Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
File: fbrLH8LCBjBCeBYxtRfOR1Izor0.mft (raw, json)
Hash identifier: wwC3R9KqLZiI1KuSoYJmdVcjav/Qzd3SfxYjUS6yW3A=
Subject key identifier: 9B:9D:A1:D0:58:11:1C:57:F7:CC:C5:64:1A:20:FF:E0:12:24:41:5A
Authority key identifier: 7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD
Certificate issuer: /CN=7dbacb1fc2c2063042781631b517ce475233a2bd
Certificate serial: 0196A6F85AC8D779166F1FFA19A88673B614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
Manifest number: 152E
Signing time: Tue 06 May 2025 19:00:16 +0000
Manifest this update: Tue 06 May 2025 19:00:16 +0000
Manifest next update: Wed 07 May 2025 19:00:16 +0000
Files and hashes: 1: M9qNJvC_kcwpwY04nD9scW455qU.roa (hash: 3RMJRIwbxzvUUPiZWVxoeQuqeF3pwso/hbH6wuXsN8I=)
2: fbrLH8LCBjBCeBYxtRfOR1Izor0.crl (hash: XSnEOK7PselqehdCXIxhvpgdwC3/3v3oI62w4wVcJfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 19:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:f8:5a:c8:d7:79:16:6f:1f:fa:19:a8:86:73:b6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dbacb1fc2c2063042781631b517ce475233a2bd
Validity
Not Before: May 6 19:00:16 2025 GMT
Not After : May 7 19:00:16 2025 GMT
Subject: CN=9b9da1d058111c57f7ccc5641a20ffe01224415a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:48:63:e6:0e:f0:55:05:e7:06:1f:c3:cc:9d:
eb:fc:b0:b3:73:4d:f1:3f:19:ae:45:5b:0a:7a:16:
28:db:53:41:28:45:23:f4:7b:8b:2e:70:b5:78:40:
1d:a9:bb:fe:cc:03:86:9a:10:da:d3:1b:b9:54:8e:
77:61:c6:fd:9f:82:f5:7e:61:ad:ef:15:3f:d5:f9:
e3:e5:db:d7:4f:2c:69:cb:6f:27:58:6d:fe:be:50:
ae:77:5a:bc:f2:40:13:9d:42:7d:62:e6:bf:74:80:
c4:39:49:c2:2a:57:a3:7e:df:df:37:e8:c2:08:be:
37:6f:bf:d8:7d:3c:9e:b8:7a:dc:4c:3d:c9:d1:cf:
44:b9:26:16:44:c4:26:aa:cd:dc:bb:8c:ed:5b:e0:
84:21:30:71:d2:36:ee:17:87:97:d8:76:b6:a0:6b:
73:82:e7:e6:4e:c5:da:dd:5f:ab:0a:d7:96:29:28:
1d:06:53:b4:be:ff:3b:fc:f5:a8:a4:48:14:5b:fc:
a9:26:7f:f8:54:8e:31:92:7d:62:94:b8:74:ed:d4:
bd:0d:82:8d:83:11:33:a0:fc:42:6b:33:13:bc:c2:
aa:c9:21:28:22:01:c3:e0:f9:c2:a2:9f:02:30:7b:
14:e5:31:b3:14:c6:ab:6d:79:94:cf:d4:b4:df:19:
67:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9D:A1:D0:58:11:1C:57:F7:CC:C5:64:1A:20:FF:E0:12:24:41:5A
X509v3 Authority Key Identifier:
keyid:7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e7:53:f5:ce:e3:65:b2:c5:89:64:e4:72:55:1e:75:a7:09:
72:ef:a8:d5:1f:27:0f:f4:16:dc:87:26:b8:06:0c:c8:ae:f8:
61:0c:51:71:8a:d3:3e:e1:b9:38:99:32:8e:f8:1a:d5:2f:b4:
b6:55:7f:25:16:f3:08:2d:17:01:bb:fc:ac:36:82:3b:eb:57:
be:db:bf:1f:92:b8:79:b3:37:2e:c7:3e:f9:d0:03:f1:d2:1f:
43:ed:16:dc:16:08:6a:dc:23:fb:7c:6c:b4:ca:b3:69:a5:a1:
1e:14:8b:a8:c7:97:bc:f5:28:41:94:10:1d:0c:5d:d0:62:8c:
9b:9c:28:a8:de:fd:05:5b:30:26:c6:a0:c6:f2:de:66:ea:6d:
40:fb:e0:6f:28:fe:ca:fd:54:3c:76:66:78:ea:f9:06:06:e3:
af:b9:04:39:cd:d9:42:04:35:ba:7c:50:08:c2:11:19:66:8c:
ea:9c:3a:68:57:ba:7a:e4:ea:ed:ec:82:74:1f:77:36:98:7d:
46:b8:6d:de:12:38:ec:b8:d1:9a:97:39:19:b0:58:76:00:43:
3e:61:0c:28:71:d6:89:5f:60:22:fd:9d:90:5f:64:d9:e2:22:
85:75:a6:ea:14:33:4a:45:a6:70:a3:ac:11:bd:02:72:7e:de:
dc:2e:c4:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZam+FrI13kWbx/6GaiGc7YUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYmFjYjFmYzJjMjA2MzA0Mjc4MTYzMWI1MTdjZTQ3NTIz
M2EyYmQwHhcNMjUwNTA2MTkwMDE2WhcNMjUwNTA3MTkwMDE2WjAzMTEwLwYDVQQD
Eyg5YjlkYTFkMDU4MTExYzU3ZjdjY2M1NjQxYTIwZmZlMDEyMjQ0MTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUhj5g7wVQXnBh/DzJ3r/LCzc03x
PxmuRVsKehYo21NBKEUj9HuLLnC1eEAdqbv+zAOGmhDa0xu5VI53Ycb9n4L1fmGt
7xU/1fnj5dvXTyxpy28nWG3+vlCud1q88kATnUJ9Yua/dIDEOUnCKlejft/fN+jC
CL43b7/YfTyeuHrcTD3J0c9EuSYWRMQmqs3cu4ztW+CEITBx0jbuF4eX2Ha2oGtz
gufmTsXa3V+rCteWKSgdBlO0vv87/PWopEgUW/ypJn/4VI4xkn1ilLh07dS9DYKN
gxEzoPxCazMTvMKqySEoIgHD4PnCop8CMHsU5TGzFMarbXmUz9S03xlnMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJudodBYERxX98zFZBog/+ASJEFaMB8GA1UdIwQY
MBaAFH26yx/CwgYwQngWMbUXzkdSM6K9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmJyTEg4TENCakJDZUJZeHRSZk9SMUl6b3IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zZDJkN2ItMmM1Yy00OThmLTg1YmYt
Mjg1ZWM4ZmU4ZWM2LzEvZmJyTEg4TENCakJDZUJZeHRSZk9SMUl6b3IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zZDJkN2ItMmM1Yy00OThmLTg1YmYtMjg1ZWM4ZmU4ZWM2
LzEvZmJyTEg4TENCakJDZUJZeHRSZk9SMUl6b3IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+dT9c7j
ZbLFiWTkclUedacJcu+o1R8nD/QW3IcmuAYMyK74YQxRcYrTPuG5OJkyjvga1S+0
tlV/JRbzCC0XAbv8rDaCO+tXvtu/H5K4ebM3Lsc++dAD8dIfQ+0W3BYIatwj+3xs
tMqzaaWhHhSLqMeXvPUoQZQQHQxd0GKMm5woqN79BVswJsagxvLeZuptQPvgbyj+
yv1UPHZmeOr5Bgbjr7kEOc3ZQgQ1unxQCMIRGWaM6pw6aFe6euTq7eyCdB93Nph9
Rrht3hI47LjRmpc5GbBYdgBDPmEMKHHWiV9gIv2dkF9k2eIihXWm6hQzSkWmcKOs
Eb0Ccn7e3C7EmQ==
-----END CERTIFICATE-----
Generated at Wed May 7 04:32:46 2025 by rpki-client