Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
File: 152FaqqerRL3XLaM2ulqDSyN3h4.mft (raw, json)
Hash identifier: nHGAoUTlI5fvLXHd9L+6grrSqIOWGUqUDYUmxb4+y60=
Subject key identifier: 48:3C:96:96:88:F2:46:03:8A:64:CD:9B:88:91:65:B5:DF:BE:93:47
Authority key identifier: D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
Certificate issuer: /CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Certificate serial: 01987E6642D5D5167F2D5EF0A28B92D9E4C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
Manifest number: 0FD7
Signing time: Wed 06 Aug 2025 08:01:27 +0000
Manifest this update: Wed 06 Aug 2025 08:01:27 +0000
Manifest next update: Thu 07 Aug 2025 08:01:27 +0000
Files and hashes: 1: 152FaqqerRL3XLaM2ulqDSyN3h4.crl (hash: LWMcuETagFaDXFpycRtlzMmpcds5z5LVUkZC13xhRfQ=)
2: 94BJXR3Uo1I8suMedxF8KSUQqKc.roa (hash: vsbbxp7WNMO8VB3ChL2ZEv1wwVeFWV4G1csg/XaauZ0=)
3: y4gQpfTPRcitVr25VP-twnptmvE.roa (hash: OvMK6obtD8GE0uGeIeGjeBIL4CSoip9fhbcWHpqNnSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:66:42:d5:d5:16:7f:2d:5e:f0:a2:8b:92:d9:e4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Validity
Not Before: Aug 6 08:01:27 2025 GMT
Not After : Aug 7 08:01:27 2025 GMT
Subject: CN=483c969688f246038a64cd9b889165b5dfbe9347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:16:ff:12:a4:77:f6:0f:64:52:11:58:dd:38:
c7:28:31:79:3d:bc:1b:15:25:36:fa:fd:5e:39:d9:
1a:ed:b0:0d:19:4e:e3:83:b4:83:31:91:52:50:c1:
a3:57:93:36:6d:a3:8e:f7:cb:ab:a9:14:71:cf:c9:
03:b0:30:65:b5:67:5f:a8:d0:26:10:74:eb:78:cb:
a0:02:43:60:4c:d2:34:f6:1f:fa:2f:54:4d:dd:90:
e3:20:96:69:61:3f:00:e9:f2:e4:6a:79:dd:32:52:
6e:f0:cf:cb:42:9b:88:02:57:0e:55:c3:91:fe:b7:
eb:38:72:09:d5:c7:fb:eb:b1:2a:ec:05:71:58:98:
97:45:a8:92:49:4f:bd:c7:74:37:1e:d9:9e:a1:fa:
23:de:b8:50:53:cd:20:a2:4c:bd:87:56:ba:5f:6f:
36:bd:dd:92:29:a3:d1:06:35:65:41:f9:6e:dd:17:
c9:94:3c:92:6d:92:e0:b5:db:5f:35:a9:8b:e6:bb:
d4:86:a3:0a:0c:39:00:63:6a:a6:8e:00:12:16:6b:
da:68:f0:0d:30:3d:fe:0c:d1:77:fa:7b:c7:4c:a1:
71:a7:95:b4:e9:a3:e1:0c:2a:44:a7:a3:06:a8:4d:
34:c4:f5:69:c4:fb:07:21:6a:e1:4e:58:c1:81:37:
45:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3C:96:96:88:F2:46:03:8A:64:CD:9B:88:91:65:B5:DF:BE:93:47
X509v3 Authority Key Identifier:
keyid:D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e3:72:d6:b1:da:53:26:0a:b6:1d:d6:30:01:0c:b5:e8:5f:
bc:ff:7e:82:68:cc:a1:34:23:c1:4d:61:09:3e:c1:c5:79:5a:
20:60:fa:d9:af:5c:ae:7a:c1:72:35:f8:36:0d:da:3f:83:3a:
ff:be:15:c3:51:7c:50:d7:42:ae:16:cd:9d:77:c3:c9:6b:9d:
e4:6a:56:50:f3:e5:4e:4c:13:d9:a7:6c:45:9d:52:eb:43:01:
26:69:9f:ed:f0:5c:ca:0e:fb:5b:de:37:84:9b:8d:27:dd:34:
a8:b2:fa:36:58:48:5c:38:0a:98:b8:08:dd:4e:35:f2:ad:62:
30:68:4a:02:9f:eb:ce:41:d0:0c:32:24:d9:44:11:23:cd:75:
59:39:c4:b2:7e:3c:28:56:11:2d:68:77:f2:64:86:fe:d6:c7:
56:47:3c:05:04:f0:99:75:bf:6a:ab:44:86:11:3f:29:5d:8d:
9b:40:ab:c0:2c:49:42:62:ac:39:1c:63:a2:77:03:fe:be:28:
e3:8e:24:49:fb:4b:8d:45:88:5b:0a:3a:b3:37:7c:b2:3f:fa:
1e:41:e2:36:5e:af:78:03:29:bf:84:b5:d7:c5:2b:fe:42:f8:
d5:2e:9a:b7:58:25:97:f5:cc:ec:ba:64:53:49:52:4e:02:b5:
00:0a:ca:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:14:55 2025 by rpki-client