Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft
File: fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft (raw, json)
Hash identifier: xktkMxlMc3C0/i38wCwRIZkXFG5Y5fiL3FDp34XcRFQ=
Subject key identifier: C5:1B:71:FD:32:7E:3C:8C:2E:06:FA:34:40:32:BC:FB:48:9A:8E:11
Authority key identifier: 7D:AD:62:18:08:63:D7:22:AA:A4:F0:88:1E:44:37:8E:3C:80:83:72
Certificate issuer: /CN=7dad62180863d722aaa4f0881e44378e3c808372
Certificate serial: 0197B88FEDE28A6CAC6CB9089A40A88B63C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft
Manifest number: C6
Signing time: Sat 28 Jun 2025 22:02:09 +0000
Manifest this update: Sat 28 Jun 2025 22:02:09 +0000
Manifest next update: Sun 29 Jun 2025 22:02:09 +0000
Files and hashes: 1: C7GNqkgz9p0zOIQbq1hmHpb1k10.roa (hash: Ih5IZ06o7j/AaerWpaiGsplGlhC586fD+XGd+HNQexM=)
2: fa1iGAhj1yKqpPCIHkQ3jjyAg3I.crl (hash: UQol+e0HtkHHYNhRj1sokXkpjjUtgAaZf9qDamKQivc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:ed:e2:8a:6c:ac:6c:b9:08:9a:40:a8:8b:63:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dad62180863d722aaa4f0881e44378e3c808372
Validity
Not Before: Jun 28 22:02:09 2025 GMT
Not After : Jun 29 22:02:09 2025 GMT
Subject: CN=c51b71fd327e3c8c2e06fa344032bcfb489a8e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:82:e6:aa:2d:f0:d3:a7:88:3b:ce:a0:24:4d:
b6:f7:b8:9f:71:fc:51:20:56:a2:8c:64:e7:e7:2a:
74:36:d4:9c:91:7f:0d:7e:ab:95:54:36:82:4b:f3:
c0:7b:fd:46:bd:a0:9f:dd:04:b3:b7:91:e3:e7:47:
20:02:d6:00:44:41:86:91:ca:0a:b5:5d:b8:fc:85:
a9:f3:65:9d:12:65:f6:5d:ba:21:6c:fa:b5:d2:bc:
20:ea:e3:51:b8:48:73:d2:ab:3c:f2:e7:61:ac:79:
e1:7e:02:06:3d:ef:05:66:46:f8:f4:55:f9:2c:60:
d3:57:1d:00:ee:74:0f:11:25:c5:a4:71:fd:f7:ff:
09:70:33:d7:79:1f:a1:37:cf:84:49:15:22:03:8c:
6d:e2:47:1e:da:d0:e6:0e:ec:95:42:e9:b1:c3:11:
37:ff:7d:23:40:18:43:03:d7:e7:4a:87:62:14:4e:
2d:4d:59:20:56:46:d7:c7:a3:f9:49:6e:3b:ea:a3:
0d:78:16:1f:c7:72:ca:be:f9:38:55:bf:95:86:a6:
80:e5:3c:da:39:68:a3:40:d9:1f:96:b5:7b:90:a1:
2b:ea:d8:8a:ae:29:c3:2c:73:6e:d9:31:72:ae:df:
1d:cf:f2:e6:c9:fb:0e:e9:1b:6c:42:8f:81:cd:ea:
60:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1B:71:FD:32:7E:3C:8C:2E:06:FA:34:40:32:BC:FB:48:9A:8E:11
X509v3 Authority Key Identifier:
keyid:7D:AD:62:18:08:63:D7:22:AA:A4:F0:88:1E:44:37:8E:3C:80:83:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:90:03:63:50:bc:f3:fd:73:ed:dd:b5:0d:25:bd:ce:8d:9d:
64:dc:4c:e5:99:04:15:8d:3e:ad:0f:f5:72:4d:4e:8f:ea:fa:
d7:ef:52:e5:5a:89:2c:f2:bc:8d:c3:64:ac:32:58:1c:7d:7d:
49:05:c7:e1:9c:c7:f7:a1:7e:72:5d:cb:41:78:92:38:5c:23:
48:01:0d:aa:e2:76:b9:b4:8d:06:d2:2e:83:87:54:fb:72:f9:
c2:f2:29:9c:ab:b0:e1:83:ed:ce:4c:72:95:79:14:f6:ec:d0:
ed:b3:74:1d:d4:3b:a7:c0:05:41:e6:b7:34:2b:df:ba:ce:7d:
1a:a0:0f:d9:87:43:73:5e:82:92:69:4a:58:9c:9f:22:bf:3e:
43:0e:74:b2:de:99:5b:76:9e:40:b4:3f:89:d0:0e:2e:9a:8c:
a6:ba:91:99:da:92:65:05:3d:be:76:c8:f2:b9:8b:1f:76:15:
0f:08:ee:67:7c:f6:07:7b:2d:1a:49:fa:2b:32:e0:14:6d:3f:
22:1c:b7:7d:bf:37:d1:d5:b6:8a:dd:0e:47:09:06:23:3e:c1:
77:42:51:45:bb:58:06:9e:16:ca:ad:cf:2f:a5:e3:07:8d:c0:
46:92:39:e7:39:83:54:a8:96:35:fd:fb:3b:26:3f:46:0e:60:
87:53:03:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:24:39 2025 by rpki-client