Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
File: 152kZWFcYAlDcIM4ktqEyIbhxO8.mft (raw, json)
Hash identifier: Yw3TOZTHtZ8PNsTxnMFqCZyE0lr3XbnV5agc0ht755g=
Subject key identifier: 0B:4C:FD:55:DD:64:C3:85:4D:96:F6:8B:5B:31:3E:45:B7:39:BE:20
Authority key identifier: D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
Certificate issuer: /CN=d79da465615c60094370833892da84c886e1c4ef
Certificate serial: 0197B7EA8BF745E20B801CE986171C28273D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
Manifest number: 15BB
Signing time: Sat 28 Jun 2025 19:01:31 +0000
Manifest this update: Sat 28 Jun 2025 19:01:31 +0000
Manifest next update: Sun 29 Jun 2025 19:01:31 +0000
Files and hashes: 1: 152kZWFcYAlDcIM4ktqEyIbhxO8.crl (hash: NcppKZGjpnC9AM4jWoeQPYzd7bVDLTkwqZTKGRI3vIE=)
2: D6tQMtTrcrX-gfAb6Oldi--cuH0.roa (hash: hSrHBvCFCmXDyAQnKcTo97bjwp9R955PaX/sDtrTv8s=)
3: u1fNRyXyMUiOEFJEZY8QmByB7E8.roa (hash: ZcFES+4nNrRKAxBfx+5gDYNJV+7c5V3Qx9m+LvRk+bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:8b:f7:45:e2:0b:80:1c:e9:86:17:1c:28:27:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79da465615c60094370833892da84c886e1c4ef
Validity
Not Before: Jun 28 19:01:31 2025 GMT
Not After : Jun 29 19:01:31 2025 GMT
Subject: CN=0b4cfd55dd64c3854d96f68b5b313e45b739be20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a7:d7:82:d4:a5:fb:08:32:0e:0c:31:09:ac:
f2:29:7c:b9:ae:38:a1:51:30:c8:4b:a8:69:7f:2a:
92:68:00:3a:2a:b1:b9:3c:ac:ac:cb:93:5f:fe:2f:
71:8b:5f:33:39:2b:bf:94:26:ec:63:3f:e9:c3:3b:
41:2f:6f:36:4a:ac:e3:5c:19:de:87:a2:0c:46:8e:
35:19:35:ef:11:99:19:ad:eb:c9:2e:2c:83:10:af:
5e:65:b1:6e:10:41:49:93:02:1b:79:e1:d9:f9:de:
af:8e:70:2b:68:13:a5:6e:41:2c:a6:9c:d7:c4:0a:
a9:bf:54:c3:14:30:f5:85:d5:fa:96:65:98:81:5a:
8f:75:0e:91:80:be:4d:1e:4b:91:e7:57:1a:22:69:
a7:77:23:3d:e1:a5:6a:4a:1f:09:6a:02:8d:7c:4d:
c3:c0:61:e3:d1:0b:7b:f2:71:21:23:90:6d:d0:2f:
2b:13:23:d6:d9:03:d1:32:2f:ad:77:0b:af:f9:c6:
2f:f9:de:41:0a:d2:80:09:5a:53:d3:0e:d6:da:9c:
a1:26:bb:9f:f3:ae:7c:59:b3:3a:55:ec:af:56:28:
64:3c:7e:9b:82:d3:86:0c:c6:16:42:2e:cb:95:ac:
c2:f1:37:0e:58:78:3d:2e:ef:fb:60:b7:cd:8e:bf:
d8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4C:FD:55:DD:64:C3:85:4D:96:F6:8B:5B:31:3E:45:B7:39:BE:20
X509v3 Authority Key Identifier:
keyid:D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:52:12:02:12:8e:9c:82:a0:cd:b7:62:62:fa:d6:3a:62:6e:
9c:f5:c5:27:c1:06:20:99:71:fe:5d:f4:09:82:27:e1:58:25:
e3:6a:a6:59:73:7f:23:d6:ee:76:17:c2:53:55:90:92:ab:13:
6f:31:70:10:3a:3e:38:47:90:d3:40:ec:28:52:79:ae:c2:3d:
20:d9:9b:30:55:19:6f:0f:8b:47:d0:c4:b7:b6:41:db:4b:90:
52:e4:74:5b:f2:43:ed:ee:ba:35:de:e4:c1:25:2e:ce:f0:1f:
26:3e:57:5c:46:1f:fc:b6:ea:8b:30:2b:53:79:90:36:05:a8:
22:b1:9a:7d:13:bf:cc:0f:e6:9b:c6:79:dd:9c:34:7b:dd:16:
97:48:24:ed:52:6c:ab:ff:7e:ca:c7:52:be:48:10:28:9c:53:
4e:3d:17:38:c3:15:06:30:cb:3a:52:72:58:d4:7b:22:33:73:
5e:db:87:8d:34:54:34:b3:39:ab:cb:c4:1b:25:0a:3b:b3:91:
c8:ea:04:d2:6c:52:65:1f:15:14:e7:2e:b4:8b:c9:7f:bb:44:
95:13:04:0f:1a:e0:25:ee:0e:ac:c7:85:8e:68:99:21:e7:01:
a8:7b:01:f6:38:e5:41:0c:85:39:6b:60:aa:d5:e3:e0:3d:66:
cd:a6:b8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:13:17 2025 by rpki-client