Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
File: bz2JqB_CmfOcCS5PbQFzqanPvGU.mft (raw, json)
Hash identifier: aIHDMnVM+tzLI8yNrraBdHKtRGF/bl86s4t3IYpBBKk=
Subject key identifier: 5C:19:8A:C3:9D:07:5E:2E:46:64:37:1C:B8:BA:37:68:4D:A9:CE:C5
Authority key identifier: 6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65
Certificate issuer: /CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65
Certificate serial: 0196C314A03B08198B79ABA23C915914C0C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
Manifest number: 153D
Signing time: Mon 12 May 2025 06:00:30 +0000
Manifest this update: Mon 12 May 2025 06:00:30 +0000
Manifest next update: Tue 13 May 2025 06:00:30 +0000
Files and hashes: 1: _OBCt42Qgl4wI2H058mG4uDYUOw.roa (hash: jWbxYRFs270K2f9wkh6LdpAj2cDPsQg7s0mhGOvBxRQ=)
2: bz2JqB_CmfOcCS5PbQFzqanPvGU.crl (hash: c1wVl+IeZI7+FUKUAeJZq4GV5LAj9+3ZIfvKja5CuUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:14:a0:3b:08:19:8b:79:ab:a2:3c:91:59:14:c0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65
Validity
Not Before: May 12 06:00:30 2025 GMT
Not After : May 13 06:00:30 2025 GMT
Subject: CN=5c198ac39d075e2e4664371cb8ba37684da9cec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:76:e4:0e:35:85:75:07:0a:7f:f7:3b:a8:dd:
f2:b9:21:8b:a3:79:f3:ba:c0:a7:98:2a:ec:ec:9d:
c4:c1:38:39:cf:06:e1:b5:35:36:27:c9:10:c0:99:
27:f2:5f:82:25:81:62:2f:e1:9e:e7:21:18:30:36:
ef:16:6c:5c:f1:37:bf:c1:c2:22:92:64:7b:70:79:
30:c7:fb:5b:be:f9:23:ce:df:4f:38:b7:7f:60:b6:
94:64:4b:34:7d:41:2a:c4:57:47:87:96:7f:30:88:
5f:7d:2d:e5:f4:14:d4:58:78:33:79:ef:17:bd:8b:
47:91:e2:94:d7:1c:19:c0:fe:31:f0:74:e2:00:9f:
2d:b5:38:1e:8e:f8:b6:ba:d3:a4:74:cc:b3:0d:04:
ff:d3:66:19:1c:c4:9b:7c:ee:3a:78:c9:7d:41:95:
d9:f0:95:cd:29:c3:be:ac:74:0d:22:04:4d:44:80:
a4:26:38:10:82:e7:16:b7:a2:0d:fe:1e:8f:af:bb:
85:ff:0e:b5:f2:af:77:4e:d0:67:33:37:7f:b8:9a:
41:c9:c8:a0:2a:f4:d7:20:9c:99:98:1a:7d:c4:66:
9e:03:e3:10:45:8c:46:14:89:8c:81:2d:63:50:aa:
c7:cc:1c:27:3f:87:f7:16:fc:9d:4d:cb:bb:47:f7:
ae:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:19:8A:C3:9D:07:5E:2E:46:64:37:1C:B8:BA:37:68:4D:A9:CE:C5
X509v3 Authority Key Identifier:
keyid:6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:e3:ba:e4:b3:58:46:b6:31:bc:7d:43:cf:fa:a0:5a:81:3a:
23:7e:10:89:e1:9b:0b:58:20:91:8f:45:22:70:d8:e2:56:2f:
b2:93:11:79:79:7c:d1:5b:9a:dd:3b:74:25:61:ec:83:b4:d1:
ff:50:ad:c1:7e:51:9c:13:29:1d:82:b1:f5:62:45:17:e9:2e:
1a:32:dc:19:ac:d4:79:52:44:db:f5:49:83:f8:88:4c:25:4d:
1a:c3:a4:a9:76:88:98:d1:0f:2c:51:30:f4:a8:81:f5:ba:48:
2a:2c:62:fe:b6:b9:97:fd:e1:d5:02:4a:02:da:ff:d8:d0:9e:
43:8e:8f:da:da:cc:2a:b1:71:90:22:7d:46:00:af:91:8c:50:
64:b7:b3:a5:c1:0e:3f:11:7d:43:71:7e:8f:fc:44:16:be:be:
17:6b:e7:a2:05:c2:69:e0:38:7e:c6:ce:ed:ef:da:e0:db:f9:
bb:3e:a7:c4:bb:a8:6b:4d:8c:35:b7:f4:76:c1:4a:d4:a1:a9:
25:ea:6e:aa:5c:8f:17:e2:c5:c8:01:7b:fe:57:75:e6:37:0e:
2b:c3:e2:6a:ab:4b:18:25:7a:4b:22:68:45:1a:e3:bd:21:d0:
08:e1:f2:73:b6:8e:e3:59:02:8e:f9:a1:20:21:40:99:19:6a:
23:d7:e2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:55:59 2025 by rpki-client