Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
File: bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft (raw, json)
Hash identifier: Lam80fosrla+0sgr/gV3PrONBqJkFTb3O+dg+Y07tgw=
Subject key identifier: C5:39:6A:31:A3:DE:1B:05:FF:86:E7:2D:39:6F:8C:9C:D2:74:F6:F5
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Certificate issuer: /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial: 0196C0EF72CE5C1EB16454ABE40E939EB409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
Manifest number: 156A
Signing time: Sun 11 May 2025 20:00:40 +0000
Manifest this update: Sun 11 May 2025 20:00:40 +0000
Manifest next update: Mon 12 May 2025 20:00:40 +0000
Files and hashes: 1: 4GFLNoudKsxo0lKJ1-DlrH13jnQ.roa (hash: HUsEZcDE4OcjX3j8qjU3YIB7IUQvhWtNObC5QxLBOjI=)
2: HABzsmEXoTX-9F80tlefBrIojpE.roa (hash: 52kUggTy9NYk2U3Bjz9hs7uyoLjfvw/NlnF/Z95I8C4=)
3: JJI-C-9oBtcYV-r3BsX5tLItXlM.roa (hash: zjcnzqo9avDuhv+fzgrvfrwSKuXtAwZT2xHNcRH+6B8=)
4: QePjCCFm1FINIQleulFli9B8Eok.roa (hash: /guHrTHyVfudxkCaMQP2S3B+Z/m09hjKdZNM8RCBhu8=)
5: RvvULY1y4xBfF8ZuGzWFY0OKEEg.roa (hash: NY71LOvBCM5qGOh91dHK/WKKwDoM07O+dhz3A0gNPUc=)
6: bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl (hash: SJPYlPYQBpdNpRIta3PrAek7O7ShDQ8yOJp4dn8i5u8=)
7: gjLZ8xPb1tsKV2vJR4IOeOvDkLQ.roa (hash: xoIQZnhZzbbmusOiJUznTII6cc6W+LUSKGBLQbZkQx8=)
8: t8J6z3tO2f2jI-WXfX5Z7ghB42Y.roa (hash: CJg1Zg1dR2GxxLuD5y1ebgKx9+kGLch5/dW0dbkm29Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:ef:72:ce:5c:1e:b1:64:54:ab:e4:0e:93:9e:b4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Validity
Not Before: May 11 20:00:40 2025 GMT
Not After : May 12 20:00:40 2025 GMT
Subject: CN=c5396a31a3de1b05ff86e72d396f8c9cd274f6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:26:28:45:42:62:0a:0f:14:e0:ea:e5:67:89:
ae:c4:83:a5:fd:49:10:7b:7e:f3:ef:b0:a8:ed:5a:
37:1a:f4:18:fa:61:35:dc:41:3e:4f:15:40:49:f0:
66:d9:99:0c:fb:96:0e:de:e4:75:26:bf:38:9e:35:
05:5a:48:18:f9:9c:ea:34:f2:3e:66:49:fb:ed:d6:
e7:24:a1:18:32:b2:40:0b:93:0d:31:e8:fb:24:9e:
84:29:41:47:6e:38:e0:e6:bd:02:08:53:11:20:94:
2a:e6:6b:55:13:07:86:5c:61:41:4a:a3:16:d1:46:
ad:d4:18:d4:5a:f2:c8:2d:e3:db:f8:f2:9d:b4:b6:
f3:6f:88:d2:13:fa:72:ac:2a:72:ce:d2:19:41:f7:
5c:dc:4a:41:5b:a3:d1:51:31:4f:99:e4:e8:4c:fa:
a6:62:f1:c9:a9:40:61:49:e2:53:da:a1:d3:a1:cf:
cb:4d:48:b5:3e:b0:4c:93:3d:81:ec:56:84:a2:4b:
5d:f6:39:13:5a:34:fb:c1:11:03:bd:95:78:59:55:
90:8e:1d:0f:53:7a:63:3f:fa:13:78:ff:78:3a:73:
10:ba:bb:bd:6c:64:e6:06:ed:1f:7d:c5:55:19:a1:
cb:3d:de:98:65:2f:08:67:b1:4e:59:ab:fc:ba:2e:
64:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:39:6A:31:A3:DE:1B:05:FF:86:E7:2D:39:6F:8C:9C:D2:74:F6:F5
X509v3 Authority Key Identifier:
keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:37:4e:19:a2:c7:a9:ba:5b:42:8d:50:3c:22:3b:74:db:89:
f3:6f:e0:b8:fa:0c:69:96:83:f2:99:fb:25:24:4b:25:b0:79:
71:52:6d:38:36:99:20:56:c9:19:6b:7d:22:b8:14:1d:85:fa:
89:3f:0f:f8:1a:bf:10:47:9e:e0:d2:7e:df:26:96:71:8e:fb:
ea:36:02:9a:41:b5:b5:eb:66:f9:f1:05:30:f1:88:1c:c5:b2:
91:1c:e8:9d:1c:0b:e1:20:6d:32:98:20:e6:ec:50:b1:61:b9:
c3:4a:8b:4c:e4:7f:d9:c3:3b:cf:71:4e:87:f5:97:87:7a:0b:
36:28:fa:fe:8f:8f:19:4c:83:2c:d6:09:56:35:19:07:fa:45:
d7:a4:a5:8a:56:20:95:3c:b7:97:f7:85:c1:dc:ec:b0:6b:97:
b2:a9:f7:02:d0:ce:8b:be:16:bb:97:81:ec:10:03:2a:a7:df:
e0:77:19:d4:9a:38:c2:43:6e:3f:e0:82:7c:91:ef:6c:5b:b3:
71:c8:06:89:8e:53:95:44:8c:c4:05:b3:74:15:cf:ed:5a:75:
8d:c7:0d:5d:17:c0:97:25:54:e8:dc:ab:fe:67:8a:c9:ed:45:
b6:da:19:07:df:9e:22:71:eb:fd:97:2f:8d:72:1e:a0:99:6f:
7c:a0:58:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:00:48 2025 by rpki-client