Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
File: 152FaqqerRL3XLaM2ulqDSyN3h4.mft (raw, json)
Hash identifier: yfQ280OHCEcS1GdmZOG3T6DfDYFy9Clq5C+ymewX99c=
Subject key identifier: AC:B4:B0:D7:16:8A:A3:74:3B:46:B0:57:DD:5D:83:3C:70:39:D6:31
Authority key identifier: D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
Certificate issuer: /CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Certificate serial: 01965801E48D67F7D89BF9F243139D23495D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
Manifest number: 0EBA
Signing time: Mon 21 Apr 2025 11:00:41 +0000
Manifest this update: Mon 21 Apr 2025 11:00:41 +0000
Manifest next update: Tue 22 Apr 2025 11:00:41 +0000
Files and hashes: 1: 152FaqqerRL3XLaM2ulqDSyN3h4.crl (hash: IcUX1A8UXs5ESLcCq58VAi9zqqp4Q2oW/bXtzLTAsEA=)
2: 94BJXR3Uo1I8suMedxF8KSUQqKc.roa (hash: vsbbxp7WNMO8VB3ChL2ZEv1wwVeFWV4G1csg/XaauZ0=)
3: y4gQpfTPRcitVr25VP-twnptmvE.roa (hash: OvMK6obtD8GE0uGeIeGjeBIL4CSoip9fhbcWHpqNnSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:01:e4:8d:67:f7:d8:9b:f9:f2:43:13:9d:23:49:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Validity
Not Before: Apr 21 11:00:41 2025 GMT
Not After : Apr 22 11:00:41 2025 GMT
Subject: CN=acb4b0d7168aa3743b46b057dd5d833c7039d631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9a:53:c2:b7:98:cd:69:50:c9:a8:e1:c4:96:
8f:55:1e:96:7f:2b:be:a0:14:63:57:90:38:b1:96:
59:94:5d:b8:bf:31:4d:12:91:df:39:61:6b:28:2c:
e6:12:25:7e:85:ff:38:5f:c5:77:40:16:ea:f0:e0:
30:3f:1f:21:0c:cc:bf:fc:d4:b0:20:7d:e9:f3:67:
12:5d:b9:cd:ad:c0:48:e6:12:34:c8:43:d9:f3:5c:
f2:b2:31:84:88:a5:d1:9c:51:31:9f:4e:b9:97:a2:
b9:76:24:78:eb:8d:c4:69:4d:8a:66:43:3d:92:bf:
3b:29:46:6d:12:9f:48:7d:c1:af:aa:06:29:7c:5a:
91:90:89:f2:10:69:ad:3c:71:2e:b7:df:af:06:49:
9d:f1:f1:88:b6:43:b5:d6:e0:50:e8:96:b1:b1:d3:
a2:ca:39:07:3b:b1:27:9d:75:b7:4b:4e:f4:c3:b4:
e7:3c:f2:33:38:b6:f7:a0:5e:e9:14:9b:23:d1:2f:
2d:53:fb:5c:47:e5:78:3f:a8:a2:a7:e1:74:46:96:
30:15:e7:1d:ff:54:0c:54:ee:85:b6:6e:8c:c6:0c:
07:d2:f0:90:15:f2:55:4e:bf:f0:67:ab:c1:1d:5d:
58:bf:0b:b7:d2:e7:f5:27:e6:c0:a6:75:bf:f2:eb:
51:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B4:B0:D7:16:8A:A3:74:3B:46:B0:57:DD:5D:83:3C:70:39:D6:31
X509v3 Authority Key Identifier:
keyid:D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:7f:e6:36:ab:c6:f4:4a:b1:b8:11:2e:22:5b:6f:b8:10:bd:
f8:bc:45:c9:b8:11:57:7c:5e:b9:ef:82:b0:65:77:1b:46:48:
a1:78:eb:19:72:5a:83:0c:0e:65:66:ca:01:cc:08:27:b9:59:
d3:32:f5:ad:d4:f0:ef:77:f6:9f:d2:96:67:26:37:c7:da:6d:
5d:41:b7:25:39:2c:6f:6e:67:a3:12:93:64:56:b5:dc:df:51:
8d:1d:ca:59:08:34:85:29:fa:5b:76:03:d0:5a:6e:61:92:db:
4f:2a:c6:2d:e7:33:36:23:e8:9e:a0:a5:57:b2:dd:c1:1d:6d:
65:aa:f6:a4:8e:d8:72:c2:d4:eb:cb:6b:be:ec:63:6f:b0:26:
1f:a9:33:11:f5:ec:68:75:6d:1b:74:30:a5:aa:f1:58:52:79:
82:a9:42:5c:43:f1:d2:17:9d:fd:47:3d:25:da:f8:13:be:fb:
ef:1a:24:7b:29:1e:d9:d7:d3:dc:89:8a:b6:1b:90:a9:5e:5c:
fe:48:0c:e7:07:f7:07:50:0c:cc:70:33:77:d7:99:05:54:32:
30:90:c7:34:9d:b1:5b:b7:25:c6:28:82:22:3a:68:9f:fd:fe:
78:ac:3f:34:e4:de:8c:3e:79:9c:d6:4d:f5:de:7e:0a:d8:e3:
5d:53:bf:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYAeSNZ/fYm/nyQxOdI0ldMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OWQ4NTZhYWE5ZWFkMTJmNzVjYjY4Y2RhZTk2YTBkMmM4
ZGRlMWUwHhcNMjUwNDIxMTEwMDQxWhcNMjUwNDIyMTEwMDQxWjAzMTEwLwYDVQQD
EyhhY2I0YjBkNzE2OGFhMzc0M2I0NmIwNTdkZDVkODMzYzcwMzlkNjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZpTwreYzWlQyajhxJaPVR6Wfyu+
oBRjV5A4sZZZlF24vzFNEpHfOWFrKCzmEiV+hf84X8V3QBbq8OAwPx8hDMy//NSw
IH3p82cSXbnNrcBI5hI0yEPZ81zysjGEiKXRnFExn065l6K5diR4643EaU2KZkM9
kr87KUZtEp9IfcGvqgYpfFqRkInyEGmtPHEut9+vBkmd8fGItkO11uBQ6JaxsdOi
yjkHO7EnnXW3S070w7TnPPIzOLb3oF7pFJsj0S8tU/tcR+V4P6iip+F0RpYwFecd
/1QMVO6Ftm6MxgwH0vCQFfJVTr/wZ6vBHV1Yvwu30uf1J+bApnW/8utRGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKy0sNcWiqN0O0awV91dgzxwOdYxMB8GA1UdIwQY
MBaAFNedhWqqnq0S91y2jNrpag0sjd4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTUyRmFxcWVyUkwzWExhTTJ1bHFEU3lOM2g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hNWJhYTItMmEzNS00Yzc2LWE5NDAt
NTk5MGNkNGRlODhiLzEvMTUyRmFxcWVyUkwzWExhTTJ1bHFEU3lOM2g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9hNWJhYTItMmEzNS00Yzc2LWE5NDAtNTk5MGNkNGRlODhi
LzEvMTUyRmFxcWVyUkwzWExhTTJ1bHFEU3lOM2g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAX/mNqvG
9EqxuBEuIltvuBC9+LxFybgRV3xeue+CsGV3G0ZIoXjrGXJagwwOZWbKAcwIJ7lZ
0zL1rdTw73f2n9KWZyY3x9ptXUG3JTksb25noxKTZFa13N9RjR3KWQg0hSn6W3YD
0FpuYZLbTyrGLeczNiPonqClV7LdwR1tZar2pI7YcsLU68trvuxjb7AmH6kzEfXs
aHVtG3QwparxWFJ5gqlCXEPx0hed/Uc9Jdr4E7777xokeyke2dfT3ImKthuQqV5c
/kgM5wf3B1AMzHAzd9eZBVQyMJDHNJ2xW7clxiiCIjpon/3+eKw/NOTejD55nNZN
9d5+CtjjXVO/eQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 16:01:20 2025 by rpki-client