Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
File: fa57XJowGYvXF4tIuF8LIhpeHrc.mft (raw, json)
Hash identifier: Qs6x113T48gMmfidY+439TILW4Ac74mwsMHlU+KmLmQ=
Subject key identifier: 6B:23:53:2D:77:F8:02:F5:94:AF:C2:6A:24:0E:12:60:97:60:35:D0
Authority key identifier: 7D:AE:7B:5C:9A:30:19:8B:D7:17:8B:48:B8:5F:0B:22:1A:5E:1E:B7
Certificate issuer: /CN=7dae7b5c9a30198bd7178b48b85f0b221a5e1eb7
Certificate serial: 0197C6821235B5C76C0ACFBF98128DFC011F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
Manifest number: 0A84
Signing time: Tue 01 Jul 2025 15:01:42 +0000
Manifest this update: Tue 01 Jul 2025 15:01:42 +0000
Manifest next update: Wed 02 Jul 2025 15:01:42 +0000
Files and hashes: 1: c0Cf6YCbscr3sGW2nWgoXFY8xps.roa (hash: 5gRboI0NrXJxmfngbqENdfvUiQ0ds61NdsYGIZfYOOU=)
2: fa57XJowGYvXF4tIuF8LIhpeHrc.crl (hash: jRyu+grzwEM2TCz/bc6d/cFHbdpph5/H2V4uDxik3ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 15:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:82:12:35:b5:c7:6c:0a:cf:bf:98:12:8d:fc:01:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dae7b5c9a30198bd7178b48b85f0b221a5e1eb7
Validity
Not Before: Jul 1 15:01:42 2025 GMT
Not After : Jul 2 15:01:42 2025 GMT
Subject: CN=6b23532d77f802f594afc26a240e1260976035d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2b:24:55:b1:82:12:04:57:43:5a:13:15:c8:
70:bf:c2:b6:db:d9:e5:dc:40:90:22:ed:8e:d5:99:
3c:9e:95:73:7b:ef:ba:90:c9:e5:17:09:79:a5:c5:
fb:4f:3e:cf:f2:d4:3d:7d:97:ab:e9:73:e4:a1:d1:
dd:64:f1:31:f1:b3:b5:eb:3c:8f:24:79:ff:70:d0:
08:50:d5:a2:51:23:90:09:fe:1a:d3:2b:78:08:5b:
c7:e6:70:5f:78:7b:b0:fe:1e:30:d3:93:e0:22:9e:
26:de:28:12:2e:d4:36:e4:e7:02:56:be:b7:af:ff:
0a:97:4a:d5:6d:56:d7:b9:d1:21:54:e1:2b:25:e6:
6e:28:a2:f6:a1:ad:e8:34:62:14:d1:f3:01:34:03:
2a:ea:d8:82:c8:6e:e6:65:b9:3a:b9:d2:6c:7c:df:
1e:bf:55:52:ee:4f:8f:de:f2:31:e9:78:c7:34:ce:
e6:ca:98:4c:9c:61:2a:88:18:23:ac:e1:e6:b1:ea:
e0:f5:6e:d9:8c:46:38:29:bf:f0:10:67:97:34:24:
36:c6:ef:0e:b6:92:f3:94:5b:1b:13:38:21:cb:7f:
56:bc:c9:6a:25:43:94:3c:d5:ce:c6:a6:a4:08:14:
73:66:46:28:0d:38:17:93:b6:34:f9:1f:c8:11:33:
18:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:23:53:2D:77:F8:02:F5:94:AF:C2:6A:24:0E:12:60:97:60:35:D0
X509v3 Authority Key Identifier:
keyid:7D:AE:7B:5C:9A:30:19:8B:D7:17:8B:48:B8:5F:0B:22:1A:5E:1E:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:1e:a7:3e:60:ae:cf:e3:1b:39:83:3f:a9:24:b7:ff:fa:6d:
7f:3f:b3:a1:f0:d0:cd:7f:d6:c2:54:70:74:aa:95:cc:01:53:
cf:70:7e:0a:e8:83:62:ff:ab:58:14:04:ee:c4:c7:44:cb:dc:
1d:f1:60:eb:78:37:50:05:16:a3:af:1a:51:f4:1c:1f:f7:69:
18:d2:90:76:81:cb:2d:ce:73:4a:be:d3:d6:09:22:7c:de:85:
80:a5:d6:45:bd:16:03:18:38:ce:87:7b:a4:2e:db:a2:e1:83:
2e:da:ea:c5:c3:e1:b2:c5:9b:ab:f6:ab:dd:2a:93:db:3a:a4:
d7:fd:a7:7f:04:83:1a:18:da:84:e9:f0:7e:b6:3a:8b:9f:c3:
d7:94:49:fc:9f:d2:74:c7:a7:12:dc:4a:48:d8:36:4f:d8:9d:
00:9c:da:4d:96:2a:f4:a8:9e:f3:77:6f:d5:24:ca:02:55:9d:
b5:ba:f4:7a:8d:27:95:c3:27:82:72:9e:a7:50:2e:00:0f:a3:
56:68:de:79:42:5b:14:55:a4:51:06:64:39:51:ba:b0:3a:da:
b8:77:08:9b:5b:ae:59:b1:1b:64:1a:c5:ff:2e:77:ba:51:9d:
b1:41:fd:d7:7a:a4:39:ab:50:b9:48:4b:82:14:f6:7b:e3:c3:
62:7a:99:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:16:29 2025 by rpki-client