Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
File: 152FaqqerRL3XLaM2ulqDSyN3h4.mft (raw, json)
Hash identifier: Z7yXfBVX1wxwaO8HG7GTVDfaVc42JaQyPhEG4gtX2fs=
Subject key identifier: 3F:25:F0:16:D6:EA:73:75:EA:C4:37:24:1A:01:B8:B6:FB:89:67:FA
Authority key identifier: D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
Certificate issuer: /CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Certificate serial: 019A51BEF1F9458DB98325F4CF5C955DBE2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
Manifest number: 10C9
Signing time: Wed 05 Nov 2025 02:00:59 +0000
Manifest this update: Wed 05 Nov 2025 02:00:59 +0000
Manifest next update: Thu 06 Nov 2025 02:00:59 +0000
Files and hashes: 1: 152FaqqerRL3XLaM2ulqDSyN3h4.crl (hash: CZQBljxBK0TwI92MZEFhIinMvACTpGKfQ8QogDMEZkw=)
2: 94BJXR3Uo1I8suMedxF8KSUQqKc.roa (hash: vsbbxp7WNMO8VB3ChL2ZEv1wwVeFWV4G1csg/XaauZ0=)
3: y4gQpfTPRcitVr25VP-twnptmvE.roa (hash: OvMK6obtD8GE0uGeIeGjeBIL4CSoip9fhbcWHpqNnSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:f1:f9:45:8d:b9:83:25:f4:cf:5c:95:5d:be:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Validity
Not Before: Nov 5 02:00:59 2025 GMT
Not After : Nov 6 02:00:59 2025 GMT
Subject: CN=3f25f016d6ea7375eac437241a01b8b6fb8967fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:be:97:1a:fb:1a:a0:59:e2:b4:84:83:97:8b:
ff:fa:f0:0f:02:d2:14:33:00:05:93:a1:64:36:a9:
a7:6c:22:20:1a:e8:e1:e8:d1:a3:87:ed:a2:2e:f8:
0b:a8:11:64:20:b7:09:3c:88:dc:c2:f1:3f:17:32:
df:14:0a:17:50:ae:6d:0c:93:50:2a:81:fb:aa:be:
8e:5c:16:92:25:8d:0b:55:96:4c:ed:de:ee:28:1f:
cf:17:06:96:5a:0a:b8:b2:3f:67:1b:cd:e0:52:70:
9c:a0:97:cb:3c:96:ab:a5:31:c2:f2:2c:da:71:5e:
65:9a:9f:32:9a:1b:ad:f2:70:e9:d8:81:27:51:9c:
7d:80:58:d2:7a:d8:e6:7b:f3:d7:bb:a0:f8:9f:ea:
a1:ff:6a:c9:ca:88:4b:a8:04:15:75:0f:d0:80:aa:
bb:df:c0:9b:dd:4d:dd:c6:f7:7c:1d:bb:17:23:07:
de:6a:bd:16:e7:f3:a5:cc:b5:69:41:6f:d0:94:fc:
68:80:47:f1:a9:2c:08:40:ec:b9:09:79:c5:7f:97:
e6:43:3c:8d:19:1f:0f:08:53:b4:78:f2:e7:a7:07:
36:43:58:cf:b0:73:63:d2:6c:59:28:e9:ae:0c:91:
66:f0:d5:da:26:af:fd:fb:86:56:39:03:10:6e:06:
ec:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:25:F0:16:D6:EA:73:75:EA:C4:37:24:1A:01:B8:B6:FB:89:67:FA
X509v3 Authority Key Identifier:
keyid:D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:0c:59:b1:ef:78:51:0b:76:f2:5f:ee:b3:0f:00:b7:52:5d:
18:70:ec:e9:e4:88:81:50:ca:06:d0:b6:fc:ee:89:e3:38:d4:
17:ea:a3:c2:0c:0b:19:cf:d3:2d:10:a7:f9:14:42:6a:4b:01:
69:18:8e:73:7a:41:1e:18:39:35:e2:49:01:4c:58:2c:b3:a4:
17:9f:72:9c:5f:2b:b3:82:f7:c2:cf:a8:9a:70:f4:ee:1a:2e:
6d:25:79:e3:e7:cb:d9:7a:3c:4b:fb:e9:c7:9f:bc:8c:b7:59:
91:81:fd:20:35:24:8f:3e:99:17:a3:c1:b6:44:db:67:4b:dc:
94:4f:15:6d:fc:70:83:46:5e:18:63:e6:10:4e:2e:e3:6e:00:
13:d8:ae:cc:14:2b:fb:91:5d:dd:46:8e:ce:85:f3:51:c0:68:
e5:30:bb:61:14:a6:0e:5e:34:9b:14:93:d8:ef:d9:0f:fc:c8:
c2:8c:d4:e7:f9:7a:60:9d:51:cf:65:c9:c9:a8:c3:be:6d:54:
5d:37:e8:35:6a:83:9a:e3:20:5b:96:b6:3c:4b:0a:d0:cd:f5:
c7:96:d5:a9:8b:46:ee:5e:c4:63:54:16:56:86:51:f9:71:9f:
6d:44:68:2e:7e:e9:d6:3a:44:32:cb:70:ca:ff:6f:93:81:c2:
e6:02:eb:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRvvH5RY25gyX0z1yVXb4rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OWQ4NTZhYWE5ZWFkMTJmNzVjYjY4Y2RhZTk2YTBkMmM4
ZGRlMWUwHhcNMjUxMTA1MDIwMDU5WhcNMjUxMTA2MDIwMDU5WjAzMTEwLwYDVQQD
EygzZjI1ZjAxNmQ2ZWE3Mzc1ZWFjNDM3MjQxYTAxYjhiNmZiODk2N2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1r6XGvsaoFnitISDl4v/+vAPAtIU
MwAFk6FkNqmnbCIgGujh6NGjh+2iLvgLqBFkILcJPIjcwvE/FzLfFAoXUK5tDJNQ
KoH7qr6OXBaSJY0LVZZM7d7uKB/PFwaWWgq4sj9nG83gUnCcoJfLPJarpTHC8iza
cV5lmp8ymhut8nDp2IEnUZx9gFjSetjme/PXu6D4n+qh/2rJyohLqAQVdQ/QgKq7
38Cb3U3dxvd8HbsXIwfear0W5/OlzLVpQW/QlPxogEfxqSwIQOy5CXnFf5fmQzyN
GR8PCFO0ePLnpwc2Q1jPsHNj0mxZKOmuDJFm8NXaJq/9+4ZWOQMQbgbsWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8l8BbW6nN16sQ3JBoBuLb7iWf6MB8GA1UdIwQY
MBaAFNedhWqqnq0S91y2jNrpag0sjd4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTUyRmFxcWVyUkwzWExhTTJ1bHFEU3lOM2g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hNWJhYTItMmEzNS00Yzc2LWE5NDAt
NTk5MGNkNGRlODhiLzEvMTUyRmFxcWVyUkwzWExhTTJ1bHFEU3lOM2g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9hNWJhYTItMmEzNS00Yzc2LWE5NDAtNTk5MGNkNGRlODhi
LzEvMTUyRmFxcWVyUkwzWExhTTJ1bHFEU3lOM2g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQxZse94
UQt28l/usw8At1JdGHDs6eSIgVDKBtC2/O6J4zjUF+qjwgwLGc/TLRCn+RRCaksB
aRiOc3pBHhg5NeJJAUxYLLOkF59ynF8rs4L3ws+omnD07houbSV54+fL2Xo8S/vp
x5+8jLdZkYH9IDUkjz6ZF6PBtkTbZ0vclE8Vbfxwg0ZeGGPmEE4u424AE9iuzBQr
+5Fd3UaOzoXzUcBo5TC7YRSmDl40mxST2O/ZD/zIwozU5/l6YJ1Rz2XJyajDvm1U
XTfoNWqDmuMgW5a2PEsK0M31x5bVqYtG7l7EY1QWVoZR+XGfbURoLn7p1jpEMstw
yv9vk4HC5gLr/w==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:03:41 2025 by rpki-client