
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
File: 152kZWFcYAlDcIM4ktqEyIbhxO8.mft (raw, json)
Hash identifier: ubDKNXfGNJIxgtSu5J1b6yp3/Ghacc8Tha+IFvEjZ1A=
Subject key identifier: 0B:67:3B:78:0F:19:32:FB:1F:B6:86:76:11:27:FC:9A:5F:4A:69:F6
Authority key identifier: D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
Certificate issuer: /CN=d79da465615c60094370833892da84c886e1c4ef
Certificate serial: 01984E8BC7EF2E99F76300DC57100B9CBB66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
Manifest number: 1609
Signing time: Mon 28 Jul 2025 01:00:40 +0000
Manifest this update: Mon 28 Jul 2025 01:00:40 +0000
Manifest next update: Tue 29 Jul 2025 01:00:40 +0000
Files and hashes: 1: 152kZWFcYAlDcIM4ktqEyIbhxO8.crl (hash: HIa29DIEAQvwUkf/ebDIyhuFLhoUqlKcR3m3nPWD4qQ=)
2: D6tQMtTrcrX-gfAb6Oldi--cuH0.roa (hash: hSrHBvCFCmXDyAQnKcTo97bjwp9R955PaX/sDtrTv8s=)
3: u1fNRyXyMUiOEFJEZY8QmByB7E8.roa (hash: ZcFES+4nNrRKAxBfx+5gDYNJV+7c5V3Qx9m+LvRk+bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:8b:c7:ef:2e:99:f7:63:00:dc:57:10:0b:9c:bb:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79da465615c60094370833892da84c886e1c4ef
Validity
Not Before: Jul 28 01:00:40 2025 GMT
Not After : Jul 29 01:00:40 2025 GMT
Subject: CN=0b673b780f1932fb1fb686761127fc9a5f4a69f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:43:da:02:c9:b4:f0:c7:94:9d:06:58:08:c0:
45:a7:35:16:b3:5a:b2:5b:b8:7a:06:6d:6f:c7:a5:
e8:c4:e1:83:60:0e:db:c5:99:33:7f:82:5e:1d:f1:
65:98:2c:1e:0d:88:b1:d2:35:1e:c9:52:bc:46:31:
49:93:7b:76:c9:1a:d6:d1:1d:a5:aa:7f:4c:46:4b:
59:6e:2a:c8:bd:2f:89:e4:48:8c:e5:d2:7d:41:82:
be:2e:9b:37:54:74:a6:3e:25:1b:b2:5d:66:d9:cb:
44:8a:ea:ef:9a:a8:ce:92:4f:23:e8:90:c5:ff:02:
0f:af:8d:9d:4e:60:b2:63:d3:93:21:f0:0d:9b:44:
b4:26:ab:c5:13:86:05:9f:9d:d7:1f:26:43:fc:8c:
8f:2f:b4:fe:2b:b4:2f:05:a4:fa:56:a2:45:a9:97:
d0:1d:3e:6a:20:7e:c1:03:67:5f:93:3c:d8:c4:55:
ce:cc:59:b1:f4:83:d8:0e:29:9f:85:44:e2:e2:d0:
46:da:59:0d:d7:bf:1c:11:fd:66:8b:fa:03:96:90:
c3:5e:5b:0f:1a:32:54:73:57:a5:9b:e7:1d:95:77:
fb:a9:de:64:9c:22:95:b6:ac:e4:4c:83:e3:86:66:
aa:f4:34:df:f3:d8:51:b0:78:2f:c5:fa:fe:48:5b:
69:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:67:3B:78:0F:19:32:FB:1F:B6:86:76:11:27:FC:9A:5F:4A:69:F6
X509v3 Authority Key Identifier:
keyid:D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:22:80:9a:56:a4:e0:da:a3:ed:e2:88:7e:4f:21:97:74:51:
76:1d:75:1f:79:f0:65:a3:5e:a2:d4:bf:48:f7:64:da:ee:66:
be:53:69:d4:e2:5b:c3:6f:b0:94:21:06:09:1e:16:d9:f9:26:
a6:89:7f:83:f9:e1:2b:a5:5f:07:92:95:26:ee:3d:98:02:ae:
e5:db:19:ef:79:d6:51:ff:7e:4b:7a:6f:e5:da:60:7f:13:ca:
90:9b:f1:b7:9a:95:81:d4:d3:6c:e7:79:a2:c3:62:55:82:92:
a3:fc:a5:c6:1e:40:8a:0c:f9:9c:1b:91:91:44:d5:69:51:ca:
5f:1a:22:5b:e7:9e:64:bd:7f:ab:e6:51:b7:46:ec:b7:36:24:
63:54:70:92:a3:67:f6:db:d6:3c:51:ce:a1:10:16:20:74:05:
f8:99:ed:c9:fd:8c:30:cd:45:c0:5f:00:9c:a6:2c:2f:11:18:
41:f7:63:6b:16:b0:a8:ff:48:8a:e3:2a:8c:17:bc:29:67:97:
8d:0d:56:3a:34:ac:da:09:26:b0:ab:f1:68:34:62:59:ef:99:
58:e0:21:56:2e:38:bc:01:ff:41:e9:ba:b6:9d:b2:14:a2:5e:
1f:fa:3d:c2:6b:2b:1f:fe:54:06:37:f3:45:b1:e4:72:15:85:
1e:64:c4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 05:46:16 2025 by rpki-client