Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
File: 152FaqqerRL3XLaM2ulqDSyN3h4.mft (raw, json)
Hash identifier: Ao+/BKRIRA/29D3/ajQM4gNvl2XWBA3u0HBuo3i6wGg=
Subject key identifier: 19:54:E2:CC:3D:64:84:25:71:BB:8D:FF:FD:B6:B4:85:66:9E:AF:E6
Authority key identifier: D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
Certificate issuer: /CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Certificate serial: 0197CEA8DCD42A11A738DF638BB571F1AD3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
Manifest number: 0F7C
Signing time: Thu 03 Jul 2025 05:01:02 +0000
Manifest this update: Thu 03 Jul 2025 05:01:02 +0000
Manifest next update: Fri 04 Jul 2025 05:01:02 +0000
Files and hashes: 1: 152FaqqerRL3XLaM2ulqDSyN3h4.crl (hash: eTisNU1ayPgLzyc6k9Dis+3cQfpN1/ccVdvqKr4N3Vs=)
2: 94BJXR3Uo1I8suMedxF8KSUQqKc.roa (hash: vsbbxp7WNMO8VB3ChL2ZEv1wwVeFWV4G1csg/XaauZ0=)
3: y4gQpfTPRcitVr25VP-twnptmvE.roa (hash: OvMK6obtD8GE0uGeIeGjeBIL4CSoip9fhbcWHpqNnSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:a8:dc:d4:2a:11:a7:38:df:63:8b:b5:71:f1:ad:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Validity
Not Before: Jul 3 05:01:02 2025 GMT
Not After : Jul 4 05:01:02 2025 GMT
Subject: CN=1954e2cc3d64842571bb8dfffdb6b485669eafe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:15:0d:99:5b:36:d5:6d:77:61:61:4c:b8:90:
7d:a0:15:92:9e:0d:8f:28:14:e1:ea:c6:07:f0:ef:
e3:45:06:f2:6c:fd:42:8f:22:eb:26:d5:55:19:db:
61:e1:7f:c0:19:3f:c6:76:54:61:2c:37:22:1f:22:
8c:99:e4:c9:de:89:33:71:f7:85:39:c6:39:83:d8:
e1:8f:94:fc:a8:d8:42:8f:50:bd:18:6e:80:0e:16:
46:79:e7:d0:58:85:0e:03:7f:2f:72:40:c2:70:40:
0f:47:a5:46:68:0f:77:24:9c:0f:71:1f:5a:a7:56:
15:9b:09:25:3f:b9:ab:3a:8a:aa:40:57:f4:27:27:
a4:69:5a:04:03:39:93:a5:0b:89:da:1e:07:c4:16:
1c:a2:c4:f8:b5:91:d4:8c:ec:11:d8:b3:5e:dd:86:
2c:31:90:bb:8e:2a:66:67:4d:61:58:78:bb:8e:a2:
6f:8c:80:95:b1:18:c7:c9:24:c7:25:0a:3e:e5:1a:
1e:a6:d3:00:05:ac:83:10:02:d0:99:59:3d:9f:27:
2f:7f:b0:9d:41:0c:26:90:43:6b:0b:a9:5e:5d:db:
ca:2c:e8:a0:c7:09:fc:cf:7b:1a:4a:7b:f9:ce:1b:
37:f2:61:b0:03:62:28:80:ef:bf:ce:49:d9:38:c0:
cd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:54:E2:CC:3D:64:84:25:71:BB:8D:FF:FD:B6:B4:85:66:9E:AF:E6
X509v3 Authority Key Identifier:
keyid:D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:39:60:75:fa:41:8a:b4:01:cf:8d:cc:14:65:d0:e5:82:b0:
58:56:52:05:32:f1:08:c2:ba:6d:fa:70:bd:db:8d:39:1f:92:
55:96:8f:02:32:33:1c:68:6f:16:b7:d0:e8:fc:17:1e:65:1f:
eb:86:04:2b:6f:27:7d:61:e4:f7:68:a5:cb:61:14:bd:b5:c6:
5b:99:48:58:13:43:36:a4:14:21:74:db:2e:5d:f9:bb:bf:1c:
9d:fe:88:05:a0:0d:0b:bd:8c:ed:fd:7b:94:ec:78:89:aa:47:
eb:2b:be:f0:67:7a:82:42:d0:10:d9:0f:9f:12:ab:93:87:9e:
ec:e1:83:92:82:21:87:32:8b:22:fd:cc:43:35:e5:33:bf:98:
88:f9:4b:61:5b:c2:1c:76:ea:1a:95:08:dd:ea:d6:64:3a:7d:
2e:39:e4:d5:a7:da:5f:99:bb:13:07:60:ed:96:2b:e8:f5:e1:
ea:8a:92:ac:28:cb:8e:35:f5:27:93:86:41:19:2d:f8:aa:6c:
8b:ff:7a:f8:82:27:14:f7:6a:dd:3d:1a:b6:a0:d6:08:7a:2d:
a4:a6:5d:1b:1b:d6:66:47:70:4f:45:76:ce:4c:1a:fd:35:64:
9a:b8:05:59:e1:2e:c0:e6:56:22:d8:9f:25:75:c7:77:a1:61:
0a:4a:7a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:53:04 2025 by rpki-client