Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
File: rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft (raw, json)
Hash identifier: awyf8SoATSmIvB4SM0ekrbLvC+fOjvivQxBzA0IY9Ds=
Subject key identifier: F2:B4:F9:E4:8F:12:54:C9:6B:80:DD:BA:9F:B2:CE:22:F1:2F:4A:98
Authority key identifier: AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68
Certificate issuer: /CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
Certificate serial: 0197B821510CE5BDDCE8244206883359132A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 20:01:20 +0000
Manifest this update: Sat 28 Jun 2025 20:01:20 +0000
Manifest next update: Sun 29 Jun 2025 20:01:20 +0000
Files and hashes: 1: hDXJqHhRVakrUpAy2mxJpw32amA.roa (hash: Q2fYQzDzeuJHoaVaTN2Do0bb6ba0BBCZfekXkM6wQUY=)
2: rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl (hash: 0RqubuhEcmouNm8MWvIYsHT6jH2eDG6HQ/bCmUxAqlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:51:0c:e5:bd:dc:e8:24:42:06:88:33:59:13:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
Validity
Not Before: Jun 28 20:01:20 2025 GMT
Not After : Jun 29 20:01:20 2025 GMT
Subject: CN=f2b4f9e48f1254c96b80ddba9fb2ce22f12f4a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0e:33:67:80:00:32:7c:b1:1c:5b:b1:1c:f4:
c0:26:c7:81:04:cd:a5:e4:68:64:87:01:2d:db:11:
f5:4e:19:15:a5:03:37:60:6d:83:5d:10:8e:d9:fe:
42:f8:4d:22:f9:ea:31:ba:0c:e2:81:8c:13:0c:b8:
5e:9a:50:de:66:f4:45:a1:8b:17:0d:13:38:3f:a0:
83:3b:55:56:aa:9f:50:6e:59:d3:0f:eb:37:f7:0e:
4e:b9:ca:f8:86:74:ca:3d:58:76:e9:1d:5c:4f:68:
d4:2e:9e:ff:46:b3:49:9f:f4:24:a8:df:79:4d:e9:
da:83:ad:82:87:ca:a1:72:48:c1:c7:d5:3b:13:c7:
1c:87:d5:f5:87:b7:63:ee:af:9f:5b:30:61:c4:7b:
5f:d7:f4:45:d5:0f:d2:cf:ae:29:e7:b2:bf:11:b1:
b9:ce:ec:4c:69:88:8a:d1:77:c5:95:75:b6:10:d5:
d0:95:aa:2d:55:3d:25:2b:8c:98:2a:2f:95:15:1b:
62:fa:28:e8:12:40:c2:85:52:3c:11:30:4f:96:d6:
62:0a:d1:13:48:41:8c:02:aa:d8:dd:36:06:40:84:
5a:91:36:09:a6:14:35:34:20:f1:36:58:a5:7d:cf:
63:fc:2c:2e:0a:8f:84:c0:00:8a:76:ad:75:07:9d:
b1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B4:F9:E4:8F:12:54:C9:6B:80:DD:BA:9F:B2:CE:22:F1:2F:4A:98
X509v3 Authority Key Identifier:
keyid:AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:07:3a:18:2d:52:b2:b5:2b:ff:2b:e7:b0:07:c0:e6:51:a0:
0f:05:51:3a:a2:a3:c9:3a:31:df:5f:60:59:c3:6a:a5:e4:ae:
81:f1:88:13:de:8b:5f:bc:17:e9:09:9b:c9:e7:fc:12:3b:5d:
2c:ef:c1:5a:b1:7f:63:8c:ae:ca:3b:a8:c9:18:f4:f3:5b:a2:
3d:d2:f7:d9:88:ef:be:ed:67:00:4a:ba:a9:a0:c5:12:5a:c4:
36:cd:68:77:80:2a:4f:ac:2d:59:d1:7b:09:c5:67:a9:1a:48:
32:c0:e1:0b:4a:98:d0:e0:52:bf:1b:56:cb:a9:8c:b6:52:b7:
16:da:c9:0f:f7:36:44:99:ce:2e:22:2f:6b:b6:4d:13:f4:48:
56:de:ae:85:fb:eb:d0:bc:0c:5e:9a:5f:15:75:86:9b:f8:e3:
f9:e2:90:72:4f:bf:b0:57:8b:46:07:f1:63:ce:2a:74:ab:28:
fc:ab:1f:de:4f:20:d3:aa:d2:4d:9a:c5:ef:40:8f:a6:22:df:
af:ce:0d:6f:19:d1:6d:73:8e:f6:ce:c6:d6:be:6f:6b:33:ec:
7a:47:5f:a6:49:4f:7a:af:e7:c5:fe:52:e1:70:ad:fb:d9:58:
ed:10:e7:3b:7a:76:0d:8c:26:0e:6d:8c:16:63:c1:e0:27:a8:
49:d3:e9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:24:30 2025 by rpki-client