Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
File: l79b5z8YIydEmN9So3U10T2lvmI.mft (raw, json)
Hash identifier: IMQLdPiaXXBC0sesxlI0eRV+PzDYrR3jvHABAJsSnKE=
Subject key identifier: 75:8C:8D:0A:A9:18:01:A0:82:85:62:30:12:41:20:8F:6A:83:74:97
Authority key identifier: 97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62
Certificate issuer: /CN=97bf5be73f1823274498df52a37535d13da5be62
Certificate serial: 0196B28EFBBAE5EF8A0C7710BCB274061154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
Manifest number: 152F
Signing time: Fri 09 May 2025 01:00:36 +0000
Manifest this update: Fri 09 May 2025 01:00:36 +0000
Manifest next update: Sat 10 May 2025 01:00:36 +0000
Files and hashes: 1: HWzBieo8pIQmRXoRuWfRIehTEwE.roa (hash: JynDcSW3QZoBehAT3uFmeO42DtekqQpNN7+NxcQtvOQ=)
2: l79b5z8YIydEmN9So3U10T2lvmI.crl (hash: luWDWEmY1WYPS8l5tLgHJlhmgekCtrZzbLENR8tolU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:8e:fb:ba:e5:ef:8a:0c:77:10:bc:b2:74:06:11:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bf5be73f1823274498df52a37535d13da5be62
Validity
Not Before: May 9 01:00:36 2025 GMT
Not After : May 10 01:00:36 2025 GMT
Subject: CN=758c8d0aa91801a0828562301241208f6a837497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0e:56:dc:94:12:6a:5f:03:cb:cd:bb:0e:b0:
88:c4:10:52:b7:25:c8:a5:c0:eb:49:28:56:bc:9e:
e3:6d:3f:ae:8c:43:98:99:9a:61:c1:ef:0b:6b:25:
fb:b8:2f:d7:ad:5f:90:9f:f5:26:12:ea:d5:e5:94:
38:43:8a:54:72:e0:93:90:70:ad:74:09:06:e3:e3:
45:48:7a:b6:35:9d:4f:49:44:51:b7:d6:51:d6:bc:
61:6e:65:f2:76:6d:05:74:6d:a1:41:21:af:55:2d:
bc:68:df:fb:68:09:cf:85:ed:65:89:4d:ed:35:71:
2c:35:e1:c1:ef:d3:bf:3e:84:d4:bb:98:5a:15:d2:
94:54:e1:1a:a2:4b:f8:db:5b:97:80:07:ca:ab:1f:
0c:90:fe:d1:0b:2d:47:f5:b1:92:2c:7c:18:63:3a:
b4:9e:42:ea:4e:e1:b2:40:cc:a6:36:df:90:39:65:
62:c5:b5:c5:62:32:a4:43:69:9a:05:e1:18:0e:98:
b8:8a:d0:08:bd:fb:82:0e:92:62:43:bc:8f:ce:32:
03:f2:93:be:0f:f3:39:a0:c2:38:00:de:78:c6:24:
b9:3c:a1:f6:7f:be:55:94:fe:81:5f:d8:5d:25:99:
d8:4d:b9:0f:fc:e9:57:eb:f5:82:3c:41:71:d2:18:
37:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:8C:8D:0A:A9:18:01:A0:82:85:62:30:12:41:20:8F:6A:83:74:97
X509v3 Authority Key Identifier:
keyid:97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:04:85:04:05:62:7c:fd:3a:8d:14:e1:b3:d8:43:d6:60:17:
e4:37:04:d8:a2:7a:45:46:0a:01:fc:a0:7d:c1:42:d7:0a:86:
59:53:fb:3f:54:2d:3e:3c:9b:9e:fb:2b:41:f6:a3:1e:2e:9d:
f6:99:a5:2f:42:b9:d8:f8:f4:8d:c1:e6:7f:63:db:0c:67:1e:
01:bb:d0:db:de:75:e8:d0:0f:05:f0:18:62:b1:7b:f4:53:25:
ae:62:c8:70:e2:50:f7:c6:4f:5b:a7:7c:46:4d:91:42:22:ae:
b8:28:7b:eb:c2:e2:54:b5:ef:40:9b:90:32:f9:de:1f:35:62:
20:a4:c7:a6:10:43:61:31:3f:66:f8:20:23:8a:dc:63:12:cf:
06:39:a9:0e:10:e9:cb:e0:aa:93:9b:f5:a5:a0:a3:ca:ad:f9:
ee:24:cb:62:a5:e0:09:24:ef:27:47:ad:9b:72:d5:ad:e5:fe:
84:17:18:b7:5f:7b:14:78:08:80:80:f5:09:78:ef:12:c9:f4:
20:02:78:fe:20:a1:f0:ca:26:1e:d7:9a:95:32:ac:60:2a:8e:
f4:b7:f1:b9:aa:62:b6:44:1c:8f:73:43:14:6b:52:29:6f:b5:
4e:3d:f9:35:d6:77:8f:6e:2b:9b:19:be:04:94:44:99:38:de:
bb:a9:2e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 05:13:37 2025 by rpki-client