Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
File: sUYBAoOoIC7qo_7zJTTj6X4EB54.mft (raw, json)
Hash identifier: CvduKE3EyVnan3hQgmHQ+7tYxfKOljOOpv4Yo7IGe1I=
Subject key identifier: D5:40:FD:E7:6C:50:D7:E3:B6:15:09:9E:EC:79:CA:BD:CE:61:A8:C8
Authority key identifier: B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
Certificate issuer: /CN=b146010283a8202eeaa3fef32534e3e97e04079e
Certificate serial: 019749D611CA8EDDB0A96D92C2224A9D2FC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 10:00:55 +0000
Manifest this update: Sat 07 Jun 2025 10:00:55 +0000
Manifest next update: Sun 08 Jun 2025 10:00:55 +0000
Files and hashes: 1: dvBncm1ioxMkZxfIwj8AHN_pV2o.roa (hash: trXkcGGpz9kCkLdcS7m7ANXF3QdwZlrIN5sw/IjjJ50=)
2: nDV5NLlAJlV7IXdCNRKuwhY8yIg.roa (hash: JCJGHbTjCnTmjbxULu8XX2HvkQESoAg0lhsxs56Srpg=)
3: sUYBAoOoIC7qo_7zJTTj6X4EB54.crl (hash: 63KkVM3fZsj8zGhCRoTXJaxevA98Odg//FGffW8mzUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:11:ca:8e:dd:b0:a9:6d:92:c2:22:4a:9d:2f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b146010283a8202eeaa3fef32534e3e97e04079e
Validity
Not Before: Jun 7 10:00:55 2025 GMT
Not After : Jun 8 10:00:55 2025 GMT
Subject: CN=d540fde76c50d7e3b615099eec79cabdce61a8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:dc:03:72:2e:26:ca:f7:b4:ec:f9:51:3e:97:
80:ae:a8:42:b1:6d:4f:d8:b4:4e:a1:36:93:aa:ba:
28:69:66:33:0e:8f:c1:e6:7b:2f:e8:52:fc:76:6e:
b1:ce:4f:08:38:fd:4d:02:54:27:e5:6e:93:41:6f:
38:d7:28:f6:61:82:79:65:82:35:e0:ef:19:b6:de:
69:7c:48:9a:0a:f6:56:67:83:67:da:a6:86:d7:0b:
54:d9:d2:f3:0a:1c:60:1f:40:a1:f3:d2:f1:96:ae:
46:40:4c:e2:a7:7c:cc:9a:1a:df:e9:9c:32:da:a1:
3c:43:ae:ba:6d:d6:16:5d:05:69:e2:00:8f:24:a4:
04:50:7e:f5:10:64:fd:c0:13:64:f0:21:b5:9a:27:
55:c7:a2:35:a4:65:85:32:54:97:63:f1:26:87:51:
d5:8e:c7:aa:19:b4:21:49:63:bc:51:70:02:d0:e5:
4f:9f:88:56:76:9f:3a:e3:72:d6:b4:dc:81:45:0c:
45:4c:f9:a1:2e:93:04:d2:f9:2d:aa:65:f5:90:1b:
f2:5f:df:f0:cb:09:0f:f6:1a:8c:ba:36:36:9e:8c:
29:fb:c3:67:7b:c1:7e:02:74:51:46:01:d7:cd:dd:
c0:51:a3:70:58:23:92:ef:5a:3b:e8:29:2e:00:51:
bd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:40:FD:E7:6C:50:D7:E3:B6:15:09:9E:EC:79:CA:BD:CE:61:A8:C8
X509v3 Authority Key Identifier:
keyid:B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:93:9f:ab:50:c0:bc:1a:a1:a8:d6:2b:33:b5:6f:66:ad:2e:
07:f9:39:d4:90:1e:da:78:74:a8:8a:6b:e0:9e:84:b2:3b:25:
c4:e6:79:9e:a9:57:6f:7a:4d:3b:24:14:03:df:64:ed:3d:4d:
b0:11:88:db:96:9a:6f:be:d0:7d:ef:7b:2d:7a:8d:f7:e7:28:
d6:6c:69:b9:02:dc:f5:cf:6a:06:05:d2:25:f0:20:59:eb:56:
db:1f:d6:d4:6d:ad:67:dc:3d:36:37:78:b1:df:07:83:72:b6:
9f:bf:0d:57:c9:72:4e:ac:8a:59:3f:53:2e:17:e1:9a:fc:71:
4d:50:78:ef:a0:6a:2b:f1:a7:d9:8e:e1:0c:d2:9b:37:d0:07:
27:1a:e7:ad:e3:7b:f4:f6:78:e2:ed:77:4f:78:ec:83:c9:52:
06:32:a3:0b:b4:d1:a5:44:70:3d:ac:ca:e2:d8:be:c5:62:b9:
c2:e9:bc:42:52:d0:27:f2:9d:3c:c4:68:0f:d0:37:84:3c:5d:
90:01:da:c7:f8:45:d3:8b:c9:e1:01:4c:3f:0b:da:d6:7c:2c:
d8:5f:a2:13:aa:da:35:25:9b:da:a0:4f:6c:a2:d8:7c:2e:d0:
6a:50:d2:1a:99:45:ad:12:e7:de:e0:d9:b9:0d:5a:01:6c:1a:
3b:66:42:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:04:08 2025 by rpki-client