Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
File: 152FaqqerRL3XLaM2ulqDSyN3h4.mft (raw, json)
Hash identifier: rGmMtOK22hRC3CyBv2w+PRjl5wAWNSogTwPQvaHHaZw=
Subject key identifier: 29:C9:69:AD:C3:24:FE:4D:C9:55:8F:B7:DF:00:5E:88:6C:DA:F3:18
Authority key identifier: D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
Certificate issuer: /CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Certificate serial: 0196865B0B822D6603858F6A75B50CC09DD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
Manifest number: 0ED2
Signing time: Wed 30 Apr 2025 11:00:35 +0000
Manifest this update: Wed 30 Apr 2025 11:00:35 +0000
Manifest next update: Thu 01 May 2025 11:00:35 +0000
Files and hashes: 1: 152FaqqerRL3XLaM2ulqDSyN3h4.crl (hash: M+w5+nr4uk9EmaDDbtW48mORM+RY+XrzhLvPC9PJ9gs=)
2: 94BJXR3Uo1I8suMedxF8KSUQqKc.roa (hash: vsbbxp7WNMO8VB3ChL2ZEv1wwVeFWV4G1csg/XaauZ0=)
3: y4gQpfTPRcitVr25VP-twnptmvE.roa (hash: OvMK6obtD8GE0uGeIeGjeBIL4CSoip9fhbcWHpqNnSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:5b:0b:82:2d:66:03:85:8f:6a:75:b5:0c:c0:9d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Validity
Not Before: Apr 30 11:00:35 2025 GMT
Not After : May 1 11:00:35 2025 GMT
Subject: CN=29c969adc324fe4dc9558fb7df005e886cdaf318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7d:2a:2b:31:d1:ed:38:dc:d8:2f:2a:97:ca:
16:c3:11:72:db:65:61:37:76:a3:39:42:d7:a0:ef:
5e:20:45:5d:00:d7:a9:d5:7c:d2:d3:01:7c:c3:7b:
fd:2d:9f:be:56:2e:e9:48:84:b0:8d:92:65:72:1f:
9f:0c:11:64:c4:c0:05:2e:f5:f2:c4:b2:10:91:27:
a7:7f:1a:84:f7:36:04:09:c3:14:3b:10:3f:97:28:
f6:5c:ee:73:a5:65:e1:ee:f7:76:9f:d3:fc:e0:30:
4c:51:7c:c1:e1:ac:cc:82:95:f5:57:a3:90:46:6a:
30:48:b8:a2:4b:e3:77:51:f3:ea:8e:37:e4:75:b4:
47:2f:e8:0f:88:70:41:4e:c3:a7:e3:83:b4:f4:2a:
ca:59:b2:7e:c1:6d:c0:4f:c1:09:e2:a1:4f:3a:3d:
12:f2:85:2d:2c:cf:d5:96:c1:fe:91:b8:6a:c0:37:
84:e1:73:8f:f1:b9:fd:76:e9:ee:69:a3:93:73:f5:
c8:a6:8d:03:b7:b5:55:80:56:17:68:2d:ea:2a:0c:
9f:b8:b0:35:bd:d3:da:0f:5f:6e:e8:71:5a:ea:f1:
a5:ce:a8:10:21:06:3d:ec:d8:8d:46:6b:08:3b:6e:
9a:5a:6e:2d:9b:78:7a:c3:30:b9:ea:2f:88:8b:11:
1c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C9:69:AD:C3:24:FE:4D:C9:55:8F:B7:DF:00:5E:88:6C:DA:F3:18
X509v3 Authority Key Identifier:
keyid:D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a6:39:25:6f:11:9f:d1:ed:e5:dd:05:5c:e8:8d:0c:62:16:
f8:50:8b:50:8b:fc:e6:fc:01:f7:4d:a2:09:cb:61:b9:c1:fc:
a9:01:16:f2:1a:a6:20:c2:df:1c:ce:f0:0e:d0:c1:55:e2:87:
81:da:e3:94:10:bf:af:8a:cd:2a:9f:9e:d3:31:e9:06:56:89:
f8:0e:d5:b5:91:2a:c5:90:34:28:f1:da:cc:cd:fd:c2:4e:d0:
4f:a4:40:a5:8f:41:d6:a3:66:52:5b:eb:80:e8:fe:35:9a:5e:
03:4f:e9:ce:af:37:52:df:b0:6e:3c:12:eb:38:fc:e9:c2:bb:
8b:f3:a8:c1:58:a0:cb:ee:02:9e:bc:68:91:30:52:06:69:6c:
93:5a:50:65:37:aa:62:f5:27:fe:29:c8:4f:44:8b:dc:52:55:
ab:cc:7c:ac:2a:c6:f7:b7:1d:47:2d:d8:f1:86:ec:57:18:c9:
cc:4e:d1:1f:ee:55:af:8a:7c:68:49:f9:47:d2:8e:55:69:9b:
99:8f:e7:9e:fb:f4:74:26:d1:2d:1d:a3:33:40:24:97:db:37:
9e:a9:36:b9:39:3c:5a:10:d8:a7:8a:11:f4:77:62:93:41:7d:
69:ff:35:8c:cd:ae:10:1f:d4:00:0d:a8:05:cb:a1:b9:14:ed:
2f:13:4b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:37:49 2025 by rpki-client