Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
File: 152FaqqerRL3XLaM2ulqDSyN3h4.mft (raw, json)
Hash identifier: Fc/nwDvpKE7UyVqr0KFO0rT9vErv5pbKnE56lcjYQ2Y=
Subject key identifier: E8:93:FF:EF:D6:E7:E2:C6:04:12:AD:77:2F:3B:6D:17:F7:86:B7:B3
Authority key identifier: D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
Certificate issuer: /CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Certificate serial: 019853E8B807A336DA8217567D7AFFBBDC33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
Manifest number: 0FC1
Signing time: Tue 29 Jul 2025 02:00:17 +0000
Manifest this update: Tue 29 Jul 2025 02:00:17 +0000
Manifest next update: Wed 30 Jul 2025 02:00:17 +0000
Files and hashes: 1: 152FaqqerRL3XLaM2ulqDSyN3h4.crl (hash: aAxEPlwMxaYWzGO9FvC1Fz5C4FMNu7uQVGG1xzKstlA=)
2: 94BJXR3Uo1I8suMedxF8KSUQqKc.roa (hash: vsbbxp7WNMO8VB3ChL2ZEv1wwVeFWV4G1csg/XaauZ0=)
3: y4gQpfTPRcitVr25VP-twnptmvE.roa (hash: OvMK6obtD8GE0uGeIeGjeBIL4CSoip9fhbcWHpqNnSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e8:b8:07:a3:36:da:82:17:56:7d:7a:ff:bb:dc:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Validity
Not Before: Jul 29 02:00:17 2025 GMT
Not After : Jul 30 02:00:17 2025 GMT
Subject: CN=e893ffefd6e7e2c60412ad772f3b6d17f786b7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b4:2c:c3:23:a4:41:54:2b:cc:fd:e6:e0:9b:
1b:4a:62:bf:be:ad:9e:74:82:86:e9:da:9f:d4:3f:
57:16:b9:2d:3f:3c:b7:87:8c:66:3f:ed:1d:90:8b:
16:cb:ec:b0:5b:d1:a3:c0:9e:a8:a4:ab:72:e4:66:
35:0c:fc:b1:0e:84:08:92:2e:19:91:a4:a5:27:6e:
96:0e:36:dd:65:35:07:1a:3d:a1:9f:90:ea:2f:2d:
f0:f2:cf:a6:bd:42:25:7f:a2:a1:7c:ec:6f:b4:83:
3c:91:c9:56:bb:b1:f2:ad:51:67:32:f2:c4:93:e2:
0e:b7:60:c7:b6:06:06:c7:24:a1:2a:ce:ce:c5:94:
49:38:43:66:48:ee:d6:55:2a:16:6a:91:68:57:a1:
66:7a:ce:38:cf:86:fe:81:67:33:99:c4:db:5f:1a:
e3:9b:c5:32:3d:ec:de:a9:f0:61:dc:11:6e:9b:dc:
37:06:7c:6b:57:cf:79:10:df:fa:71:24:5f:94:53:
25:68:f0:54:52:bc:d2:bf:b1:9d:45:5b:e0:b3:e4:
2f:bb:82:5f:30:61:7d:ac:ed:ff:16:09:5f:f3:50:
63:3a:54:94:0a:50:5f:18:f6:a8:1b:43:72:b4:1e:
6c:6b:94:df:e2:1f:11:e2:18:7f:d4:bc:11:2f:ad:
c8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:93:FF:EF:D6:E7:E2:C6:04:12:AD:77:2F:3B:6D:17:F7:86:B7:B3
X509v3 Authority Key Identifier:
keyid:D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:9f:e0:e6:50:1a:dc:49:1a:4b:a6:83:09:b2:7b:0e:35:7a:
0c:ed:ba:ab:72:f6:c6:89:07:15:bb:79:eb:5a:5b:b6:92:4b:
4a:80:42:f3:be:4f:8c:71:f1:ec:2c:4c:a6:e6:cf:15:9c:aa:
37:27:64:6d:9d:d9:ba:98:81:38:ef:4b:e2:f6:55:a5:79:fb:
50:16:61:73:e2:1f:7d:5c:e3:d8:a6:1a:a9:c0:23:54:33:ad:
a0:2c:75:df:2a:3c:5d:2c:c2:75:35:84:13:7b:df:7b:ec:d0:
63:48:15:0f:43:ec:ab:bc:9c:68:08:d6:56:e3:ad:cd:15:bf:
d6:01:a1:39:53:a0:aa:c1:02:69:24:70:92:83:65:d6:3e:1a:
6f:45:62:7e:d6:d5:77:8e:4d:76:df:9d:27:4a:fe:0a:27:cc:
60:b0:38:a9:27:f3:d2:c4:4a:d6:40:c2:a2:d3:0a:5c:41:a4:
2b:21:22:a2:7d:03:29:5b:02:dd:76:da:51:33:ba:d9:9f:38:
cb:cb:05:5c:92:14:a0:b2:a4:e8:17:ac:cb:e9:1a:2f:df:1c:
a9:77:dd:55:63:4c:7f:de:97:6a:56:f3:e0:c0:fd:10:2c:be:
04:8a:ac:08:c1:c3:10:05:46:30:9b:c3:b3:bc:b5:a8:25:0e:
92:56:a3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:41:22 2025 by rpki-client