Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
File: 152FaqqerRL3XLaM2ulqDSyN3h4.mft (raw, json)
Hash identifier: SbwBQoQ9h9Q3z56yOlW5b1ii8E3tzTEqnAb9N2kNaow=
Subject key identifier: 94:DA:46:B8:0F:76:DF:B1:80:E2:26:86:59:35:45:69:FB:A6:3D:28
Authority key identifier: D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
Certificate issuer: /CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Certificate serial: 019A0C385D1431F474155D9A871E1490BBAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
Manifest number: 10A5
Signing time: Wed 22 Oct 2025 14:00:11 +0000
Manifest this update: Wed 22 Oct 2025 14:00:11 +0000
Manifest next update: Thu 23 Oct 2025 14:00:11 +0000
Files and hashes: 1: 152FaqqerRL3XLaM2ulqDSyN3h4.crl (hash: LulKbvXNBP3fqV4iU5JfGFkKf2nqKK2/ZV7nlUCCcrA=)
2: 94BJXR3Uo1I8suMedxF8KSUQqKc.roa (hash: vsbbxp7WNMO8VB3ChL2ZEv1wwVeFWV4G1csg/XaauZ0=)
3: y4gQpfTPRcitVr25VP-twnptmvE.roa (hash: OvMK6obtD8GE0uGeIeGjeBIL4CSoip9fhbcWHpqNnSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:38:5d:14:31:f4:74:15:5d:9a:87:1e:14:90:bb:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Validity
Not Before: Oct 22 14:00:11 2025 GMT
Not After : Oct 23 14:00:11 2025 GMT
Subject: CN=94da46b80f76dfb180e2268659354569fba63d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b8:8f:c0:93:84:05:6a:3c:db:f8:9e:3c:1d:
c0:94:4c:b3:44:5c:74:06:64:c1:c1:ca:18:8a:3e:
6e:f8:01:c5:25:b3:d8:97:f0:43:bb:ff:4b:e4:ca:
33:b7:2d:98:6e:a8:d1:e1:67:58:fb:d8:ac:a6:40:
d7:37:27:0f:b9:49:9f:6b:62:f1:4a:6b:2d:6c:b2:
a3:90:ed:10:33:87:eb:00:98:6b:0b:0d:df:ea:3a:
96:35:db:d7:6b:56:36:79:6d:91:2c:58:b7:c1:95:
a5:39:c9:1b:55:9e:fd:4a:e1:40:f2:fc:84:d2:1e:
1f:6a:21:43:5f:9e:82:45:d3:68:a5:ec:a9:c6:a9:
08:80:82:cf:3f:1e:84:d9:2f:f5:79:13:e7:25:ec:
6b:27:6e:6f:da:ee:e7:f5:66:a2:70:f4:bb:c5:f2:
2c:4e:eb:35:4c:66:71:af:99:02:f3:bf:13:ea:5b:
7f:59:7e:c2:6e:ef:a3:a2:6e:d5:ef:be:31:94:31:
73:de:ff:9a:80:9b:e3:cf:98:fb:63:77:a8:e5:ba:
c0:46:18:5a:80:c0:d4:34:23:78:87:f3:f8:15:ca:
02:40:58:47:49:57:2a:6e:88:7e:49:3d:c2:7b:2f:
23:52:05:51:ea:61:ae:1b:be:e1:f3:7f:c1:3f:83:
8d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:DA:46:B8:0F:76:DF:B1:80:E2:26:86:59:35:45:69:FB:A6:3D:28
X509v3 Authority Key Identifier:
keyid:D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c4:f4:1c:67:f1:60:85:c9:aa:96:cc:e7:27:7a:60:0e:66:
72:20:8a:1d:22:57:b0:25:46:fc:f3:9c:c4:70:a5:e7:80:5b:
59:78:a0:d9:ac:6f:7f:64:d6:71:f0:82:33:a2:99:10:88:18:
57:25:2b:ee:cf:aa:b6:3a:82:4b:c6:4c:eb:f5:c1:28:8e:a5:
2c:66:7f:2b:95:5e:9c:b5:f4:b8:58:70:e1:4a:24:dc:b8:4a:
69:57:0e:81:20:74:9c:a3:65:77:d2:19:43:5b:2d:51:2b:75:
28:75:58:8a:2a:54:68:55:e0:f7:44:36:70:e4:f8:d0:ab:71:
1d:af:92:58:94:b4:ae:2e:14:d2:24:59:23:b1:49:ae:5e:cf:
fb:5a:24:b8:40:ea:75:d7:ae:21:f5:de:48:b0:62:98:00:40:
1c:df:78:54:f7:01:71:53:4e:73:f5:d3:8f:ac:f6:8b:af:d5:
b8:66:99:73:27:91:8b:d4:fe:d3:a3:53:e1:54:d8:a6:bf:75:
e2:7b:4a:f6:68:35:e9:42:cb:45:86:12:a6:ba:6e:92:4e:5c:
3e:e7:71:b0:2b:93:5c:47:9e:7a:60:f1:bd:74:21:ac:34:26:
a1:a0:87:7e:56:c4:6c:c2:f2:f7:02:81:30:19:52:f1:c2:8c:
41:5a:a8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 19:06:34 2025 by rpki-client