Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
File: 156keuFhy7Pa75d4lzDXDEy6idA.mft (raw, json)
Hash identifier: LOzaYUZ49d9nhVGrx288rzWqn3Jfg5jUQWVKpZQ2EvY=
Subject key identifier: FA:B8:AE:69:31:69:83:1C:9E:8E:D5:E0:FA:75:92:D9:E1:CC:C9:35
Authority key identifier: D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
Certificate issuer: /CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Certificate serial: 0196BCDBA6C111FB8632394AC70BEBB48E25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
Manifest number: 0BDB
Signing time: Sun 11 May 2025 01:00:33 +0000
Manifest this update: Sun 11 May 2025 01:00:33 +0000
Manifest next update: Mon 12 May 2025 01:00:33 +0000
Files and hashes: 1: 156keuFhy7Pa75d4lzDXDEy6idA.crl (hash: ruZdMziCEMf3eFyWfdXRRVvVV6SF3hw6hmMZn0r1dI0=)
2: BYLPzOMe1DxWdpXNE62DtzO9Fb0.roa (hash: SqdsHTomHrhRooCsvxMkFhbSdd3KRws8NQEmMcUSL9s=)
3: L0_IW031V8glRQi2qCV5oPEf9Ro.roa (hash: AA7xAguXYqxswXW6tTMsC/xh3FPMqVeiLIYHUXm73pU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:a6:c1:11:fb:86:32:39:4a:c7:0b:eb:b4:8e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Validity
Not Before: May 11 01:00:33 2025 GMT
Not After : May 12 01:00:33 2025 GMT
Subject: CN=fab8ae693169831c9e8ed5e0fa7592d9e1ccc935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4b:50:0c:64:f8:a3:8d:45:51:3c:ad:1c:ef:
87:d8:93:8b:30:6d:98:c2:78:df:1d:5c:ee:e4:90:
0a:b1:d4:23:d3:89:e4:df:c8:cf:e0:f3:93:80:1f:
bf:eb:44:b2:d3:29:41:47:09:1a:56:3b:65:2d:dc:
08:31:7b:d6:8d:d5:f7:7a:5e:10:84:d0:96:2f:ef:
33:05:0c:51:e2:24:58:fb:f8:9f:6f:b7:ed:25:d2:
65:25:03:bb:3b:52:d9:b5:02:f6:5b:a8:bc:f5:1c:
88:61:64:82:a2:44:a0:66:f0:98:45:a2:ee:8c:0d:
23:92:20:3c:67:1e:7c:c1:f3:7e:0c:ce:f2:be:a9:
3c:83:28:04:9b:4a:69:31:34:37:6f:6b:82:7b:47:
df:7f:2c:ea:8e:34:e0:bd:3d:42:7e:98:35:ec:cd:
51:16:40:d6:eb:91:64:8b:01:7d:1a:07:ed:91:86:
d0:2f:36:01:74:90:12:bd:3a:b9:3e:13:de:02:b9:
53:4a:5d:f7:22:a5:5a:c5:f2:8b:a5:46:00:77:f5:
20:62:12:72:f7:f8:2e:17:67:f1:d7:6a:93:a3:ee:
8f:81:8b:5a:9a:3c:de:07:c6:a2:f1:e3:0b:31:25:
c3:27:0a:c4:c0:d0:bb:29:50:41:ef:cc:f3:ff:87:
af:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B8:AE:69:31:69:83:1C:9E:8E:D5:E0:FA:75:92:D9:E1:CC:C9:35
X509v3 Authority Key Identifier:
keyid:D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f6:85:91:1f:e3:f9:95:87:10:37:c0:bc:0c:c5:64:cd:aa:
8b:d2:85:0f:09:88:b0:58:44:b0:0d:ee:10:a6:d1:7a:b0:d9:
44:d6:d1:81:51:cc:fd:1c:6f:42:29:48:34:bb:02:89:37:d8:
5e:31:49:5b:4e:7b:21:f4:3b:12:5e:6f:0c:68:43:f3:a2:1a:
de:42:74:a0:0e:b6:e0:57:f5:f2:eb:9e:a4:c6:0a:57:ca:dc:
e9:65:05:f9:d0:87:06:d6:4b:07:77:c3:51:5f:68:af:81:3a:
46:63:8d:44:1e:bd:07:d1:d4:f3:fe:31:9f:f8:41:d0:1a:47:
58:12:64:51:1f:86:33:64:df:f1:75:92:4d:f0:3d:e3:c5:1f:
93:5c:e3:de:63:70:da:44:53:9f:04:d3:9d:35:16:4b:52:a4:
94:9c:7f:43:65:43:6a:b7:ab:3f:e5:fd:bd:25:98:e9:52:ea:
36:57:96:ac:60:66:2c:7a:46:7a:72:ec:f1:be:87:b3:62:83:
a1:e9:bc:37:c3:29:e9:a6:ca:d0:a9:3b:97:5c:ae:23:94:aa:
e0:52:ad:3e:c1:fa:b4:62:3a:c6:04:4b:24:21:d0:1a:7f:bb:
66:7e:34:01:25:fa:e9:41:b6:0b:03:80:41:36:3d:a5:c6:ad:
cf:b4:a9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:23:05 2025 by rpki-client