Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
File: fVAuLSSx8haRMIggeiaOZiawzjk.mft (raw, json)
Hash identifier: U8MGsALMZikA8IT9GmwjgAqGgYnad/UbpNuJAvstGGY=
Subject key identifier: 5E:77:0B:F4:2C:9D:55:8B:18:28:91:FE:EB:C4:60:1A:B1:84:E2:DD
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Certificate issuer: /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial: 0197C681BB2545769A9A9C3937A2B06D24B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
Manifest number: 15BF
Signing time: Tue 01 Jul 2025 15:01:20 +0000
Manifest this update: Tue 01 Jul 2025 15:01:20 +0000
Manifest next update: Wed 02 Jul 2025 15:01:20 +0000
Files and hashes: 1: 4xfLpgjd4Enxc-qc8nof3OkbJKI.roa (hash: qMoNzrHzj4dbd+webpPz0KwxOvGmhXmFlkGqK08FyRc=)
2: 7JwTekQ2tjFEdZLkqTIWTWDl694.roa (hash: vwEa+p0/d9QBYzjnHEhK+7G2R/Qxw/NinB7TZ/V7TxA=)
3: fVAuLSSx8haRMIggeiaOZiawzjk.crl (hash: 1Emiil5DWhx25T0GLqblRL6PKj1tUdBTv5pToffq/9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 15:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:81:bb:25:45:76:9a:9a:9c:39:37:a2:b0:6d:24:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
Validity
Not Before: Jul 1 15:01:20 2025 GMT
Not After : Jul 2 15:01:20 2025 GMT
Subject: CN=5e770bf42c9d558b182891feebc4601ab184e2dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:08:00:10:4d:c8:0e:a2:1f:00:ba:ad:2e:93:
ff:c0:06:af:69:d4:29:0b:3f:2b:3e:70:6d:7a:6a:
38:94:68:1f:52:f7:3f:8e:da:68:22:7f:f8:89:0b:
f5:ba:f0:5c:ae:07:42:c4:53:1f:f5:cb:35:88:6f:
4f:c4:64:a7:6b:cd:13:7b:75:18:50:4e:a3:8d:50:
73:66:8a:94:ec:47:c0:0a:f0:af:2d:2b:72:0a:af:
d9:d9:a9:de:16:96:88:a3:60:a8:d9:f3:bf:bb:ca:
04:8a:44:dc:80:83:e9:e0:e1:07:c4:a9:be:19:2b:
e5:35:43:6f:86:50:f4:eb:fc:16:11:27:8d:d0:c3:
55:d1:b9:9a:b5:55:42:e1:ff:2d:04:fe:24:2e:1f:
fd:b7:26:d3:cb:2f:93:5c:85:ff:17:b9:ee:41:fd:
3a:37:ef:71:cf:90:03:66:e6:68:8d:da:25:4d:e6:
29:4e:c1:6c:fe:ed:9c:8f:eb:25:4a:ea:b1:62:2a:
f0:bc:20:c4:3d:87:c7:21:45:0c:d9:c8:af:5a:fd:
cf:da:b5:d0:ef:7b:43:fe:d0:45:27:45:89:97:ae:
fe:6c:de:70:5c:71:6f:23:95:a4:bd:5c:ae:02:fb:
a3:72:1e:d9:36:21:01:2d:45:4d:f4:49:2e:52:1b:
60:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:77:0B:F4:2C:9D:55:8B:18:28:91:FE:EB:C4:60:1A:B1:84:E2:DD
X509v3 Authority Key Identifier:
keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:92:b8:86:d9:f6:88:d5:bc:76:d4:8c:7a:05:48:42:f0:61:
13:1b:af:dc:d8:87:9b:7e:0f:42:6d:9e:85:a5:8a:a2:e5:42:
d0:59:a6:36:69:69:c9:35:a2:be:a4:a2:1a:bb:77:f1:bb:0d:
27:20:39:46:1d:e0:e1:7f:c6:3a:8f:24:30:ed:ab:aa:b2:b2:
d0:48:b4:8e:72:71:fd:79:4a:55:37:61:7e:89:57:55:dd:a3:
7f:0d:4e:b4:63:ba:81:a0:19:50:df:ea:3a:7a:a0:97:0c:53:
4a:8a:f6:7d:0e:69:1e:4e:3d:81:9f:44:d3:00:9f:78:6f:db:
a2:0a:52:f4:3a:13:ff:37:a3:55:0a:4d:e8:cd:38:d3:c9:f3:
b2:a8:af:65:6a:4f:ab:f3:4b:f8:2d:18:4b:79:12:57:fa:e4:
4a:de:05:b2:e7:03:bc:4c:f1:34:69:e6:11:82:7c:e3:54:38:
06:3a:19:3a:a2:c9:a7:d1:20:98:d8:eb:95:02:c2:a6:24:cc:
84:bf:c7:4d:40:02:b8:67:62:1e:ae:82:99:a1:e8:a6:7c:cb:
99:bb:23:c1:e8:43:80:a3:5f:a4:2a:81:e9:17:ca:1b:66:40:
5f:33:e4:8a:3b:42:a0:d6:c9:03:0a:53:ab:05:12:b2:52:6d:
3d:00:b9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:04:27 2025 by rpki-client