Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/08b59b-4fd3-4569-9b56-1e0cc5e158fa/1/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.mft
File: lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.mft (raw, json)
Hash identifier: T0gwMOCgMghsKV1oL/04p0FzpB231+xvqu3YsJoBFJQ=
Subject key identifier: D3:BF:9C:FA:E2:6F:35:AF:6F:97:FE:00:75:44:23:99:B1:9B:CB:49
Authority key identifier: 94:3E:82:7F:66:D5:B3:95:5F:E6:D7:3B:A0:F1:5F:BA:AC:8B:51:50
Certificate issuer: /CN=943e827f66d5b3955fe6d73ba0f15fbaac8b5150
Certificate serial: 0196CD2A9524194E51817CCC235FB564B27D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/08b59b-4fd3-4569-9b56-1e0cc5e158fa/1/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.mft
Manifest number: 153C
Signing time: Wed 14 May 2025 05:00:42 +0000
Manifest this update: Wed 14 May 2025 05:00:42 +0000
Manifest next update: Thu 15 May 2025 05:00:42 +0000
Files and hashes: 1: 7gS8nFstYvHiaaGc7IpNtagOuCY.roa (hash: 4SiUHytZpEAnR4OzG8jjEPYSBs2q4THE0R+2ggxYfSc=)
2: lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.crl (hash: LkYDy8aQ4f9XTEp7AT1nRg8AWLERsZ1FD/drAg+STU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/08b59b-4fd3-4569-9b56-1e0cc5e158fa/1/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/08b59b-4fd3-4569-9b56-1e0cc5e158fa/1/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:2a:95:24:19:4e:51:81:7c:cc:23:5f:b5:64:b2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943e827f66d5b3955fe6d73ba0f15fbaac8b5150
Validity
Not Before: May 14 05:00:42 2025 GMT
Not After : May 15 05:00:42 2025 GMT
Subject: CN=d3bf9cfae26f35af6f97fe0075442399b19bcb49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f1:09:d8:5c:67:00:e0:db:9b:b7:2a:e3:aa:
2d:c5:d8:ce:79:bb:fc:11:89:c7:69:e8:ab:93:1f:
73:90:ae:13:e1:a4:9d:d6:f2:3b:9b:7b:72:e2:0f:
e2:aa:ac:d0:01:8d:18:80:5d:e4:bc:fd:5d:50:db:
4f:07:f6:36:d4:a0:d0:a5:ab:c8:dc:2e:48:82:ef:
1a:ae:37:fa:e5:0e:58:2d:7c:7d:89:d9:1b:e4:f1:
ba:ef:63:8c:2a:58:60:95:04:45:9f:58:56:71:85:
6f:26:1f:64:7f:7a:75:38:75:fb:36:c3:79:19:87:
1c:68:c3:fc:e6:73:30:5d:b1:27:03:96:31:d8:37:
26:14:a4:bd:7a:a9:d1:e3:2f:e7:13:b7:2a:6b:de:
8b:b5:83:f5:5f:f1:f8:de:ab:51:9e:3a:9a:7b:8a:
cc:bb:dd:f8:aa:7b:9b:4e:06:d2:0b:5d:26:b8:0e:
0e:98:4e:22:6e:60:b5:6a:ba:35:4d:56:93:48:90:
37:bf:75:ef:51:42:a3:7a:b5:cb:83:35:13:5e:41:
bf:9f:50:9f:5e:94:90:55:a7:e3:55:19:ae:7a:1c:
85:f2:1d:ca:bb:c0:01:7c:90:a0:a8:83:a6:11:90:
20:9d:3e:cf:28:10:e4:64:c8:3e:b3:db:ef:af:48:
c9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BF:9C:FA:E2:6F:35:AF:6F:97:FE:00:75:44:23:99:B1:9B:CB:49
X509v3 Authority Key Identifier:
keyid:94:3E:82:7F:66:D5:B3:95:5F:E6:D7:3B:A0:F1:5F:BA:AC:8B:51:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/08b59b-4fd3-4569-9b56-1e0cc5e158fa/1/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/08b59b-4fd3-4569-9b56-1e0cc5e158fa/1/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:99:41:e5:be:d7:d4:84:34:3b:34:f4:a8:a3:94:49:95:33:
57:d6:8f:d7:2f:10:09:ef:6e:03:b0:03:ae:9e:9f:b9:14:d0:
26:6a:8e:c4:b5:1a:9e:a4:c9:45:b8:85:b1:5c:8c:e0:b9:89:
47:83:ae:52:e1:08:25:82:3e:f8:d9:1e:13:2a:e5:9e:57:3d:
d5:c6:77:65:c0:e0:dc:55:83:5d:66:b4:64:de:7b:6d:38:9c:
e6:66:60:22:24:85:d3:82:ea:31:b5:74:db:f1:c8:41:95:f0:
a5:b6:64:ff:19:c9:d0:13:a9:fc:4e:bf:cb:b3:60:90:da:f0:
84:60:e2:b9:ae:20:53:21:53:e6:0c:e1:ce:f4:ca:33:2e:69:
90:eb:3f:23:83:7d:ec:82:06:5f:96:d1:c5:99:c2:bd:ca:b5:
c9:69:50:1d:91:92:40:0d:eb:c6:e7:af:71:6f:5a:a0:d4:a6:
3d:a0:7e:07:5d:e2:af:33:75:62:cb:d5:c4:49:06:14:41:64:
b8:88:fe:53:15:0b:74:22:e8:c4:ab:de:78:5e:20:ef:0d:96:
15:75:df:f3:fd:43:ae:21:b9:f6:96:e9:9c:c0:3a:a8:cd:98:
0a:d7:19:13:4c:27:71:40:2e:6c:0e:1d:7c:a3:8f:03:f5:a6:
89:48:1d:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbNKpUkGU5RgXzMI1+1ZLJ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0M2U4MjdmNjZkNWIzOTU1ZmU2ZDczYmEwZjE1ZmJhYWM4
YjUxNTAwHhcNMjUwNTE0MDUwMDQyWhcNMjUwNTE1MDUwMDQyWjAzMTEwLwYDVQQD
EyhkM2JmOWNmYWUyNmYzNWFmNmY5N2ZlMDA3NTQ0MjM5OWIxOWJjYjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/EJ2FxnAODbm7cq46otxdjOebv8
EYnHaeirkx9zkK4T4aSd1vI7m3ty4g/iqqzQAY0YgF3kvP1dUNtPB/Y21KDQpavI
3C5Igu8arjf65Q5YLXx9idkb5PG672OMKlhglQRFn1hWcYVvJh9kf3p1OHX7NsN5
GYccaMP85nMwXbEnA5Yx2DcmFKS9eqnR4y/nE7cqa96LtYP1X/H43qtRnjqae4rM
u934qnubTgbSC10muA4OmE4ibmC1aro1TVaTSJA3v3XvUUKjerXLgzUTXkG/n1Cf
XpSQVafjVRmuehyF8h3Ku8ABfJCgqIOmEZAgnT7PKBDkZMg+s9vvr0jJuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNO/nPribzWvb5f+AHVEI5mxm8tJMB8GA1UdIwQY
MBaAFJQ+gn9m1bOVX+bXO6DxX7qsi1FQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEQ2Q2YyYlZzNVZmNXRjN29QRmZ1cXlMVVZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8wOGI1OWItNGZkMy00NTY5LTliNTYt
MWUwY2M1ZTE1OGZhLzEvbEQ2Q2YyYlZzNVZmNXRjN29QRmZ1cXlMVVZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8wOGI1OWItNGZkMy00NTY5LTliNTYtMWUwY2M1ZTE1OGZh
LzEvbEQ2Q2YyYlZzNVZmNXRjN29QRmZ1cXlMVVZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWZlB5b7X
1IQ0OzT0qKOUSZUzV9aP1y8QCe9uA7ADrp6fuRTQJmqOxLUanqTJRbiFsVyM4LmJ
R4OuUuEIJYI++NkeEyrlnlc91cZ3ZcDg3FWDXWa0ZN57bTic5mZgIiSF04LqMbV0
2/HIQZXwpbZk/xnJ0BOp/E6/y7NgkNrwhGDiua4gUyFT5gzhzvTKMy5pkOs/I4N9
7IIGX5bRxZnCvcq1yWlQHZGSQA3rxuevcW9aoNSmPaB+B13irzN1YsvVxEkGFEFk
uIj+UxULdCLoxKveeF4g7w2WFXXf8/1DriG59pbpnMA6qM2YCtcZE0wncUAubA4d
fKOPA/WmiUgdug==
-----END CERTIFICATE-----
Generated at Wed May 14 12:16:18 2025 by rpki-client