Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
File: ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft (raw, json)
Hash identifier: 7PZSwKiUf217tUFy7kSfzeUPFYvX7drxoK+XiKxvuw8=
Subject key identifier: 0B:7A:56:98:08:47:69:73:CB:3F:4E:88:F1:A6:AD:1C:5A:63:71:D2
Authority key identifier: 8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F
Certificate issuer: /CN=8a31f8bea33b0056446e3321eede3a170fbd7c1f
Certificate serial: 0196B0D771AD7035D3264177C6DE922EC162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
Manifest number: 152D
Signing time: Thu 08 May 2025 17:00:31 +0000
Manifest this update: Thu 08 May 2025 17:00:31 +0000
Manifest next update: Fri 09 May 2025 17:00:31 +0000
Files and hashes: 1: SZpd9qPeF2_UcZ0BFTiD1uQx6CE.roa (hash: 4d7c/yFsOUlnwxOih4L4b458874C6mb5/7y63/As6E0=)
2: e6NTQMQbAc2rRpYIgSE0b5QlitQ.roa (hash: AW2JD/AMZP/3NkMYPVumCDsjg07AD98EjBhRoynRE5I=)
3: ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl (hash: YoDFyKsXocxNLQxnrOBaoFdvqlyymVyCe732o9510xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:d7:71:ad:70:35:d3:26:41:77:c6:de:92:2e:c1:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a31f8bea33b0056446e3321eede3a170fbd7c1f
Validity
Not Before: May 8 17:00:31 2025 GMT
Not After : May 9 17:00:31 2025 GMT
Subject: CN=0b7a569808476973cb3f4e88f1a6ad1c5a6371d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:55:65:75:c5:d5:2a:c1:a5:a4:0a:2c:d2:b0:
a9:4f:d9:02:db:9b:a4:a6:26:1b:30:d3:e6:d3:6f:
b6:72:df:27:97:3e:10:44:a9:a6:59:d6:6e:59:be:
66:3a:4f:28:fc:d2:35:ec:3f:7a:e8:dc:46:6f:c5:
73:2c:65:49:95:da:02:e1:83:33:c1:8d:20:8d:a9:
5c:a8:6b:e0:e7:3f:69:e7:f5:ab:e1:15:f9:44:f1:
ee:fe:31:6f:30:21:f5:60:c9:cf:5d:12:13:c4:5d:
5b:33:5b:ed:a1:06:5f:de:1d:2f:67:65:b3:57:08:
f0:0d:5c:ea:3b:72:d2:e4:b1:45:5c:f7:93:9f:67:
02:58:0b:81:06:17:b6:f7:0c:2b:89:48:5b:bb:0f:
ff:16:b6:39:13:dc:4b:71:46:b4:4a:71:30:14:c9:
a6:63:ef:53:f5:a8:bf:07:af:2e:eb:40:cd:64:04:
93:c1:43:6f:4e:84:3b:dc:67:20:0e:09:d0:3d:c7:
8c:7c:f4:40:82:87:b7:e1:42:a8:0a:1b:60:5b:a2:
79:cf:54:22:80:59:fa:95:c0:22:dd:3a:81:51:f3:
a7:46:87:fd:ee:2b:de:90:31:7f:4b:40:56:b8:db:
25:2e:3b:e2:fa:ba:14:df:18:54:73:d1:85:2b:4b:
dc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7A:56:98:08:47:69:73:CB:3F:4E:88:F1:A6:AD:1C:5A:63:71:D2
X509v3 Authority Key Identifier:
keyid:8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ea:b2:96:52:20:0f:8e:3a:8d:87:7d:a8:15:39:03:20:1a:
91:64:47:75:83:ad:ba:c2:de:07:27:0f:e8:4b:20:e9:75:c0:
f6:49:07:95:12:30:2c:e9:af:49:d9:34:c3:36:b9:cc:64:1f:
ca:91:c9:5e:4a:13:20:69:bb:f4:4e:96:8e:6e:ff:43:39:f3:
9b:e8:53:46:ce:e5:20:57:15:ce:48:8c:2c:1d:05:f9:7c:0c:
d7:a5:b8:16:b8:79:56:6a:76:07:91:82:d0:05:9e:2b:2e:8f:
3b:43:a2:54:4d:08:36:ef:ff:9a:d2:bd:8a:47:20:9f:3e:dc:
94:1f:8a:60:47:0e:40:1d:75:c4:f4:8a:0f:e7:7f:f6:18:6d:
36:ef:61:01:c3:23:0b:11:07:f6:3e:3f:7f:cb:61:7b:51:6e:
fb:4f:6c:ba:d9:b4:41:00:a3:e3:ba:96:d0:c2:81:45:21:fc:
b5:d3:7d:c6:73:6e:d5:0d:86:2b:be:a0:b0:3d:2f:e4:b7:3a:
7c:a4:58:b6:eb:e3:5e:a5:0e:30:43:55:39:9e:cf:f5:41:13:
35:44:80:6c:c1:da:5a:1d:db:95:4c:7a:2a:46:33:3e:d0:7f:
3c:38:58:8c:d3:98:5a:cd:67:1b:e1:2e:e9:2e:2d:7c:f1:5e:
57:78:c2:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaw13GtcDXTJkF3xt6SLsFiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMzFmOGJlYTMzYjAwNTY0NDZlMzMyMWVlZGUzYTE3MGZi
ZDdjMWYwHhcNMjUwNTA4MTcwMDMxWhcNMjUwNTA5MTcwMDMxWjAzMTEwLwYDVQQD
EygwYjdhNTY5ODA4NDc2OTczY2IzZjRlODhmMWE2YWQxYzVhNjM3MWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVVldcXVKsGlpAos0rCpT9kC25uk
piYbMNPm02+2ct8nlz4QRKmmWdZuWb5mOk8o/NI17D966NxGb8VzLGVJldoC4YMz
wY0gjalcqGvg5z9p5/Wr4RX5RPHu/jFvMCH1YMnPXRITxF1bM1vtoQZf3h0vZ2Wz
VwjwDVzqO3LS5LFFXPeTn2cCWAuBBhe29wwriUhbuw//FrY5E9xLcUa0SnEwFMmm
Y+9T9ai/B68u60DNZASTwUNvToQ73GcgDgnQPceMfPRAgoe34UKoChtgW6J5z1Qi
gFn6lcAi3TqBUfOnRof97ivekDF/S0BWuNslLjvi+roU3xhUc9GFK0vcsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAt6VpgIR2lzyz9OiPGmrRxaY3HSMB8GA1UdIwQY
MBaAFIox+L6jOwBWRG4zIe7eOhcPvXwfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWpINHZxTTdBRlpFYmpNaDd0NDZGdy05ZkI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC82MGZjMGQtMGViOS00MjRjLWE2MzAt
OWE1YzczYmZmYTIzLzEvaWpINHZxTTdBRlpFYmpNaDd0NDZGdy05ZkI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC82MGZjMGQtMGViOS00MjRjLWE2MzAtOWE1YzczYmZmYTIz
LzEvaWpINHZxTTdBRlpFYmpNaDd0NDZGdy05ZkI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP+qyllIg
D446jYd9qBU5AyAakWRHdYOtusLeBycP6Esg6XXA9kkHlRIwLOmvSdk0wza5zGQf
ypHJXkoTIGm79E6Wjm7/Qznzm+hTRs7lIFcVzkiMLB0F+XwM16W4Frh5Vmp2B5GC
0AWeKy6PO0OiVE0INu//mtK9ikcgnz7clB+KYEcOQB11xPSKD+d/9hhtNu9hAcMj
CxEH9j4/f8the1Fu+09sutm0QQCj47qW0MKBRSH8tdN9xnNu1Q2GK76gsD0v5Lc6
fKRYtuvjXqUOMENVOZ7P9UETNUSAbMHaWh3blUx6KkYzPtB/PDhYjNOYWs1nG+Eu
6S4tfPFeV3jCmA==
-----END CERTIFICATE-----
Generated at Fri May 9 01:38:07 2025 by rpki-client