Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
File: 152kZWFcYAlDcIM4ktqEyIbhxO8.mft (raw, json)
Hash identifier: q1Y1rbK10UodDOOnnGATzcgNriE379aAhPTKuWY/KAE=
Subject key identifier: A3:1F:54:64:13:C3:D2:42:F5:69:31:55:F6:DE:F9:7A:F6:4D:0E:E8
Authority key identifier: D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
Certificate issuer: /CN=d79da465615c60094370833892da84c886e1c4ef
Certificate serial: 019880C1F8F8381A9BB84B9BC50EC065E381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
Manifest number: 1623
Signing time: Wed 06 Aug 2025 19:00:52 +0000
Manifest this update: Wed 06 Aug 2025 19:00:52 +0000
Manifest next update: Thu 07 Aug 2025 19:00:52 +0000
Files and hashes: 1: 152kZWFcYAlDcIM4ktqEyIbhxO8.crl (hash: 0CWqdCtFhYOHDI7J9SFqqNyVzfvAb8I/g4+8KBS54WU=)
2: D6tQMtTrcrX-gfAb6Oldi--cuH0.roa (hash: hSrHBvCFCmXDyAQnKcTo97bjwp9R955PaX/sDtrTv8s=)
3: u1fNRyXyMUiOEFJEZY8QmByB7E8.roa (hash: ZcFES+4nNrRKAxBfx+5gDYNJV+7c5V3Qx9m+LvRk+bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c1:f8:f8:38:1a:9b:b8:4b:9b:c5:0e:c0:65:e3:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79da465615c60094370833892da84c886e1c4ef
Validity
Not Before: Aug 6 19:00:52 2025 GMT
Not After : Aug 7 19:00:52 2025 GMT
Subject: CN=a31f546413c3d242f5693155f6def97af64d0ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:23:c9:bf:43:60:2a:53:bc:3e:f4:c3:83:9b:
3d:60:8b:00:3e:57:87:cc:7c:22:d7:b0:e7:72:91:
3e:f8:b0:d9:41:bd:33:39:39:b9:fc:e4:3e:8c:29:
78:70:79:69:c5:ed:cf:5d:cd:59:f8:3a:24:b0:ff:
6a:a0:82:f8:22:7c:21:b3:e0:9e:a5:54:16:58:ef:
aa:69:16:6a:65:be:98:cd:9e:ef:24:68:f7:61:f2:
69:b4:2d:96:3e:be:1a:70:33:7d:f2:75:ad:b8:fe:
d3:ea:6b:94:51:3c:9f:33:68:f5:00:ee:77:4a:fe:
68:77:c9:c2:d2:b0:bc:70:63:79:ff:71:b7:79:15:
37:5f:46:aa:63:25:bb:9c:45:39:d1:bf:6e:41:fc:
86:c3:dd:9f:b3:1b:c5:88:22:3d:0c:71:8d:a3:6a:
a4:9f:9f:f0:c0:b2:cf:c0:fa:97:61:76:4f:d4:66:
2d:60:76:97:39:9f:5c:c1:99:d3:11:73:46:7e:38:
6c:b6:09:4b:97:91:51:67:35:9f:8e:aa:b4:2e:f5:
57:d2:41:74:1d:41:d5:b6:6f:90:b3:d2:20:6d:62:
f8:a3:4d:55:9e:63:1f:82:dc:ca:eb:b2:15:4d:b5:
9e:ad:90:16:ab:b1:bf:ef:77:2d:47:01:aa:e3:71:
76:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1F:54:64:13:C3:D2:42:F5:69:31:55:F6:DE:F9:7A:F6:4D:0E:E8
X509v3 Authority Key Identifier:
keyid:D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d2:a3:58:f6:47:58:de:00:de:53:5c:38:88:fc:20:f4:64:
62:2f:84:38:90:6d:0b:cc:bf:48:e2:0c:ea:74:73:4d:49:47:
df:39:a5:87:7f:ec:71:25:c8:96:00:9f:11:43:19:22:7a:a8:
28:f0:1a:74:e3:0e:22:35:2a:86:62:bd:5b:36:9b:8a:af:c2:
57:cd:66:85:4e:86:d5:b5:24:3a:51:39:f1:1f:b7:75:b1:ce:
e7:e9:95:9a:75:3f:fd:68:83:6a:51:2f:ce:f6:14:0a:d9:fb:
61:66:e5:7d:b4:e5:60:3b:ac:d2:8e:6f:be:e8:54:34:df:fc:
19:f9:38:17:de:8b:6f:1e:17:5c:25:ac:42:5b:6e:af:c2:f1:
6f:18:96:3f:01:8e:95:65:ee:6d:d6:a1:98:df:36:0d:6b:ce:
c5:74:4e:59:30:3e:b0:cd:ff:26:d9:86:05:cc:50:03:5c:59:
33:b7:93:32:7e:31:07:30:14:d6:c3:a4:4e:c6:c8:43:62:1e:
fa:50:69:ed:d5:2d:a4:b2:73:45:65:f1:84:25:fd:02:ee:5e:
74:92:fd:ae:be:6b:81:6c:dc:b5:bf:d9:9f:f3:e1:b3:8b:a4:
85:39:2e:7c:d5:dc:fe:9e:30:22:f1:f7:fe:7f:71:a4:9e:55:
59:aa:0f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:00:10 2025 by rpki-client