Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
File: 152kZWFcYAlDcIM4ktqEyIbhxO8.mft (raw, json)
Hash identifier: f+DKo2P89LM2GScq/kqvncGUp8F1jCh5sIV6FJ13oJY=
Subject key identifier: A8:86:08:B7:66:EC:67:E8:DA:75:72:54:94:83:F6:7D:11:2C:45:54
Authority key identifier: D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
Certificate issuer: /CN=d79da465615c60094370833892da84c886e1c4ef
Certificate serial: 019A0111144688424438953D68C0E20F8624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
Manifest number: 16EA
Signing time: Mon 20 Oct 2025 10:01:27 +0000
Manifest this update: Mon 20 Oct 2025 10:01:27 +0000
Manifest next update: Tue 21 Oct 2025 10:01:27 +0000
Files and hashes: 1: 152kZWFcYAlDcIM4ktqEyIbhxO8.crl (hash: ZxyZJ29T+2hNa0cWEh/ZVFWnB3j3AiAdOq8irnp/vHY=)
2: D6tQMtTrcrX-gfAb6Oldi--cuH0.roa (hash: hSrHBvCFCmXDyAQnKcTo97bjwp9R955PaX/sDtrTv8s=)
3: u1fNRyXyMUiOEFJEZY8QmByB7E8.roa (hash: ZcFES+4nNrRKAxBfx+5gDYNJV+7c5V3Qx9m+LvRk+bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:14:46:88:42:44:38:95:3d:68:c0:e2:0f:86:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79da465615c60094370833892da84c886e1c4ef
Validity
Not Before: Oct 20 10:01:27 2025 GMT
Not After : Oct 21 10:01:27 2025 GMT
Subject: CN=a88608b766ec67e8da7572549483f67d112c4554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c6:f6:ca:d6:9a:3a:83:a0:a3:96:bb:81:7b:
41:e0:21:aa:6c:a4:64:2b:c3:ff:4f:59:df:9f:63:
ed:91:cd:ac:d2:7f:f8:ce:1b:f9:aa:a0:d5:7d:4c:
62:28:29:8c:f1:10:83:30:73:f8:2f:09:12:4b:2f:
92:e8:19:b9:c3:41:57:6c:d0:09:31:41:38:70:30:
4f:04:0c:9d:d6:d1:9f:78:4f:98:d5:fd:78:31:ed:
be:f6:e0:8b:b2:4d:ea:a3:1e:53:3a:54:86:7b:5b:
67:15:e1:1d:9b:82:be:4a:a8:3b:56:2c:f7:da:03:
74:f8:e2:f7:d0:96:7b:7a:66:0a:1f:16:cf:1a:cb:
25:a1:53:a8:d4:b3:b0:b0:ea:68:6a:2c:33:cf:68:
57:ce:63:30:17:30:4d:91:97:08:a1:de:d3:a6:84:
75:bb:34:fc:89:3c:fb:92:63:2a:e7:64:92:c8:b3:
27:1c:c3:c7:0d:21:b7:ab:ec:e9:0c:d7:05:22:b3:
aa:29:2e:3b:f5:74:3a:43:3d:77:3a:61:cd:05:b6:
48:0b:c2:67:36:83:6c:60:27:dd:4b:61:56:45:0b:
58:07:97:06:56:26:33:42:0d:c3:5d:f1:93:ce:2c:
7e:35:88:4a:ee:64:68:3b:92:6e:f5:27:2b:67:f1:
7e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:86:08:B7:66:EC:67:E8:DA:75:72:54:94:83:F6:7D:11:2C:45:54
X509v3 Authority Key Identifier:
keyid:D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:a4:27:17:de:1f:04:36:d1:85:46:e4:05:ad:16:6e:38:8d:
90:05:dd:4b:fc:6a:51:f4:3f:7b:58:a9:cf:02:a5:b6:a8:a6:
89:29:67:1b:2d:ae:0c:d7:23:9b:33:b7:a6:7e:47:8d:ec:88:
9d:2a:5a:fb:35:47:4a:38:c1:7d:24:7c:c8:59:bc:48:47:9c:
42:76:9a:ea:7b:71:16:26:e6:b2:04:50:73:bd:67:eb:5f:c1:
8d:8a:17:37:21:f3:12:17:67:56:c7:78:70:78:ad:03:88:b4:
a9:76:8f:05:50:c1:9b:96:b0:5f:bb:13:19:dc:3b:ba:2e:46:
92:f2:b0:5b:c5:a9:e8:9c:de:15:d9:04:b6:34:b2:77:62:56:
70:06:8a:3a:9b:82:57:b6:18:4c:0c:9a:7a:52:84:0c:d1:e7:
cf:14:28:8d:66:60:a2:9f:f8:0e:ac:7d:d5:d6:af:b2:d6:57:
5c:7d:4d:b6:be:7b:a2:dc:4f:b2:72:2e:00:bb:ee:79:43:cf:
18:f5:d3:ac:63:7b:85:e0:1e:d1:bc:8d:46:23:bf:50:39:9b:
ee:ee:39:e8:a9:dd:96:24:30:98:de:8c:9b:af:57:31:28:14:
16:07:e6:12:e0:04:b4:04:92:7d:e6:2f:ad:b6:ed:c7:73:64:
b5:e1:ea:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:22:08 2025 by rpki-client