Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
File: 152FaqqerRL3XLaM2ulqDSyN3h4.mft (raw, json)
Hash identifier: vvv+Y7LLwJn5fpZZ2ke/I0O/CHop7p3QJkK5RVX5n4Y=
Subject key identifier: 63:4E:A0:16:96:B7:27:3A:BD:D2:27:0A:2D:86:FF:EE:DF:79:8D:13
Authority key identifier: D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
Certificate issuer: /CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Certificate serial: 0196808F83D020E520E454767A16623CB8B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
Manifest number: 0ECF
Signing time: Tue 29 Apr 2025 08:00:11 +0000
Manifest this update: Tue 29 Apr 2025 08:00:11 +0000
Manifest next update: Wed 30 Apr 2025 08:00:11 +0000
Files and hashes: 1: 152FaqqerRL3XLaM2ulqDSyN3h4.crl (hash: GNOxMjFgNENYE8P2S5c+MOADhV/pDOHqRA+0ScMOKuA=)
2: 94BJXR3Uo1I8suMedxF8KSUQqKc.roa (hash: vsbbxp7WNMO8VB3ChL2ZEv1wwVeFWV4G1csg/XaauZ0=)
3: y4gQpfTPRcitVr25VP-twnptmvE.roa (hash: OvMK6obtD8GE0uGeIeGjeBIL4CSoip9fhbcWHpqNnSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:8f:83:d0:20:e5:20:e4:54:76:7a:16:62:3c:b8:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Validity
Not Before: Apr 29 08:00:11 2025 GMT
Not After : Apr 30 08:00:11 2025 GMT
Subject: CN=634ea01696b7273abdd2270a2d86ffeedf798d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2d:ac:76:ef:53:6d:29:fd:bb:b4:1d:69:d6:
63:14:a3:5d:cc:58:dd:0e:4a:6f:fe:71:74:cc:7a:
06:3e:36:e0:39:d3:b7:5a:33:d5:55:57:20:f2:93:
b4:ef:ac:04:33:6f:66:c3:84:e0:ca:83:6a:fe:a7:
bd:34:82:85:91:cb:24:ee:bb:fd:aa:ec:83:99:f9:
27:c3:52:f1:39:36:3f:d1:29:16:30:82:b7:5f:71:
45:f3:f4:9b:0b:ee:b0:74:b2:6a:4f:4c:12:14:dc:
85:c3:fd:03:0a:6a:0c:0a:4b:d5:b9:d9:f0:04:00:
56:ee:98:bb:91:0b:40:6e:dd:ec:47:67:1e:59:bc:
cc:93:be:f6:3a:7a:e0:67:39:a4:03:a3:4f:b7:9f:
b1:ba:79:f7:64:a5:b7:d9:a0:7f:8c:ea:60:c9:78:
3e:ce:aa:72:41:f3:cc:f9:e0:f1:4a:5f:ea:49:0e:
43:67:16:0a:8e:36:9f:d2:67:dc:28:5f:59:f6:9a:
46:91:f7:8e:fb:17:91:36:6a:ec:a3:c9:d1:38:cf:
00:ff:38:4e:a9:0a:76:2c:77:11:8b:9d:36:19:67:
95:77:47:8e:a7:2a:52:61:b7:e7:e8:38:a7:8e:56:
bf:be:02:7a:0e:69:fe:93:e5:b1:93:05:88:e6:15:
89:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4E:A0:16:96:B7:27:3A:BD:D2:27:0A:2D:86:FF:EE:DF:79:8D:13
X509v3 Authority Key Identifier:
keyid:D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:59:45:7e:de:ba:d2:5f:71:eb:68:b2:73:74:79:8c:39:2b:
2a:d6:c3:ef:45:2f:3d:aa:04:e9:89:2b:40:b1:d2:9a:f9:0a:
56:5d:da:62:91:31:4a:b2:cf:cd:85:be:36:18:c1:51:65:af:
9e:3c:ac:c5:c5:8a:b1:66:64:4d:bb:7e:b5:38:a0:b1:f3:0b:
ec:b0:cb:89:9d:82:96:0f:c7:eb:bf:35:19:6f:14:9e:c6:dc:
f1:5e:82:79:5a:66:c3:d1:e3:85:1c:2c:8b:33:40:a2:e5:ea:
83:a9:2d:93:be:fa:15:c2:36:5e:26:5a:7d:51:bc:0b:ba:2d:
02:e4:88:a6:cb:b9:83:18:bd:a1:1d:78:1b:2a:35:fc:ec:6d:
23:47:e1:65:be:fe:5a:ff:07:09:e1:dc:61:9d:de:4e:ec:85:
93:a9:2e:4c:a3:da:e7:b8:b1:20:01:8b:3f:34:81:f3:e0:e1:
63:a8:a1:e3:33:74:35:f0:2e:d8:52:82:75:1a:db:09:c1:63:
81:48:b6:b0:85:cd:d6:61:87:a4:1e:c6:39:ed:ff:cb:c7:1f:
f1:84:5b:3e:fa:69:7c:04:8d:b0:46:6d:84:4c:22:fe:c6:07:
14:44:6a:ba:ef:d5:02:55:dd:82:b3:1e:42:65:83:49:bd:92:
bc:d3:06:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:46:02 2025 by rpki-client