Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
File: 156keuFhy7Pa75d4lzDXDEy6idA.mft (raw, json)
Hash identifier: Do6uKmkByopzuwjUPsMw+9LCM8ENsf1xNtfPDJ0aA7s=
Subject key identifier: 18:56:1A:45:C1:F9:2B:93:DA:62:A2:89:87:87:2A:5E:BA:7D:C3:F1
Authority key identifier: D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
Certificate issuer: /CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Certificate serial: 01984AAEB0D314523DC9EC54B8D0CCF97DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
Manifest number: 0CA9
Signing time: Sun 27 Jul 2025 07:00:19 +0000
Manifest this update: Sun 27 Jul 2025 07:00:19 +0000
Manifest next update: Mon 28 Jul 2025 07:00:19 +0000
Files and hashes: 1: 156keuFhy7Pa75d4lzDXDEy6idA.crl (hash: hz26a46pGEKXjpZYofveJ9HylxU6ND1PEwG7MMzMi44=)
2: BYLPzOMe1DxWdpXNE62DtzO9Fb0.roa (hash: SqdsHTomHrhRooCsvxMkFhbSdd3KRws8NQEmMcUSL9s=)
3: L0_IW031V8glRQi2qCV5oPEf9Ro.roa (hash: AA7xAguXYqxswXW6tTMsC/xh3FPMqVeiLIYHUXm73pU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:b0:d3:14:52:3d:c9:ec:54:b8:d0:cc:f9:7d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Validity
Not Before: Jul 27 07:00:19 2025 GMT
Not After : Jul 28 07:00:19 2025 GMT
Subject: CN=18561a45c1f92b93da62a28987872a5eba7dc3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7a:53:be:54:e3:03:0a:80:15:50:f8:ae:b4:
29:77:e4:c9:cf:89:cf:32:f7:99:18:fe:58:74:21:
33:3e:03:e7:d6:dc:27:fa:59:91:57:53:ff:ce:8f:
54:2f:4d:55:14:c2:ff:aa:55:a0:de:d4:2c:f4:7c:
78:6c:bb:72:b8:d6:f1:03:13:ef:4f:df:f5:60:20:
9a:8d:90:01:45:d7:cc:2e:03:70:b3:93:f7:31:94:
0f:0a:d2:59:0e:58:ef:56:de:c3:8d:f7:b8:66:e2:
15:8f:b2:4a:c9:88:c8:ef:99:b9:f6:23:99:2a:3a:
96:49:71:67:f4:5f:d9:5a:81:62:c5:51:49:43:ca:
b9:63:83:f4:d1:c7:59:db:36:ca:72:ef:6d:2d:d6:
06:84:c1:e1:46:46:cc:74:12:14:f0:89:f2:0c:3d:
61:76:0a:48:f0:0d:93:3a:21:b8:db:32:46:1a:a7:
cd:10:aa:e7:90:8b:6c:9e:1a:fa:90:5f:46:76:5e:
00:e2:27:7d:39:0d:a1:1c:27:43:30:7d:c5:d8:43:
fc:d7:05:13:b6:14:3f:07:b7:65:29:5f:19:3b:8a:
a8:d6:1f:f8:1a:31:c5:d9:9e:ab:d9:43:db:a0:50:
05:bd:6b:ad:be:4a:fc:46:ea:a0:c0:2f:8d:6b:93:
06:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:56:1A:45:C1:F9:2B:93:DA:62:A2:89:87:87:2A:5E:BA:7D:C3:F1
X509v3 Authority Key Identifier:
keyid:D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:9b:ed:5c:c3:45:f4:b1:ee:74:06:75:22:a9:d7:b5:b7:d4:
e6:e5:ca:ff:42:80:61:6f:41:7b:11:68:ff:aa:df:cc:84:1e:
36:a5:0c:88:99:91:e3:0a:38:da:7c:ea:a6:ef:54:96:df:f4:
f9:c3:bb:90:3a:37:a4:81:45:c0:cd:e4:1e:5b:3a:61:f7:34:
f8:12:09:9c:2c:9a:8f:8a:28:49:02:88:2e:24:57:29:1d:4d:
97:46:0a:12:ff:32:ef:9e:a9:de:48:de:81:88:2e:f0:97:a3:
35:01:50:77:2c:96:d1:c0:87:99:bc:3a:a5:2e:a6:6b:bc:66:
29:02:56:ab:4c:0b:c4:72:c2:5d:d5:96:cb:55:26:b0:f7:3b:
d3:71:f6:c0:74:e6:c6:59:e0:c1:23:47:34:2c:18:1a:82:a8:
21:a7:e1:a8:90:a6:93:5c:48:23:6e:af:36:08:e8:c5:96:68:
da:35:a6:43:bc:9e:dc:46:12:b7:d9:b3:53:ab:45:f9:9d:03:
7a:f7:f5:2b:34:69:1c:0d:70:88:ef:52:d8:df:f9:83:36:df:
51:4a:5f:f9:dc:89:22:9e:49:9d:10:0b:d1:48:62:bf:e7:d6:
93:ee:56:4b:3a:6d:61:b8:2d:64:58:e3:9a:2d:6f:00:22:c8:
e5:aa:9f:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKrrDTFFI9yexUuNDM+X2nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OWVhNDdhZTE2MWNiYjNkYWVmOTc3ODk3MzBkNzBjNGNi
YTg5ZDAwHhcNMjUwNzI3MDcwMDE5WhcNMjUwNzI4MDcwMDE5WjAzMTEwLwYDVQQD
EygxODU2MWE0NWMxZjkyYjkzZGE2MmEyODk4Nzg3MmE1ZWJhN2RjM2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHpTvlTjAwqAFVD4rrQpd+TJz4nP
MveZGP5YdCEzPgPn1twn+lmRV1P/zo9UL01VFML/qlWg3tQs9Hx4bLtyuNbxAxPv
T9/1YCCajZABRdfMLgNws5P3MZQPCtJZDljvVt7Djfe4ZuIVj7JKyYjI75m59iOZ
KjqWSXFn9F/ZWoFixVFJQ8q5Y4P00cdZ2zbKcu9tLdYGhMHhRkbMdBIU8InyDD1h
dgpI8A2TOiG42zJGGqfNEKrnkItsnhr6kF9Gdl4A4id9OQ2hHCdDMH3F2EP81wUT
thQ/B7dlKV8ZO4qo1h/4GjHF2Z6r2UPboFAFvWutvkr8RuqgwC+Na5MGXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhWGkXB+SuT2mKiiYeHKl66fcPxMB8GA1UdIwQY
MBaAFNeepHrhYcuz2u+XeJcw1wxMuonQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTU2a2V1Rmh5N1BhNzVkNGx6RFhERXk2aWRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9kOWNiNDEtMWMzYi00NmFiLWE5OTMt
M2MzZTUwZGRhNmNjLzEvMTU2a2V1Rmh5N1BhNzVkNGx6RFhERXk2aWRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9kOWNiNDEtMWMzYi00NmFiLWE5OTMtM2MzZTUwZGRhNmNj
LzEvMTU2a2V1Rmh5N1BhNzVkNGx6RFhERXk2aWRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZvtXMNF
9LHudAZ1IqnXtbfU5uXK/0KAYW9BexFo/6rfzIQeNqUMiJmR4wo42nzqpu9Ult/0
+cO7kDo3pIFFwM3kHls6Yfc0+BIJnCyaj4ooSQKILiRXKR1Nl0YKEv8y756p3kje
gYgu8JejNQFQdyyW0cCHmbw6pS6ma7xmKQJWq0wLxHLCXdWWy1UmsPc703H2wHTm
xlngwSNHNCwYGoKoIafhqJCmk1xII26vNgjoxZZo2jWmQ7ye3EYSt9mzU6tF+Z0D
evf1KzRpHA1wiO9S2N/5gzbfUUpf+dyJIp5JnRAL0Uhiv+fWk+5WSzptYbgtZFjj
mi1vACLI5aqf9Q==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:46:53 2025 by rpki-client