Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
File: FaevcHtYSLNTljanQxd51wFM2mE.mft (raw, json)
Hash identifier: VXu/nkJJD6bQGwce5W9oKugqwjnNue9Qtwmq+sKvW1Q=
Subject key identifier: 4F:9C:4A:75:44:DF:59:FF:FF:20:ED:6D:09:E0:C7:31:FC:97:D0:F9
Authority key identifier: 15:A7:AF:70:7B:58:48:B3:53:96:36:A7:43:17:79:D7:01:4C:DA:61
Certificate issuer: /CN=15a7af707b5848b3539636a7431779d7014cda61
Certificate serial: 0197B8FCE1DFCB3E6A8A24865A2FC4B8C25D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
Manifest number: 04BB
Signing time: Sun 29 Jun 2025 00:01:09 +0000
Manifest this update: Sun 29 Jun 2025 00:01:09 +0000
Manifest next update: Mon 30 Jun 2025 00:01:09 +0000
Files and hashes: 1: FaevcHtYSLNTljanQxd51wFM2mE.crl (hash: nA8TC7bU8FU4PJzdRyHePyjOd5wVeS5yWkjFabqwOe4=)
2: bX3oZWjtTuzwx_xG-vCMVNG-cOc.roa (hash: d1VXe5ysdAxKyO5IduA6oLfO1V4ILKmPg+j75Lo6HnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:e1:df:cb:3e:6a:8a:24:86:5a:2f:c4:b8:c2:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15a7af707b5848b3539636a7431779d7014cda61
Validity
Not Before: Jun 29 00:01:09 2025 GMT
Not After : Jun 30 00:01:09 2025 GMT
Subject: CN=4f9c4a7544df59ffff20ed6d09e0c731fc97d0f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:31:0d:7f:b1:04:41:84:63:6b:1b:b8:62:2b:
7c:f4:00:d2:9b:3a:40:e9:0f:95:a9:77:a1:91:cd:
4a:b2:d2:45:30:05:35:a1:34:1e:d6:99:5f:b6:37:
f1:c3:67:7f:5d:28:7d:af:db:b1:82:ea:ce:c6:9c:
8a:c6:dc:af:14:bd:b6:f7:89:80:bf:93:ca:e5:74:
eb:9e:44:52:9f:6a:99:89:bc:40:1f:bb:14:cb:a7:
cf:0d:95:79:35:81:7b:33:f7:fb:cf:7e:21:66:98:
6b:0c:88:3d:ff:19:21:93:1c:6b:91:30:0e:09:56:
6b:fa:72:92:5b:49:36:ba:95:dc:d9:c5:c9:f2:90:
22:82:32:e7:b0:8f:a0:fa:a6:72:0b:3b:6e:7b:d5:
fd:b3:b1:a4:db:db:c1:e3:d9:35:3b:e1:91:63:92:
47:19:50:2b:c8:84:32:37:80:cb:ff:f4:e5:34:35:
b8:e7:ae:5c:0d:77:1d:a9:d0:b3:67:0c:dd:d1:2a:
e5:f9:20:bb:7d:a3:9d:4c:4f:a8:fd:d1:ba:9a:57:
c0:d8:04:38:76:91:0d:c9:3b:cc:9e:05:b4:78:54:
00:97:09:fb:53:8a:ab:5f:42:dd:c3:22:04:8b:fa:
6f:65:bb:b8:5e:d1:c7:0a:b4:cc:c2:71:1d:9f:29:
66:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9C:4A:75:44:DF:59:FF:FF:20:ED:6D:09:E0:C7:31:FC:97:D0:F9
X509v3 Authority Key Identifier:
keyid:15:A7:AF:70:7B:58:48:B3:53:96:36:A7:43:17:79:D7:01:4C:DA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:e7:c5:46:d2:b9:61:5f:5c:ba:4b:ea:c4:dc:a5:1f:77:eb:
62:2a:25:aa:19:25:c0:d5:eb:b9:b7:cd:fd:8e:2c:65:96:ac:
1c:fe:9f:b0:75:b5:9f:1f:fe:02:fb:61:de:d7:83:7e:90:d4:
8a:fc:4c:6e:a6:41:3e:79:70:9f:e6:78:29:96:b8:3c:cd:ae:
5e:1f:c6:fc:56:11:31:42:41:db:8f:d8:b5:07:c6:92:17:47:
9c:64:cb:80:ee:a2:e7:10:56:f1:7e:74:89:99:eb:8d:94:78:
36:63:95:21:20:00:f3:c9:37:c3:0b:d7:6f:10:f4:cb:6a:02:
23:92:f0:4c:33:b9:c0:fc:c3:ec:c1:df:25:f5:04:17:c7:bc:
9e:c5:e0:64:36:2f:1d:e4:67:01:be:56:ee:c6:36:2e:71:a6:
f6:15:8f:e9:97:8d:f0:a9:a6:08:2f:cc:d5:6d:43:42:a9:6d:
98:11:03:01:01:65:48:4b:c9:f2:98:a9:46:e5:60:9e:1e:0f:
52:8c:fb:9a:c9:7a:63:24:c5:85:8a:72:13:82:e5:ff:a3:2e:
35:ac:c2:c7:29:16:c5:85:9a:6e:cd:c0:47:13:88:16:0c:fe:
f8:8a:79:2e:fe:92:3f:6e:57:fd:ad:cd:00:4c:6a:3d:7a:02:
98:1f:02:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:12:20 2025 by rpki-client