Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
File: Fa8HL54VarwgxGhJjiMjFSxzaug.mft (raw, json)
Hash identifier: Uyuq1SNkfO8TrEoTMS8x23Bkgu/h9ZZ0ME4zhptXbps=
Subject key identifier: 0C:61:7D:62:17:54:9F:2C:A6:9E:AE:3C:8F:48:1A:62:81:78:E8:E3
Authority key identifier: 15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
Certificate issuer: /CN=15af072f9e156abc20c468498e2323152c736ae8
Certificate serial: 01976D74B7D37EEEB011D47DD0403FD34EF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
Manifest number: 14CE
Signing time: Sat 14 Jun 2025 08:00:55 +0000
Manifest this update: Sat 14 Jun 2025 08:00:55 +0000
Manifest next update: Sun 15 Jun 2025 08:00:55 +0000
Files and hashes: 1: 1-hG6m2b1-771ZXFUCad6-Q0HqS0.roa (hash: iRlAMEhmdJkdMf5CTvW6WMLAwT23DftwTFfnt2+39Po=)
2: Fa8HL54VarwgxGhJjiMjFSxzaug.crl (hash: /jgl1dpDfDrF4JDl9WJcYOiURfQXMhr5dkaeZSEwSKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:b7:d3:7e:ee:b0:11:d4:7d:d0:40:3f:d3:4e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15af072f9e156abc20c468498e2323152c736ae8
Validity
Not Before: Jun 14 08:00:55 2025 GMT
Not After : Jun 15 08:00:55 2025 GMT
Subject: CN=0c617d6217549f2ca69eae3c8f481a628178e8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:80:56:7b:4f:bc:6f:ca:34:0f:77:2d:97:3c:
2a:17:17:d0:f4:0e:f9:5e:11:4f:fd:fc:7d:0c:19:
26:bd:9e:bc:1a:e4:19:77:29:0f:1c:57:a9:e5:b6:
0d:61:b2:b1:fe:fb:dd:26:dc:ee:92:d1:df:c5:d1:
f9:28:65:7e:21:86:7c:4e:75:ab:7a:f7:a6:f8:07:
59:77:34:bb:29:74:cd:d2:32:e4:75:83:19:76:63:
eb:24:95:6e:ee:f0:1d:a5:28:cc:52:b0:02:31:49:
79:32:43:e4:fb:90:31:a6:86:6e:b4:1a:17:8d:62:
4e:ff:4e:8f:80:d6:03:dd:2f:f5:2e:29:b7:5d:67:
92:38:d4:02:cc:c0:29:89:26:3a:75:29:32:80:83:
4e:15:e2:9a:f1:24:86:34:18:7a:d8:00:ce:99:32:
f1:eb:81:14:c6:ff:7c:c9:89:15:ea:d6:18:8e:61:
14:1e:38:8a:0e:34:8f:b3:a2:24:70:26:92:68:d0:
a6:70:0f:20:5e:71:0f:47:b3:a8:1b:d4:51:20:65:
c6:23:b0:c4:c2:74:c6:78:8a:ef:49:a8:21:75:95:
5d:71:18:49:6f:79:a7:6c:7d:8b:08:36:a4:99:bb:
09:89:a7:55:fd:eb:b0:eb:68:77:b7:f4:6c:9b:a3:
79:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:61:7D:62:17:54:9F:2C:A6:9E:AE:3C:8F:48:1A:62:81:78:E8:E3
X509v3 Authority Key Identifier:
keyid:15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:9c:5e:4d:40:05:f8:e1:13:d6:56:43:f9:ec:2d:00:34:e0:
5e:8c:19:aa:f5:50:50:65:ab:81:bb:5b:5c:3c:5c:ba:62:8f:
b2:a1:95:aa:26:1d:01:2f:b1:d8:99:51:55:14:97:be:37:1f:
21:77:dd:0e:9c:69:f9:2f:f1:61:19:26:9b:17:e9:37:eb:f2:
37:c7:14:ae:9a:14:99:cc:d3:25:09:ab:38:8f:a8:c9:1a:c2:
fb:52:db:db:e0:83:91:1c:7d:99:9d:c4:0b:85:ca:9d:24:ba:
78:e1:f6:34:50:39:f1:27:d9:71:09:46:c1:3d:d4:56:1f:9d:
20:28:74:98:19:4c:70:03:5d:82:3d:8d:bb:21:12:21:01:24:
d7:cb:e7:40:a9:47:dd:63:b2:8b:a1:c0:53:96:e4:e4:b3:38:
f8:ea:43:a0:11:f5:a4:03:4f:21:3d:f9:40:61:0a:e0:9b:9b:
23:60:fc:67:15:3b:4b:64:5b:59:d5:65:45:43:5d:00:c2:24:
1a:b5:93:01:aa:21:83:df:da:83:d3:73:e2:fd:b7:ff:dc:3b:
eb:58:9f:85:04:dd:b3:9a:22:7f:e7:24:c5:93:7b:31:dd:6e:
33:51:d6:31:2d:64:73:c0:cc:fd:8e:fe:3f:1e:70:b3:dd:a5:
a8:fe:ed:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:44:10 2025 by rpki-client