Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft
File: h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft (raw, json)
Hash identifier: bffoQZCbNnQHX7wvqC0fJMMYYCTqpiREsiH+H7zpvlI=
Subject key identifier: E0:B0:0E:76:A5:D9:18:22:0F:18:C9:37:24:9B:54:04:BD:F9:CE:1F
Authority key identifier: 87:51:75:9B:B9:2C:BA:55:20:53:69:45:ED:1B:3F:A5:AD:15:1B:65
Certificate issuer: /CN=8751759bb92cba5520536945ed1b3fa5ad151b65
Certificate serial: 0196C53AA57E967066099C7730A1B9D4DB10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1F1m7ksulUgU2lF7Rs_pa0VG2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft
Manifest number: 153A
Signing time: Mon 12 May 2025 16:01:17 +0000
Manifest this update: Mon 12 May 2025 16:01:17 +0000
Manifest next update: Tue 13 May 2025 16:01:17 +0000
Files and hashes: 1: E-8vbhQrqOgxDM421GCrllAKNII.roa (hash: i8JO2h6EgpqD2l/z1ws1vhndMFZtWe/14XyRVS+B6/I=)
2: h1F1m7ksulUgU2lF7Rs_pa0VG2U.crl (hash: +AvrOFj+3jA/WUCcvONRoQPsKIIRtehDQt5xKQqwIsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/h1F1m7ksulUgU2lF7Rs_pa0VG2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:a5:7e:96:70:66:09:9c:77:30:a1:b9:d4:db:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8751759bb92cba5520536945ed1b3fa5ad151b65
Validity
Not Before: May 12 16:01:17 2025 GMT
Not After : May 13 16:01:17 2025 GMT
Subject: CN=e0b00e76a5d918220f18c937249b5404bdf9ce1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:49:56:db:59:32:d1:6a:e9:1c:dc:df:72:86:
e6:f7:6f:bc:02:81:d8:f6:8c:4f:24:cd:c5:29:9e:
91:a5:b9:4c:aa:87:20:0c:f4:7c:2d:9a:49:6d:f3:
37:e7:06:fb:6b:32:21:56:7b:75:49:ca:75:7f:72:
70:0e:19:38:7e:4d:03:f6:45:4e:40:f2:5d:30:f6:
79:6d:27:52:c8:72:48:ce:cb:19:16:72:14:96:76:
e0:53:b6:e2:81:bb:44:5d:ff:d5:1c:8e:e7:18:be:
7e:6e:c6:79:2f:84:9a:3d:ff:f8:84:55:d9:1e:39:
83:e3:e8:4a:75:e1:39:9e:81:74:a4:29:7c:5c:db:
1b:b5:78:0d:c1:93:b9:6f:53:8f:6d:91:33:ea:23:
27:1d:66:fb:c3:fc:5f:05:36:cc:18:67:38:88:5f:
3a:5c:22:97:af:1c:7a:c6:27:19:aa:35:f5:1b:e3:
d6:c3:11:7b:6a:11:2b:d0:d5:b0:0b:13:67:7b:54:
d3:83:2d:2c:1f:34:5e:6b:c7:73:71:6d:9a:04:8e:
03:a2:5a:a4:33:ae:a1:60:d1:78:34:0c:73:e2:9d:
ef:72:0a:ec:89:4a:85:53:4e:7c:b0:af:c4:d4:aa:
d1:5e:38:09:9d:c6:35:b5:01:fc:87:ad:66:7a:5c:
90:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B0:0E:76:A5:D9:18:22:0F:18:C9:37:24:9B:54:04:BD:F9:CE:1F
X509v3 Authority Key Identifier:
keyid:87:51:75:9B:B9:2C:BA:55:20:53:69:45:ED:1B:3F:A5:AD:15:1B:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1F1m7ksulUgU2lF7Rs_pa0VG2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:58:ae:54:2b:9c:a6:33:2f:1f:d3:73:56:5c:5f:17:14:38:
d7:13:b2:40:c7:e3:c1:43:d7:b9:14:b4:b2:68:a9:39:49:54:
a2:25:1e:14:fd:79:2d:14:d5:14:4b:fc:e1:27:a8:a8:d1:6a:
6d:13:40:a7:2b:2f:99:2c:a5:7c:75:96:5d:60:13:c7:46:44:
14:97:96:db:77:f7:cf:1d:16:2c:35:93:99:54:e5:0d:fe:41:
86:c7:ea:87:e9:c5:bf:57:01:51:40:72:a5:93:3b:76:8b:d0:
b8:ac:01:16:c3:a3:76:7b:37:65:01:6f:e3:45:2b:a5:79:77:
4c:69:5e:1a:f1:53:e2:8d:e7:b5:23:33:c1:e4:41:95:12:55:
dd:f9:b6:c2:5f:20:c8:05:3e:e7:8f:24:98:8d:36:df:20:07:
c2:f9:44:c4:88:dc:cd:a5:3b:2d:59:61:bb:e3:f1:f9:6a:3a:
3a:e3:e6:78:59:55:05:1d:1d:0b:f1:53:3a:76:2f:21:40:7b:
8f:3c:6a:54:59:fa:f2:bf:4f:5b:f5:67:02:da:25:f7:fe:d6:
7b:4c:3e:66:ac:71:c8:c6:80:60:cd:d1:37:b7:ec:9c:d5:cc:
5f:d2:4b:cb:f4:4a:65:1f:90:87:ca:2c:39:5f:2d:ba:59:a0:
24:ff:bf:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:53:13 2025 by rpki-client