Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
File: fa57XJowGYvXF4tIuF8LIhpeHrc.mft (raw, json)
Hash identifier: n1ehf5vmEi7M+y4Y7YN2T2msfqPdX0Hy44P0720xzmE=
Subject key identifier: 48:4F:67:04:D6:2D:71:21:CD:F4:FA:EE:98:A8:FB:9E:FB:93:6B:D8
Authority key identifier: 7D:AE:7B:5C:9A:30:19:8B:D7:17:8B:48:B8:5F:0B:22:1A:5E:1E:B7
Certificate issuer: /CN=7dae7b5c9a30198bd7178b48b85f0b221a5e1eb7
Certificate serial: 0198D4DFE3272628281CBB6BBFED789F38C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
Manifest number: 0B10
Signing time: Sat 23 Aug 2025 03:01:39 +0000
Manifest this update: Sat 23 Aug 2025 03:01:39 +0000
Manifest next update: Sun 24 Aug 2025 03:01:39 +0000
Files and hashes: 1: c0Cf6YCbscr3sGW2nWgoXFY8xps.roa (hash: 5gRboI0NrXJxmfngbqENdfvUiQ0ds61NdsYGIZfYOOU=)
2: fa57XJowGYvXF4tIuF8LIhpeHrc.crl (hash: MxZUJ0Sq06ENDz0SaRCJevC2C7edY+k2MqJ/iws/vMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:e3:27:26:28:28:1c:bb:6b:bf:ed:78:9f:38:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dae7b5c9a30198bd7178b48b85f0b221a5e1eb7
Validity
Not Before: Aug 23 03:01:39 2025 GMT
Not After : Aug 24 03:01:39 2025 GMT
Subject: CN=484f6704d62d7121cdf4faee98a8fb9efb936bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e9:eb:e7:96:8f:fd:18:28:f9:9e:d4:ef:08:
a5:58:8c:67:83:f4:2b:2b:bb:39:58:a3:e0:24:2f:
6b:fd:bc:25:09:94:95:11:8c:be:6a:aa:58:74:f9:
d2:1a:85:8d:f8:f3:c7:31:66:1b:18:18:d4:0b:4f:
b0:1b:7e:17:e1:ce:dd:51:e9:44:1d:cd:ba:e8:bf:
74:0c:9c:33:3e:09:74:c2:3b:17:1d:8a:a3:fd:55:
17:7b:bc:b2:65:89:09:5d:ca:e1:64:d1:02:5b:a0:
2e:fb:6c:9a:ed:34:ca:05:25:a6:7b:d0:14:b8:ce:
e6:f9:66:aa:c4:cb:31:83:9d:d3:16:9a:0e:25:69:
94:28:a1:5c:b5:21:a9:ea:e0:db:b0:65:f6:84:29:
57:03:2c:85:b9:a0:c7:d1:96:a8:d6:d8:27:2d:1b:
33:03:15:b8:f2:32:27:33:10:60:66:f5:f8:a7:5d:
cf:03:5a:81:0a:f3:eb:dc:b6:57:b0:be:4e:34:6a:
09:1d:0e:69:76:99:d8:e3:ec:68:ef:7f:ec:c8:14:
71:4e:e7:ef:f7:38:85:6e:92:8a:99:1f:59:6d:a3:
c1:d3:e9:17:7a:74:42:bc:74:1c:e2:b2:5f:2d:02:
c9:12:6c:9a:8b:ed:0c:61:43:10:72:a9:64:d0:d5:
ac:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4F:67:04:D6:2D:71:21:CD:F4:FA:EE:98:A8:FB:9E:FB:93:6B:D8
X509v3 Authority Key Identifier:
keyid:7D:AE:7B:5C:9A:30:19:8B:D7:17:8B:48:B8:5F:0B:22:1A:5E:1E:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:91:6d:f4:92:89:2f:dd:4a:59:41:c2:18:4c:f0:32:47:b8:
0e:fe:b7:b3:2d:46:87:33:fd:e5:23:57:3f:d1:1d:3e:63:ab:
bc:03:34:71:0b:a5:b2:a2:d4:06:28:30:85:1a:99:e8:14:49:
7a:36:2a:08:24:94:14:a6:8a:36:39:09:30:0d:a7:37:7a:3b:
64:9e:d5:d7:b9:fa:64:3e:77:94:c9:2c:bc:35:15:47:f3:ba:
3f:6b:e1:64:db:fa:12:87:38:97:b9:af:09:f8:2c:62:42:e9:
57:68:48:8b:22:2b:2c:44:ee:1c:4a:19:2a:95:77:77:2e:49:
c7:be:b5:00:17:40:fb:85:05:ad:1e:f9:a2:6b:2e:c3:cf:da:
58:8b:6a:10:a1:45:84:ad:1b:65:08:17:96:60:7c:b6:31:9e:
da:12:01:5e:0b:d2:d8:35:45:10:06:36:a6:87:0f:e9:6d:f4:
b0:89:25:5e:86:3d:7a:1c:cb:63:e0:45:34:85:34:be:93:08:
be:e8:d0:87:da:e4:49:2a:1c:ed:a1:7c:f5:1d:49:b3:c8:0b:
df:d7:02:01:55:e3:bf:26:b4:a9:c0:46:61:eb:17:b9:e3:6e:
f2:62:f1:04:b3:ed:bf:6e:7a:94:ec:40:d0:f2:46:28:76:11:
82:19:d8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:14 2025 by rpki-client