:e4:
de:af:ad:0a:a9:06:5a:3a:22:fb:6e:97:74:74:00:12:32:41:
10:d8:8e:aa:48:f8:05:32:73:a0:e5:c6:fd:c2:57:e7:63:3c:
8c:95:84:e7:42:a1:22:2b:cb:1c:9b:dd:b0:15:18:f0:67:9d:
d1:45:09:bd:08:2e:a4:21:5c:da:a4:94:8c:fc:16:d3:6c:f9:
df:b9:bc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 13:16:23 2025 by rpki-client