Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft
File: noBwLuah3L864lehmUFfWbgzjqQ.mft (raw, json)
Hash identifier: rcNCejKr3gOuhh3InZy6lPlWmohUIYjD5CYzz76qa8Y=
Subject key identifier: 28:06:70:6D:8C:6E:C3:F7:04:F4:9F:8D:34:ED:D0:53:2C:4C:7E:BA
Authority key identifier: 9E:80:70:2E:E6:A1:DC:BF:3A:E2:57:A1:99:41:5F:59:B8:33:8E:A4
Certificate issuer: /CN=9e80702ee6a1dcbf3ae257a199415f59b8338ea4
Certificate serial: 0196C87221B434440252E77537FBB013382D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/noBwLuah3L864lehmUFfWbgzjqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft
Manifest number: 153A
Signing time: Tue 13 May 2025 07:00:44 +0000
Manifest this update: Tue 13 May 2025 07:00:44 +0000
Manifest next update: Wed 14 May 2025 07:00:44 +0000
Files and hashes: 1: 4r39zvWrkYP2asO0kOUkjIaBE5M.roa (hash: v58EqYlL6LzlpEJ1F9DVvqr5mbMv8/9nhYAa/WADapg=)
2: noBwLuah3L864lehmUFfWbgzjqQ.crl (hash: 8AM0rw1fWoLzyl2U+CJmdtORRP6bkIN/zj6ZkzT+VTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/noBwLuah3L864lehmUFfWbgzjqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:72:21:b4:34:44:02:52:e7:75:37:fb:b0:13:38:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e80702ee6a1dcbf3ae257a199415f59b8338ea4
Validity
Not Before: May 13 07:00:44 2025 GMT
Not After : May 14 07:00:44 2025 GMT
Subject: CN=2806706d8c6ec3f704f49f8d34edd0532c4c7eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:83:b1:21:86:f5:1c:94:be:fc:a3:c7:7d:13:
fe:c5:a1:1b:34:ca:9e:88:12:f7:27:fe:8b:dd:5b:
39:bd:8b:d4:de:b1:68:2d:82:7b:c3:6e:cc:25:c6:
0b:ec:ca:64:4a:c6:ee:3e:b3:a1:63:5c:2f:dd:dd:
8d:12:c9:4a:f1:7c:0f:25:15:a0:73:59:50:75:72:
67:9f:2b:10:ad:51:09:76:9e:69:2c:62:73:8c:09:
f8:9d:f7:d0:8f:2a:0e:49:15:b1:a9:87:b3:ae:76:
da:30:9f:62:c9:8b:40:ef:70:25:20:8d:01:af:68:
ab:76:e7:af:c2:5d:70:b9:c6:46:ae:26:51:a0:58:
e5:dd:81:c4:b2:ad:cb:17:f9:81:df:ca:f0:7a:d8:
78:4c:2f:99:85:8e:2d:79:42:af:4a:25:ce:8d:8d:
d3:0b:01:df:c3:dc:6c:46:19:48:b8:a4:2f:c2:e3:
ed:b8:ca:3f:eb:d2:5c:0f:4b:55:3a:8f:b1:24:1f:
6b:9d:bd:ca:6e:d1:13:f8:19:3b:e2:0e:37:24:4b:
23:5d:26:ff:ea:95:c1:86:78:cd:73:96:eb:a9:2d:
8e:97:e6:65:31:d9:33:ff:b1:a0:35:e7:cd:11:a8:
ce:f7:80:42:06:7a:62:46:e2:5e:a4:84:40:fa:ad:
62:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:06:70:6D:8C:6E:C3:F7:04:F4:9F:8D:34:ED:D0:53:2C:4C:7E:BA
X509v3 Authority Key Identifier:
keyid:9E:80:70:2E:E6:A1:DC:BF:3A:E2:57:A1:99:41:5F:59:B8:33:8E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noBwLuah3L864lehmUFfWbgzjqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c5:f8:37:0a:45:56:49:3b:b6:de:62:f0:cb:7d:58:c5:41:
83:08:48:27:83:c9:73:36:ff:e0:c9:8e:14:d9:57:86:59:06:
64:f1:29:99:9a:92:6b:79:21:aa:40:46:61:8e:ce:38:82:90:
93:2c:42:99:78:b5:4f:89:f1:da:06:4f:cc:87:1a:26:a6:39:
c2:76:a7:11:9c:99:d6:77:b4:16:5c:ad:4c:e0:ba:e9:e4:50:
61:72:4d:95:61:6e:36:6d:3d:d1:08:fa:46:c2:57:83:c5:5d:
8a:c0:21:8f:7c:3b:48:d1:99:35:a4:08:7c:c2:6f:f6:b4:64:
f8:d0:39:a2:6d:4a:10:5d:6d:bc:c4:74:72:6b:8c:25:f6:88:
57:0e:18:6d:84:cb:e3:97:a8:49:39:08:41:9d:f2:31:d6:4f:
1e:42:ff:2b:98:79:ce:14:20:d2:6b:a1:86:4b:95:cf:c1:01:
f1:29:cf:05:14:f5:2d:b3:2f:4f:e7:cf:6a:3c:2f:e6:d2:24:
ba:1e:f1:fa:46:b7:9e:43:b7:21:4a:0d:bb:66:69:0d:a4:1b:
10:6a:95:7b:a0:5e:33:43:ed:91:3f:10:94:99:4c:e8:0e:f9:
34:fc:5d:17:11:63:e0:ea:5a:c7:06:b7:3f:91:37:80:74:de:
f7:8a:81:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbIciG0NEQCUud1N/uwEzgtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllODA3MDJlZTZhMWRjYmYzYWUyNTdhMTk5NDE1ZjU5Yjgz
MzhlYTQwHhcNMjUwNTEzMDcwMDQ0WhcNMjUwNTE0MDcwMDQ0WjAzMTEwLwYDVQQD
EygyODA2NzA2ZDhjNmVjM2Y3MDRmNDlmOGQzNGVkZDA1MzJjNGM3ZWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4OxIYb1HJS+/KPHfRP+xaEbNMqe
iBL3J/6L3Vs5vYvU3rFoLYJ7w27MJcYL7MpkSsbuPrOhY1wv3d2NEslK8XwPJRWg
c1lQdXJnnysQrVEJdp5pLGJzjAn4nffQjyoOSRWxqYezrnbaMJ9iyYtA73AlII0B
r2irduevwl1wucZGriZRoFjl3YHEsq3LF/mB38rweth4TC+ZhY4teUKvSiXOjY3T
CwHfw9xsRhlIuKQvwuPtuMo/69JcD0tVOo+xJB9rnb3KbtET+Bk74g43JEsjXSb/
6pXBhnjNc5brqS2Ol+ZlMdkz/7GgNefNEajO94BCBnpiRuJepIRA+q1iwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgGcG2MbsP3BPSfjTTt0FMsTH66MB8GA1UdIwQY
MBaAFJ6AcC7mody/OuJXoZlBX1m4M46kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm9Cd0x1YWgzTDg2NGxlaG1VRmZXYmd6anFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xYmRlMzktYjZkNS00NmVjLWE4MTMt
MjZlZjk2NjQzZDg0LzEvbm9Cd0x1YWgzTDg2NGxlaG1VRmZXYmd6anFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8xYmRlMzktYjZkNS00NmVjLWE4MTMtMjZlZjk2NjQzZDg0
LzEvbm9Cd0x1YWgzTDg2NGxlaG1VRmZXYmd6anFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADMX4NwpF
Vkk7tt5i8Mt9WMVBgwhIJ4PJczb/4MmOFNlXhlkGZPEpmZqSa3khqkBGYY7OOIKQ
kyxCmXi1T4nx2gZPzIcaJqY5wnanEZyZ1ne0FlytTOC66eRQYXJNlWFuNm090Qj6
RsJXg8VdisAhj3w7SNGZNaQIfMJv9rRk+NA5om1KEF1tvMR0cmuMJfaIVw4YbYTL
45eoSTkIQZ3yMdZPHkL/K5h5zhQg0muhhkuVz8EB8SnPBRT1LbMvT+fPajwv5tIk
uh7x+ka3nkO3IUoNu2ZpDaQbEGqVe6BeM0PtkT8QlJlM6A75NPxdFxFj4Opaxwa3
P5E3gHTe94qB/A==
-----END CERTIFICATE-----
Generated at Tue May 13 15:55:57 2025 by rpki-client