Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
File: Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft (raw, json)
Hash identifier: qwJWMZ5R6L0Q8/gzy547UlpmIFEzik3nfZe7kmzR9s0=
Subject key identifier: 2E:B3:1A:A2:2A:55:66:83:79:8A:82:E9:52:B9:5F:BE:DF:B0:F0:D5
Authority key identifier: 15:AD:6F:24:BC:EC:DC:8D:AE:C3:E7:45:4B:C1:28:3D:C0:CD:93:1F
Certificate issuer: /CN=15ad6f24bcecdc8daec3e7454bc1283dc0cd931f
Certificate serial: 0197B74510B02427AEF106BC0DFC81071662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
Manifest number: 0410
Signing time: Sat 28 Jun 2025 16:00:46 +0000
Manifest this update: Sat 28 Jun 2025 16:00:46 +0000
Manifest next update: Sun 29 Jun 2025 16:00:46 +0000
Files and hashes: 1: 1-irVsmvhgC9shKeonnyDEPMDuh0.roa (hash: 1FiwJeXR31pl2bxgdy1T8oVV/E4LsfaNte1AvGr9OZg=)
2: Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl (hash: Bt26Am29X7ztPc1LqvjVrn6fhpLfAdkHBwCPkI/eli0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:10:b0:24:27:ae:f1:06:bc:0d:fc:81:07:16:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ad6f24bcecdc8daec3e7454bc1283dc0cd931f
Validity
Not Before: Jun 28 16:00:46 2025 GMT
Not After : Jun 29 16:00:46 2025 GMT
Subject: CN=2eb31aa22a556683798a82e952b95fbedfb0f0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d6:6e:79:da:b8:b7:96:2a:26:4a:ee:6b:c7:
8b:53:38:c2:b3:38:20:55:5f:44:27:b2:83:6e:b3:
fd:29:b8:e0:31:9b:f5:32:98:d8:20:8b:39:61:50:
24:ea:b6:86:60:fb:65:fc:ff:cf:11:81:64:10:f2:
97:45:dc:a8:41:18:97:bf:1e:41:96:de:45:fb:5d:
e3:3e:ed:23:3b:27:1b:f9:17:99:3b:1a:de:89:e5:
a4:70:cd:ab:99:bf:d8:a2:dc:4c:07:a4:f2:49:11:
34:a4:f9:05:f5:be:b8:0c:5b:99:74:5d:e7:45:78:
26:01:b6:91:ae:c3:60:16:53:bf:b2:f3:2c:32:fe:
0e:f2:5a:70:c6:45:63:ac:f5:9e:de:58:e7:5d:1e:
48:b2:cb:f9:cd:c7:b2:2d:4e:7e:f4:31:3c:56:77:
01:72:c3:73:c0:b1:77:8c:a1:b4:29:e8:81:87:02:
bb:e1:e5:cf:3a:d8:cf:f0:c4:2d:86:32:66:44:d6:
a3:49:5e:04:82:00:c1:af:c6:94:e1:f0:00:03:2f:
66:3f:bf:9f:ec:e2:cd:6f:c1:9b:5d:8a:8c:38:36:
6d:c8:fc:20:d8:98:32:8d:3c:2d:f0:49:3c:87:b5:
d4:ab:ac:9e:d7:e7:75:39:35:80:93:1f:b1:47:ea:
00:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B3:1A:A2:2A:55:66:83:79:8A:82:E9:52:B9:5F:BE:DF:B0:F0:D5
X509v3 Authority Key Identifier:
keyid:15:AD:6F:24:BC:EC:DC:8D:AE:C3:E7:45:4B:C1:28:3D:C0:CD:93:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:7e:89:83:63:c3:d9:7e:c2:90:20:4e:ef:4b:19:01:81:15:
c6:09:e9:14:e1:4f:65:6a:12:48:3f:8e:da:78:be:1c:72:98:
43:b6:eb:31:1a:3b:05:be:ff:e1:8f:52:05:0e:4e:09:71:98:
fa:2d:21:69:9a:c0:8c:15:a5:03:40:fd:2d:53:0c:ca:b7:7c:
1b:40:85:d1:fd:f4:44:40:f4:54:63:08:a0:2f:d8:e6:c8:9e:
75:96:e4:93:4e:f7:ca:38:77:35:93:1f:db:b3:a5:c9:da:65:
ae:51:3f:3d:84:a1:ae:d0:9e:99:6f:5d:97:a2:eb:b4:a0:a0:
cb:0f:53:54:e0:45:5e:00:96:22:95:2b:c8:83:7d:d4:7b:5b:
0f:a5:4f:53:51:c2:8b:73:89:c7:f5:26:d6:b6:a8:bb:16:57:
12:55:20:c9:46:20:2a:37:98:85:52:81:da:00:3d:52:6a:77:
ed:7f:17:80:12:64:15:2a:62:e1:5e:0a:4c:37:a3:0e:5d:94:
d4:aa:89:2b:98:f5:eb:89:75:32:0e:24:99:f2:a5:6a:f6:ab:
d3:a4:f5:42:2d:44:08:7d:f4:04:67:bc:1e:a0:30:85:51:5a:
50:7d:23:1f:19:e6:74:5b:f4:29:e6:cf:42:b2:20:33:b6:b0:
b8:70:eb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:43 2025 by rpki-client