Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
File: 152FaqqerRL3XLaM2ulqDSyN3h4.mft (raw, json)
Hash identifier: 6CLfpexV7LXe3PfJN1xQZmIfUuWjIZ0iSQpGU9n6q+8=
Subject key identifier: 97:09:56:D1:D5:3E:A0:5D:BA:8F:AF:09:CD:75:34:20:DA:5E:AC:09
Authority key identifier: D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
Certificate issuer: /CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Certificate serial: 0198D54E71F182184F55B92216ABD0BDDA0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
Manifest number: 1004
Signing time: Sat 23 Aug 2025 05:02:24 +0000
Manifest this update: Sat 23 Aug 2025 05:02:24 +0000
Manifest next update: Sun 24 Aug 2025 05:02:24 +0000
Files and hashes: 1: 152FaqqerRL3XLaM2ulqDSyN3h4.crl (hash: gWh6sX/yJZf/SlclaypzVJK86xPoIEZklowq7xD66TA=)
2: 94BJXR3Uo1I8suMedxF8KSUQqKc.roa (hash: vsbbxp7WNMO8VB3ChL2ZEv1wwVeFWV4G1csg/XaauZ0=)
3: y4gQpfTPRcitVr25VP-twnptmvE.roa (hash: OvMK6obtD8GE0uGeIeGjeBIL4CSoip9fhbcWHpqNnSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:71:f1:82:18:4f:55:b9:22:16:ab:d0:bd:da:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Validity
Not Before: Aug 23 05:02:24 2025 GMT
Not After : Aug 24 05:02:24 2025 GMT
Subject: CN=970956d1d53ea05dba8faf09cd753420da5eac09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c3:8f:62:6f:75:ef:56:9a:45:97:24:29:dd:
69:ca:a5:d2:a0:65:49:81:b1:b0:d5:e6:29:b2:6a:
c2:ea:b8:07:39:5a:52:26:c0:b1:46:27:41:2e:3f:
8a:19:94:0d:8d:4b:b2:13:70:94:8c:d9:68:e1:0e:
88:df:af:6d:9f:65:be:47:94:6d:b4:12:ac:3d:d7:
cd:15:7f:e2:36:5b:7c:e4:a9:7d:89:94:35:fa:1e:
0b:a6:f6:6a:a1:98:11:0e:fa:f2:cc:87:62:3d:ec:
af:68:d5:e5:74:bb:59:82:db:cc:ad:84:7f:33:6f:
48:a7:72:98:ab:b4:c6:0a:87:13:0d:d6:0f:7b:8f:
df:b2:24:74:68:19:ff:2d:58:e7:74:81:c2:1d:84:
0f:9b:c6:8c:39:d9:83:00:86:62:7d:83:21:8c:dc:
5c:fa:d6:f5:03:c0:97:be:9f:53:a3:90:29:a4:eb:
83:c4:ac:b0:1a:fe:a6:78:4e:6c:7d:a0:f4:e1:af:
91:81:9b:72:70:13:1e:b4:a7:c1:22:b1:f4:79:08:
d6:c3:58:9e:09:fe:8a:ad:b0:20:8f:5e:fd:b1:ea:
ed:ab:69:90:7f:5f:cc:ea:4a:9c:3c:f2:90:41:5f:
7b:94:26:da:fa:b7:6c:30:60:b8:f9:a2:c4:fa:ee:
b9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:09:56:D1:D5:3E:A0:5D:BA:8F:AF:09:CD:75:34:20:DA:5E:AC:09
X509v3 Authority Key Identifier:
keyid:D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:9e:a7:95:c6:58:fd:9e:47:1c:13:ea:a0:f4:ad:79:c3:ab:
4b:86:27:b6:42:3c:b4:e0:41:3d:74:c9:89:6f:5a:13:0e:1d:
d6:a2:41:77:9f:8a:9b:7b:ca:8b:66:8e:5b:0b:89:3a:ad:0b:
21:5e:2b:23:48:d7:44:5a:7c:65:63:f4:cd:59:44:12:0d:84:
4e:32:0c:c0:71:b1:c5:01:80:ac:5d:3b:fd:91:2d:14:32:e1:
c3:7b:1c:1d:b0:ad:ec:c9:ec:ac:bc:fe:97:05:fd:af:58:40:
5d:af:af:5f:8a:7d:62:20:f2:9d:da:0f:d0:2c:ef:b0:a2:77:
aa:8b:08:7c:8a:fb:bb:39:2c:a9:93:e9:d6:c9:89:08:33:28:
91:6c:cc:7e:ad:54:11:30:34:41:b2:da:82:b9:72:2a:7f:10:
a3:a1:23:1c:23:da:7a:1b:d6:86:81:7e:88:19:ea:1d:67:e9:
2c:de:36:dd:e5:5e:78:39:6d:bf:82:a1:e2:b8:9d:81:99:00:
7c:c5:8c:46:da:aa:c2:45:e3:ba:98:8b:dd:97:5b:0a:b9:ba:
4e:60:55:28:74:7e:31:0f:7c:fc:66:40:a9:35:31:32:2d:51:
fc:a8:98:a2:ab:83:48:3b:c3:7c:e6:cd:6a:24:7d:ff:22:d5:
42:1c:cc:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTnHxghhPVbkiFqvQvdoKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OWQ4NTZhYWE5ZWFkMTJmNzVjYjY4Y2RhZTk2YTBkMmM4
ZGRlMWUwHhcNMjUwODIzMDUwMjI0WhcNMjUwODI0MDUwMjI0WjAzMTEwLwYDVQQD
Eyg5NzA5NTZkMWQ1M2VhMDVkYmE4ZmFmMDljZDc1MzQyMGRhNWVhYzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscOPYm9171aaRZckKd1pyqXSoGVJ
gbGw1eYpsmrC6rgHOVpSJsCxRidBLj+KGZQNjUuyE3CUjNlo4Q6I369tn2W+R5Rt
tBKsPdfNFX/iNlt85Kl9iZQ1+h4LpvZqoZgRDvryzIdiPeyvaNXldLtZgtvMrYR/
M29Ip3KYq7TGCocTDdYPe4/fsiR0aBn/LVjndIHCHYQPm8aMOdmDAIZifYMhjNxc
+tb1A8CXvp9To5AppOuDxKywGv6meE5sfaD04a+RgZtycBMetKfBIrH0eQjWw1ie
Cf6KrbAgj179sertq2mQf1/M6kqcPPKQQV97lCba+rdsMGC4+aLE+u654wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcJVtHVPqBduo+vCc11NCDaXqwJMB8GA1UdIwQY
MBaAFNedhWqqnq0S91y2jNrpag0sjd4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTUyRmFxcWVyUkwzWExhTTJ1bHFEU3lOM2g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hNWJhYTItMmEzNS00Yzc2LWE5NDAt
NTk5MGNkNGRlODhiLzEvMTUyRmFxcWVyUkwzWExhTTJ1bHFEU3lOM2g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9hNWJhYTItMmEzNS00Yzc2LWE5NDAtNTk5MGNkNGRlODhi
LzEvMTUyRmFxcWVyUkwzWExhTTJ1bHFEU3lOM2g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMp6nlcZY
/Z5HHBPqoPStecOrS4YntkI8tOBBPXTJiW9aEw4d1qJBd5+Km3vKi2aOWwuJOq0L
IV4rI0jXRFp8ZWP0zVlEEg2ETjIMwHGxxQGArF07/ZEtFDLhw3scHbCt7MnsrLz+
lwX9r1hAXa+vX4p9YiDyndoP0CzvsKJ3qosIfIr7uzksqZPp1smJCDMokWzMfq1U
ETA0QbLagrlyKn8Qo6EjHCPaehvWhoF+iBnqHWfpLN423eVeeDltv4Kh4ridgZkA
fMWMRtqqwkXjupiL3ZdbCrm6TmBVKHR+MQ98/GZAqTUxMi1R/KiYoquDSDvDfObN
aiR9/yLVQhzMig==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:16 2025 by rpki-client