Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
File: v3Oj8hoZREIbTdun7LyDYMyl5vw.mft (raw, json)
Hash identifier: urrNCi//3tibmtOhQ2AWtTuR8/gbBNNiYfZtWNGnS+U=
Subject key identifier: E7:D8:69:C2:C5:CC:2B:FA:F5:D1:FD:E2:21:58:F4:50:F1:AA:27:6D
Authority key identifier: BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
Certificate issuer: /CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Certificate serial: 0196CB73491D488A01DC2D54124389FBB260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
Manifest number: 153B
Signing time: Tue 13 May 2025 21:00:52 +0000
Manifest this update: Tue 13 May 2025 21:00:52 +0000
Manifest next update: Wed 14 May 2025 21:00:52 +0000
Files and hashes: 1: L7Ph7QKSrFzUunM1nWiy0ztRgz0.roa (hash: kyuuS5N2dRPA4EclKijD6r08caPFmvNvp8WyN8E3ZU0=)
2: kIoXSOBJVGL2wOnwc997EpFfJ8w.roa (hash: FN/3cL8sV+zXuaKvwt/Sn0EpauPoBxcB543NJqaVmj4=)
3: v3Oj8hoZREIbTdun7LyDYMyl5vw.crl (hash: Fxax2UO1apwrN+Qs8hesFsuLWLZYKKTbr+nkk2Uq7tI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:73:49:1d:48:8a:01:dc:2d:54:12:43:89:fb:b2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Validity
Not Before: May 13 21:00:52 2025 GMT
Not After : May 14 21:00:52 2025 GMT
Subject: CN=e7d869c2c5cc2bfaf5d1fde22158f450f1aa276d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4e:5c:2a:05:87:1e:ee:1d:fe:68:17:d8:e2:
84:06:68:22:8c:85:e8:cb:38:76:c6:6b:38:ff:25:
8f:c2:bf:12:41:ff:25:ff:af:e5:cd:1e:89:2e:df:
67:52:46:dc:57:e2:ed:a8:f3:a2:2e:0d:2e:45:ed:
ca:c0:1e:1d:3b:d6:20:db:73:4a:fa:0a:75:24:39:
0b:c6:88:48:7a:07:2c:ce:21:9f:a1:73:89:6c:21:
c9:f0:7e:4d:e5:8d:3d:a0:59:b9:da:1d:08:d3:5e:
1d:dd:b5:18:66:96:b8:a6:38:fc:98:fe:8d:94:21:
f0:c1:e9:12:74:54:67:0d:53:06:ee:01:b5:f6:bb:
29:05:db:ca:1c:a6:7a:0a:af:06:48:ce:ed:33:5e:
83:a5:e6:45:2a:e9:6d:77:73:7e:db:8e:a3:7e:ba:
50:27:54:e4:36:09:9f:34:bb:dc:89:f4:ba:73:b1:
6b:d2:aa:bf:a1:da:49:f2:7e:b0:8f:13:5d:d7:94:
ac:03:70:88:72:fd:dd:51:bb:bc:c2:6e:1b:e1:15:
bb:93:40:b6:a6:46:66:50:1f:46:ae:7a:57:de:6a:
56:53:20:81:1b:14:25:ac:b2:a0:db:18:4f:ea:74:
3c:4f:45:8e:25:31:27:9a:d4:80:ee:08:b5:2d:07:
38:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D8:69:C2:C5:CC:2B:FA:F5:D1:FD:E2:21:58:F4:50:F1:AA:27:6D
X509v3 Authority Key Identifier:
keyid:BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f0:1c:d1:17:32:48:61:50:37:5e:53:c8:ad:6a:56:04:cc:
7c:f6:a1:43:0e:fb:79:46:72:f7:88:be:af:2d:45:f7:ca:38:
59:62:9c:6d:1a:89:65:53:eb:47:e7:4e:c4:f4:1d:8e:8f:93:
02:e8:90:cc:83:fe:1f:65:6c:94:1b:ff:23:12:0c:4a:5c:07:
bc:7d:3a:ea:17:da:16:32:f9:cc:f4:43:13:ae:db:c2:2f:d9:
70:4f:8b:c3:76:ab:0d:49:2d:a5:50:3a:36:24:85:b4:fb:ef:
d0:73:d8:5e:38:84:2c:80:15:f7:f4:36:b7:7b:85:d8:b7:59:
a0:f7:37:16:2b:2c:dd:f3:bc:38:b6:71:ad:35:1a:9c:b8:e4:
10:ca:d4:aa:ff:91:33:58:20:3b:6d:88:ca:b1:a2:bf:8b:db:
9c:e5:04:88:9b:58:a6:b2:4a:fd:59:52:59:1e:ce:08:4c:8d:
a6:d0:ac:22:5d:d4:1e:e5:62:aa:12:2b:a0:a7:5f:26:b7:bf:
e8:04:2d:d9:ed:03:0d:a7:26:b8:09:3a:d0:53:76:e0:36:eb:
62:9a:82:8d:19:c0:e6:b6:44:7d:f0:95:31:ff:9c:e4:c3:3e:
12:a8:0d:ae:24:30:4f:79:23:04:d1:88:d0:01:c1:09:73:11:
c1:ce:32:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbLc0kdSIoB3C1UEkOJ+7JgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNzNhM2YyMWExOTQ0NDIxYjRkZGJhN2VjYmM4MzYwY2Nh
NWU2ZmMwHhcNMjUwNTEzMjEwMDUyWhcNMjUwNTE0MjEwMDUyWjAzMTEwLwYDVQQD
EyhlN2Q4NjljMmM1Y2MyYmZhZjVkMWZkZTIyMTU4ZjQ1MGYxYWEyNzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk5cKgWHHu4d/mgX2OKEBmgijIXo
yzh2xms4/yWPwr8SQf8l/6/lzR6JLt9nUkbcV+LtqPOiLg0uRe3KwB4dO9Yg23NK
+gp1JDkLxohIegcsziGfoXOJbCHJ8H5N5Y09oFm52h0I014d3bUYZpa4pjj8mP6N
lCHwwekSdFRnDVMG7gG19rspBdvKHKZ6Cq8GSM7tM16DpeZFKultd3N+246jfrpQ
J1TkNgmfNLvcifS6c7Fr0qq/odpJ8n6wjxNd15SsA3CIcv3dUbu8wm4b4RW7k0C2
pkZmUB9GrnpX3mpWUyCBGxQlrLKg2xhP6nQ8T0WOJTEnmtSA7gi1LQc4sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOfYacLFzCv69dH94iFY9FDxqidtMB8GA1UdIwQY
MBaAFL9zo/IaGURCG03bp+y8g2DMpeb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjNPajhob1pSRUliVGR1bjdMeURZTXlsNXZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS80MDA2ODYtOGM3NS00MmQwLThiZDEt
MDAwNDQ3NTdmZThhLzEvdjNPajhob1pSRUliVGR1bjdMeURZTXlsNXZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS80MDA2ODYtOGM3NS00MmQwLThiZDEtMDAwNDQ3NTdmZThh
LzEvdjNPajhob1pSRUliVGR1bjdMeURZTXlsNXZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAavAc0Rcy
SGFQN15TyK1qVgTMfPahQw77eUZy94i+ry1F98o4WWKcbRqJZVPrR+dOxPQdjo+T
AuiQzIP+H2VslBv/IxIMSlwHvH066hfaFjL5zPRDE67bwi/ZcE+Lw3arDUktpVA6
NiSFtPvv0HPYXjiELIAV9/Q2t3uF2LdZoPc3Fiss3fO8OLZxrTUanLjkEMrUqv+R
M1ggO22IyrGiv4vbnOUEiJtYprJK/VlSWR7OCEyNptCsIl3UHuViqhIroKdfJre/
6AQt2e0DDacmuAk60FN24DbrYpqCjRnA5rZEffCVMf+c5MM+EqgNriQwT3kjBNGI
0AHBCXMRwc4y9g==
-----END CERTIFICATE-----
Generated at Wed May 14 04:52:54 2025 by rpki-client