Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
File: 152kZWFcYAlDcIM4ktqEyIbhxO8.mft (raw, json)
Hash identifier: JiK3pK/4iRt7xbGEH+a0B8pQgWJf067kMOJQKVZ3DIs=
Subject key identifier: B1:AC:6F:2D:FD:94:C6:34:D2:C0:C4:79:7F:D7:98:CE:06:FD:D0:B2
Authority key identifier: D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
Certificate issuer: /CN=d79da465615c60094370833892da84c886e1c4ef
Certificate serial: 0199C344759EF95AF0BE58B9731207F4F904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
Manifest number: 16CA
Signing time: Wed 08 Oct 2025 10:01:07 +0000
Manifest this update: Wed 08 Oct 2025 10:01:07 +0000
Manifest next update: Thu 09 Oct 2025 10:01:07 +0000
Files and hashes: 1: 152kZWFcYAlDcIM4ktqEyIbhxO8.crl (hash: 0Uaby9t4uuHQu9sFKNRO+cFkxfKYIj/So2qdGyyrTwk=)
2: D6tQMtTrcrX-gfAb6Oldi--cuH0.roa (hash: hSrHBvCFCmXDyAQnKcTo97bjwp9R955PaX/sDtrTv8s=)
3: u1fNRyXyMUiOEFJEZY8QmByB7E8.roa (hash: ZcFES+4nNrRKAxBfx+5gDYNJV+7c5V3Qx9m+LvRk+bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:44:75:9e:f9:5a:f0:be:58:b9:73:12:07:f4:f9:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79da465615c60094370833892da84c886e1c4ef
Validity
Not Before: Oct 8 10:01:07 2025 GMT
Not After : Oct 9 10:01:07 2025 GMT
Subject: CN=b1ac6f2dfd94c634d2c0c4797fd798ce06fdd0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b7:94:37:ac:03:73:09:0f:e6:2d:e9:ac:2c:
c4:90:d3:82:dd:d7:7b:66:fe:95:61:d2:fb:5c:a2:
45:53:f9:d3:bc:6f:4d:2d:72:fc:85:cc:f9:7a:c7:
83:44:ae:bb:c5:2e:f9:93:b2:55:46:6a:33:09:d2:
19:a9:d2:83:2f:65:ca:9f:43:cc:01:da:5f:69:23:
90:6e:ef:8e:fb:3f:3a:55:b8:39:e3:a0:e1:a3:a6:
fa:83:60:f6:b9:94:e2:cd:71:26:03:94:59:03:1f:
80:4a:d1:ea:00:c7:15:5d:27:ed:ae:aa:b3:cc:fe:
4f:8e:f6:4c:c4:01:ef:e0:fc:e6:76:f0:b7:6d:dc:
55:70:65:38:4d:38:6f:c5:6d:66:74:a9:ed:15:51:
3c:30:ba:cf:3c:93:e7:18:82:e6:f4:c3:86:21:cf:
39:7e:80:16:5b:9d:11:e6:92:89:22:8e:c0:a4:8b:
81:34:c9:37:20:27:96:57:9d:37:61:eb:15:6c:89:
33:ce:94:db:04:5e:a5:d4:25:7a:06:3b:b4:41:9b:
e6:78:92:07:08:c5:39:e1:86:4e:16:c8:51:09:4d:
7b:a0:e2:82:8c:77:2d:e4:f7:c1:aa:6b:bf:62:78:
8f:22:0f:10:e2:a5:d3:80:7f:03:f7:69:17:e2:1e:
ad:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AC:6F:2D:FD:94:C6:34:D2:C0:C4:79:7F:D7:98:CE:06:FD:D0:B2
X509v3 Authority Key Identifier:
keyid:D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:06:32:12:ff:03:1a:4e:8e:93:51:1a:40:93:10:cb:9f:3d:
91:51:6b:7a:38:9f:ce:1b:13:0c:ca:04:f6:a5:7b:29:6f:5f:
6c:6a:6c:b8:56:90:1d:83:16:69:d0:56:12:bc:76:21:5c:95:
0d:6d:05:94:7c:84:2b:9f:57:44:27:73:04:e6:a9:ed:7d:78:
8b:7e:b9:48:b1:af:c2:0c:b6:05:21:e6:cb:08:87:73:38:4c:
ae:9f:d0:37:e8:37:6e:31:20:ac:9d:14:0d:82:4f:11:20:4d:
8f:5f:09:b9:35:bb:9a:06:85:aa:75:b2:52:67:78:85:66:5b:
c4:69:07:8f:1e:22:25:a1:63:27:13:33:6d:42:c1:11:da:5a:
54:60:5d:9b:ef:7a:ba:a3:86:c8:6e:51:32:3d:c6:59:8a:96:
2c:71:3c:2c:c0:58:55:ab:82:60:23:fe:53:e2:c1:6d:1d:a7:
fb:74:47:03:a9:c6:1b:15:f5:37:64:ce:63:b3:4a:5f:27:a9:
8e:2b:01:ba:e1:cc:f3:f0:c8:09:b4:d1:a2:d7:6c:6c:89:85:
45:0d:8b:3a:3f:8f:93:09:95:d1:2e:62:56:a4:1a:07:20:1f:
e8:e1:0d:4e:cf:7a:9a:74:88:2d:26:c3:94:9d:45:07:54:8c:
c3:76:87:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 15:47:24 2025 by rpki-client