Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft
File: faSamu8hhOwLtu8P3pAcWyhBumQ.mft (raw, json)
Hash identifier: raPBQH403omNNvue7jFep/zvwIF0IZBRQTHduBdDi7U=
Subject key identifier: CA:0C:D4:98:06:55:2F:B8:AD:DF:B7:AB:3C:1B:F5:4E:88:41:5A:3F
Authority key identifier: 7D:A4:9A:9A:EF:21:84:EC:0B:B6:EF:0F:DE:90:1C:5B:28:41:BA:64
Certificate issuer: /CN=7da49a9aef2184ec0bb6ef0fde901c5b2841ba64
Certificate serial: 0197C425301FF851F779C77FBF00187E41BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faSamu8hhOwLtu8P3pAcWyhBumQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft
Manifest number: 0DAA
Signing time: Tue 01 Jul 2025 04:01:00 +0000
Manifest this update: Tue 01 Jul 2025 04:01:00 +0000
Manifest next update: Wed 02 Jul 2025 04:01:00 +0000
Files and hashes: 1: UmPdXcB87LTnfP1Vg3oW_URaukk.roa (hash: 83EUHwQ3blWBwS3edM/z7UuelSE4PX5MSdHszZ1a7QU=)
2: faSamu8hhOwLtu8P3pAcWyhBumQ.crl (hash: AjXJlohiumLCRQ/SagB/BsrpcIeBox+yftz95iIATVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/faSamu8hhOwLtu8P3pAcWyhBumQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:25:30:1f:f8:51:f7:79:c7:7f:bf:00:18:7e:41:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da49a9aef2184ec0bb6ef0fde901c5b2841ba64
Validity
Not Before: Jul 1 04:01:00 2025 GMT
Not After : Jul 2 04:01:00 2025 GMT
Subject: CN=ca0cd49806552fb8addfb7ab3c1bf54e88415a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6d:7f:81:ef:e9:6b:bc:ec:d0:77:42:43:f5:
2d:7c:35:00:b0:f6:78:89:5d:c6:d9:22:df:15:a1:
28:22:d4:74:7e:ec:73:db:90:4a:05:9f:68:47:cd:
2b:2a:67:5f:b6:56:5d:e4:b0:87:7e:29:40:64:7c:
24:fd:a6:f5:cb:f0:b2:db:b2:c0:c9:f2:cb:fe:95:
ce:04:2c:98:9d:f4:f4:7d:78:ab:e7:8e:15:d4:a4:
29:47:d7:8c:7d:58:96:15:a6:e1:78:ca:7c:6c:d7:
2f:7c:b1:73:de:9e:1a:37:27:4e:a8:f2:5c:1b:41:
c3:3c:bb:86:75:83:07:e7:a0:8a:02:81:96:ab:f3:
6b:d4:23:d1:98:20:ed:c9:6d:4c:44:75:69:cb:98:
75:92:d3:a6:e9:15:23:7a:fa:7f:20:a1:04:64:1f:
6a:73:f5:ff:1c:93:b3:88:df:eb:b5:2a:c1:8f:d3:
aa:6c:fc:14:61:2f:71:76:1a:b9:6c:75:05:83:a0:
61:38:34:9d:40:92:03:7d:ae:58:b3:b8:ba:9f:ba:
eb:14:91:96:15:f3:d6:3a:cc:32:43:d7:f0:1b:9e:
52:1d:00:ff:0f:61:55:24:55:b5:ef:43:81:3f:69:
83:7d:17:25:47:9e:9b:de:af:4f:05:19:7c:89:f7:
15:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0C:D4:98:06:55:2F:B8:AD:DF:B7:AB:3C:1B:F5:4E:88:41:5A:3F
X509v3 Authority Key Identifier:
keyid:7D:A4:9A:9A:EF:21:84:EC:0B:B6:EF:0F:DE:90:1C:5B:28:41:BA:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faSamu8hhOwLtu8P3pAcWyhBumQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:fc:42:fe:54:ae:82:48:c3:72:fe:e3:50:1a:18:c9:a5:fd:
10:8e:70:1b:d5:aa:d9:16:e9:f0:41:bf:6d:b3:c4:da:42:d1:
43:11:53:57:b6:e6:26:8b:32:74:fd:cd:ee:b6:fa:c9:50:e4:
b4:22:f9:00:a8:a6:27:48:99:32:3d:56:5a:43:8c:1f:4a:f0:
b0:9f:6c:96:cd:60:56:05:33:61:47:87:e7:c2:e4:0d:dc:77:
bb:75:03:8b:46:92:99:58:44:5c:f4:f8:b4:6d:f7:6c:0f:38:
4d:8b:02:54:4b:41:dc:21:7f:24:e5:09:95:f6:1d:d1:e3:c2:
2f:a4:a8:24:da:ff:57:3f:32:d1:31:99:d4:fc:da:0e:bb:55:
b5:ae:86:7b:92:e3:80:25:73:2d:c6:d2:b7:73:7a:78:c2:a3:
49:f7:61:a1:80:68:36:46:ef:36:48:8e:9e:7b:51:15:67:29:
1b:89:67:b5:6c:ed:5c:a5:c2:3e:8c:a1:8c:90:8e:52:ca:35:
a2:43:be:02:f4:3e:c1:23:c6:9e:d7:c1:a6:2a:ab:71:69:80:
43:f2:a3:e3:ca:5d:1a:e8:10:94:2e:e2:66:70:cb:4e:df:a4:
07:13:47:6f:36:dc:60:35:24:78:61:38:33:d5:9c:72:db:2e:
fe:5f:1a:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfEJTAf+FH3ecd/vwAYfkG+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTQ5YTlhZWYyMTg0ZWMwYmI2ZWYwZmRlOTAxYzViMjg0
MWJhNjQwHhcNMjUwNzAxMDQwMTAwWhcNMjUwNzAyMDQwMTAwWjAzMTEwLwYDVQQD
EyhjYTBjZDQ5ODA2NTUyZmI4YWRkZmI3YWIzYzFiZjU0ZTg4NDE1YTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0G1/ge/pa7zs0HdCQ/UtfDUAsPZ4
iV3G2SLfFaEoItR0fuxz25BKBZ9oR80rKmdftlZd5LCHfilAZHwk/ab1y/Cy27LA
yfLL/pXOBCyYnfT0fXir544V1KQpR9eMfViWFabheMp8bNcvfLFz3p4aNydOqPJc
G0HDPLuGdYMH56CKAoGWq/Nr1CPRmCDtyW1MRHVpy5h1ktOm6RUjevp/IKEEZB9q
c/X/HJOziN/rtSrBj9OqbPwUYS9xdhq5bHUFg6BhODSdQJIDfa5Ys7i6n7rrFJGW
FfPWOswyQ9fwG55SHQD/D2FVJFW170OBP2mDfRclR56b3q9PBRl8ifcV+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMoM1JgGVS+4rd+3qzwb9U6IQVo/MB8GA1UdIwQY
MBaAFH2kmprvIYTsC7bvD96QHFsoQbpkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFTYW11OGhoT3dMdHU4UDNwQWNXeWhCdW1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mZjA3NDItNzMxMy00ZTk0LTk2MTgt
NjNhMWNlMzMzMDdmLzEvZmFTYW11OGhoT3dMdHU4UDNwQWNXeWhCdW1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9mZjA3NDItNzMxMy00ZTk0LTk2MTgtNjNhMWNlMzMzMDdm
LzEvZmFTYW11OGhoT3dMdHU4UDNwQWNXeWhCdW1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIvxC/lSu
gkjDcv7jUBoYyaX9EI5wG9Wq2Rbp8EG/bbPE2kLRQxFTV7bmJosydP3N7rb6yVDk
tCL5AKimJ0iZMj1WWkOMH0rwsJ9sls1gVgUzYUeH58LkDdx3u3UDi0aSmVhEXPT4
tG33bA84TYsCVEtB3CF/JOUJlfYd0ePCL6SoJNr/Vz8y0TGZ1PzaDrtVta6Ge5Lj
gCVzLcbSt3N6eMKjSfdhoYBoNkbvNkiOnntRFWcpG4lntWztXKXCPoyhjJCOUso1
okO+AvQ+wSPGntfBpiqrcWmAQ/Kj48pdGugQlC7iZnDLTt+kBxNHbzbcYDUkeGE4
M9Wcctsu/l8aOg==
-----END CERTIFICATE-----
Generated at Tue Jul 1 09:07:33 2025 by rpki-client