Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
File: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft (raw, json)
Hash identifier: fzecQtRUgYyQ5WfUJbCcoiQ2ESYEnlaz7KHzuJ43mLw=
Subject key identifier: 72:8A:C9:CA:03:0C:CC:70:E0:92:AB:1B:5C:27:A5:27:54:59:A4:D5
Authority key identifier: A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
Certificate issuer: /CN=a57f291818d8719738268d844994a2e10824d4c9
Certificate serial: 0196C7CD029E664E1C2A2BAA49E66F2136AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
Manifest number: 153A
Signing time: Tue 13 May 2025 04:00:23 +0000
Manifest this update: Tue 13 May 2025 04:00:23 +0000
Manifest next update: Wed 14 May 2025 04:00:23 +0000
Files and hashes: 1: 5e1NxuIhpqcGoJaPew5Kl5__8Lc.roa (hash: SNl+Y4M8n9I3K17PdDkj5othPOFaJvzjGzvPP4WmJSg=)
2: 7ybz4qgk4RPqp8xdPC6X_E4gtbM.roa (hash: ogGugsf7sS6PtDmol4WlYpBYEAXHnn37bVsSaSAg3P8=)
3: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl (hash: bs6mFqiYTAeS+RwfDQTwt3hmZdOJTMeymOIGc+Z7AhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:cd:02:9e:66:4e:1c:2a:2b:aa:49:e6:6f:21:36:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57f291818d8719738268d844994a2e10824d4c9
Validity
Not Before: May 13 04:00:23 2025 GMT
Not After : May 14 04:00:23 2025 GMT
Subject: CN=728ac9ca030ccc70e092ab1b5c27a5275459a4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b0:bf:dc:40:48:3c:98:79:8a:4b:9d:be:2e:
ca:ce:3e:b6:dd:16:83:86:bb:cf:fd:2f:37:33:3e:
ab:eb:7a:fb:88:24:3c:a0:cf:73:39:03:b3:5c:27:
b2:87:2f:25:1d:b5:12:98:08:09:d1:13:16:0e:fe:
ba:2a:fc:3e:69:5b:15:e6:12:3b:13:e2:d5:87:7f:
d0:b7:fb:b6:d6:7f:53:86:7d:b6:3f:8d:70:06:55:
0f:aa:30:2a:e4:d5:be:56:e4:1b:ad:62:24:7d:af:
77:8f:ca:39:8d:32:9d:a7:2b:f9:e0:21:a7:a9:4c:
62:14:80:52:7f:b2:a6:19:ba:2a:5d:e9:6e:a9:86:
56:de:84:26:f1:9a:ad:49:7a:69:9b:5e:1c:13:ea:
00:9e:1b:93:0d:04:3d:d5:a0:7f:e2:30:1f:42:ae:
84:e0:fd:69:b5:a6:98:14:98:92:c1:b1:84:c4:74:
68:23:ce:9e:8b:3e:6f:52:a9:df:14:0e:72:7f:b0:
4a:1e:cd:50:44:3a:84:50:7e:c7:ef:ee:4a:df:24:
88:66:20:5f:1a:a5:68:d7:34:eb:0a:0b:31:53:f9:
5b:d6:7c:f0:4f:88:ff:a6:76:c5:c1:1b:c5:91:b7:
78:7e:bb:7f:b9:c9:72:e2:33:ed:ec:74:14:07:5e:
d2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8A:C9:CA:03:0C:CC:70:E0:92:AB:1B:5C:27:A5:27:54:59:A4:D5
X509v3 Authority Key Identifier:
keyid:A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:64:3d:86:56:0d:35:8c:7e:e1:9e:20:df:04:2e:0b:67:66:
96:99:f7:ce:90:29:6d:87:b7:c5:46:c1:eb:13:9a:a8:12:38:
a4:01:4b:fd:af:54:0e:73:44:24:a5:84:75:90:12:43:17:88:
0d:19:43:87:c2:f6:0d:f2:e8:e1:1c:09:ac:28:96:e2:7f:bc:
a6:83:11:6e:02:55:2b:30:30:74:c1:bb:57:39:b4:97:27:d0:
3d:9d:b1:82:91:13:cb:6d:af:88:1d:3b:1f:ec:6e:0a:7f:8d:
23:ab:76:70:85:a1:d8:ea:f5:09:51:04:1e:f7:1e:38:69:97:
2a:0e:1c:35:91:22:48:8d:ec:34:0d:98:d5:18:bb:28:d6:55:
b9:40:71:bc:dc:a7:af:01:a1:58:7f:1e:26:48:ee:d9:66:fb:
d2:66:7e:2c:6f:f1:25:83:56:0a:9d:82:a0:51:9b:1b:6e:6b:
b9:7a:8c:4c:a5:65:79:89:c7:ee:4e:46:57:61:7e:ee:d6:e7:
7b:fb:ab:f9:07:a9:4d:ec:14:ce:02:76:b0:47:0f:39:4c:c1:
59:b6:bd:fa:41:b9:3c:c4:f4:64:37:34:24:c2:66:3e:55:04:
5d:05:50:ed:92:89:49:30:59:c8:6f:d4:c1:d3:82:66:6e:6d:
3c:52:35:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbHzQKeZk4cKiuqSeZvITavMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1N2YyOTE4MThkODcxOTczODI2OGQ4NDQ5OTRhMmUxMDgy
NGQ0YzkwHhcNMjUwNTEzMDQwMDIzWhcNMjUwNTE0MDQwMDIzWjAzMTEwLwYDVQQD
Eyg3MjhhYzljYTAzMGNjYzcwZTA5MmFiMWI1YzI3YTUyNzU0NTlhNGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bC/3EBIPJh5ikudvi7Kzj623RaD
hrvP/S83Mz6r63r7iCQ8oM9zOQOzXCeyhy8lHbUSmAgJ0RMWDv66Kvw+aVsV5hI7
E+LVh3/Qt/u21n9Thn22P41wBlUPqjAq5NW+VuQbrWIkfa93j8o5jTKdpyv54CGn
qUxiFIBSf7KmGboqXeluqYZW3oQm8ZqtSXppm14cE+oAnhuTDQQ91aB/4jAfQq6E
4P1ptaaYFJiSwbGExHRoI86eiz5vUqnfFA5yf7BKHs1QRDqEUH7H7+5K3ySIZiBf
GqVo1zTrCgsxU/lb1nzwT4j/pnbFwRvFkbd4frt/ucly4jPt7HQUB17S4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKKycoDDMxw4JKrG1wnpSdUWaTVMB8GA1UdIwQY
MBaAFKV/KRgY2HGXOCaNhEmUouEIJNTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFg4cEdCalljWmM0Sm8yRVNaU2k0UWdrMU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85NjNhODMtZDJkMS00NjRjLWJkYjAt
YjFhOTc5M2VlMzI0LzEvcFg4cEdCalljWmM0Sm8yRVNaU2k0UWdrMU1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85NjNhODMtZDJkMS00NjRjLWJkYjAtYjFhOTc5M2VlMzI0
LzEvcFg4cEdCalljWmM0Sm8yRVNaU2k0UWdrMU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcGQ9hlYN
NYx+4Z4g3wQuC2dmlpn3zpApbYe3xUbB6xOaqBI4pAFL/a9UDnNEJKWEdZASQxeI
DRlDh8L2DfLo4RwJrCiW4n+8poMRbgJVKzAwdMG7Vzm0lyfQPZ2xgpETy22viB07
H+xuCn+NI6t2cIWh2Or1CVEEHvceOGmXKg4cNZEiSI3sNA2Y1Ri7KNZVuUBxvNyn
rwGhWH8eJkju2Wb70mZ+LG/xJYNWCp2CoFGbG25ruXqMTKVleYnH7k5GV2F+7tbn
e/ur+QepTewUzgJ2sEcPOUzBWba9+kG5PMT0ZDc0JMJmPlUEXQVQ7ZKJSTBZyG/U
wdOCZm5tPFI13g==
-----END CERTIFICATE-----
Generated at Tue May 13 13:28:12 2025 by rpki-client