Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
File: 156keuFhy7Pa75d4lzDXDEy6idA.mft (raw, json)
Hash identifier: BKmC4J7M3xPmSNlGGcBe+K/ZPulIFYBZGYIaAmMs9CA=
Subject key identifier: D4:D1:4C:00:1A:D6:CB:46:F7:AC:93:8F:77:BA:4A:C6:FC:30:9D:41
Authority key identifier: D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
Certificate issuer: /CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Certificate serial: 019682EC3D03548634E5623AD5AF0E7C0319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
Manifest number: 0BBD
Signing time: Tue 29 Apr 2025 19:00:42 +0000
Manifest this update: Tue 29 Apr 2025 19:00:42 +0000
Manifest next update: Wed 30 Apr 2025 19:00:42 +0000
Files and hashes: 1: 156keuFhy7Pa75d4lzDXDEy6idA.crl (hash: R4SXexxZZ0fDHPItaFmzq+LMmtol1WP9VqGwr1xKLjI=)
2: BYLPzOMe1DxWdpXNE62DtzO9Fb0.roa (hash: SqdsHTomHrhRooCsvxMkFhbSdd3KRws8NQEmMcUSL9s=)
3: L0_IW031V8glRQi2qCV5oPEf9Ro.roa (hash: AA7xAguXYqxswXW6tTMsC/xh3FPMqVeiLIYHUXm73pU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:ec:3d:03:54:86:34:e5:62:3a:d5:af:0e:7c:03:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Validity
Not Before: Apr 29 19:00:42 2025 GMT
Not After : Apr 30 19:00:42 2025 GMT
Subject: CN=d4d14c001ad6cb46f7ac938f77ba4ac6fc309d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a8:6f:e0:40:f7:5f:79:c1:ea:52:6a:24:3f:
75:42:e1:bd:b7:c0:94:18:bb:51:31:e9:9a:3c:c4:
05:94:9f:3f:29:2d:62:bd:9a:90:58:84:2f:8d:c4:
f4:55:60:ef:62:d4:3f:55:57:27:28:1a:08:8c:81:
ce:7b:85:62:60:35:d0:66:c0:a2:2c:7f:2b:81:89:
c7:73:15:c6:7b:06:da:29:bb:b4:da:a0:d2:f6:a5:
0d:5d:62:59:ff:a8:59:b2:d3:4b:4b:fc:a9:78:7d:
e0:c6:29:9d:00:13:96:6e:17:67:8e:af:e2:e1:e0:
c9:9b:89:52:b2:a7:5d:52:3c:b7:d0:61:d9:b0:28:
71:21:52:9c:1c:a5:32:b5:c1:fe:dd:35:6d:10:a9:
59:e2:bb:28:cc:ad:e1:10:73:c2:00:1c:f2:7e:7f:
73:20:3c:80:8e:d5:af:77:6f:09:60:26:c6:a9:3f:
07:54:27:a0:74:8f:75:eb:70:b3:ed:f9:b7:64:d2:
7d:99:8d:f8:1d:ae:2c:bc:23:66:50:bf:ed:b1:3e:
93:2c:78:53:e3:bb:90:ea:f5:72:6c:6a:9a:4b:27:
ea:1a:f4:55:86:e3:22:95:f7:93:4a:ae:45:b7:86:
bc:81:ca:12:ed:d0:e1:20:c2:47:26:9e:37:e4:6a:
59:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D1:4C:00:1A:D6:CB:46:F7:AC:93:8F:77:BA:4A:C6:FC:30:9D:41
X509v3 Authority Key Identifier:
keyid:D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:aa:5c:53:e9:27:75:69:2b:1b:8b:9a:dc:f1:46:a9:69:d7:
3e:4b:92:9b:2c:36:54:80:79:2b:69:3e:af:d3:fe:9b:89:d1:
66:88:fb:2e:40:c3:a5:2c:a1:43:07:8c:e7:ea:a9:ad:2a:91:
69:cc:28:e5:f0:ad:ed:43:a2:53:1a:04:64:53:3e:ee:67:f3:
40:bc:8c:58:dc:95:ea:c1:65:3c:89:98:fc:2b:74:ab:5e:69:
7d:70:59:3a:6e:8a:0b:b7:f0:0a:60:b9:0d:b9:f5:37:53:83:
ee:1a:48:c2:d5:64:38:d6:58:d2:82:ad:27:35:f9:87:82:ae:
30:de:bd:66:4a:f5:9b:86:22:1e:84:ff:af:0a:b1:b1:52:45:
d0:a1:e3:99:52:c0:99:ff:23:f4:e2:c0:31:66:99:c2:d5:b5:
35:5d:99:4b:23:eb:1c:a7:49:9a:14:33:6c:33:43:13:a1:e4:
cb:6c:86:20:d0:44:c4:7a:4f:d8:20:7a:84:2b:25:58:c6:9e:
2e:0f:39:38:19:d5:70:5d:f4:a1:6f:54:a7:83:22:9f:f7:fe:
81:ec:48:46:91:9d:40:37:80:f7:15:d7:09:a7:b0:d4:a3:94:
09:38:08:92:9d:a3:55:15:a1:d0:ee:96:09:ce:6c:99:d8:c2:
90:77:31:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:55:38 2025 by rpki-client