Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
File: 152FaqqerRL3XLaM2ulqDSyN3h4.mft (raw, json)
Hash identifier: b3veboDUoNpehpgAR4ouJSTRwzZjJa7jE3m0H5M03ag=
Subject key identifier: F2:F4:50:66:4E:FE:BD:D9:BD:40:46:BE:40:69:43:49:81:DE:16:2E
Authority key identifier: D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
Certificate issuer: /CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Certificate serial: 019A4FD06AB2B275BB8E08E3FF706DBD946A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
Manifest number: 10C8
Signing time: Tue 04 Nov 2025 17:00:50 +0000
Manifest this update: Tue 04 Nov 2025 17:00:50 +0000
Manifest next update: Wed 05 Nov 2025 17:00:50 +0000
Files and hashes: 1: 152FaqqerRL3XLaM2ulqDSyN3h4.crl (hash: xO8GUjCKaVWtxDqSrHRhtl6Wj6eBGhEcMqRvZWMDfwY=)
2: 94BJXR3Uo1I8suMedxF8KSUQqKc.roa (hash: vsbbxp7WNMO8VB3ChL2ZEv1wwVeFWV4G1csg/XaauZ0=)
3: y4gQpfTPRcitVr25VP-twnptmvE.roa (hash: OvMK6obtD8GE0uGeIeGjeBIL4CSoip9fhbcWHpqNnSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:6a:b2:b2:75:bb:8e:08:e3:ff:70:6d:bd:94:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Validity
Not Before: Nov 4 17:00:50 2025 GMT
Not After : Nov 5 17:00:50 2025 GMT
Subject: CN=f2f450664efebdd9bd4046be4069434981de162e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:52:91:e2:ec:14:d9:ca:38:a6:90:99:02:3d:
c9:1c:de:22:70:1f:5f:41:1c:19:6c:98:51:cc:9e:
45:52:e0:2b:13:5b:e1:fb:ee:1b:6d:76:c5:ba:37:
c8:94:16:b6:9f:c8:e4:50:2e:ed:a3:4d:75:ee:97:
3a:6c:5d:e7:f3:a7:11:df:87:ad:b6:bc:b1:30:5b:
93:fb:4c:ea:15:13:ed:7a:aa:06:52:00:e6:e7:06:
2b:6a:14:e9:c9:5b:4f:34:a2:bc:2e:08:f5:59:44:
9d:95:c6:71:97:ea:35:8d:31:3e:fb:a8:83:ed:4a:
3f:0c:6d:4b:cf:77:c0:b4:b8:df:86:a0:2e:0e:bb:
14:76:cb:f1:cd:38:1f:28:85:bd:b1:87:c7:53:bd:
42:6e:7c:9f:e0:b5:48:45:56:57:22:75:c4:67:70:
84:bf:a9:20:21:1d:41:b0:86:f1:96:00:19:27:ad:
8e:6d:e5:8f:6d:7d:5f:3a:c6:b6:d5:02:25:fe:5b:
3d:e9:7a:38:77:b7:31:0e:50:e4:9e:1f:19:f1:64:
b8:eb:17:2c:a5:2c:63:24:d7:0a:47:80:20:43:ec:
4c:e3:d2:de:11:56:bc:e7:15:44:20:2c:f2:e7:e5:
e4:8d:f5:95:29:a8:e1:4d:7b:ed:58:34:37:c6:04:
f3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F4:50:66:4E:FE:BD:D9:BD:40:46:BE:40:69:43:49:81:DE:16:2E
X509v3 Authority Key Identifier:
keyid:D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:05:34:3c:ea:02:26:ee:d1:ec:18:0e:72:7d:3b:f1:2e:0f:
04:9f:02:70:37:f6:f8:3d:25:40:7d:5c:6e:38:c2:d9:50:79:
38:8a:4a:fc:4c:23:87:14:d3:e6:af:ab:c3:9d:ae:85:04:ef:
28:d8:6f:7f:83:14:a5:6f:58:e1:c8:54:58:25:bd:36:d2:4a:
30:51:48:a5:20:57:f0:3a:5a:8c:90:61:8a:61:b1:96:cf:6d:
b6:8f:6e:50:7a:ba:9d:5a:23:14:80:bc:13:9b:a9:45:3c:b6:
7c:42:a6:38:4e:60:60:33:22:87:81:02:b8:aa:ad:56:19:05:
c7:44:b3:0d:5f:4d:d0:50:48:ae:0f:64:1c:be:f1:fc:46:b0:
33:62:ae:a2:98:93:09:8b:4b:ed:ea:7e:26:d3:66:d9:f3:80:
ea:bd:fe:3d:ad:33:0a:50:c4:4b:e3:1c:1b:58:f5:a0:6a:3e:
fa:dc:49:23:13:00:44:4e:6d:4f:a7:d4:c5:a6:d2:dc:e2:70:
2a:ae:e1:b1:bb:a3:70:3e:24:fd:e5:a6:90:8b:e3:99:5c:48:
ca:6a:d0:44:72:35:fe:bf:f9:8a:65:84:ba:c8:90:fb:87:e9:
32:a4:35:8d:7c:43:72:70:1e:c9:17:c8:ed:be:83:19:6b:88:
0c:8b:9a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:19:47 2025 by rpki-client