Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
File: 156keuFhy7Pa75d4lzDXDEy6idA.mft (raw, json)
Hash identifier: znmTTcSv0/P1ux0c/ZGcKm/xyoScpJXzglbeujMNFP8=
Subject key identifier: 72:BC:E4:43:4B:84:85:EE:84:3E:C4:94:A1:95:4B:18:6A:6D:03:26
Authority key identifier: D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
Certificate issuer: /CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Certificate serial: 0197B7EAAE5CB4F306E554B55A6B9C5FE81A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
Manifest number: 0C5D
Signing time: Sat 28 Jun 2025 19:01:39 +0000
Manifest this update: Sat 28 Jun 2025 19:01:39 +0000
Manifest next update: Sun 29 Jun 2025 19:01:39 +0000
Files and hashes: 1: 156keuFhy7Pa75d4lzDXDEy6idA.crl (hash: mjHHzppBZHjfB8L9Z4WTpDpOTSaHzidIfcJMcuYrX4g=)
2: BYLPzOMe1DxWdpXNE62DtzO9Fb0.roa (hash: SqdsHTomHrhRooCsvxMkFhbSdd3KRws8NQEmMcUSL9s=)
3: L0_IW031V8glRQi2qCV5oPEf9Ro.roa (hash: AA7xAguXYqxswXW6tTMsC/xh3FPMqVeiLIYHUXm73pU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:ae:5c:b4:f3:06:e5:54:b5:5a:6b:9c:5f:e8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Validity
Not Before: Jun 28 19:01:39 2025 GMT
Not After : Jun 29 19:01:39 2025 GMT
Subject: CN=72bce4434b8485ee843ec494a1954b186a6d0326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7a:21:ba:fe:21:df:22:16:10:55:82:12:e9:
49:07:ff:b1:90:d9:47:e5:9c:22:04:f8:3a:fc:a5:
d0:2b:f5:74:23:f1:2e:9c:e0:9a:5e:25:44:f9:af:
23:9f:ae:a7:ec:28:69:5d:36:cf:2f:9a:7d:3c:12:
2a:63:e4:ba:96:bb:21:74:bf:97:aa:48:c9:89:3f:
7d:32:a2:32:bc:fb:ae:f2:10:84:20:b4:df:d6:68:
d2:0d:1d:4e:13:a1:8f:62:ae:43:e3:b6:d8:1e:30:
83:21:f7:e8:34:c7:46:37:0f:c0:b0:03:ad:76:c1:
0f:6c:7e:20:d0:47:5b:c6:b6:1b:5a:c2:04:ef:7b:
6c:65:90:45:8e:19:af:e3:dd:6a:60:e9:4c:10:8b:
cd:e6:98:2f:ec:16:f8:bb:25:95:c0:d2:b7:f6:12:
91:8a:9e:ca:61:63:71:d1:a1:2c:17:af:d2:a4:66:
68:e3:cb:39:23:99:3c:78:84:84:a4:64:47:37:c5:
3f:46:62:4f:b6:9e:51:be:48:5c:ca:22:b3:79:e3:
53:27:13:67:a2:65:54:d6:76:f6:37:39:9d:10:d7:
a9:fa:7e:80:02:4d:62:9f:22:05:76:33:d5:85:94:
b0:0e:ab:b5:3c:96:20:a4:d4:a0:6c:d0:be:30:25:
62:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BC:E4:43:4B:84:85:EE:84:3E:C4:94:A1:95:4B:18:6A:6D:03:26
X509v3 Authority Key Identifier:
keyid:D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e6:9e:8b:59:6b:e2:5f:6e:f2:78:ce:ce:f2:69:35:26:34:
c8:b4:96:15:ef:96:f6:0f:57:70:44:08:00:5f:50:87:5e:1a:
58:76:da:15:cf:c8:5b:14:01:92:9e:ca:09:ab:16:8c:04:4b:
75:63:c4:f9:2e:05:75:6c:be:29:40:5d:a7:fd:41:ce:c3:15:
04:b0:96:7c:05:3c:88:66:80:26:ee:bc:e4:82:37:5c:66:ac:
47:91:1c:27:c0:ff:62:83:aa:54:7a:f8:38:c3:1a:71:89:7e:
0f:e5:5b:bb:4d:0d:e1:16:38:81:df:77:2e:c8:14:ca:82:12:
a6:b8:43:5f:e9:80:e5:d2:5b:e0:82:d5:e8:ec:7e:84:c6:02:
a6:7f:ef:99:ba:92:ba:a3:73:78:8f:30:18:56:61:84:a2:cc:
36:9f:83:91:d9:64:e5:db:95:2c:f2:23:68:e8:54:3c:d4:6c:
46:fb:d0:dd:20:f7:91:cc:5c:f8:5c:78:af:d9:ec:2b:41:87:
6e:14:d9:3d:a4:a3:f5:e7:d3:44:45:27:c0:07:6e:9a:26:d2:
bd:b6:6c:02:76:6a:c7:60:9a:5f:11:56:2a:c4:13:be:16:bc:
6d:36:8d:17:0d:47:37:48:24:7c:4e:2b:e6:86:55:51:47:ac:
f1:72:97:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36q5ctPMG5VS1WmucX+gaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OWVhNDdhZTE2MWNiYjNkYWVmOTc3ODk3MzBkNzBjNGNi
YTg5ZDAwHhcNMjUwNjI4MTkwMTM5WhcNMjUwNjI5MTkwMTM5WjAzMTEwLwYDVQQD
Eyg3MmJjZTQ0MzRiODQ4NWVlODQzZWM0OTRhMTk1NGIxODZhNmQwMzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3ohuv4h3yIWEFWCEulJB/+xkNlH
5ZwiBPg6/KXQK/V0I/EunOCaXiVE+a8jn66n7ChpXTbPL5p9PBIqY+S6lrshdL+X
qkjJiT99MqIyvPuu8hCEILTf1mjSDR1OE6GPYq5D47bYHjCDIffoNMdGNw/AsAOt
dsEPbH4g0EdbxrYbWsIE73tsZZBFjhmv491qYOlMEIvN5pgv7Bb4uyWVwNK39hKR
ip7KYWNx0aEsF6/SpGZo48s5I5k8eISEpGRHN8U/RmJPtp5RvkhcyiKzeeNTJxNn
omVU1nb2NzmdENep+n6AAk1inyIFdjPVhZSwDqu1PJYgpNSgbNC+MCViWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHK85ENLhIXuhD7ElKGVSxhqbQMmMB8GA1UdIwQY
MBaAFNeepHrhYcuz2u+XeJcw1wxMuonQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTU2a2V1Rmh5N1BhNzVkNGx6RFhERXk2aWRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9kOWNiNDEtMWMzYi00NmFiLWE5OTMt
M2MzZTUwZGRhNmNjLzEvMTU2a2V1Rmh5N1BhNzVkNGx6RFhERXk2aWRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9kOWNiNDEtMWMzYi00NmFiLWE5OTMtM2MzZTUwZGRhNmNj
LzEvMTU2a2V1Rmh5N1BhNzVkNGx6RFhERXk2aWRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANeaei1lr
4l9u8njOzvJpNSY0yLSWFe+W9g9XcEQIAF9Qh14aWHbaFc/IWxQBkp7KCasWjARL
dWPE+S4FdWy+KUBdp/1BzsMVBLCWfAU8iGaAJu685II3XGasR5EcJ8D/YoOqVHr4
OMMacYl+D+Vbu00N4RY4gd93LsgUyoISprhDX+mA5dJb4ILV6Ox+hMYCpn/vmbqS
uqNzeI8wGFZhhKLMNp+Dkdlk5duVLPIjaOhUPNRsRvvQ3SD3kcxc+Fx4r9nsK0GH
bhTZPaSj9efTREUnwAdumibSvbZsAnZqx2CaXxFWKsQTvha8bTaNFw1HN0gkfE4r
5oZVUUes8XKXhQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:36 2025 by rpki-client