Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
File: u76WEtFEC8bHBOBGXw711spzl6Y.mft (raw, json)
Hash identifier: PO8E6OWmUb81BQgqTXW0dTDWUGocrAfk/OV466J0LHY=
Subject key identifier: 37:D4:2D:27:6B:79:FD:E3:63:A4:A4:33:0E:81:F1:8F:8D:76:9C:D1
Authority key identifier: BB:BE:96:12:D1:44:0B:C6:C7:04:E0:46:5F:0E:F5:D6:CA:73:97:A6
Certificate issuer: /CN=bbbe9612d1440bc6c704e0465f0ef5d6ca7397a6
Certificate serial: 0196CFF4CE5CB715EDA535DE7EBC47AB4ABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
Manifest number: 153D
Signing time: Wed 14 May 2025 18:00:49 +0000
Manifest this update: Wed 14 May 2025 18:00:49 +0000
Manifest next update: Thu 15 May 2025 18:00:49 +0000
Files and hashes: 1: D46VMQb05uTNgl5dbNVDFYzDjzE.roa (hash: V0B6OmfcULHphu50p4sAuyLvveC3GQAGdFvTao1f9Y8=)
2: u76WEtFEC8bHBOBGXw711spzl6Y.crl (hash: x83wYGVj/Us9/u1lQ7Th1rczVym6weuaIs2Tr9h4nDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 17:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:f4:ce:5c:b7:15:ed:a5:35:de:7e:bc:47:ab:4a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbe9612d1440bc6c704e0465f0ef5d6ca7397a6
Validity
Not Before: May 14 18:00:49 2025 GMT
Not After : May 15 18:00:49 2025 GMT
Subject: CN=37d42d276b79fde363a4a4330e81f18f8d769cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1a:a7:71:0e:73:af:3d:6e:29:8d:11:98:d7:
0d:91:3a:4a:40:9e:1a:72:86:61:be:27:88:e6:ee:
72:e6:9f:0c:b7:ee:6a:3a:57:78:bd:f2:b4:85:d4:
0e:a2:bc:b4:83:7d:40:82:72:e3:f3:80:b4:f3:ca:
90:ea:b8:c5:aa:d7:25:d6:da:39:64:ea:08:d6:0b:
bb:96:68:72:00:e3:f5:a7:9a:12:f7:84:95:81:06:
b2:a5:14:48:91:cf:26:d2:3b:72:50:a9:3b:db:77:
94:05:d2:63:fa:e7:80:19:f8:34:d3:44:d7:54:43:
40:49:22:cd:17:ce:5b:28:fa:80:5e:94:92:83:69:
86:3c:01:14:eb:b0:12:f7:09:6e:8c:e7:0d:0c:79:
84:3d:6c:a8:eb:da:aa:ee:fa:05:39:04:6b:ba:73:
80:e0:85:0f:17:1d:f2:9b:06:66:f2:88:e2:b0:b1:
8d:4d:3b:c1:08:52:93:ef:ab:d1:94:af:6b:7c:83:
1f:da:78:87:59:82:5c:3a:78:31:4c:ca:cb:c7:2e:
66:2e:30:09:aa:8d:27:50:b7:4c:51:fa:80:25:a6:
b0:3b:b9:67:9d:c3:86:8b:31:0b:0e:e9:14:da:40:
b4:33:f3:d0:0b:84:27:15:df:92:19:7d:e2:b9:e0:
ef:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D4:2D:27:6B:79:FD:E3:63:A4:A4:33:0E:81:F1:8F:8D:76:9C:D1
X509v3 Authority Key Identifier:
keyid:BB:BE:96:12:D1:44:0B:C6:C7:04:E0:46:5F:0E:F5:D6:CA:73:97:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:44:bc:b6:b9:70:43:52:f7:24:45:3a:10:bd:75:ab:46:23:
a7:0b:4e:0e:93:fd:35:60:10:bc:6f:b0:fb:a5:9d:46:72:13:
21:8f:a6:4d:69:b0:15:fd:06:87:3a:b2:85:f8:c1:bb:ff:ad:
2c:a7:a4:29:ca:fb:30:f4:e3:b5:7f:d4:b4:cd:6b:8a:4d:65:
b6:ab:70:8c:73:ca:f6:c7:4d:11:1f:67:16:6f:fc:c5:28:ca:
74:b5:0a:f2:7b:55:58:d8:3d:58:4e:9a:3c:a5:4b:01:1b:65:
20:51:d6:b1:61:26:b4:c2:5c:bd:bc:09:41:9e:51:30:fc:77:
77:8a:bf:c1:5f:2f:8c:a7:3d:8f:7f:4a:ca:ff:63:06:1a:aa:
aa:16:da:94:66:db:9f:b3:e8:f0:f1:35:ca:eb:47:2c:14:d1:
42:4e:4a:00:56:5a:ff:2f:8f:da:3a:94:29:0a:8c:5c:70:f7:
c5:9e:70:4a:a3:83:c8:e1:26:fc:80:c8:c3:9b:20:66:02:6e:
e8:ed:1b:10:ea:0b:7f:37:e1:a2:b9:da:7a:42:b1:5a:4f:b3:
75:24:45:e7:ea:ce:f1:3d:d8:5d:52:58:4e:31:c9:a7:03:26:
1c:7f:44:cd:24:d1:85:cf:ab:46:92:7e:5d:68:03:7e:60:93:
cb:76:c8:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbP9M5ctxXtpTXefrxHq0q+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiYmU5NjEyZDE0NDBiYzZjNzA0ZTA0NjVmMGVmNWQ2Y2E3
Mzk3YTYwHhcNMjUwNTE0MTgwMDQ5WhcNMjUwNTE1MTgwMDQ5WjAzMTEwLwYDVQQD
EygzN2Q0MmQyNzZiNzlmZGUzNjNhNGE0MzMwZTgxZjE4ZjhkNzY5Y2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxqncQ5zrz1uKY0RmNcNkTpKQJ4a
coZhvieI5u5y5p8Mt+5qOld4vfK0hdQOory0g31AgnLj84C088qQ6rjFqtcl1to5
ZOoI1gu7lmhyAOP1p5oS94SVgQaypRRIkc8m0jtyUKk723eUBdJj+ueAGfg000TX
VENASSLNF85bKPqAXpSSg2mGPAEU67AS9wlujOcNDHmEPWyo69qq7voFOQRrunOA
4IUPFx3ymwZm8ojisLGNTTvBCFKT76vRlK9rfIMf2niHWYJcOngxTMrLxy5mLjAJ
qo0nULdMUfqAJaawO7lnncOGizELDukU2kC0M/PQC4QnFd+SGX3iueDvrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDfULSdref3jY6SkMw6B8Y+NdpzRMB8GA1UdIwQY
MBaAFLu+lhLRRAvGxwTgRl8O9dbKc5emMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTc2V0V0RkVDOGJIQk9CR1h3NzExc3B6bDZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9mMjY0MGEtNDZlNy00NjUwLTgzYzUt
Y2M1NWI4MTMwMmNmLzEvdTc2V0V0RkVDOGJIQk9CR1h3NzExc3B6bDZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9mMjY0MGEtNDZlNy00NjUwLTgzYzUtY2M1NWI4MTMwMmNm
LzEvdTc2V0V0RkVDOGJIQk9CR1h3NzExc3B6bDZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAokS8trlw
Q1L3JEU6EL11q0YjpwtODpP9NWAQvG+w+6WdRnITIY+mTWmwFf0GhzqyhfjBu/+t
LKekKcr7MPTjtX/UtM1rik1ltqtwjHPK9sdNER9nFm/8xSjKdLUK8ntVWNg9WE6a
PKVLARtlIFHWsWEmtMJcvbwJQZ5RMPx3d4q/wV8vjKc9j39Kyv9jBhqqqhbalGbb
n7Po8PE1yutHLBTRQk5KAFZa/y+P2jqUKQqMXHD3xZ5wSqODyOEm/IDIw5sgZgJu
6O0bEOoLfzfhornaekKxWk+zdSRF5+rO8T3YXVJYTjHJpwMmHH9EzSTRhc+rRpJ+
XWgDfmCTy3bIpg==
-----END CERTIFICATE-----
Generated at Thu May 15 02:20:59 2025 by rpki-client