Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
File: eA3hbu6UewqMdXFPxdpqAlnKG5A.mft (raw, json)
Hash identifier: 6i28CjJ1hLdKwoa9lKeNRSBwSDnFeLVsDVAs9CmaNus=
Subject key identifier: 8C:73:76:23:CB:9D:3F:3E:51:95:97:BA:97:C9:E0:FE:66:3C:4A:6D
Authority key identifier: 78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
Certificate issuer: /CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Certificate serial: 0196CF18A5D7C83D19321DDFD66D69BECE4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
Manifest number: 153F
Signing time: Wed 14 May 2025 14:00:21 +0000
Manifest this update: Wed 14 May 2025 14:00:21 +0000
Manifest next update: Thu 15 May 2025 14:00:21 +0000
Files and hashes: 1: KV3y67WzUL1dd636tV-tGwBKS6Y.roa (hash: BJK7UzSsG4bIRgy/oUjNbXPmO5iJK9tZClLQ8IpL8JQ=)
2: X9Fijkz-_wqcxXki_ZgW942-ey4.roa (hash: 6GLvc6dX34tOpcs0+RseJCW6ZD873+Ny/2OET9fAl0I=)
3: eA3hbu6UewqMdXFPxdpqAlnKG5A.crl (hash: hW5ioWVwDmFRqe2p3ghrCakp1xTO41wGbSFkstJZNNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:18:a5:d7:c8:3d:19:32:1d:df:d6:6d:69:be:ce:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Validity
Not Before: May 14 14:00:21 2025 GMT
Not After : May 15 14:00:21 2025 GMT
Subject: CN=8c737623cb9d3f3e519597ba97c9e0fe663c4a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:43:58:61:f3:3e:e5:47:ba:c3:ec:18:2d:1b:
e1:3d:85:80:5d:f4:15:02:4e:a0:a2:63:b9:bc:e7:
0d:16:0a:8d:35:03:10:87:b7:50:e1:bf:71:b9:b1:
56:d1:02:c9:13:6d:47:5e:27:ea:9b:2b:8c:0c:bb:
5e:a9:11:72:ae:56:67:46:07:d0:6b:2c:aa:76:c8:
8b:28:5b:1b:79:7f:c2:8a:20:e8:a3:59:ce:3c:fe:
98:bb:d7:6d:e5:c8:3e:03:bb:87:e0:ed:03:f1:f3:
7a:bd:41:12:a6:df:0a:ab:af:88:0f:a2:e6:27:e2:
d5:72:75:b2:00:1c:c0:c2:92:f5:6c:4c:82:e4:25:
ef:68:08:a8:9a:92:98:0b:5b:4e:aa:80:80:43:23:
1b:c4:7c:27:54:cb:5f:ef:e9:85:c3:47:6f:f4:20:
24:00:36:b3:a1:7c:f8:4c:6a:5d:00:b8:01:b8:2a:
9c:af:53:6c:4c:e2:a1:a6:e4:37:fe:7c:66:14:b5:
3f:4f:65:f2:62:13:9c:10:ca:0b:22:bf:c8:f9:b3:
61:93:04:19:04:06:7c:2a:51:3c:68:e2:67:3b:c4:
72:4b:84:09:8c:27:f4:0f:4c:ac:e0:5f:9a:24:01:
e6:4f:f4:21:28:04:a2:bc:11:70:7b:d1:10:69:cf:
77:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:73:76:23:CB:9D:3F:3E:51:95:97:BA:97:C9:E0:FE:66:3C:4A:6D
X509v3 Authority Key Identifier:
keyid:78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:5d:d3:64:66:11:9a:77:28:9c:7d:dd:a0:aa:f2:45:e7:6c:
ba:18:4a:e1:bd:31:df:ea:1f:24:95:98:f1:14:47:01:4e:3b:
72:fa:f7:98:90:eb:41:dc:9e:68:7f:9e:ce:f1:92:5f:5c:87:
56:ea:7d:9d:b2:91:6f:5e:30:b1:31:79:a3:b0:2e:f8:00:cc:
99:a0:39:e5:92:0d:9f:fe:91:41:cd:a5:b0:62:10:87:ea:1c:
6a:48:cc:69:97:f7:38:c4:41:fd:cf:85:74:99:5c:65:0e:fd:
39:34:09:34:9d:f6:9e:76:94:ce:d2:ff:94:07:27:e4:a2:0b:
42:f4:76:50:3f:32:8c:f3:af:8d:a2:8f:aa:5e:e5:ae:48:24:
5a:26:cf:55:31:b5:15:d1:25:9f:a4:b0:d8:26:db:41:a0:0b:
74:e4:5c:db:4d:65:33:56:b5:b1:dc:b5:45:49:35:b8:ac:cd:
a0:b1:59:90:fb:21:cd:99:e5:cf:86:9e:be:72:f0:6f:38:97:
75:4a:8e:3c:3b:18:d1:d1:cd:1c:79:2d:71:4b:7b:4a:53:ed:
1c:de:46:2a:81:cb:b5:82:f1:9e:b3:d5:85:9a:0e:4d:cf:7d:
75:4c:13:6e:ce:4c:51:60:be:a4:33:0a:52:79:98:49:86:5f:
d8:84:2b:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbPGKXXyD0ZMh3f1m1pvs5NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4MGRlMTZlZWU5NDdiMGE4Yzc1NzE0ZmM1ZGE2YTAyNTlj
YTFiOTAwHhcNMjUwNTE0MTQwMDIxWhcNMjUwNTE1MTQwMDIxWjAzMTEwLwYDVQQD
Eyg4YzczNzYyM2NiOWQzZjNlNTE5NTk3YmE5N2M5ZTBmZTY2M2M0YTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ENYYfM+5Ue6w+wYLRvhPYWAXfQV
Ak6gomO5vOcNFgqNNQMQh7dQ4b9xubFW0QLJE21HXifqmyuMDLteqRFyrlZnRgfQ
ayyqdsiLKFsbeX/CiiDoo1nOPP6Yu9dt5cg+A7uH4O0D8fN6vUESpt8Kq6+ID6Lm
J+LVcnWyABzAwpL1bEyC5CXvaAiompKYC1tOqoCAQyMbxHwnVMtf7+mFw0dv9CAk
ADazoXz4TGpdALgBuCqcr1NsTOKhpuQ3/nxmFLU/T2XyYhOcEMoLIr/I+bNhkwQZ
BAZ8KlE8aOJnO8RyS4QJjCf0D0ys4F+aJAHmT/QhKASivBFwe9EQac93BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxzdiPLnT8+UZWXupfJ4P5mPEptMB8GA1UdIwQY
MBaAFHgN4W7ulHsKjHVxT8XaagJZyhuQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUEzaGJ1NlVld3FNZFhGUHhkcHFBbG5LRzVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8xMDcxOTUtY2M1MS00NzFiLThkYTIt
ZTAwNTU0M2YwMzc0LzEvZUEzaGJ1NlVld3FNZFhGUHhkcHFBbG5LRzVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8xMDcxOTUtY2M1MS00NzFiLThkYTItZTAwNTU0M2YwMzc0
LzEvZUEzaGJ1NlVld3FNZFhGUHhkcHFBbG5LRzVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5F3TZGYR
mnconH3doKryRedsuhhK4b0x3+ofJJWY8RRHAU47cvr3mJDrQdyeaH+ezvGSX1yH
Vup9nbKRb14wsTF5o7Au+ADMmaA55ZINn/6RQc2lsGIQh+ocakjMaZf3OMRB/c+F
dJlcZQ79OTQJNJ32nnaUztL/lAcn5KILQvR2UD8yjPOvjaKPql7lrkgkWibPVTG1
FdEln6Sw2CbbQaALdORc201lM1a1sdy1RUk1uKzNoLFZkPshzZnlz4aevnLwbziX
dUqOPDsY0dHNHHktcUt7SlPtHN5GKoHLtYLxnrPVhZoOTc99dUwTbs5MUWC+pDMK
UnmYSYZf2IQr+w==
-----END CERTIFICATE-----
Generated at Wed May 14 23:15:53 2025 by rpki-client