
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
File: faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft (raw, json)
Hash identifier: 3sRpwZoBhR7x3SmIM2vavQNjEhDQl8smRynwW/rdJVc=
Subject key identifier: 73:1B:CB:F4:18:24:C6:14:47:59:51:F0:B9:7A:20:2E:85:CA:13:B2
Authority key identifier: 7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
Certificate issuer: /CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Certificate serial: 0198D4E0BAD2888C65227AD46FC29998B115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
Manifest number: 137E
Signing time: Sat 23 Aug 2025 03:02:34 +0000
Manifest this update: Sat 23 Aug 2025 03:02:34 +0000
Manifest next update: Sun 24 Aug 2025 03:02:34 +0000
Files and hashes: 1: faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl (hash: /25pwzYkOlDcFzBBAKw2mHfJgxVm6XEao0OYcKerFsc=)
2: yKkZFLs6YVbkXytvzgCPIVXuU18.roa (hash: 3M+Qw4Xfzb67zSVF5cyn50VarUBuvPcrrFEH7s1xtH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:ba:d2:88:8c:65:22:7a:d4:6f:c2:99:98:b1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Validity
Not Before: Aug 23 03:02:34 2025 GMT
Not After : Aug 24 03:02:34 2025 GMT
Subject: CN=731bcbf41824c614475951f0b97a202e85ca13b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:17:dc:8a:9f:fa:46:80:54:d8:69:c2:bf:fa:
68:59:18:63:d6:68:8d:98:ee:dc:e0:2b:30:89:7b:
0e:ed:f8:b0:e7:85:b2:69:ba:db:b0:6f:65:61:27:
48:7f:02:4f:af:1b:93:73:14:62:bf:6d:e7:a3:32:
50:0f:43:df:e7:d1:ab:09:84:2e:f6:a9:85:f2:50:
16:53:97:e7:bb:92:a1:20:75:6b:8a:ee:2a:dd:03:
d0:26:89:c5:56:ff:d0:8b:8d:3c:35:38:c1:c4:7a:
cf:aa:a0:f2:20:6d:48:ec:44:b4:9b:9a:7e:06:3b:
67:7d:9d:61:0f:27:1a:cd:b1:a9:c7:dc:4a:4a:93:
35:21:12:66:cb:19:38:bd:f7:6e:15:0d:70:7d:30:
b7:a5:0f:bc:35:90:6d:5b:a2:42:81:f4:9d:9e:16:
3c:01:96:77:fb:d8:55:0f:b6:e0:a1:14:88:71:50:
c8:03:c9:f9:14:46:de:10:67:e7:22:ce:06:45:27:
b3:e0:ed:d9:41:06:26:27:23:74:b7:61:ef:73:29:
9a:85:50:51:d8:8f:87:53:49:5d:e7:a6:5d:d4:31:
4d:27:1b:2e:e4:49:f9:53:ab:37:2b:6e:03:e1:ba:
58:08:4a:6c:b9:ff:44:1c:08:2a:3b:94:1d:ef:e7:
c7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1B:CB:F4:18:24:C6:14:47:59:51:F0:B9:7A:20:2E:85:CA:13:B2
X509v3 Authority Key Identifier:
keyid:7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:3c:ce:13:30:d4:44:79:6d:b2:bc:45:ba:0a:5f:7c:29:4c:
35:f6:48:24:82:36:b6:4d:9e:fa:ca:40:36:3b:96:36:05:6d:
e4:1d:bf:f6:2f:71:6d:05:af:ff:ad:0b:58:08:7b:d4:04:28:
d2:9a:58:53:d2:65:7a:f0:0f:12:25:d3:fd:6c:91:ab:0e:36:
06:f4:d4:20:35:a3:20:96:30:f0:83:b4:2e:0d:ad:76:72:d4:
35:92:da:0a:1c:46:fb:3a:c0:a2:4c:8b:12:9f:9b:d0:90:e8:
08:7d:52:f4:6b:50:e5:aa:95:13:02:ed:7a:b3:73:60:19:42:
c8:fe:69:59:e5:f3:14:23:34:fa:a1:6c:f8:cc:30:09:c6:65:
e2:81:f9:a1:2b:eb:71:f1:3e:f7:03:62:b2:ec:82:f6:63:be:
a4:dd:69:14:29:ab:58:0e:23:6f:70:df:1f:31:af:74:0b:ee:
62:07:25:18:0a:54:86:2e:62:12:4b:90:a4:30:28:e0:50:34:
d3:b8:e7:fd:fd:2c:ee:77:9c:be:56:d1:9c:de:38:42:0e:b7:
b1:05:c9:e1:e4:9d:c3:55:6c:f8:af:5f:07:8b:9d:86:b5:16:
cb:1f:47:72:26:65:d3:51:8a:89:fe:73:98:df:c9:3e:b2:33:
0e:33:07:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:42:19 2025 by rpki-client