Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
File: K8hpV3Lw5k87mhYhczzAJQb3RwI.mft (raw, json)
Hash identifier: NeTT9j5die9RlFUzy5gaMcm9naC+US3IIbtWSckTESg=
Subject key identifier: C7:78:C8:1A:D1:02:FE:E9:AD:BA:C8:75:57:64:DC:39:05:34:6F:53
Authority key identifier: 2B:C8:69:57:72:F0:E6:4F:3B:9A:16:21:73:3C:C0:25:06:F7:47:02
Certificate issuer: /CN=2bc8695772f0e64f3b9a1621733cc02506f74702
Certificate serial: 0196A68A9620F21373C2608B60C823AE11AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
Manifest number: 153C
Signing time: Tue 06 May 2025 17:00:22 +0000
Manifest this update: Tue 06 May 2025 17:00:22 +0000
Manifest next update: Wed 07 May 2025 17:00:22 +0000
Files and hashes: 1: 0_EpdViy3Y27mqejc66l1--sjBk.roa (hash: 5pxFxSH3+mNeuLlB3lfUr3Q81qL23oDYt7nqdhFYvqU=)
2: K8hpV3Lw5k87mhYhczzAJQb3RwI.crl (hash: aNck1LEawdQxyCzYBWcp+IR1rhi4DMnwiHVY4Uwq7m8=)
3: LcFyOrobUrG-q36ENaVBWkIxyec.roa (hash: aiGhAwWl1vo/+1mZ5amS0ElRqf0Ru78HcL61kI16D7M=)
4: mJjYnvCF0aJWwcOO87dJLulTej8.roa (hash: cyYF0//qn6HDiGNvk9163fm1e6ldk0sS9GYuhZI3HqU=)
5: oOM7QrbyKmK3sX9tSspvcF4LQYc.roa (hash: FI0q4cfrXLcPzOiQWzP6cR+1RIpvdT5irQXBJq3jipE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:8a:96:20:f2:13:73:c2:60:8b:60:c8:23:ae:11:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc8695772f0e64f3b9a1621733cc02506f74702
Validity
Not Before: May 6 17:00:22 2025 GMT
Not After : May 7 17:00:22 2025 GMT
Subject: CN=c778c81ad102fee9adbac8755764dc3905346f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:99:39:aa:60:d7:f8:14:a1:0e:2c:50:1a:7d:
34:f1:b8:85:2c:32:22:2c:74:8c:fe:a6:3d:c9:9b:
a2:13:df:78:f5:36:40:6f:91:7d:ad:81:9a:1c:3b:
39:13:61:d8:2c:5f:07:98:9e:e6:cf:4c:f4:64:89:
56:78:24:75:27:66:5b:1c:3a:99:ec:c0:f9:6d:33:
0b:b5:ab:e1:c6:71:f7:82:8e:ba:90:95:f3:35:91:
9d:d7:4b:0f:0a:4a:2a:2f:93:44:48:b8:17:31:72:
f4:5e:73:4a:f8:0f:4d:6c:68:31:10:56:0a:58:74:
c8:e4:3d:f5:e8:8c:94:2e:f2:f9:35:6e:b5:4e:b6:
cc:e9:94:bb:63:b3:21:88:ee:4d:f5:79:5f:bc:c3:
fa:a0:6c:25:3b:f4:87:81:f9:be:93:bb:86:ca:70:
97:ee:89:12:7d:b4:92:85:10:59:b4:06:17:1c:c0:
2d:91:ed:c2:02:44:92:c3:00:69:99:f4:ac:da:0c:
d0:ce:49:ad:d4:24:67:e0:e5:87:c3:38:bc:bc:ad:
54:22:36:3e:c1:a8:9f:e1:4c:0e:de:16:4f:24:89:
ed:f4:91:3b:e9:7a:4a:9b:cd:0a:89:cb:8b:98:73:
86:96:11:4a:4e:bd:a0:32:0e:ef:8a:89:67:72:57:
18:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:78:C8:1A:D1:02:FE:E9:AD:BA:C8:75:57:64:DC:39:05:34:6F:53
X509v3 Authority Key Identifier:
keyid:2B:C8:69:57:72:F0:E6:4F:3B:9A:16:21:73:3C:C0:25:06:F7:47:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:68:12:ac:ac:63:26:25:a9:fa:fc:07:2b:33:84:6e:2a:12:
78:07:ae:4c:e6:b2:6f:40:f3:da:0c:2b:78:53:33:c0:74:17:
7e:d5:dc:01:15:95:66:c2:6c:c2:69:09:69:78:46:80:e5:21:
2c:cc:71:ae:e1:ca:e7:7a:50:11:02:46:c6:3e:ab:11:06:fb:
0c:f0:e8:19:78:5a:08:2f:cb:1d:9e:ce:97:ad:aa:3e:88:c0:
ca:4c:b3:ac:5e:a2:e7:e7:94:e5:db:f0:01:99:4e:2a:32:3d:
28:76:dc:c6:4d:e8:10:db:7f:93:f2:8a:65:39:7c:fa:bd:1a:
0e:d3:d6:e6:7b:01:44:78:49:54:2b:19:2e:22:e5:02:f2:cc:
b6:49:1b:39:09:5d:30:61:7b:6b:0a:66:d9:9a:03:64:ae:3d:
7b:d0:89:0d:e0:31:3e:4d:49:13:e7:10:16:fb:58:e1:7a:62:
af:01:37:2b:36:e3:e1:f1:b6:ef:6a:d7:0e:82:d1:42:74:9a:
4b:c2:32:0a:0a:77:a4:56:6d:2b:ee:f0:3c:c3:a8:e3:c4:ef:
40:17:f7:31:bb:18:d2:95:ba:57:03:ce:12:75:76:90:d5:0b:
0e:46:bc:8f:f5:55:05:1a:ed:9c:47:89:93:74:6a:38:8b:ac:
13:80:9d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 23:07:47 2025 by rpki-client