Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
File: fAfb3HHxK9p7t_qAytwu2aL-7-s.mft (raw, json)
Hash identifier: 14jA7Co+nHOOLsryC+ZFrVq4KBklja8nhMIua3NdWMw=
Subject key identifier: FA:B8:92:6D:64:DE:24:62:64:16:B8:6B:C8:9F:87:D3:A0:8C:B7:19
Authority key identifier: 7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
Certificate issuer: /CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Certificate serial: 0197B820EF396F5E2CC8E4CDCE8FB02C2580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
Manifest number: 02CF
Signing time: Sat 28 Jun 2025 20:00:55 +0000
Manifest this update: Sat 28 Jun 2025 20:00:55 +0000
Manifest next update: Sun 29 Jun 2025 20:00:55 +0000
Files and hashes: 1: fAfb3HHxK9p7t_qAytwu2aL-7-s.crl (hash: ZQB+6VFX/jBONrCCfQ7xFS/ghnq1IFuTrZzRBHG6Ez0=)
2: fbxGcDZ4JffpLB-VA4euV8cUHbI.roa (hash: ZaYZ23rjJ96t14BAX6CvRsmnyjmgBRcXDVd5G/xhkus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:ef:39:6f:5e:2c:c8:e4:cd:ce:8f:b0:2c:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Validity
Not Before: Jun 28 20:00:55 2025 GMT
Not After : Jun 29 20:00:55 2025 GMT
Subject: CN=fab8926d64de24626416b86bc89f87d3a08cb719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:14:33:e9:d3:a6:f9:0c:50:a1:1c:ad:fb:91:
4a:ed:06:02:b6:67:35:ab:d1:b4:a6:66:b6:3d:30:
2e:d0:eb:f9:49:cf:c9:1d:fc:3c:6a:82:be:f3:48:
4c:c9:d6:9c:71:c2:e6:ee:c5:2e:9e:b8:49:99:34:
a8:f4:e0:9d:ca:1d:e6:8b:d3:79:c0:14:d4:e9:d6:
3d:57:b9:45:6c:4d:75:ba:01:c9:36:f8:2e:5d:01:
60:58:2d:f8:ec:27:52:bb:16:f5:3d:58:90:46:24:
b7:e1:ad:e6:98:d0:f4:31:95:77:1d:a7:c9:19:c3:
bc:ea:13:63:a3:f8:c0:db:8e:8a:f9:a1:79:ac:fb:
b2:60:ae:e4:9f:50:d9:4b:8f:0a:ea:de:f5:65:a7:
18:c6:b2:ca:35:e4:e5:30:a7:59:c5:8e:a3:c0:5d:
d4:99:cb:bb:bf:4f:c2:f1:d5:5d:58:57:bd:23:99:
ec:40:0f:16:0d:6c:71:aa:62:c9:e6:f5:3b:fc:5d:
d9:db:e6:5f:55:b7:9d:6f:6c:c1:25:6d:0c:8a:3a:
e8:17:63:0b:f0:36:4c:e4:f6:1f:00:74:d7:72:c5:
99:0d:3c:d9:96:a9:1b:4a:64:77:10:2b:88:12:4f:
99:39:d4:5c:65:99:ea:fb:c7:20:4d:9d:3d:ca:21:
3a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B8:92:6D:64:DE:24:62:64:16:B8:6B:C8:9F:87:D3:A0:8C:B7:19
X509v3 Authority Key Identifier:
keyid:7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:44:7f:bc:23:70:a0:3e:57:6a:16:d0:17:72:af:69:d7:98:
a6:2d:aa:23:5f:7d:2d:84:f5:c4:93:db:e5:b7:63:4b:a2:17:
80:1a:f4:61:9b:d0:11:18:56:6c:f5:fb:f2:80:e3:f0:b1:37:
72:fd:f6:5c:4a:e2:73:cf:99:93:aa:ee:02:e8:5a:69:ca:f0:
f3:1f:5d:e3:7f:2a:1e:06:17:bd:32:93:c6:5a:17:33:6e:95:
b5:29:de:48:27:84:b8:91:8f:8e:41:28:83:57:1f:b7:b6:6e:
09:e8:f6:0e:46:01:9c:04:37:07:88:aa:3a:29:c7:6d:71:1b:
b0:5f:99:ec:24:75:0a:ac:25:2b:f3:a8:3e:45:61:30:b1:3c:
1f:5a:fd:4c:01:6c:85:c4:33:2d:8d:7c:dd:65:8c:c0:bf:54:
69:2b:60:61:f5:5c:47:d8:48:42:bb:05:52:11:86:0b:bf:95:
d8:09:2f:95:2f:5c:2d:c1:cd:ba:5b:3a:2b:7f:b0:8e:d1:95:
52:64:fb:6d:0b:3a:45:2c:63:b9:d1:fa:29:a9:20:ad:a8:90:
d2:e7:b4:00:4b:dc:b1:b0:f4:2a:63:75:af:40:cb:09:95:7b:
45:e7:30:52:e8:b9:4e:c7:42:86:dd:02:79:04:af:7d:81:43:
c2:d1:59:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:37:07 2025 by rpki-client