Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
File: Fa8HL54VarwgxGhJjiMjFSxzaug.mft (raw, json)
Hash identifier: g3fr1WoKGcYzfyQuyYcWrzQ/VqOPvB5YnL4Zv5yBznk=
Subject key identifier: A2:F1:5B:13:6E:1A:2B:5E:AD:53:D0:13:12:E5:8A:76:32:62:D8:E3
Authority key identifier: 15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
Certificate issuer: /CN=15af072f9e156abc20c468498e2323152c736ae8
Certificate serial: 0197B6D7A11C269BAE3D138FB04E23A63AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
Manifest number: 14F4
Signing time: Sat 28 Jun 2025 14:01:13 +0000
Manifest this update: Sat 28 Jun 2025 14:01:13 +0000
Manifest next update: Sun 29 Jun 2025 14:01:13 +0000
Files and hashes: 1: 1-hG6m2b1-771ZXFUCad6-Q0HqS0.roa (hash: iRlAMEhmdJkdMf5CTvW6WMLAwT23DftwTFfnt2+39Po=)
2: Fa8HL54VarwgxGhJjiMjFSxzaug.crl (hash: qndk3EamlSJtMFIDwA7SsZxMFyoN9buPLQQUR3siwoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:a1:1c:26:9b:ae:3d:13:8f:b0:4e:23:a6:3a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15af072f9e156abc20c468498e2323152c736ae8
Validity
Not Before: Jun 28 14:01:13 2025 GMT
Not After : Jun 29 14:01:13 2025 GMT
Subject: CN=a2f15b136e1a2b5ead53d01312e58a763262d8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:86:c3:89:fe:bb:83:47:c3:ef:aa:0c:46:2b:
d6:85:d2:39:68:49:2b:e8:16:9f:ea:16:41:65:94:
cf:85:95:de:42:13:33:c0:30:69:9e:b2:27:d7:2b:
ff:3a:83:6f:36:51:e7:27:64:07:b9:03:b9:6b:d0:
38:7f:83:db:0f:3e:2d:f8:80:d5:09:44:4b:6f:b4:
a7:63:09:01:38:3b:d6:cb:61:23:c4:36:ff:da:3a:
74:f1:7c:ba:d3:92:4f:69:1a:44:5c:4a:a1:9e:af:
94:6e:15:e2:7d:43:b0:f4:3a:c2:d5:18:4c:1d:a8:
43:7d:16:4b:c3:f0:72:8f:14:19:42:06:2c:84:c2:
01:4a:5c:f6:b1:1d:06:9d:1d:70:fa:ab:e1:90:bb:
41:1a:c9:c5:95:b8:8c:4b:7b:0c:b9:bf:99:52:87:
38:ee:3c:04:d6:dc:d0:08:ad:44:e5:6d:82:77:90:
ad:7c:a0:af:5b:3b:eb:68:e9:26:40:b3:35:3d:d8:
f5:ec:00:16:31:3b:73:22:ac:54:6b:7d:f9:6f:3f:
88:e4:11:65:53:9d:30:95:05:9e:16:80:3e:0d:7d:
38:6a:30:0b:9a:c6:01:5a:25:e4:35:9f:e1:ef:78:
24:5f:fd:b1:f9:26:54:52:d0:6b:fd:9f:ec:c0:7a:
7c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F1:5B:13:6E:1A:2B:5E:AD:53:D0:13:12:E5:8A:76:32:62:D8:E3
X509v3 Authority Key Identifier:
keyid:15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:4d:e9:b9:36:ab:22:0b:33:47:49:c5:76:89:8b:91:8f:a9:
8d:e2:30:c0:13:0e:53:82:d6:35:a3:56:7c:29:02:9f:24:00:
d4:34:11:d2:c3:24:f3:e0:1f:c3:42:99:4c:4a:99:e3:c5:6f:
6c:47:f3:82:1e:b7:47:45:97:8f:2a:08:0b:bd:b9:21:70:24:
3d:77:c3:94:9b:36:18:e8:63:1b:0a:f4:76:4e:4f:31:6f:50:
98:81:9c:db:d8:3e:f9:9c:57:bb:a3:e8:b1:a4:72:78:99:29:
80:d1:87:18:b0:7b:7a:6a:79:64:aa:de:ba:29:82:fe:6b:e7:
d1:73:77:11:4a:d1:ae:5d:39:b5:f5:d6:f7:31:9b:c5:de:d6:
64:8e:28:bd:58:3c:33:ee:6e:61:70:14:c5:25:e5:72:1f:80:
f6:be:35:7c:6e:dd:4f:9b:ff:c9:f5:1b:fe:c3:c5:31:96:cc:
ae:0b:b6:06:0c:e9:15:19:1d:9d:ab:95:90:b6:66:72:64:eb:
ac:24:9e:67:c5:25:fe:c5:21:67:16:8c:49:0d:70:52:50:ee:
50:db:6b:75:a2:70:20:42:9a:05:e2:12:ec:c1:5b:8e:cc:6d:
ea:9b:b8:bf:5d:b0:f4:d8:29:70:83:e7:eb:ec:ff:2e:cb:43:
c6:81:14:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:11:22 2025 by rpki-client